$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9S0dItSL4WzADvbkTFhXN3WGYY.roa File: N9S0dItSL4WzADvbkTFhXN3WGYY.roa (raw, json) Hash identifier: ZJ3wnyASO8LIYU046dSeOKSg8bEYD+slq3ANxUym6zo= Subject key identifier: 37:D4:B4:74:8B:52:2F:85:B3:00:3B:DB:91:31:61:5C:DD:D6:19:86 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B13 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9S0dItSL4WzADvbkTFhXN3WGYY.roa Signing time: Fri 31 Jan 2025 01:34:27 +0000 ROA not before: Fri 31 Jan 2025 01:34:27 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:27 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=37D4B4748B522F85B3003BDB9131615CDDD61986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:cc:fb:64:79:b7:24:85:e5:bd:f4:c7:6a: e9:d0:aa:85:cf:5f:a6:e0:0c:1f:88:71:bc:c7:64: 7d:6b:3a:49:bb:d5:84:c8:21:20:bb:2f:74:be:b7: d1:39:75:64:bb:06:0d:ab:48:64:5c:82:3a:fd:9d: 9d:c5:dd:b5:80:ed:1e:43:3e:61:89:11:87:fe:fc: 98:b8:77:a8:2c:c6:31:fb:ce:1f:15:78:01:ac:1a: a1:51:48:93:fa:9f:99:29:81:63:93:de:25:f8:58: 45:f6:8b:cb:c8:22:b1:96:69:a6:c0:c9:8c:1f:68: 6e:ed:09:fb:7b:b8:04:0c:38:ed:28:c7:bd:5e:99: 0a:c8:22:4a:d8:93:2f:8d:c4:e8:12:aa:73:49:67: 8d:a1:8d:3f:e1:f4:b8:1a:b2:a1:d7:4f:aa:5c:73: 57:4a:41:81:d3:d7:5e:d1:b4:03:5f:f0:1d:38:f9: 83:26:06:03:8c:ee:3c:29:ce:41:a0:31:93:09:19: ec:bb:d1:16:e1:c7:9d:22:79:b1:d7:2a:8a:76:86: 6d:0d:1f:7d:d0:c1:c5:b8:7e:f5:f5:ca:6d:fa:e1: 17:19:86:12:db:9a:e9:53:c1:ba:56:a3:32:f3:90: 79:f9:9d:04:1f:b1:30:b7:b4:21:74:49:19:98:e5: ef:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:B4:74:8B:52:2F:85:B3:00:3B:DB:91:31:61:5C:DD:D6:19:86 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/N9S0dItSL4WzADvbkTFhXN3WGYY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.128.0/18 Signature Algorithm: sha256WithRSAEncryption 62:d2:e4:a5:92:21:b0:a6:21:de:02:95:a8:07:48:9a:65:4c: 50:7d:14:17:54:dc:3e:df:22:95:25:6a:36:16:d9:4c:e2:22: b0:0a:d9:8a:cf:f9:4d:d9:ce:b0:6f:c0:73:dc:14:f2:24:22: 71:aa:29:d6:c0:12:e3:31:88:c6:b4:7d:28:76:e1:c3:77:d9: 99:ba:0d:bc:ec:3f:ab:7d:1b:97:05:17:a1:a1:3d:d3:82:ad: 3e:59:a8:c1:ec:a8:21:7d:01:86:40:fe:de:15:6e:66:26:9a: be:7d:8d:8d:ff:5a:91:1d:cb:ba:fd:31:a9:f4:7a:91:07:e7: 6b:30:6c:46:33:17:b2:98:80:19:88:73:f4:7b:22:91:46:fc: fe:17:02:e8:ac:77:c1:d1:b0:39:18:be:01:5a:fe:8e:f0:31: 6c:00:d0:88:27:06:39:db:0c:d4:7c:36:47:ab:1b:9c:37:6b: 79:c3:7b:04:81:7c:43:e4:db:dc:d3:8d:d6:00:6f:bb:dd:89: 5c:42:9a:f0:a6:c3:5a:90:ca:69:df:d6:46:28:d6:59:b6:aa: 89:b7:fa:02:d2:30:6c:4a:32:36:88:8b:20:6f:18:55:71:75: b1:4f:00:66:8e:cf:c8:4f:5e:67:c1:d1:78:67:d0:9b:cc:a6: 8b:7e:ce:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM3RDRCNDc0OEI1MjJG ODVCMzAwM0JEQjkxMzE2MTVDRERENjE5ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2mMz7ZHm3JIXlvfTHaunQqoXPX6bgDB+IcbzHZH1rOkm71YTI ISC7L3S+t9E5dWS7Bg2rSGRcgjr9nZ3F3bWA7R5DPmGJEYf+/Ji4d6gsxjH7zh8V eAGsGqFRSJP6n5kpgWOT3iX4WEX2i8vIIrGWaabAyYwfaG7tCft7uAQMOO0ox71e mQrIIkrYky+NxOgSqnNJZ42hjT/h9LgasqHXT6pcc1dKQYHT117RtANf8B04+YMm BgOM7jwpzkGgMZMJGey70Rbhx50iebHXKop2hm0NH33QwcW4fvX1ym364RcZhhLb mulTwbpWozLzkHn5nQQfsTC3tCF0SRmY5e9jAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUN9S0dItSL4WzADvbkTFhXN3WGYYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L045UzBkSXRTTDRXekFEdmJrVEZoWE4zV0dZWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBSYAwDQYJKoZIhvcNAQELBQADggEBAGLS5KWSIbCmId4ClagHSJplTFB9 FBdU3D7fIpUlajYW2UziIrAK2YrP+U3ZzrBvwHPcFPIkInGqKdbAEuMxiMa0fSh2 4cN32Zm6DbzsP6t9G5cFF6GhPdOCrT5ZqMHsqCF9AYZA/t4VbmYmmr59jY3/WpEd y7r9Man0epEH52swbEYzF7KYgBmIc/R7IpFG/P4XAuisd8HRsDkYvgFa/o7wMWwA 0IgnBjnbDNR8NkerG5w3a3nDewSBfEPk29zTjdYAb7vdiVxCmvCmw1qQymnf1kYo 1lm2qom3+gLSMGxKMjaIiyBvGFVxdbFPAGaOz8hPXmfB0Xhn0JvMpot+znQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:13 2025 by rpki-client