$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2UKZlXVFfB7Z577iu99cQ3gxgZw.roa File: 2UKZlXVFfB7Z577iu99cQ3gxgZw.roa (raw, json) Hash identifier: Jv8YafRGcmbOkdBV2mMvriR5WOvFQImliFJzlqQW5BY= Subject key identifier: D9:42:99:95:75:45:7C:1E:D9:E7:BE:E2:BB:DF:5C:43:78:31:81:9C Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D62 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2UKZlXVFfB7Z577iu99cQ3gxgZw.roa Signing time: Tue 01 Apr 2025 02:19:17 +0000 ROA not before: Tue 01 Apr 2025 02:19:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3426 (0xd62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D942999575457C1ED9E7BEE2BBDF5C437831819C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:21:ec:f3:53:da:96:dc:4d:a6:fb:28:97: 70:6f:af:68:6c:17:69:dc:22:81:c8:f1:df:10:31: ab:08:68:45:1a:9b:17:ed:c0:2a:37:70:e0:9d:de: 09:c4:72:19:b5:dd:d8:84:c9:c4:5b:bc:d9:e4:3a: 0c:af:ee:ac:0e:f6:2e:89:a9:9d:87:dc:72:90:0d: d4:69:91:a8:96:d6:7f:1d:8a:8e:61:94:3e:89:94: 5a:9c:3f:51:7c:06:a7:10:b7:7f:fd:8c:c2:e0:31: 52:70:a1:2a:a5:48:db:f0:9c:f7:04:f6:3d:00:b3: 5d:e9:b8:92:7e:b8:65:69:72:19:56:54:6c:4d:6a: 0e:36:79:5d:cb:5c:1b:3c:da:57:91:8f:0b:65:c7: 7d:0e:9c:d0:6a:16:58:01:e7:1c:cb:55:4e:6e:64: 3a:87:4d:84:8d:b0:c4:75:28:fa:b8:f0:58:ae:75: e8:ac:e0:d5:25:cc:1b:13:c9:c5:c8:cd:f3:6c:d3: e3:1d:ad:e0:79:10:1c:bb:d7:52:e5:90:15:34:40: 70:3e:90:a9:6a:41:0a:05:2a:bd:71:0a:3b:53:5b: 08:f3:3a:2a:ea:af:ea:fd:3d:a6:2a:78:8e:88:1a: 81:6e:c9:b8:30:56:a1:98:d6:2f:c2:2d:cb:be:08: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:42:99:95:75:45:7C:1E:D9:E7:BE:E2:BB:DF:5C:43:78:31:81:9C X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2UKZlXVFfB7Z577iu99cQ3gxgZw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.54.0/23 Signature Algorithm: sha256WithRSAEncryption 23:2b:30:cc:4d:2c:1a:c8:5c:2c:27:62:f8:70:99:24:33:6d: 77:35:c0:77:3b:d3:98:36:2a:ab:98:30:f1:bc:e0:24:15:a5: 67:5a:16:db:d7:93:6f:86:24:e1:db:07:4e:c4:3d:d6:ab:8e: 0d:69:d7:dd:7b:ab:5e:e9:19:c7:b9:9a:7c:93:ca:5d:ce:05: ba:b5:2a:82:35:09:31:f6:7e:43:9c:c6:f5:99:29:f3:1e:88: ee:3d:05:6a:ae:f8:e7:f6:5e:17:a3:0d:32:fa:e6:bb:ab:18: b1:1d:69:d8:22:bc:77:a2:d1:12:32:b9:2b:4d:7e:c5:cf:8d: 47:26:0f:7a:c0:00:d4:e6:d4:a1:80:2f:e9:92:b4:c5:23:3c: 6b:24:53:b2:6b:b7:26:7e:f6:c4:ab:84:c8:9a:33:3c:2d:e9: 7f:32:9e:af:d3:c1:85:97:f7:97:37:a2:e9:74:e5:64:86:87: 74:3f:aa:2e:9b:ba:5c:24:15:35:e1:74:96:cb:32:67:24:c0: ec:c5:d8:86:40:06:35:2e:46:79:f4:2c:5a:ae:33:d1:bb:b4: 11:9a:a6:8c:74:a8:26:4a:72:c6:ee:7b:e3:d6:71:a5:67:6a: ee:7d:2f:0c:76:5f:27:22:37:6b:18:f6:b5:76:82:9d:46:49: ce:06:87:a5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5NDI5OTk1NzU0NTdD MUVEOUU3QkVFMkJCREY1QzQzNzgzMTgxOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY+iHs81PaltxNpvsol3Bvr2hsF2ncIoHI8d8QMasIaEUamxft wCo3cOCd3gnEchm13diEycRbvNnkOgyv7qwO9i6JqZ2H3HKQDdRpkaiW1n8dio5h lD6JlFqcP1F8BqcQt3/9jMLgMVJwoSqlSNvwnPcE9j0As13puJJ+uGVpchlWVGxN ag42eV3LXBs82leRjwtlx30OnNBqFlgB5xzLVU5uZDqHTYSNsMR1KPq48Fiudeis 4NUlzBsTycXIzfNs0+MdreB5EBy711LlkBU0QHA+kKlqQQoFKr1xCjtTWwjzOirq r+r9PaYqeI6IGoFuybgwVqGY1i/CLcu+CAr3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2UKZlXVFfB7Z577iu99cQ3gxgZwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJVS1psWFZGZkI3WjU3N2l1OTljUTNneGdady5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYjYwDQYJKoZIhvcNAQELBQADggEBACMrMMxNLBrIXCwnYvhwmSQzbXc1 wHc705g2KquYMPG84CQVpWdaFtvXk2+GJOHbB07EPdarjg1p1917q17pGce5mnyT yl3OBbq1KoI1CTH2fkOcxvWZKfMeiO49BWqu+Of2XhejDTL65rurGLEdadgivHei 0RIyuStNfsXPjUcmD3rAANTm1KGAL+mStMUjPGskU7JrtyZ+9sSrhMiaMzwt6X8y nq/TwYWX95c3oul05WSGh3Q/qi6bulwkFTXhdJbLMmckwOzF2IZABjUuRnn0LFqu M9G7tBGapox0qCZKcsbue+PWcaVnau59Lwx2XyciN2sY9rV2gp1GSc4Gh6U= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:38 2025 by rpki-client on console.sobornost.net