$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZoKYUryNKd2LL-zGMe5qSwp9YcI.roa File: ZoKYUryNKd2LL-zGMe5qSwp9YcI.roa (raw, json) Hash identifier: kUGN8hcP8nI2KFD/J/3MSO98we03z7AeMNXs+gy4tWc= Subject key identifier: 66:82:98:52:BC:8D:29:DD:8B:2F:EC:C6:31:EE:6A:4B:0A:7D:61:C2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B20 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZoKYUryNKd2LL-zGMe5qSwp9YcI.roa Signing time: Fri 31 Jan 2025 01:37:58 +0000 ROA not before: Fri 31 Jan 2025 01:37:58 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:37:58 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=66829852BC8D29DD8B2FECC631EE6A4B0A7D61C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:2e:13:68:9c:b4:22:6b:19:bd:58:2d:d8: 2a:5b:60:cf:bb:a3:fd:9f:da:b9:d4:17:ac:0b:f6: 1c:7a:56:29:c8:63:a1:f6:fd:ab:b6:7e:11:3e:6e: c2:a3:3a:a5:a5:10:5b:10:4f:e3:54:74:39:4d:db: 6a:ce:45:c1:36:41:36:b6:cd:ed:fc:0b:ec:81:5a: eb:f9:9a:c6:16:73:6a:e2:21:cc:02:02:35:d5:9f: d4:62:08:d8:01:ae:07:a3:7c:99:f9:bd:6a:31:a5: 2a:24:e9:e6:f0:49:77:b8:e2:c4:a7:79:d4:c9:e3: 95:9d:e4:80:e9:af:3a:81:98:2c:30:3e:8c:45:1b: e1:2a:9f:dd:23:6c:75:dd:a0:61:71:e1:2c:8a:6b: 47:06:d6:63:99:79:6c:8c:b8:88:69:e9:6f:26:fd: ba:f4:25:a2:43:04:d7:13:88:76:e2:71:a4:ef:62: 38:5b:d7:c3:bb:eb:60:e5:f1:cf:8c:18:08:0b:90: c8:f7:3c:3f:bf:39:25:21:2a:6b:62:94:97:88:68: 53:79:54:dc:cf:68:43:68:94:cf:c9:c8:77:22:ca: 93:d4:00:2f:29:53:94:eb:40:95:c6:90:13:17:07: 94:03:b9:52:04:e4:fa:b6:26:68:8a:99:b0:f4:45: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:82:98:52:BC:8D:29:DD:8B:2F:EC:C6:31:EE:6A:4B:0A:7D:61:C2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZoKYUryNKd2LL-zGMe5qSwp9YcI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.8.0/23 Signature Algorithm: sha256WithRSAEncryption cb:4c:d3:52:c3:08:29:ca:54:45:2b:b4:86:a8:ef:30:b3:2f: d4:e5:6b:02:17:0a:35:31:55:32:fb:75:43:dd:f6:dc:00:e2: a9:a6:c4:b9:88:12:c3:87:7a:6f:6d:2d:c2:e4:33:db:cc:5d: 90:5c:20:db:09:95:aa:73:2b:65:1e:af:93:f0:c9:53:b9:4c: af:b9:33:e5:97:a8:9d:ea:78:26:b5:2b:ba:68:4a:06:a7:07: 2b:3e:3f:de:52:a9:93:58:5a:4c:94:47:ac:80:34:70:76:d2: f8:d5:6e:77:0c:de:bb:5b:67:d0:8b:df:0c:89:57:07:44:fc: ae:8b:27:e1:19:4b:d1:9d:05:e7:79:b4:5d:bc:94:a3:09:4e: 94:56:ef:74:61:a0:33:01:44:17:89:b8:f4:5a:14:9b:40:c1: 57:0a:f2:17:6d:d4:2c:d6:06:53:55:b7:c4:5b:2e:54:44:d6: 53:8c:d2:2d:2b:cb:e0:3f:7e:e6:47:d3:dc:fd:4f:dc:be:ad: fb:98:91:20:ba:8a:20:15:44:7a:1d:a7:d8:45:b7:b9:12:c2: 57:a4:6c:71:02:6e:10:51:15:ad:23:1c:32:43:be:ed:05:7b: 44:38:a4:44:5e:09:50:45:66:01:17:65:48:77:5e:2e:03:f0: 61:59:85:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM3NThaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY2ODI5ODUyQkM4RDI5 REQ4QjJGRUNDNjMxRUU2QTRCMEE3RDYxQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/7y4TaJy0ImsZvVgt2CpbYM+7o/2f2rnUF6wL9hx6VinIY6H2 /au2fhE+bsKjOqWlEFsQT+NUdDlN22rORcE2QTa2ze38C+yBWuv5msYWc2riIcwC AjXVn9RiCNgBrgejfJn5vWoxpSok6ebwSXe44sSnedTJ45Wd5IDprzqBmCwwPoxF G+Eqn90jbHXdoGFx4SyKa0cG1mOZeWyMuIhp6W8m/br0JaJDBNcTiHbicaTvYjhb 18O762Dl8c+MGAgLkMj3PD+/OSUhKmtilJeIaFN5VNzPaENolM/JyHciypPUAC8p U5TrQJXGkBMXB5QDuVIE5Pq2JmiKmbD0RT8nAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZoKYUryNKd2LL+zGMe5qSwp9YcIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1pvS1lVcnlOS2QyTEwtekdNZTVxU3dwOVljSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSwgwDQYJKoZIhvcNAQELBQADggEBAMtM01LDCCnKVEUrtIao7zCzL9Tl awIXCjUxVTL7dUPd9twA4qmmxLmIEsOHem9tLcLkM9vMXZBcINsJlapzK2Uer5Pw yVO5TK+5M+WXqJ3qeCa1K7poSganBys+P95SqZNYWkyUR6yANHB20vjVbncM3rtb Z9CL3wyJVwdE/K6LJ+EZS9GdBed5tF28lKMJTpRW73RhoDMBRBeJuPRaFJtAwVcK 8hdt1CzWBlNVt8RbLlRE1lOM0i0ry+A/fuZH09z9T9y+rfuYkSC6iiAVRHodp9hF t7kSwlekbHECbhBRFa0jHDJDvu0Fe0Q4pEReCVBFZgEXZUh3Xi4D8GFZhRw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:58 2025 by rpki-client