$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cFwn9vfXrtGFokp8fv2MralwdGU.roa File: cFwn9vfXrtGFokp8fv2MralwdGU.roa (raw, json) Hash identifier: HcwEkVqpJV5Rnn+mK7kYV8Tg16VU8hKf7dv1iZr9xRw= Subject key identifier: 70:5C:27:F6:F7:D7:AE:D1:85:A2:4A:7C:7E:FD:8C:AD:A9:70:74:65 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B0D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cFwn9vfXrtGFokp8fv2MralwdGU.roa Signing time: Fri 31 Jan 2025 01:34:25 +0000 ROA not before: Fri 31 Jan 2025 01:34:25 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:25 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=705C27F6F7D7AED185A24A7C7EFD8CADA9707465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:7f:d5:e4:af:e5:a8:e9:82:d0:03:06:3d: 20:98:6a:81:02:23:3a:e7:61:0e:b6:66:21:dd:ab: 7e:1f:37:c5:93:38:f0:33:5b:2b:75:05:96:a5:6d: d7:a0:21:53:57:e9:86:05:8c:89:ab:72:9d:aa:bf: c0:aa:b6:0f:94:f5:ba:73:20:b4:98:c7:5a:7e:89: 16:45:f8:e4:ec:b4:16:a1:77:1b:f3:f5:d1:5d:57: 74:99:fe:11:a7:69:61:24:66:8e:bf:69:30:d4:be: 61:77:ad:58:53:4c:b3:b0:ab:07:43:e7:73:21:9f: 44:74:e7:54:4c:42:f7:6a:92:b9:2f:82:c7:ab:de: 54:96:f2:56:51:8b:5a:9d:c3:47:45:3b:1a:d6:52: 7c:6f:dc:a1:21:6d:bb:98:e4:a9:33:75:4b:4a:07: 47:28:bf:56:22:fd:25:07:a9:22:c6:ad:ba:a0:ab: 5a:8b:c8:72:c5:87:0c:ac:a8:c6:e4:41:13:d5:e3: f7:ae:20:d7:67:12:ab:0a:81:eb:2f:98:31:a9:67: 4b:22:bc:1d:62:f7:b0:49:11:f8:77:ff:86:d8:a3: fd:bd:03:5b:7b:5b:e0:35:44:8b:ca:c8:d7:f7:6f: 60:59:37:fc:e1:bc:6e:c0:74:b2:4d:00:11:43:e9: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:27:F6:F7:D7:AE:D1:85:A2:4A:7C:7E:FD:8C:AD:A9:70:74:65 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cFwn9vfXrtGFokp8fv2MralwdGU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:c8:62:c9:df:0d:55:56:c4:93:d6:8f:7b:4d:17:8a:af:70: 71:c7:78:7a:35:3c:e2:5c:44:41:26:cd:e5:09:85:d5:5b:91: 2c:9f:e8:59:23:7c:fa:1a:6f:99:86:aa:1b:51:f6:02:c1:3e: 85:ca:65:a4:27:82:e9:8f:aa:b5:b8:61:16:89:44:81:47:ea: 54:e0:e7:14:fa:33:47:7d:a5:7c:30:ae:c6:27:24:69:51:b6: 9d:dd:c7:9a:f5:df:5b:f9:cd:b6:cc:7e:27:b6:aa:50:6b:52: 74:34:7f:b2:1e:2e:a6:f9:d7:08:2f:8b:1d:bc:8b:30:57:c1: 5a:b5:49:a8:dd:5d:ce:76:a3:91:50:f5:0b:c8:62:85:4b:dc: 28:b9:74:fd:1c:4a:e8:02:85:b0:7d:15:8f:08:41:bc:98:63: d2:48:b1:1b:90:24:a1:9d:b9:cb:c6:79:41:6d:ec:f6:de:be: bf:7f:fc:6d:6c:5c:cf:44:af:56:cf:72:c5:9d:26:75:52:85: 89:8c:e5:3b:a5:ec:95:30:59:50:a8:57:e7:dd:f3:35:33:60: 7c:9f:0b:08:4a:5b:e0:44:92:6c:59:10:41:02:87:88:01:86: 42:4c:e9:f5:eb:b3:d3:6e:48:b1:32:65:50:38:7c:00:93:f8: c0:b4:23:8c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MjVaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcwNUMyN0Y2RjdEN0FF RDE4NUEyNEE3QzdFRkQ4Q0FEQTk3MDc0NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4qn/V5K/lqOmC0AMGPSCYaoECIzrnYQ62ZiHdq34fN8WTOPAz Wyt1BZalbdegIVNX6YYFjImrcp2qv8Cqtg+U9bpzILSYx1p+iRZF+OTstBahdxvz 9dFdV3SZ/hGnaWEkZo6/aTDUvmF3rVhTTLOwqwdD53Mhn0R051RMQvdqkrkvgser 3lSW8lZRi1qdw0dFOxrWUnxv3KEhbbuY5KkzdUtKB0cov1Yi/SUHqSLGrbqgq1qL yHLFhwysqMbkQRPV4/euINdnEqsKgesvmDGpZ0sivB1i97BJEfh3/4bYo/29A1t7 W+A1RIvKyNf3b2BZN/zhvG7AdLJNABFD6dY/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcFwn9vfXrtGFokp8fv2MralwdGUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2NGd245dmZYcnRHRm9rcDhmdjJNcmFsd2RHVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSwAwDQYJKoZIhvcNAQELBQADggEBAG7IYsnfDVVWxJPWj3tNF4qvcHHH eHo1POJcREEmzeUJhdVbkSyf6FkjfPoab5mGqhtR9gLBPoXKZaQngumPqrW4YRaJ RIFH6lTg5xT6M0d9pXwwrsYnJGlRtp3dx5r131v5zbbMfie2qlBrUnQ0f7IeLqb5 1wgvix28izBXwVq1SajdXc52o5FQ9QvIYoVL3Ci5dP0cSugChbB9FY8IQbyYY9JI sRuQJKGducvGeUFt7Pbevr9//G1sXM9Er1bPcsWdJnVShYmM5Tul7JUwWVCoV+fd 8zUzYHyfCwhKW+BEkmxZEEECh4gBhkJM6fXrs9NuSLEyZVA4fACT+MC0I4w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:46:21 2025 by rpki-client