$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/PzZRC46WLgvGTaLSEmW00sF0c5Y.roa File: PzZRC46WLgvGTaLSEmW00sF0c5Y.roa (raw, json) Hash identifier: ArpO9kSkFzEBOk0wq2ZDdQ8NVLnOZYxLhTNV6u74yq0= Subject key identifier: 3F:36:51:0B:8E:96:2E:0B:C6:4D:A2:D2:12:65:B4:D2:C1:74:73:96 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B01 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PzZRC46WLgvGTaLSEmW00sF0c5Y.roa Signing time: Fri 31 Jan 2025 01:34:19 +0000 ROA not before: Fri 31 Jan 2025 01:34:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3F36510B8E962E0BC64DA2D21265B4D2C1747396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:4a:b5:dd:48:5e:cc:e6:31:a9:44:5f:d3: 94:4a:30:3a:7b:b7:41:8a:af:ca:80:18:9a:14:50: 94:c7:d6:7d:62:86:11:f2:71:6b:84:74:ee:d9:2f: 7a:35:99:26:0e:c6:07:c8:f3:e1:d9:16:a9:c7:79: a2:d3:bf:df:99:48:c6:0b:4c:71:c7:4e:e5:35:71: bd:84:38:98:63:13:0b:21:64:cd:8b:ea:49:e2:3c: 4e:b5:3a:15:eb:ed:83:9f:1c:3f:62:a4:79:94:f8: 81:af:ae:7c:ec:db:4c:d8:e5:7e:77:04:a0:43:34: f3:d6:da:2f:d0:8b:62:de:84:54:bc:df:01:6e:ca: fc:6d:34:fb:fd:de:cf:21:59:41:d3:70:07:f0:fe: 89:db:d5:be:b8:9d:8c:cc:af:c8:9b:be:e7:ac:49: cb:76:bf:fa:5e:34:4d:9c:71:a3:42:53:7c:4a:d8: 27:24:05:05:6d:90:ff:3e:f0:a9:4b:90:f4:c3:db: ba:e3:0a:b5:46:7c:f3:8a:54:f2:63:7a:aa:b9:7d: 17:fe:e1:a1:75:df:5e:ae:05:ce:84:44:dd:73:37: 3d:43:67:76:a4:a4:4c:5c:c8:80:fc:d7:a7:79:b1: 33:63:95:9a:ca:5a:55:8e:d4:cd:21:9c:15:c1:8f: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:36:51:0B:8E:96:2E:0B:C6:4D:A2:D2:12:65:B4:D2:C1:74:73:96 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/PzZRC46WLgvGTaLSEmW00sF0c5Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.9.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:a4:52:79:00:1b:49:71:e3:5a:10:28:47:5c:e1:54:6c:05: b6:29:00:80:c5:b8:7f:5c:2c:1d:d5:12:0a:c0:bf:d3:79:48: 7c:3c:9a:31:ae:a5:95:3b:e6:0d:e0:86:4c:79:8b:3d:59:30: 73:99:6c:13:d4:ce:e9:25:19:11:ad:9d:3a:05:0a:0e:17:89: 20:bc:f2:e0:02:41:ef:5a:ca:e4:07:33:83:b5:91:dd:05:ad: 14:ad:f5:c2:a6:53:1b:8f:b6:40:3e:58:b3:5a:35:ea:a1:19: d0:6e:ca:5c:38:7f:1f:71:fb:66:64:71:ff:ba:44:ca:aa:7c: c5:3d:2d:4b:e2:7d:1e:70:41:6a:54:7e:98:ca:94:9e:6b:b4: 6c:06:85:35:3f:15:a0:04:42:cd:7a:6b:12:6f:7e:de:f8:e0: bd:eb:99:fa:0c:a1:5d:8f:e8:85:b8:7b:0d:3d:0d:f7:46:a4: 06:b4:ad:81:d3:3d:3c:b4:d5:8c:3c:be:2b:d9:7d:37:12:30: c6:49:40:96:7a:a1:41:d7:1b:63:82:0a:9a:db:ba:33:d9:48: 50:9b:88:a6:ae:ff:c7:92:20:9e:00:6c:94:7c:77:f1:dd:2a: 2c:da:f7:94:76:8d:e5:bf:46:cf:3e:3f:c3:0d:46:37:30:e4: a6:f2:ce:f1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNGMzY1MTBCOEU5NjJF MEJDNjREQTJEMjEyNjVCNEQyQzE3NDczOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYaEq13UhezOYxqURf05RKMDp7t0GKr8qAGJoUUJTH1n1ihhHy cWuEdO7ZL3o1mSYOxgfI8+HZFqnHeaLTv9+ZSMYLTHHHTuU1cb2EOJhjEwshZM2L 6kniPE61OhXr7YOfHD9ipHmU+IGvrnzs20zY5X53BKBDNPPW2i/Qi2LehFS83wFu yvxtNPv93s8hWUHTcAfw/onb1b64nYzMr8ibvuesSct2v/peNE2ccaNCU3xK2Cck BQVtkP8+8KlLkPTD27rjCrVGfPOKVPJjeqq5fRf+4aF1316uBc6ERN1zNz1DZ3ak pExcyID816d5sTNjlZrKWlWO1M0hnBXBjw6pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPzZRC46WLgvGTaLSEmW00sF0c5YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1B6WlJDNDZXTGd2R1RhTFNFbVcwMHNGMGM1WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSwkwDQYJKoZIhvcNAQELBQADggEBAHykUnkAG0lx41oQKEdc4VRsBbYp AIDFuH9cLB3VEgrAv9N5SHw8mjGupZU75g3ghkx5iz1ZMHOZbBPUzuklGRGtnToF Cg4XiSC88uACQe9ayuQHM4O1kd0FrRSt9cKmUxuPtkA+WLNaNeqhGdBuylw4fx9x +2Zkcf+6RMqqfMU9LUvifR5wQWpUfpjKlJ5rtGwGhTU/FaAEQs16axJvft744L3r mfoMoV2P6IW4ew09DfdGpAa0rYHTPTy01Yw8vivZfTcSMMZJQJZ6oUHXG2OCCprb ujPZSFCbiKau/8eSIJ4AbJR8d/HdKiza95R2jeW/Rs8+P8MNRjcw5KbyzvE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:49 2025 by rpki-client