$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3QmHvDIrxCFOC9jjOq4eLuvVkRU.roa File: 3QmHvDIrxCFOC9jjOq4eLuvVkRU.roa (raw, json) Hash identifier: 2oVMdFwS+Exlryf8WCAtzzH2s2Kdinzgjh56IadL5Fo= Subject key identifier: DD:09:87:BC:32:2B:C4:21:4E:0B:D8:E3:3A:AE:1E:2E:EB:D5:91:15 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D88 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3QmHvDIrxCFOC9jjOq4eLuvVkRU.roa Signing time: Tue 01 Apr 2025 02:21:30 +0000 ROA not before: Tue 01 Apr 2025 02:21:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=DD0987BC322BC4214E0BD8E33AAE1E2EEBD59115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:a8:d0:3d:4b:7d:93:6c:87:52:b5:a6:83: 69:f8:b6:09:9c:60:98:71:44:a2:c8:4b:18:dd:40: 0f:c2:4c:50:d7:b7:aa:c4:ef:ae:a3:af:4a:75:be: 85:2b:1f:4f:e7:f7:9f:55:5a:9d:75:b1:65:9f:40: 7e:c8:df:48:64:fb:c2:82:31:08:81:fc:ba:62:d0: 5d:30:13:94:b6:11:0c:f1:31:c1:4e:c8:5d:d2:c3: 2a:71:e7:ec:90:15:b2:74:d4:8c:b7:bf:7d:98:33: 77:88:f2:89:56:1a:8c:70:68:dc:34:58:a2:dd:d8: 3e:f2:bb:64:07:fd:b5:08:2a:e7:e0:26:7e:17:59: 54:fb:ae:ab:2d:24:32:a5:92:11:9f:ee:3f:9e:ec: 2a:db:ce:88:7a:18:db:4e:04:73:5a:fc:cd:93:0b: 7f:2f:c6:b3:23:e5:2e:ed:8e:6c:49:fe:bc:a5:7c: 82:33:9a:3f:24:0e:49:14:43:92:91:c6:0e:1e:ba: a5:01:b9:b7:bf:78:c7:a6:b2:29:c1:23:6b:0c:ad: 63:12:d2:a0:c1:a1:79:88:46:af:bd:c6:6a:8d:2a: 93:dc:d7:c3:b4:c9:80:8e:a7:3a:87:9d:2a:0b:7e: 7c:71:6c:eb:57:2d:0e:d2:26:e9:63:aa:ed:25:a8: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:09:87:BC:32:2B:C4:21:4E:0B:D8:E3:3A:AE:1E:2E:EB:D5:91:15 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3QmHvDIrxCFOC9jjOq4eLuvVkRU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.30.0/23 Signature Algorithm: sha256WithRSAEncryption a0:1b:5a:28:4f:f6:d4:09:a8:7e:5a:10:b2:46:ef:ec:87:53: b2:5b:45:19:ce:9a:6d:b4:40:ab:af:37:53:ef:19:95:7a:ec: 34:10:dc:b4:7c:68:40:08:d3:6f:86:1c:bc:74:4a:09:3e:93: 60:66:b8:a0:5d:28:49:89:64:ab:79:30:73:f4:e6:54:16:3d: 3a:4c:88:41:6f:99:6a:14:e0:1b:d9:12:56:55:b6:61:73:fd: 35:b2:26:5f:b2:e6:5f:39:a5:a6:8d:50:1d:1e:ad:8c:35:bf: 65:47:2e:5c:2a:52:00:e4:60:ce:8d:1e:84:0b:d0:61:e0:24: ba:63:55:cc:2a:4c:3e:73:a6:19:99:fc:9a:48:fd:03:e1:99: dc:5f:55:2f:0b:be:b3:1d:a1:3f:29:31:e0:9a:6b:09:0c:63: 79:72:24:54:fb:b7:de:8e:f0:b4:ee:c9:17:1d:b6:b4:5a:37: 61:ad:18:8f:16:b6:d2:e2:38:88:bd:10:a4:fc:47:ed:b2:86: 9b:08:28:68:45:2f:9c:19:07:3c:79:7f:7c:e1:3d:de:7c:0f: 59:93:d6:38:54:92:e9:2b:1f:ef:b6:03:28:23:a3:d3:b4:fa: 5b:87:f8:32:b8:21:97:6e:b1:02:71:86:96:da:30:9e:f3:11: 5c:6a:d8:63 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEREMDk4N0JDMzIyQkM0 MjE0RTBCRDhFMzNBQUUxRTJFRUJENTkxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDyajQPUt9k2yHUrWmg2n4tgmcYJhxRKLISxjdQA/CTFDXt6rE 766jr0p1voUrH0/n959VWp11sWWfQH7I30hk+8KCMQiB/Lpi0F0wE5S2EQzxMcFO yF3Swypx5+yQFbJ01Iy3v32YM3eI8olWGoxwaNw0WKLd2D7yu2QH/bUIKufgJn4X WVT7rqstJDKlkhGf7j+e7Crbzoh6GNtOBHNa/M2TC38vxrMj5S7tjmxJ/rylfIIz mj8kDkkUQ5KRxg4euqUBube/eMemsinBI2sMrWMS0qDBoXmIRq+9xmqNKpPc18O0 yYCOpzqHnSoLfnxxbOtXLQ7SJuljqu0lqJbHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3QmHvDIrxCFOC9jjOq4eLuvVkRUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzNRbUh2RElyeENGT0M5ampPcTRlTHV2VmtSVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExYB4wDQYJKoZIhvcNAQELBQADggEBAKAbWihP9tQJqH5aELJG7+yHU7Jb RRnOmm20QKuvN1PvGZV67DQQ3LR8aEAI02+GHLx0Sgk+k2BmuKBdKEmJZKt5MHP0 5lQWPTpMiEFvmWoU4BvZElZVtmFz/TWyJl+y5l85paaNUB0erYw1v2VHLlwqUgDk YM6NHoQL0GHgJLpjVcwqTD5zphmZ/JpI/QPhmdxfVS8LvrMdoT8pMeCaawkMY3ly JFT7t96O8LTuyRcdtrRaN2GtGI8WttLiOIi9EKT8R+2yhpsIKGhFL5wZBzx5f3zh Pd58D1mT1jhUkukrH++2Aygjo9O0+luH+DK4IZdusQJxhpbaMJ7zEVxq2GM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:39 2025 by rpki-client on console.sobornost.net