$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qrzdb0SBpwO-f7kGRxsoHQHGXbQ.roa File: qrzdb0SBpwO-f7kGRxsoHQHGXbQ.roa (raw, json) Hash identifier: q8udEQD8Gaxawi+efMc57CmEvc/8M2c+OCr5SXZEz4I= Subject key identifier: AA:BC:DD:6F:44:81:A7:03:BE:7F:B9:06:47:1B:28:1D:01:C6:5D:B4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B28 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qrzdb0SBpwO-f7kGRxsoHQHGXbQ.roa Signing time: Fri 31 Jan 2025 01:38:02 +0000 ROA not before: Fri 31 Jan 2025 01:38:02 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.72.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:38:02 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=AABCDD6F4481A703BE7FB906471B281D01C65DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:fd:1e:02:6f:86:ad:c4:46:9a:6a:ba:76: a6:99:d6:8f:7c:04:eb:93:6f:0e:24:30:5d:42:84: d7:43:86:43:58:44:1b:eb:72:fd:81:ab:1f:00:97: ea:d2:8b:3f:4a:7c:81:1f:b6:3e:26:c4:57:e8:56: e1:e8:90:c1:48:b8:eb:f9:46:da:a1:b7:88:63:45: 8a:49:66:c5:a6:89:67:fb:fd:60:98:71:c4:ba:97: ca:f0:8d:51:34:f6:2f:ae:d7:99:d8:a3:9e:c5:33: c2:ef:7d:6d:d7:f5:9d:00:ac:93:a0:80:1f:69:f2: a9:6d:7e:4c:03:b7:63:b0:a9:8f:3e:bf:c6:2b:c8: 3f:0a:47:33:b9:82:eb:cc:8a:ce:a7:4d:ab:7b:42: 22:2e:ad:a3:a4:e4:63:5b:53:2a:f1:c6:5a:16:f9: 76:ac:71:b7:c0:96:c2:14:dd:ac:64:02:0a:f5:a0: aa:a8:2c:b2:93:92:f3:dd:e3:b2:e2:e6:2b:f6:64: 55:1a:95:76:2e:94:57:0c:2b:81:8e:3a:0b:cd:b3: e3:cb:f7:ae:94:97:7f:f2:e7:ea:82:b5:f2:05:da: f3:91:54:bd:62:51:34:3e:be:5a:02:11:43:cc:e4: 51:c1:d5:44:f6:60:80:8a:0d:73:3e:ad:a0:05:cf: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BC:DD:6F:44:81:A7:03:BE:7F:B9:06:47:1B:28:1D:01:C6:5D:B4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qrzdb0SBpwO-f7kGRxsoHQHGXbQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.2.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:a6:3d:6c:d4:0d:3f:5d:ea:a3:59:87:f8:97:5d:2d:af:80: 55:18:1f:b3:51:14:90:41:80:26:22:62:4f:c7:06:9e:3a:27: d9:62:0c:1c:f0:59:90:a6:42:d0:4d:41:39:d4:df:2b:6b:cf: 49:83:8b:10:23:db:26:21:c7:35:fe:90:c5:cd:04:b9:98:53: 44:e3:68:05:48:27:1a:05:ae:64:b3:2a:e5:66:5c:28:57:39: 3c:cb:e2:b3:b2:72:9c:2a:9e:5f:4c:5d:59:24:9f:8b:01:8c: 55:a9:09:33:fa:d2:04:76:35:12:51:a8:23:a5:16:66:4f:37: 39:c3:ea:97:8b:d4:fe:de:35:5d:3f:43:26:7d:ec:c8:67:23: 90:fe:16:a4:6c:57:0e:e8:ad:dc:71:e8:fb:ed:05:86:37:33: be:39:b5:ae:62:fe:a9:87:66:0a:3e:76:98:23:15:f1:34:e2: cb:7b:b2:e7:29:68:5d:5b:85:4a:9c:e3:14:24:12:0a:50:6e: 91:0f:df:43:35:30:b9:49:ee:05:5e:6a:67:32:65:f4:6e:b1: 26:5f:7d:68:b6:80:74:86:b3:53:6c:2e:2e:4b:8e:41:04:7b: ff:cf:54:d9:41:eb:69:51:3e:1a:a4:f1:aa:8c:c4:45:45:7c: 1b:ee:d0:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM4MDJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFBQkNERDZGNDQ4MUE3 MDNCRTdGQjkwNjQ3MUIyODFEMDFDNjVEQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtR/0eAm+GrcRGmmq6dqaZ1o98BOuTbw4kMF1ChNdDhkNYRBvr cv2Bqx8Al+rSiz9KfIEftj4mxFfoVuHokMFIuOv5Rtqht4hjRYpJZsWmiWf7/WCY ccS6l8rwjVE09i+u15nYo57FM8LvfW3X9Z0ArJOggB9p8qltfkwDt2OwqY8+v8Yr yD8KRzO5guvMis6nTat7QiIuraOk5GNbUyrxxloW+XascbfAlsIU3axkAgr1oKqo LLKTkvPd47Li5iv2ZFUalXYulFcMK4GOOgvNs+PL966Ul3/y5+qCtfIF2vORVL1i UTQ+vloCEUPM5FHB1UT2YICKDXM+raAFz5FxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqrzdb0SBpwO+f7kGRxsoHQHGXbQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FyemRiMFNCcHdPLWY3a0dSeHNvSFFIR1hiUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSAIwDQYJKoZIhvcNAQELBQADggEBAA2mPWzUDT9d6qNZh/iXXS2vgFUY H7NRFJBBgCYiYk/HBp46J9liDBzwWZCmQtBNQTnU3ytrz0mDixAj2yYhxzX+kMXN BLmYU0TjaAVIJxoFrmSzKuVmXChXOTzL4rOycpwqnl9MXVkkn4sBjFWpCTP60gR2 NRJRqCOlFmZPNznD6peL1P7eNV0/QyZ97MhnI5D+FqRsVw7ordxx6PvtBYY3M745 ta5i/qmHZgo+dpgjFfE04st7sucpaF1bhUqc4xQkEgpQbpEP30M1MLlJ7gVeamcy ZfRusSZffWi2gHSGs1NsLi5LjkEEe//PVNlB62lRPhqk8aqMxEVFfBvu0Ps= -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:30 2025 by rpki-client