$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa File: IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa (raw, json) Hash identifier: tEGMnUir0FKTNinCDx9FHeKgl9+TCPa3/oy7IdzydkY= Subject key identifier: 20:C6:40:11:48:CD:48:B4:4F:48:BD:41:A4:32:6D:37:EA:D1:98:0C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B0F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa Signing time: Fri 31 Jan 2025 01:34:25 +0000 ROA not before: Fri 31 Jan 2025 01:34:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=20C6401148CD48B44F48BD41A4326D37EAD1980C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:86:bd:51:cf:1f:58:f0:7a:f6:8c:60:1f: c1:95:3c:60:c7:f8:05:f5:a2:06:a8:39:ed:e6:ce: 76:60:3e:f9:8a:07:cb:dc:21:d2:4e:ba:4a:d6:2e: 99:dc:37:74:95:7e:a2:8f:b0:d9:aa:bc:f4:dc:97: d4:c3:83:75:78:43:9a:a3:0a:33:dd:33:1d:5e:d3: a8:64:a8:64:cd:77:19:99:4a:c1:7d:78:93:1d:4d: 5f:ac:8c:eb:e6:02:f4:19:01:63:40:fe:61:1f:81: 8d:94:2e:61:b0:2f:be:cf:9b:b7:34:28:c9:ea:33: f1:79:92:bf:e3:b3:aa:7b:b0:da:a5:d8:45:6d:0e: a1:9a:e8:70:9d:fc:30:16:ea:d4:29:ea:01:66:15: 77:e0:4d:34:97:dd:3b:dc:73:d9:f1:b6:56:98:f3: cc:9f:e1:24:a8:23:e8:e2:4d:66:33:67:be:e5:85: d2:59:8c:1c:bf:2d:eb:1d:f6:94:82:2a:42:c8:2c: 9e:b8:9b:31:30:b6:cc:75:34:34:20:00:35:02:66: 6d:83:ca:ae:90:28:12:71:94:18:3a:d3:6f:36:81: 6b:4b:ee:d4:19:fc:35:15:0f:b1:8b:27:d6:70:fc: 9c:a0:fd:f0:e4:ce:db:3f:6f:cd:bc:48:17:b0:e3: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:40:11:48:CD:48:B4:4F:48:BD:41:A4:32:6D:37:EA:D1:98:0C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.227.0/24 Signature Algorithm: sha256WithRSAEncryption c9:f2:39:50:b4:cb:b6:02:bf:8b:40:15:2c:f3:49:10:3b:cb: 1c:81:dd:df:de:0f:6b:97:68:c5:ea:90:bf:2f:69:68:1f:28: a9:0f:46:22:f2:58:ba:eb:de:12:dd:04:07:d0:ad:32:92:80: 85:78:4f:1b:f0:1d:cb:95:ed:c6:1e:62:fc:a5:4c:a1:e7:03: cf:0e:78:12:01:03:01:7c:1e:2c:62:82:e0:39:9a:a8:94:64: c8:78:0d:32:df:5b:16:4e:25:ca:6f:3a:19:ab:35:a4:e0:af: 1f:5e:7f:ec:b7:4a:0a:fe:36:be:35:d1:ab:b3:43:b2:14:36: e6:08:f3:1c:2e:56:3d:77:38:43:97:2b:1d:3a:fc:06:5e:6a: 73:0f:2b:66:69:08:f0:ca:0b:0b:af:bb:7b:e2:3f:91:2f:de: 9d:0f:1d:20:9f:df:ee:43:e7:e4:dd:c0:2f:cd:4f:6c:b0:d7: 09:df:30:d7:11:2b:50:47:20:47:91:d8:c9:dc:d1:2c:d4:95: 36:c7:46:c7:2a:e0:49:7d:d5:b6:4a:be:a5:ff:04:8f:2e:02: 05:b7:24:fe:87:2d:b5:f3:cc:f0:cb:94:b7:c2:d6:e3:3b:67: 1e:ff:a0:14:19:a1:59:10:84:a5:75:32:78:84:53:31:24:6a: 77:46:d1:1b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIwQzY0MDExNDhDRDQ4 QjQ0RjQ4QkQ0MUE0MzI2RDM3RUFEMTk4MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUhIa9Uc8fWPB69oxgH8GVPGDH+AX1ogaoOe3mznZgPvmKB8vc IdJOukrWLpncN3SVfqKPsNmqvPTcl9TDg3V4Q5qjCjPdMx1e06hkqGTNdxmZSsF9 eJMdTV+sjOvmAvQZAWNA/mEfgY2ULmGwL77Pm7c0KMnqM/F5kr/js6p7sNql2EVt DqGa6HCd/DAW6tQp6gFmFXfgTTSX3Tvcc9nxtlaY88yf4SSoI+jiTWYzZ77lhdJZ jBy/Lesd9pSCKkLILJ64mzEwtsx1NDQgADUCZm2Dyq6QKBJxlBg60282gWtL7tQZ /DUVD7GLJ9Zw/Jyg/fDkzts/b828SBew43sjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIMZAEUjNSLRPSL1BpDJtN+rRmAwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0lNWkFFVWpOU0xSUFNMMUJwREp0Ti1yUm1Bdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSeMwDQYJKoZIhvcNAQELBQADggEBAMnyOVC0y7YCv4tAFSzzSRA7yxyB 3d/eD2uXaMXqkL8vaWgfKKkPRiLyWLrr3hLdBAfQrTKSgIV4TxvwHcuV7cYeYvyl TKHnA88OeBIBAwF8HixiguA5mqiUZMh4DTLfWxZOJcpvOhmrNaTgrx9ef+y3Sgr+ Nr410auzQ7IUNuYI8xwuVj13OEOXKx06/AZeanMPK2ZpCPDKCwuvu3viP5Ev3p0P HSCf3+5D5+TdwC/NT2yw1wnfMNcRK1BHIEeR2Mnc0SzUlTbHRscq4El91bZKvqX/ BI8uAgW3JP6HLbXzzPDLlLfC1uM7Zx7/oBQZoVkQhKV1MniEUzEkandG0Rs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:46 2025 by rpki-client