$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dtdp5WToYbT37SUaF8c54FOF_KM.roa File: dtdp5WToYbT37SUaF8c54FOF_KM.roa (raw, json) Hash identifier: 2euzxWxdKr1XKWGOKWat5y+udd5UE+WF8m5XPnSYXpA= Subject key identifier: 76:D7:69:E5:64:E8:61:B4:F7:ED:25:1A:17:C7:39:E0:53:85:FC:A3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AFE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dtdp5WToYbT37SUaF8c54FOF_KM.roa Signing time: Fri 31 Jan 2025 01:34:17 +0000 ROA not before: Fri 31 Jan 2025 01:34:17 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:17 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=76D769E564E861B4F7ED251A17C739E05385FCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:82:b6:1d:86:e5:5d:7b:e0:2c:08:f2:7b: b4:8c:f2:2b:b6:f0:b6:2a:a3:b4:6d:de:60:33:4d: 39:a6:89:73:ac:86:fb:46:fa:5e:29:10:b8:f1:56: 98:17:89:76:41:5d:47:60:d7:e9:20:03:2e:aa:83: 73:53:3e:8f:56:e5:fc:d3:84:97:7c:64:1c:25:76: 52:a5:2c:dc:d0:eb:3a:c7:72:a0:74:87:a2:e6:f2: 04:1a:4f:f3:e2:30:5d:ff:b0:8a:30:cc:0e:81:67: 45:46:b4:38:47:67:da:e8:9c:31:bb:b1:2b:e0:ed: ba:39:c1:77:b1:3b:00:58:31:d1:1f:2f:c9:74:c9: 62:cc:30:f8:5b:55:c8:5d:73:73:a9:9c:31:b5:b3: 4b:51:52:5e:3e:85:eb:70:c3:ac:4a:b2:f3:0f:7c: 10:a3:2c:4b:3b:e4:f7:27:78:3a:d5:96:ef:60:7e: 39:7e:c9:9f:96:95:4b:be:25:32:84:58:c7:1d:c0: 13:b1:c3:59:6d:89:f8:cc:a0:86:9d:a4:83:27:9f: 22:8d:85:2d:a3:ae:48:88:da:52:87:34:d0:49:f5: 2b:e1:11:cd:e3:3f:d1:88:70:a4:09:9c:b3:fe:08: 7f:12:82:e9:64:57:7f:bd:ec:97:70:93:fb:89:9b: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:69:E5:64:E8:61:B4:F7:ED:25:1A:17:C7:39:E0:53:85:FC:A3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dtdp5WToYbT37SUaF8c54FOF_KM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.2.0/24 Signature Algorithm: sha256WithRSAEncryption 06:82:89:ed:73:ce:c2:c7:7a:3a:35:68:ee:6f:1b:6a:1f:87: 40:01:3c:5f:dd:a2:33:b8:5d:a9:f3:f2:78:24:73:90:9f:fa: ee:fa:3c:71:b5:c2:89:9b:96:a2:b3:15:fa:23:d1:31:91:5b: 7c:a1:e7:f9:c9:07:68:52:e1:ef:8f:e6:f4:89:24:c9:09:72: 09:e5:4c:58:f1:a5:e0:0b:94:04:82:09:82:b2:85:81:75:e1: ec:34:f8:a5:32:a7:89:2f:05:e5:04:b5:e4:8b:66:88:d0:ab: 0e:51:da:d8:28:0f:2b:ba:28:f4:e3:d8:a4:a6:79:15:94:5c: 75:39:23:65:f8:4c:b6:6b:0d:28:aa:5f:3d:a2:fb:da:62:92: 3b:23:c9:17:f9:6d:40:46:f9:19:4d:f5:7e:39:28:16:7a:8a: 18:e3:75:a4:93:3f:67:18:ce:6c:3b:fa:b3:c4:3d:16:10:5c: 11:b0:4a:34:d4:44:fe:60:3c:65:ae:44:31:c1:80:b1:27:2d: 15:20:ea:b4:61:34:b2:5b:86:96:75:31:52:4e:f0:e5:5f:82: c7:f2:04:af:86:0b:71:3f:a0:11:2f:d0:2b:9e:d1:a7:e7:c8: 35:73:3a:7e:20:8f:a6:43:5c:3b:d1:63:1e:58:8c:95:db:bf: de:d2:fd:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MTdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc2RDc2OUU1NjRFODYx QjRGN0VEMjUxQTE3QzczOUUwNTM4NUZDQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRp4K2HYblXXvgLAjye7SM8iu28LYqo7Rt3mAzTTmmiXOshvtG +l4pELjxVpgXiXZBXUdg1+kgAy6qg3NTPo9W5fzThJd8ZBwldlKlLNzQ6zrHcqB0 h6Lm8gQaT/PiMF3/sIowzA6BZ0VGtDhHZ9ronDG7sSvg7bo5wXexOwBYMdEfL8l0 yWLMMPhbVchdc3OpnDG1s0tRUl4+hetww6xKsvMPfBCjLEs75PcneDrVlu9gfjl+ yZ+WlUu+JTKEWMcdwBOxw1ltifjMoIadpIMnnyKNhS2jrkiI2lKHNNBJ9SvhEc3j P9GIcKQJnLP+CH8SgulkV3+97Jdwk/uJm525AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUdtdp5WToYbT37SUaF8c54FOF/KMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2R0ZHA1V1RvWWJUMzdTVWFGOGM1NEZPRl9LTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABSwIwDQYJKoZIhvcNAQELBQADggEBAAaCie1zzsLHejo1aO5vG2ofh0AB PF/dojO4Xanz8ngkc5Cf+u76PHG1womblqKzFfoj0TGRW3yh5/nJB2hS4e+P5vSJ JMkJcgnlTFjxpeALlASCCYKyhYF14ew0+KUyp4kvBeUEteSLZojQqw5R2tgoDyu6 KPTj2KSmeRWUXHU5I2X4TLZrDSiqXz2i+9pikjsjyRf5bUBG+RlN9X45KBZ6ihjj daSTP2cYzmw7+rPEPRYQXBGwSjTURP5gPGWuRDHBgLEnLRUg6rRhNLJbhpZ1MVJO 8OVfgsfyBK+GC3E/oBEv0Cue0afnyDVzOn4gj6ZDXDvRYx5YjJXbv97S/cg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:56 2025 by rpki-client