$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/02HDxF5ikJY3TjOtw7RCdlb5c0k.roa File: 02HDxF5ikJY3TjOtw7RCdlb5c0k.roa (raw, json) Hash identifier: x/dYU5ioVDPY91uzyxMTSaRwyfeVKNn1vlJMUQBB6Gw= Subject key identifier: D3:61:C3:C4:5E:62:90:96:37:4E:33:AD:C3:B4:42:76:56:F9:73:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C29 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/02HDxF5ikJY3TjOtw7RCdlb5c0k.roa Signing time: Tue 01 Apr 2025 01:54:04 +0000 ROA not before: Tue 01 Apr 2025 01:54:04 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:54:04 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D361C3C45E629096374E33ADC3B4427656F97349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:0d:64:43:f1:a3:6d:4e:b7:9d:6e:71:4b: 7d:a7:0a:b7:c2:6a:94:4f:59:fa:39:54:7f:4a:ee: d5:ec:6d:97:e5:d6:7c:bc:97:b4:21:7c:ca:8a:78: 4d:5f:87:87:c6:70:b5:db:6c:57:09:34:20:93:76: 6e:c4:e8:cb:10:51:22:8a:b6:bf:7e:62:ac:6b:26: 95:37:9e:fd:5f:a2:6a:de:96:38:92:de:ca:d7:97: f1:9a:dd:c6:27:17:52:64:d2:be:5c:a7:3f:22:fb: ee:f0:39:12:08:92:9e:32:ac:73:d1:73:42:25:7b: 2e:89:24:8b:d3:e3:7f:d9:a6:ef:18:fa:26:08:94: 0b:58:13:e6:ee:d8:8c:b5:f3:8c:67:fc:51:34:00: f7:e4:68:77:16:da:ee:35:6f:dd:27:27:78:f8:a4: 31:9e:41:5e:54:8b:3a:af:00:a0:f4:11:c7:a6:ad: fd:e7:59:bf:6c:1e:3d:00:3d:2e:0b:f5:c2:62:5d: b4:38:58:ea:1c:45:7f:cd:aa:28:bf:9e:61:f3:95: 21:e2:22:a8:74:bc:8c:cc:71:b1:c3:e0:71:e0:b5: 5f:3a:42:22:32:f0:e8:bd:a2:96:07:47:e9:f4:0d: f9:03:e4:8e:9e:02:16:10:8d:fd:d4:4f:ec:80:67: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:61:C3:C4:5E:62:90:96:37:4E:33:AD:C3:B4:42:76:56:F9:73:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/02HDxF5ikJY3TjOtw7RCdlb5c0k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.10.0/23 Signature Algorithm: sha256WithRSAEncryption d4:d6:ca:12:80:eb:e7:32:76:a8:07:a2:54:7e:38:86:e1:00: 8f:50:fa:a8:24:83:34:c6:1b:a4:1e:99:42:89:35:b6:70:68: f2:ca:57:f9:bf:5f:4c:f3:36:57:7a:ae:59:4b:c3:40:17:1d: 82:a8:62:5a:d6:d9:95:41:cf:3f:ee:62:39:01:96:7d:58:0c: 0a:21:dd:e4:e3:ef:ec:4f:3b:20:f0:ce:d5:f8:64:d1:5a:69: 5d:31:61:7b:75:c9:fc:a7:d5:ee:ad:44:8b:ad:6f:dc:74:d6: 19:e8:df:c7:35:35:40:a6:89:ee:48:0c:6d:59:58:15:23:aa: 5e:47:37:65:80:73:06:42:d1:6c:db:a8:70:6f:6f:9d:4d:fb: 89:b0:1f:f9:67:05:8b:32:72:ea:2b:75:cc:6d:f1:b1:a5:c8: 1b:db:17:67:c6:d0:ef:08:df:01:0c:5c:3b:0a:18:98:91:ce: 81:85:63:95:12:8f:20:ef:de:6f:c9:46:c4:81:12:22:12:b8: f7:03:9f:1b:c6:93:d2:db:fc:73:ee:35:76:86:3a:b4:5e:2d: f7:0f:d3:b0:5e:ff:fb:3c:7b:4c:64:14:d4:79:a0:b4:d9:cf: 2d:4b:9d:31:fd:1d:23:b8:6c:a7:82:93:30:88:0b:98:54:b3: 2c:38:8c:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU0MDRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQzNjFDM0M0NUU2Mjkw OTYzNzRFMzNBREMzQjQ0Mjc2NTZGOTczNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOoQ1kQ/GjbU63nW5xS32nCrfCapRPWfo5VH9K7tXsbZfl1ny8 l7QhfMqKeE1fh4fGcLXbbFcJNCCTdm7E6MsQUSKKtr9+YqxrJpU3nv1fomreljiS 3srXl/Ga3cYnF1Jk0r5cpz8i++7wORIIkp4yrHPRc0Iley6JJIvT43/Zpu8Y+iYI lAtYE+bu2Iy184xn/FE0APfkaHcW2u41b90nJ3j4pDGeQV5UizqvAKD0Ecemrf3n Wb9sHj0APS4L9cJiXbQ4WOocRX/Nqii/nmHzlSHiIqh0vIzMcbHD4HHgtV86QiIy 8Oi9opYHR+n0DfkD5I6eAhYQjf3UT+yAZ6/9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU02HDxF5ikJY3TjOtw7RCdlb5c0kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzAySER4RjVpa0pZM1RqT3R3N1JDZGxiNWMway5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTgowDQYJKoZIhvcNAQELBQADggEBANTWyhKA6+cydqgHolR+OIbhAI9Q +qgkgzTGG6QemUKJNbZwaPLKV/m/X0zzNld6rllLw0AXHYKoYlrW2ZVBzz/uYjkB ln1YDAoh3eTj7+xPOyDwztX4ZNFaaV0xYXt1yfyn1e6tRIutb9x01hno38c1NUCm ie5IDG1ZWBUjql5HN2WAcwZC0WzbqHBvb51N+4mwH/lnBYsycuordcxt8bGlyBvb F2fG0O8I3wEMXDsKGJiRzoGFY5USjyDv3m/JRsSBEiISuPcDnxvGk9Lb/HPuNXaG OrReLfcP07Be//s8e0xkFNR5oLTZzy1LnTH9HSO4bKeCkzCIC5hUsyw4jDY= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:37 2025 by rpki-client on console.sobornost.net