$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VV6WDMXwov8E9K4UIlRqAcbPaT8.roa File: VV6WDMXwov8E9K4UIlRqAcbPaT8.roa (raw, json) Hash identifier: 8sx58IRSs8TJOhu00ivUWN7tG8Xjj9u45lPgxfrR+eI= Subject key identifier: 55:5E:96:0C:C5:F0:A2:FF:04:F4:AE:14:22:54:6A:01:C6:CF:69:3F Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VV6WDMXwov8E9K4UIlRqAcbPaT8.roa Signing time: Fri 31 Jan 2025 01:28:35 +0000 ROA not before: Fri 31 Jan 2025 01:28:35 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:35 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=555E960CC5F0A2FF04F4AE1422546A01C6CF693F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:3b:3e:2b:8c:97:78:53:5e:29:cb:27:4c: ec:89:db:d7:67:3e:08:fb:14:ab:22:b9:b3:fd:6e: 9b:27:9d:52:be:0b:df:1b:ed:f0:c7:1c:81:01:3b: 03:92:ea:d8:f4:7a:e3:ab:64:1d:3f:29:8a:01:56: c8:38:a4:41:28:30:fc:c6:c8:3c:82:5b:cf:22:2a: e0:f1:4d:4f:a4:1e:91:73:10:42:99:b3:44:4d:a3: a0:68:19:cf:b9:1b:a9:ec:da:27:8e:f4:f8:af:0b: 04:b1:ab:e6:dc:3d:0c:99:10:82:31:2b:6a:76:bc: d1:b7:99:23:3e:06:33:d3:5d:45:c2:a5:a7:c3:38: a9:cf:23:f3:4a:2d:4e:56:89:96:79:80:17:84:dc: 4d:af:62:fc:3e:78:55:7b:e3:55:1a:67:a9:ec:6b: cd:bf:bc:8e:b5:94:94:22:4e:c8:b1:99:d5:e7:6c: ff:66:70:1c:67:ea:5b:c2:2d:4f:0f:37:8c:12:4e: 50:86:7b:81:c5:a8:35:13:16:37:0a:6d:b4:df:71: f5:1a:ba:c7:b4:34:d3:6b:d5:7e:5e:52:09:a9:67: 9b:5c:3b:b7:9a:bc:b6:b6:ae:4b:7e:de:74:c9:4d: 17:78:80:90:70:a1:c0:7f:5f:d8:be:60:97:b0:f1: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:96:0C:C5:F0:A2:FF:04:F4:AE:14:22:54:6A:01:C6:CF:69:3F X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VV6WDMXwov8E9K4UIlRqAcbPaT8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.152.0/21 Signature Algorithm: sha256WithRSAEncryption 72:ce:36:f2:64:46:fc:88:fa:b3:00:5b:75:15:16:e4:54:47: 7d:cb:c0:02:f9:d2:86:87:e1:bb:b4:35:39:59:7d:07:19:5e: 4e:6d:52:02:75:16:fa:1d:f5:95:67:8b:06:38:1f:1c:44:55: 70:e6:14:4c:91:bb:3f:74:68:73:1c:bd:b5:5b:69:16:24:65: d5:8d:b3:d0:5e:32:2a:b3:8a:ee:46:07:88:07:ab:8d:f1:d9: 9c:e2:42:98:65:cf:84:3e:d5:7e:ea:c3:0c:2c:ef:a8:ad:d3: 57:8d:1c:6f:66:4d:f3:9a:b4:fe:8e:c8:fb:c0:43:d9:55:3f: 09:3f:9e:90:8f:d9:b2:9f:6c:38:3e:99:84:76:2b:1b:e0:57: 68:5f:90:f3:7a:af:98:5b:67:f2:29:4b:85:17:45:0d:bf:60: 7a:f0:ae:37:47:12:cd:85:08:fd:40:cb:80:61:40:b3:b0:41: e7:64:4d:09:d7:5f:ec:9d:cf:7a:58:a1:2e:e7:05:d3:b5:e2: 24:0d:01:c4:98:a9:9f:1b:d5:18:55:52:93:d9:a6:07:80:c1: 50:be:58:fa:9a:bd:c3:5c:e4:16:9b:5c:e8:6e:ef:48:10:c8: 79:68:a7:2a:f8:6e:d7:b8:27:fb:fe:91:63:6c:6b:dc:37:ef: 68:32:84:d5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU1NUU5NjBDQzVGMEEy RkYwNEY0QUUxNDIyNTQ2QTAxQzZDRjY5M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+4zs+K4yXeFNeKcsnTOyJ29dnPgj7FKsiubP9bpsnnVK+C98b 7fDHHIEBOwOS6tj0euOrZB0/KYoBVsg4pEEoMPzGyDyCW88iKuDxTU+kHpFzEEKZ s0RNo6BoGc+5G6ns2ieO9PivCwSxq+bcPQyZEIIxK2p2vNG3mSM+BjPTXUXCpafD OKnPI/NKLU5WiZZ5gBeE3E2vYvw+eFV741UaZ6nsa82/vI61lJQiTsixmdXnbP9m cBxn6lvCLU8PN4wSTlCGe4HFqDUTFjcKbbTfcfUause0NNNr1X5eUgmpZ5tcO7ea vLa2rkt+3nTJTRd4gJBwocB/X9i+YJew8T3fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVV6WDMXwov8E9K4UIlRqAcbPaT8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZWNldETVh3b3Y4RTlLNFVJbFJxQWNiUGFUOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBS5gwDQYJKoZIhvcNAQELBQADggEBAHLONvJkRvyI+rMAW3UVFuRUR33L wAL50oaH4bu0NTlZfQcZXk5tUgJ1Fvod9ZVniwY4HxxEVXDmFEyRuz90aHMcvbVb aRYkZdWNs9BeMiqziu5GB4gHq43x2ZziQphlz4Q+1X7qwwws76it01eNHG9mTfOa tP6OyPvAQ9lVPwk/npCP2bKfbDg+mYR2KxvgV2hfkPN6r5hbZ/IpS4UXRQ2/YHrw rjdHEs2FCP1Ay4BhQLOwQedkTQnXX+ydz3pYoS7nBdO14iQNAcSYqZ8b1RhVUpPZ pgeAwVC+WPqavcNc5BabXOhu70gQyHlopyr4bte4J/v+kWNsa9w372gyhNU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:56 2025 by rpki-client