$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/PbNoEHTu8BNZZeBYDL72qU2h6aE.roa File: PbNoEHTu8BNZZeBYDL72qU2h6aE.roa (raw, json) Hash identifier: BI5CP48rdnwWG/J6zEwCLnotPLdlaGgm7flLq4VM7dw= Subject key identifier: 3D:B3:68:10:74:EE:F0:13:59:65:E0:58:0C:BE:F6:A9:4D:A1:E9:A1 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 25 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/PbNoEHTu8BNZZeBYDL72qU2h6aE.roa Signing time: Fri 18 Oct 2024 08:13:37 +0000 ROA not before: Fri 18 Oct 2024 08:13:37 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 23783 IP address blocks: 61.11.176.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 18 08:13:37 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=3DB3681074EEF0135965E0580CBEF6A94DA1E9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:be:6d:0c:74:71:e3:34:d4:a2:c6:c3:51: 6f:8d:1d:d9:f7:8f:ed:b0:73:33:cc:03:af:a8:02: cd:f2:78:0b:0e:75:df:53:4b:6a:50:f7:1b:5b:01: 8e:d8:01:9f:58:19:f4:15:91:0f:78:8a:bf:5c:61: 21:68:b9:1c:3f:94:ec:5c:a3:1b:3d:c4:4a:5c:8e: 62:be:fe:ce:c3:b5:97:a2:88:41:65:20:aa:7e:43: d1:d8:ba:df:09:8b:b1:19:c8:00:eb:4d:c3:9a:60: 1c:ec:08:67:f5:31:3a:c4:02:41:26:c9:10:f7:60: c5:d6:24:62:7a:8b:e6:b8:f6:98:52:de:ee:1e:88: 38:5b:c1:c7:f9:7c:6e:aa:a1:2f:f3:a4:c1:52:7e: f9:ba:58:fe:05:72:f3:bb:82:23:f5:98:00:74:88: 90:cb:d1:9a:31:ab:4e:da:f4:d9:cc:af:d0:8e:fc: b4:ba:37:1e:36:4b:91:0e:16:73:ed:bd:b9:b0:58: 23:0f:b7:fe:63:c1:b3:bd:3a:fb:9f:57:8b:b8:68: 73:74:d5:61:a6:db:2c:5f:ec:22:28:5d:96:01:09: 3c:8f:29:37:ea:9c:0b:38:d2:6b:5f:81:ba:d5:d8: 49:0c:18:cb:57:ea:57:06:77:24:0d:4f:34:26:2e: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B3:68:10:74:EE:F0:13:59:65:E0:58:0C:BE:F6:A9:4D:A1:E9:A1 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/PbNoEHTu8BNZZeBYDL72qU2h6aE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.11.176.0/20 Signature Algorithm: sha256WithRSAEncryption ae:58:b1:2e:c9:dd:63:95:ad:80:0a:63:1b:f5:ae:30:9c:3c: 26:06:c7:02:46:74:41:52:4e:7e:42:61:40:4b:af:97:6e:27: 28:b1:26:4d:0a:8e:b1:da:76:30:23:e7:38:d7:76:c7:8e:99: a2:fe:43:f1:ec:6d:b0:71:1f:33:19:b2:0c:f4:0c:10:31:f9: d7:40:00:90:07:22:d0:d5:16:6c:a2:c4:8c:33:48:1e:be:3e: e4:6a:6d:d9:0c:64:da:b4:fc:c0:14:fa:18:34:a9:a5:76:84: 73:dc:c1:62:25:f7:b0:c3:81:02:36:df:a7:f2:97:43:47:c4: 66:15:26:cb:c9:86:ca:f6:6b:2a:57:70:a8:41:e4:cc:3b:15: 5e:49:01:96:4b:f1:e2:97:99:39:33:0e:02:13:d7:c3:f6:e0: f4:47:89:0a:46:2e:6e:2a:54:31:3e:f5:ef:32:77:74:77:9e: 14:08:ae:44:e4:0a:3c:ee:bc:b1:dc:c6:1a:df:49:9b:11:99: 8f:56:89:c4:7f:44:ab:6d:fc:54:d2:dd:55:bf:4f:1c:c3:46: d6:d2:05:61:2e:35:e8:08:08:8b:e9:c1:73:94:44:38:a4:ee: 9c:1f:ca:17:ec:6d:aa:ff:9a:21:d6:a2:af:4a:83:9f:a7:be: a4:7c:8c:00 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI0MTAxODA4 MTMzN1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoM0RCMzY4MTA3NEVFRjAx MzU5NjVFMDU4MENCRUY2QTk0REExRTlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMytvm0MdHHjNNSixsNRb40d2feP7bBzM8wDr6gCzfJ4Cw5131NL alD3G1sBjtgBn1gZ9BWRD3iKv1xhIWi5HD+U7FyjGz3ESlyOYr7+zsO1l6KIQWUg qn5D0di63wmLsRnIAOtNw5pgHOwIZ/UxOsQCQSbJEPdgxdYkYnqL5rj2mFLe7h6I OFvBx/l8bqqhL/OkwVJ++bpY/gVy87uCI/WYAHSIkMvRmjGrTtr02cyv0I78tLo3 HjZLkQ4Wc+29ubBYIw+3/mPBs706+59Xi7hoc3TVYabbLF/sIihdlgEJPI8pN+qc CzjSa1+ButXYSQwYy1fqVwZ3JA1PNCYuSFMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ9s2gQdO7wE1ll4FgMvvapTaHpoTAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvUGJOb0VIVHU4Qk5aWmVCWURMNzJxVTJoNmFFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD0LsDANBgkqhkiG9w0BAQsFAAOCAQEArlixLsndY5WtgApjG/WuMJw8JgbH AkZ0QVJOfkJhQEuvl24nKLEmTQqOsdp2MCPnONd2x46Zov5D8extsHEfMxmyDPQM EDH510AAkAci0NUWbKLEjDNIHr4+5Gpt2Qxk2rT8wBT6GDSppXaEc9zBYiX3sMOB Ajbfp/KXQ0fEZhUmy8mGyvZrKldwqEHkzDsVXkkBlkvx4peZOTMOAhPXw/bg9EeJ CkYubipUMT717zJ3dHeeFAiuROQKPO68sdzGGt9JmxGZj1aJxH9Eq238VNLdVb9P HMNG1tIFYS416AgIi+nBc5REOKTunB/KF+xtqv+aIdair0qDn6e+pHyMAA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:36 2025 by rpki-client on console.sobornost.net