$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/smfoddKORnMTtUjdJEZ5GKMWrOc.roa File: smfoddKORnMTtUjdJEZ5GKMWrOc.roa (raw, json) Hash identifier: 9kkaAbqRJJQYNZoSIqMSKh3Dh6reZjGeKx5tV+ZESNg= Subject key identifier: B2:67:E8:75:D2:8E:46:73:13:B5:48:DD:24:46:79:18:A3:16:AC:E7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AE2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/smfoddKORnMTtUjdJEZ5GKMWrOc.roa Signing time: Fri 31 Jan 2025 01:28:27 +0000 ROA not before: Fri 31 Jan 2025 01:28:27 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:27 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=B267E875D28E467313B548DD24467918A316ACE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:75:8f:f5:3f:46:4b:a5:e1:f2:b1:16:61: e6:d1:de:b9:17:e2:9c:57:3c:d2:f8:2e:9d:61:ca: 3a:3f:eb:09:15:5c:06:6b:7c:c3:c2:ea:86:00:20: a6:58:45:d2:cc:76:91:f0:b9:9e:f2:be:63:7a:4e: bc:22:35:00:27:24:46:88:2e:61:4a:e5:ec:62:66: 18:7b:7f:fd:c3:47:79:e8:7d:42:42:0d:3b:dc:5e: 0b:64:10:07:90:3b:5a:7e:e0:7a:95:20:ff:ca:1e: 57:f3:cf:9c:03:99:0a:8a:ff:9e:bc:2d:a0:d5:d0: b2:5d:3e:4b:31:f0:24:7f:de:e4:2c:4e:3a:08:45: 32:bb:57:54:8c:eb:cb:78:f8:02:ac:58:b6:19:47: a6:03:0b:51:9a:fe:ff:22:a7:04:5c:43:9b:fb:1b: 17:cf:6b:0d:78:76:b9:e4:1a:31:de:2f:4b:ce:90: 3c:7c:0e:b8:c6:fa:66:03:d6:51:10:88:b7:04:be: 86:83:50:bb:a4:6d:51:22:46:1e:10:67:a7:48:30: c5:c3:1c:04:ba:ea:1a:1b:8e:71:de:ff:80:bf:77: ae:19:97:f6:38:01:4e:8d:f9:87:43:b9:b7:8b:fe: fd:12:4b:24:a7:92:8c:45:9d:16:e7:1f:53:49:1b: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:E8:75:D2:8E:46:73:13:B5:48:DD:24:46:79:18:A3:16:AC:E7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/smfoddKORnMTtUjdJEZ5GKMWrOc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.192.0/20 Signature Algorithm: sha256WithRSAEncryption 84:c9:69:83:29:2a:dd:c1:36:3d:de:e9:85:a1:79:6e:40:23: 21:fa:8b:15:b6:f1:5f:c6:1a:b1:df:8e:7c:d3:f4:34:eb:40: 67:2a:4f:8f:98:5c:c2:93:d7:32:6d:6a:47:63:15:a8:aa:c1: cb:7d:99:53:da:95:6e:4c:0f:35:f4:10:48:2e:6a:ee:8c:df: ea:5f:05:dd:b1:85:4f:7b:73:99:67:57:61:8c:ab:d3:b2:22: 3e:db:2f:e3:90:89:70:53:ba:ae:32:9a:67:1d:ef:cd:a1:93: a1:a2:1d:f5:41:8a:b1:09:45:1b:0c:7f:95:5c:e0:ec:a8:78: fc:2f:5c:e4:67:b0:59:33:97:53:76:08:8b:10:0f:29:ab:dc: 65:d8:4e:ae:ae:60:ed:66:61:47:de:cc:8b:a3:6d:7e:ab:87: 9b:b2:02:34:70:8d:a1:7b:87:72:b4:49:36:55:65:9e:e1:b1: d2:89:a5:34:a0:1f:15:1a:77:ed:2c:15:fc:51:49:f3:5b:01: 0e:e6:c7:54:34:b6:06:3c:3b:f2:d6:ec:3f:43:be:3f:cc:1d: c4:e9:ef:eb:f8:b1:84:f8:99:84:1c:ee:38:67:a0:4f:1e:46: 3d:36:52:4f:0c:e8:f1:4c:e2:7c:0a:1a:cb:85:b3:c1:84:a2: a7:c0:95:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MjdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIyNjdFODc1RDI4RTQ2 NzMxM0I1NDhERDI0NDY3OTE4QTMxNkFDRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfcHWP9T9GS6Xh8rEWYebR3rkX4pxXPNL4Lp1hyjo/6wkVXAZr fMPC6oYAIKZYRdLMdpHwuZ7yvmN6TrwiNQAnJEaILmFK5exiZhh7f/3DR3nofUJC DTvcXgtkEAeQO1p+4HqVIP/KHlfzz5wDmQqK/568LaDV0LJdPksx8CR/3uQsTjoI RTK7V1SM68t4+AKsWLYZR6YDC1Ga/v8ipwRcQ5v7GxfPaw14drnkGjHeL0vOkDx8 DrjG+mYD1lEQiLcEvoaDULukbVEiRh4QZ6dIMMXDHAS66hobjnHe/4C/d64Zl/Y4 AU6N+YdDubeL/v0SSySnkoxFnRbnH1NJGxtLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsmfoddKORnMTtUjdJEZ5GKMWrOcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NtZm9kZEtPUm5NVHRVamRKRVo1R0tNV3JPYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBScAwDQYJKoZIhvcNAQELBQADggEBAITJaYMpKt3BNj3e6YWheW5AIyH6 ixW28V/GGrHfjnzT9DTrQGcqT4+YXMKT1zJtakdjFaiqwct9mVPalW5MDzX0EEgu au6M3+pfBd2xhU97c5lnV2GMq9OyIj7bL+OQiXBTuq4ymmcd782hk6GiHfVBirEJ RRsMf5Vc4OyoePwvXORnsFkzl1N2CIsQDymr3GXYTq6uYO1mYUfezIujbX6rh5uy AjRwjaF7h3K0STZVZZ7hsdKJpTSgHxUad+0sFfxRSfNbAQ7mx1Q0tgY8O/LW7D9D vj/MHcTp7+v4sYT4mYQc7jhnoE8eRj02Uk8M6PFM4nwKGsuFs8GEoqfAlcY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:56 2025 by rpki-client