$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/LLIJNid8GoL_kAD0JOGk9KamEBQ.roa File: LLIJNid8GoL_kAD0JOGk9KamEBQ.roa (raw, json) Hash identifier: 1uXHl0TL2vAEgl5GFP4sAfIKVw8J+b59WGduHY4+LyA= Subject key identifier: 2C:B2:09:36:27:7C:1A:82:FF:90:00:F4:24:E1:A4:F4:A6:A6:10:14 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LLIJNid8GoL_kAD0JOGk9KamEBQ.roa Signing time: Fri 31 Jan 2025 01:34:16 +0000 ROA not before: Fri 31 Jan 2025 01:34:16 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:16 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=2CB20936277C1A82FF9000F424E1A4F4A6A61014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:5a:88:42:79:9c:4f:93:fe:91:54:01:ce: 80:57:a1:5a:35:f1:0c:4e:a7:74:1d:e0:31:e2:fc: ed:7f:c1:83:82:87:10:cb:60:ac:63:eb:4b:06:4e: c0:5e:08:44:d5:95:60:78:00:e4:1f:1e:e4:91:9a: b6:83:1b:2d:fa:00:a3:51:7d:d5:31:d4:3c:c8:a2: 20:3b:fa:21:64:61:91:c8:92:5e:96:f9:00:b3:a5: d4:da:52:0b:f4:c8:ca:1b:86:2a:08:e9:1c:16:a5: 8d:1e:8d:86:24:c0:68:b5:b6:46:aa:67:98:b2:4b: fb:1c:ce:91:82:d0:4b:e4:d3:c8:45:91:cb:a3:4f: 59:61:18:43:9e:da:78:94:f7:bf:b2:e0:0a:4c:aa: 2e:a3:3f:2e:7b:57:aa:2a:7e:89:40:84:f2:1b:ef: 8d:d3:8e:e1:c5:d4:08:a6:61:6e:44:b0:b9:c9:3c: da:5f:69:38:f2:12:ad:f2:1d:7b:8e:ea:34:0c:53: d1:7d:b8:35:60:1b:13:c7:4f:02:db:b4:19:e0:57: 8a:a5:fb:18:be:a3:2f:2f:1c:43:81:dc:6e:04:e4: 96:0a:b0:98:85:78:da:7a:79:ca:48:0e:46:71:2a: 08:e0:46:5e:ea:7d:8b:ab:a0:e8:8a:cf:d2:73:09: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B2:09:36:27:7C:1A:82:FF:90:00:F4:24:E1:A4:F4:A6:A6:10:14 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/LLIJNid8GoL_kAD0JOGk9KamEBQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.228.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:6d:ea:83:4d:76:ce:c2:d9:70:de:5e:2a:f1:a6:8b:39:9c: 83:8d:cd:cf:52:04:52:1b:41:02:6a:9a:25:e7:cd:a4:0c:82: c2:fa:c1:b0:8c:5d:79:be:fa:5c:56:35:f0:00:6c:cf:ac:50: 92:5c:4b:f8:a0:ec:ca:b3:f3:8d:ba:c9:be:36:a8:59:c2:f5: ec:2b:0c:73:b4:47:9d:6b:9b:76:5f:b7:64:b1:0b:1d:0f:0d: 09:0d:fd:1f:d2:f0:fc:75:bc:0f:6d:c3:3d:db:56:6b:1d:a5: 49:75:b3:ed:27:8e:c6:6a:c0:0e:ae:d3:ef:0b:a2:16:cf:44: 67:71:5f:b5:67:4e:fc:9c:f0:65:fb:ab:23:75:61:2b:e6:bb: 87:0f:b1:25:02:5c:5b:65:5f:20:f1:7f:40:34:ee:85:42:a3: cd:ac:45:25:b6:bf:e4:e9:c5:5b:3f:12:1d:f0:2a:08:a9:cd: a8:09:c8:94:9e:f7:64:5e:44:43:7b:0f:1e:fc:66:5a:9e:a4: 3e:2f:c5:51:4d:83:df:b7:5c:5f:6f:8c:e2:07:86:a5:8b:79: 9e:a4:3f:59:23:2e:11:9e:c2:e3:ad:02:a2:70:9b:07:67:a0: 76:a7:ed:92:f9:b2:d4:60:90:70:69:d5:29:a4:2e:76:47:1c: 97:34:0e:18 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MTZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDQjIwOTM2Mjc3QzFB ODJGRjkwMDBGNDI0RTFBNEY0QTZBNjEwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV5FqIQnmcT5P+kVQBzoBXoVo18QxOp3Qd4DHi/O1/wYOChxDL YKxj60sGTsBeCETVlWB4AOQfHuSRmraDGy36AKNRfdUx1DzIoiA7+iFkYZHIkl6W +QCzpdTaUgv0yMobhioI6RwWpY0ejYYkwGi1tkaqZ5iyS/sczpGC0Evk08hFkcuj T1lhGEOe2niU97+y4ApMqi6jPy57V6oqfolAhPIb743TjuHF1AimYW5EsLnJPNpf aTjyEq3yHXuO6jQMU9F9uDVgGxPHTwLbtBngV4ql+xi+oy8vHEOB3G4E5JYKsJiF eNp6ecpIDkZxKgjgRl7qfYuroOiKz9JzCdBtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULLIJNid8GoL/kAD0JOGk9KamEBQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0xMSUpOaWQ4R29MX2tBRDBKT0drOUthbUVCUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABS+QwDQYJKoZIhvcNAQELBQADggEBAF9t6oNNds7C2XDeXirxpos5nION zc9SBFIbQQJqmiXnzaQMgsL6wbCMXXm++lxWNfAAbM+sUJJcS/ig7Mqz8426yb42 qFnC9ewrDHO0R51rm3Zft2SxCx0PDQkN/R/S8Px1vA9twz3bVmsdpUl1s+0njsZq wA6u0+8LohbPRGdxX7VnTvyc8GX7qyN1YSvmu4cPsSUCXFtlXyDxf0A07oVCo82s RSW2v+TpxVs/Eh3wKgipzagJyJSe92ReREN7Dx78ZlqepD4vxVFNg9+3XF9vjOIH hqWLeZ6kP1kjLhGewuOtAqJwmwdnoHan7ZL5stRgkHBp1SmkLnZHHJc0Dhg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:04 2025 by rpki-client