$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gBE2bGJ5pZtUFoQRh9Sb97FmOJs.roa File: gBE2bGJ5pZtUFoQRh9Sb97FmOJs.roa (raw, json) Hash identifier: cvnYChMv2A0/JmzVlavB5WHY8GlE6H6ADIZNXtX6qJU= Subject key identifier: 80:11:36:6C:62:79:A5:9B:54:16:84:11:87:D4:9B:F7:B1:66:38:9B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AFC Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gBE2bGJ5pZtUFoQRh9Sb97FmOJs.roa Signing time: Fri 31 Jan 2025 01:34:16 +0000 ROA not before: Fri 31 Jan 2025 01:34:16 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:16 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=8011366C6279A59B5416841187D49BF7B166389B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:4f:f6:0d:b5:d6:a9:a7:1d:0f:1e:6a:4f: ee:24:74:54:8c:d3:04:b2:b1:4b:ee:60:92:13:7d: 5a:54:5d:8c:85:a2:89:c5:8d:a3:30:c7:03:17:d1: 49:60:f0:b4:3c:cc:1c:b7:31:38:01:2d:08:6b:fa: c8:45:36:f7:04:7b:ef:87:3d:7e:17:c2:7a:ff:f0: 6c:e9:6c:c1:bb:e4:68:c9:4b:3a:8b:9d:b0:94:3c: 46:f9:58:a1:54:2f:ee:7d:af:e9:51:cf:ce:54:b8: 0c:3c:67:66:30:85:a4:8a:7d:70:c0:26:0c:64:20: 9c:60:9f:e5:f3:cb:31:66:0e:a2:f5:67:a5:15:6d: 12:ff:0e:19:49:52:30:c3:53:3e:12:79:c2:24:8b: 34:d8:c0:40:ab:90:b9:3a:e2:c9:15:01:ff:bc:f8: fa:72:b3:17:24:71:e8:8a:96:c6:96:09:35:80:dd: 7d:3e:48:cb:f8:f4:da:9d:d4:31:25:ff:35:6a:c8: c4:5b:fb:27:5a:b7:ee:0f:08:50:20:f9:4f:a5:e0: 31:c9:8f:94:7d:94:a8:b4:18:ca:1d:ec:d9:45:56: dd:1b:9a:7a:ba:f2:9a:74:f4:e2:d8:da:f7:93:90: 2e:2f:31:e6:04:bb:b6:6f:8a:9d:6c:cb:f5:ae:d4: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:36:6C:62:79:A5:9B:54:16:84:11:87:D4:9B:F7:B1:66:38:9B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gBE2bGJ5pZtUFoQRh9Sb97FmOJs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.0.0/23 Signature Algorithm: sha256WithRSAEncryption 30:7e:c6:df:05:85:a0:bc:f3:8a:db:fd:da:9f:a3:43:1a:44: 52:9a:e1:95:b2:2d:49:c2:e9:0a:83:7f:04:e5:ba:05:b8:30: 82:57:49:ce:08:ab:7e:bf:f9:5f:48:57:e6:a0:9f:1c:aa:4d: 5c:0c:81:01:9f:c4:13:65:4f:25:ca:ed:9c:3c:dc:87:31:0e: 8a:37:8c:34:51:86:60:2c:40:01:a3:81:13:8e:6e:0b:48:e3: db:17:d2:73:6f:73:07:5a:d1:73:6a:16:21:ef:16:fb:60:fe: 24:97:13:d7:51:d6:bb:38:ac:d0:aa:ec:bf:6b:1b:9e:a3:d8: 6b:4a:5b:0e:08:e0:c0:2e:0c:47:32:81:b9:a3:80:5a:45:85: 8d:8f:c2:bb:87:4f:43:15:67:5e:d2:2c:35:5f:72:2d:70:89: 5d:ab:f7:74:f0:77:85:c3:66:c9:70:6f:99:55:1e:54:4e:b9: 68:11:b6:5d:a4:43:22:08:c4:68:1d:6c:e9:0e:67:56:76:db: 70:b6:e8:2f:ea:15:87:31:eb:99:61:69:0f:b4:dc:cd:f1:e6: 4d:bc:68:0a:c4:f7:93:14:8f:cc:26:04:74:6c:d0:ec:d5:ad: 12:fa:f1:64:aa:2b:22:ee:06:0e:5a:34:36:c4:29:60:3e:f1: 59:9a:09:7e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MTZaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwMTEzNjZDNjI3OUE1 OUI1NDE2ODQxMTg3RDQ5QkY3QjE2NjM4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCthU/2DbXWqacdDx5qT+4kdFSM0wSysUvuYJITfVpUXYyFoonF jaMwxwMX0Ulg8LQ8zBy3MTgBLQhr+shFNvcEe++HPX4Xwnr/8GzpbMG75GjJSzqL nbCUPEb5WKFUL+59r+lRz85UuAw8Z2YwhaSKfXDAJgxkIJxgn+XzyzFmDqL1Z6UV bRL/DhlJUjDDUz4SecIkizTYwECrkLk64skVAf+8+PpysxckceiKlsaWCTWA3X0+ SMv49Nqd1DEl/zVqyMRb+ydat+4PCFAg+U+l4DHJj5R9lKi0GMod7NlFVt0bmnq6 8pp09OLY2veTkC4vMeYEu7Zvip1sy/Wu1Od5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgBE2bGJ5pZtUFoQRh9Sb97FmOJswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dCRTJiR0o1cFp0VUZvUVJoOVNiOTdGbU9Kcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSAAwDQYJKoZIhvcNAQELBQADggEBADB+xt8FhaC884rb/dqfo0MaRFKa 4ZWyLUnC6QqDfwTlugW4MIJXSc4Iq36/+V9IV+agnxyqTVwMgQGfxBNlTyXK7Zw8 3IcxDoo3jDRRhmAsQAGjgROObgtI49sX0nNvcwda0XNqFiHvFvtg/iSXE9dR1rs4 rNCq7L9rG56j2GtKWw4I4MAuDEcygbmjgFpFhY2PwruHT0MVZ17SLDVfci1wiV2r 93Twd4XDZslwb5lVHlROuWgRtl2kQyIIxGgdbOkOZ1Z223C26C/qFYcx65lhaQ+0 3M3x5k28aArE95MUj8wmBHRs0OzVrRL68WSqKyLuBg5aNDbEKWA+8VmaCX4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:12 2025 by rpki-client