$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2VsMTFtVz4OLYF02_mELnU6p01Y.roa File: 2VsMTFtVz4OLYF02_mELnU6p01Y.roa (raw, json) Hash identifier: +ePrVx/yy3p8UG12UoeSFjnjFVwxb2RbYqNVEd8DhaM= Subject key identifier: D9:5B:0C:4C:5B:55:CF:83:8B:60:5D:36:FE:61:0B:9D:4E:A9:D3:56 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D9F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2VsMTFtVz4OLYF02_mELnU6p01Y.roa Signing time: Tue 01 Apr 2025 02:24:36 +0000 ROA not before: Tue 01 Apr 2025 02:24:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=D95B0C4C5B55CF838B605D36FE610B9D4EA9D356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:50:36:1f:ab:23:38:16:9c:3f:a3:17:77: fe:e9:ff:7f:be:b3:40:d0:2d:a6:ce:52:94:2f:7c: ad:13:ce:20:e4:25:a0:91:1b:c3:5c:e5:f0:8a:30: 27:82:6b:3c:c5:0d:aa:0c:de:1a:1a:f4:53:01:df: 1b:84:2e:64:ed:bc:d2:fc:07:a8:eb:50:46:74:36: 2d:38:77:a4:2e:35:c0:92:3b:fa:67:66:e0:9e:54: 9d:29:e1:2d:90:45:84:48:c8:ea:27:37:d9:3e:d0: 0d:48:a9:48:b4:e5:cb:8f:8e:8d:7b:ab:27:9e:83: 8c:a4:ae:d3:c8:b7:4c:3a:3c:fa:1a:65:84:71:61: e3:07:44:a0:13:82:c0:c9:81:e3:c8:bf:a8:19:a4: a3:1e:b9:4c:4b:ac:10:3d:9c:7d:48:a5:0f:5f:fe: 3c:38:e3:82:15:12:de:d8:7f:de:06:2a:e7:dd:df: 0e:c6:75:d4:09:5a:1d:8d:61:c0:8c:07:2a:a5:fd: 3f:0b:66:e1:9d:ef:ad:3c:49:06:e4:8f:8c:64:e9: f7:55:e5:20:de:7d:69:40:f8:78:74:fe:99:62:e6: c8:33:26:6c:9f:3a:1b:bc:b5:c7:46:1d:98:db:1f: 24:6e:81:6a:b9:9a:54:8c:10:7d:43:d2:9c:2e:d2: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5B:0C:4C:5B:55:CF:83:8B:60:5D:36:FE:61:0B:9D:4E:A9:D3:56 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2VsMTFtVz4OLYF02_mELnU6p01Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.11.0/24 Signature Algorithm: sha256WithRSAEncryption 44:ae:f7:dd:e4:31:be:85:02:e5:de:eb:d7:a7:cc:ae:6e:de: c5:4e:00:50:8d:0d:71:5e:42:a9:4a:6f:91:af:9d:3c:4e:10: 75:9b:ef:61:b5:f3:df:1f:11:a6:4c:1b:9c:4a:43:a3:ed:b1: 15:22:b4:b5:47:0c:68:1b:72:e2:18:97:42:17:d1:83:13:a1: 50:fe:68:63:da:e4:ff:0d:ae:05:65:a3:b4:17:95:47:99:bb: bf:a6:0d:14:0f:71:53:9b:b0:7b:96:e3:ef:d1:d0:88:15:39: 2a:ef:f5:4f:32:c0:bb:a4:fc:8e:8e:fa:90:89:99:e0:4a:da: 00:2d:b1:aa:fb:37:80:15:ed:f8:3f:53:3f:53:e2:7a:15:7e: 99:82:b4:ad:ca:0b:32:60:fb:1d:f9:e0:6a:06:21:8f:b3:dc: f1:ce:af:1a:e9:70:4d:fc:02:f6:d3:50:1d:da:c6:27:0e:99: 99:74:44:e3:fc:ff:74:c0:27:f9:56:16:fa:ef:d7:96:e4:5d: 1e:7c:1a:8f:a3:81:d7:74:25:52:7f:01:e6:b8:f4:9f:c9:98: ca:04:ac:5e:3a:35:a0:dc:78:2a:d6:4d:fd:e1:05:9d:71:47: c5:8b:5b:79:04:3c:75:8e:b5:5c:a1:bf:09:d0:f5:42:e7:a6: c4:e5:cd:71 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ5NUIwQzRDNUI1NUNG ODM4QjYwNUQzNkZFNjEwQjlENEVBOUQzNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6VFA2H6sjOBacP6MXd/7p/3++s0DQLabOUpQvfK0TziDkJaCR G8Nc5fCKMCeCazzFDaoM3hoa9FMB3xuELmTtvNL8B6jrUEZ0Ni04d6QuNcCSO/pn ZuCeVJ0p4S2QRYRIyOonN9k+0A1IqUi05cuPjo17qyeeg4ykrtPIt0w6PPoaZYRx YeMHRKATgsDJgePIv6gZpKMeuUxLrBA9nH1IpQ9f/jw444IVEt7Yf94GKufd3w7G ddQJWh2NYcCMByql/T8LZuGd7608SQbkj4xk6fdV5SDefWlA+Hh0/pli5sgzJmyf Ohu8tcdGHZjbHyRugWq5mlSMEH1D0pwu0pjlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2VsMTFtVz4OLYF02/mELnU6p01YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzJWc01URnRWejRPTFlGMDJfbUVMblU2cDAxWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxaAswDQYJKoZIhvcNAQELBQADggEBAESu993kMb6FAuXe69enzK5u3sVO AFCNDXFeQqlKb5GvnTxOEHWb72G1898fEaZMG5xKQ6PtsRUitLVHDGgbcuIYl0IX 0YMToVD+aGPa5P8NrgVlo7QXlUeZu7+mDRQPcVObsHuW4+/R0IgVOSrv9U8ywLuk /I6O+pCJmeBK2gAtsar7N4AV7fg/Uz9T4noVfpmCtK3KCzJg+x354GoGIY+z3PHO rxrpcE38AvbTUB3axicOmZl0ROP8/3TAJ/lWFvrv15bkXR58Go+jgdd0JVJ/Aea4 9J/JmMoErF46NaDceCrWTf3hBZ1xR8WLW3kEPHWOtVyhvwnQ9ULnpsTlzXE= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:38 2025 by rpki-client on console.sobornost.net