$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BrffrKMIIsP3WWAq8X3Kt6RaAfE.roa File: BrffrKMIIsP3WWAq8X3Kt6RaAfE.roa (raw, json) Hash identifier: vPkqUetv9/9Hzqit8f2XpRvFGecG54/exkjpX5EY2Ls= Subject key identifier: 06:B7:DF:AC:A3:08:22:C3:F7:59:60:2A:F1:7D:CA:B7:A4:5A:01:F1 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B00 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BrffrKMIIsP3WWAq8X3Kt6RaAfE.roa Signing time: Fri 31 Jan 2025 01:34:18 +0000 ROA not before: Fri 31 Jan 2025 01:34:18 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:18 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=06B7DFACA30822C3F759602AF17DCAB7A45A01F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:c0:cf:db:91:e6:7d:94:4e:f2:a6:95:d6: 5a:6f:06:f6:4d:fa:f8:c2:e3:dd:4a:0b:42:30:b7: 95:87:c5:5d:74:63:8f:88:33:17:b9:3d:c2:ba:d4: 98:91:8b:f4:4a:6d:81:a1:e8:86:7f:21:8c:ee:55: 06:98:67:d9:2c:c4:3f:98:3b:ac:f7:31:04:ad:d0: 71:0e:68:f1:26:04:a6:4b:68:82:74:de:48:39:d7: 35:e2:2c:1d:60:13:92:5b:d4:63:34:1b:69:02:0a: 77:9f:cb:5f:d7:b7:ee:89:3a:88:7c:1f:ae:93:2d: 08:e9:fc:7b:aa:52:1e:e8:09:7f:4b:58:6a:a2:eb: 31:92:7d:f6:91:51:8a:05:3f:9c:ce:ec:ba:c1:76: da:c4:9f:0e:4b:d4:08:71:09:bb:6a:da:b4:a0:75: 80:5b:08:00:88:ee:81:f6:73:4a:5b:12:8c:da:a3: 58:f5:e6:45:82:cf:43:8a:1e:fe:e6:e8:99:77:fd: 0a:1b:dc:7f:58:58:2f:fc:5f:c6:89:b8:d6:61:76: 0d:17:f4:05:bf:4f:b4:2a:c8:47:34:01:81:ff:f1: b6:d9:8b:b7:50:a6:10:85:b5:7f:8b:c9:7f:08:8d: 5d:ac:e7:e5:6d:bc:07:11:9f:1a:ca:a4:8d:a0:1e: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B7:DF:AC:A3:08:22:C3:F7:59:60:2A:F1:7D:CA:B7:A4:5A:01:F1 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BrffrKMIIsP3WWAq8X3Kt6RaAfE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.3.0/24 Signature Algorithm: sha256WithRSAEncryption d9:63:b5:38:47:ad:88:1b:6f:2a:fd:86:ed:77:cb:f8:ca:e2: 88:35:51:4b:de:f0:5f:90:f7:fe:73:c0:18:ae:c1:70:e5:e5: 65:e2:74:5d:22:0a:c0:12:2c:20:76:50:60:a1:23:ab:d8:72: 00:c3:19:9d:07:05:76:6d:01:60:dd:35:ac:13:88:82:8a:08: f6:18:25:16:1e:38:da:8a:55:0e:44:48:fd:ba:61:c4:81:68: b1:b4:36:8a:82:9a:9f:de:40:9d:97:db:a0:da:52:8f:fb:07: b5:a2:c4:82:e3:b2:a2:13:6c:2d:6f:07:28:b0:95:b5:04:b4: a8:cc:26:7a:29:64:51:05:70:f1:4a:2e:5f:3f:ca:87:6a:da: a1:60:8e:11:3b:e6:c5:01:20:74:1f:15:32:3d:59:34:ee:73: a6:c2:53:c7:b9:6d:d8:ac:11:2d:68:86:3a:cd:52:c1:c1:f6: ca:a0:59:b2:97:46:02:fb:d4:81:30:40:ba:4c:3e:65:dd:2b: f2:7f:ff:89:e2:a0:80:e2:2f:77:7a:ec:92:57:44:01:06:3a: 3c:a7:b9:78:6e:c2:b5:1c:a4:fd:1d:6c:90:89:8a:12:2c:ca: d9:8c:dd:5a:7b:12:2b:3d:f1:9d:19:41:fb:23:e1:2f:aa:89: 85:01:29:7f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MThaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA2QjdERkFDQTMwODIy QzNGNzU5NjAyQUYxN0RDQUI3QTQ1QTAxRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuwMDP25HmfZRO8qaV1lpvBvZN+vjC491KC0Iwt5WHxV10Y4+I Mxe5PcK61JiRi/RKbYGh6IZ/IYzuVQaYZ9ksxD+YO6z3MQSt0HEOaPEmBKZLaIJ0 3kg51zXiLB1gE5Jb1GM0G2kCCnefy1/Xt+6JOoh8H66TLQjp/HuqUh7oCX9LWGqi 6zGSffaRUYoFP5zO7LrBdtrEnw5L1AhxCbtq2rSgdYBbCACI7oH2c0pbEozao1j1 5kWCz0OKHv7m6Jl3/Qob3H9YWC/8X8aJuNZhdg0X9AW/T7QqyEc0AYH/8bbZi7dQ phCFtX+LyX8IjV2s5+VtvAcRnxrKpI2gHhyrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBrffrKMIIsP3WWAq8X3Kt6RaAfEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JyZmZyS01JSXNQM1dXQXE4WDNLdDZSYUFmRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSwMwDQYJKoZIhvcNAQELBQADggEBANljtThHrYgbbyr9hu13y/jK4og1 UUve8F+Q9/5zwBiuwXDl5WXidF0iCsASLCB2UGChI6vYcgDDGZ0HBXZtAWDdNawT iIKKCPYYJRYeONqKVQ5ESP26YcSBaLG0NoqCmp/eQJ2X26DaUo/7B7WixILjsqIT bC1vByiwlbUEtKjMJnopZFEFcPFKLl8/yodq2qFgjhE75sUBIHQfFTI9WTTuc6bC U8e5bdisES1ohjrNUsHB9sqgWbKXRgL71IEwQLpMPmXdK/J//4nioIDiL3d67JJX RAEGOjynuXhuwrUcpP0dbJCJihIsytmM3Vp7Eis98Z0ZQfsj4S+qiYUBKX8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:22 2025 by rpki-client