$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEBXv7b-4tMYov00_zGE-4h0eAE.roa File: uEBXv7b-4tMYov00_zGE-4h0eAE.roa (raw, json) Hash identifier: v8UsX6QU51FfJ1wM+oM0VcQMqE5++fUKKjjkiGByW24= Subject key identifier: B8:40:57:BF:B6:FE:E2:D3:18:A2:FD:34:FF:31:84:FB:88:74:78:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AEB Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEBXv7b-4tMYov00_zGE-4h0eAE.roa Signing time: Fri 31 Jan 2025 01:28:30 +0000 ROA not before: Fri 31 Jan 2025 01:28:30 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.73.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:30 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=B84057BFB6FEE2D318A2FD34FF3184FB88747801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:46:04:60:31:6c:c5:df:6c:ba:a5:11:a0: 68:cf:a5:49:cf:a0:ba:44:7b:0c:4d:57:16:62:10: 11:81:2d:be:d4:3d:d2:05:3d:39:c0:6e:8d:61:5d: 5e:2c:7c:c4:a8:a2:47:75:a2:cf:c8:8a:29:64:31: 68:23:8c:dc:8d:9a:5f:f6:f5:08:af:11:db:bc:66: 24:5b:3e:5d:fe:f3:0e:25:7a:48:fc:91:d2:78:2d: 1b:a3:1d:4a:18:5d:2e:92:62:f6:f2:de:bb:85:af: b9:e5:0b:ca:15:e5:6b:4b:08:87:4c:e5:d8:55:d1: 24:5d:4b:04:4c:3b:12:d6:c7:55:47:f9:46:68:96: 20:74:f6:20:76:2a:c9:9e:0e:2b:5e:29:bb:42:1e: f2:4e:6c:33:6d:d9:30:4b:7b:de:ce:d8:8d:a5:e7: 85:d8:7d:23:95:8b:ce:06:9b:b5:c0:88:7a:e7:b8: ca:75:d0:85:5d:b8:30:69:69:88:34:c3:da:97:4e: 99:60:a9:6d:37:1f:55:b5:39:63:7e:2b:80:18:fd: ae:ed:95:48:13:6b:d3:d3:40:87:de:e5:5d:a3:95: af:67:bc:4e:b6:a2:d8:24:fb:4d:44:ca:0c:dc:4b: e2:9c:07:be:65:7e:68:82:3d:b5:17:2c:30:b0:5f: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:57:BF:B6:FE:E2:D3:18:A2:FD:34:FF:31:84:FB:88:74:78:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uEBXv7b-4tMYov00_zGE-4h0eAE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.73.224.0/23 Signature Algorithm: sha256WithRSAEncryption d7:90:a3:73:9e:96:db:3a:a3:85:a6:a7:c0:32:88:cc:6c:16: 4c:6e:d8:fd:cf:82:c4:96:96:19:81:00:d1:4b:90:9c:c4:eb: 23:dd:12:2e:43:57:c6:63:41:26:c7:ae:10:ab:79:e2:34:8c: 86:80:14:cb:f3:55:cc:ae:6d:7d:de:e8:e8:b6:a9:44:eb:10: 90:5f:d3:dc:a3:b4:3f:b3:ef:d7:cd:88:f3:a8:45:24:fc:1f: 7a:8d:69:55:19:ab:51:c9:5c:09:a2:7f:8d:35:6b:5e:23:ef: 68:f8:32:6d:07:a1:53:bd:9e:be:fb:d0:31:36:04:7a:f6:98: 9a:6d:8e:69:85:76:dd:88:fa:06:a7:37:83:b0:2b:d4:d2:0d: c8:9c:5c:1e:c5:66:ee:37:7c:9a:af:9a:4e:70:64:84:9a:9f: 6a:4e:b5:33:a3:3a:9c:79:9c:64:5a:19:16:e5:36:3f:b5:a3: b1:66:c5:e6:8b:07:f7:3c:3e:43:1a:6f:c1:03:85:32:17:39: d3:32:2c:33:1c:d3:e0:ea:5b:7d:71:52:f9:64:27:9c:c7:dd: e1:a7:45:e5:aa:34:7e:d7:e0:44:69:e5:40:4c:91:5a:a2:de: d7:0f:76:1e:77:7b:0a:9b:70:04:4f:2e:00:b2:95:85:fb:c2: e3:15:ec:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI4NDA1N0JGQjZGRUUy RDMxOEEyRkQzNEZGMzE4NEZCODg3NDc4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRHUYEYDFsxd9suqURoGjPpUnPoLpEewxNVxZiEBGBLb7UPdIF PTnAbo1hXV4sfMSookd1os/IiilkMWgjjNyNml/29QivEdu8ZiRbPl3+8w4lekj8 kdJ4LRujHUoYXS6SYvby3ruFr7nlC8oV5WtLCIdM5dhV0SRdSwRMOxLWx1VH+UZo liB09iB2KsmeDiteKbtCHvJObDNt2TBLe97O2I2l54XYfSOVi84Gm7XAiHrnuMp1 0IVduDBpaYg0w9qXTplgqW03H1W1OWN+K4AY/a7tlUgTa9PTQIfe5V2jla9nvE62 otgk+01EygzcS+KcB75lfmiCPbUXLDCwX3CTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUuEBXv7b+4tMYov00/zGE+4h0eAEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3VFQlh2N2ItNHRNWW92MDBfekdFLTRoMGVBRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSeAwDQYJKoZIhvcNAQELBQADggEBANeQo3Oelts6o4Wmp8AyiMxsFkxu 2P3PgsSWlhmBANFLkJzE6yPdEi5DV8ZjQSbHrhCreeI0jIaAFMvzVcyubX3e6Oi2 qUTrEJBf09yjtD+z79fNiPOoRST8H3qNaVUZq1HJXAmif401a14j72j4Mm0HoVO9 nr770DE2BHr2mJptjmmFdt2I+ganN4OwK9TSDcicXB7FZu43fJqvmk5wZISan2pO tTOjOpx5nGRaGRblNj+1o7FmxeaLB/c8PkMab8EDhTIXOdMyLDMc0+DqW31xUvlk J5zH3eGnReWqNH7X4ERp5UBMkVqi3tcPdh53ewqbcARPLgCylYX7wuMV7Gs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:29:32 2025 by rpki-client