$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4msXg8bL5Dglglgkoktf3i1sxes.roa File: 4msXg8bL5Dglglgkoktf3i1sxes.roa (raw, json) Hash identifier: L9XhZNVi209HP9YtMGH9S8gkMUaKAV/Zcgpjz/6UeLw= Subject key identifier: E2:6B:17:83:C6:CB:E4:38:25:82:58:24:A2:4B:5F:DE:2D:6C:C5:EB Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CEE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4msXg8bL5Dglglgkoktf3i1sxes.roa Signing time: Tue 01 Apr 2025 02:11:29 +0000 ROA not before: Tue 01 Apr 2025 02:11:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.102.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3310 (0xcee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E26B1783C6CBE43825825824A24B5FDE2D6CC5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:c6:69:9d:d9:65:c0:35:24:92:33:67:f2: 8c:5d:34:98:74:f0:6e:60:99:1c:0d:26:f0:a2:ef: 2a:86:64:e2:6f:79:91:4b:79:1f:21:23:89:a4:5d: 05:db:83:6e:df:f0:cf:5d:07:33:3f:4b:a4:f0:76: 81:46:6f:ef:86:43:99:8a:e0:8f:66:10:c0:32:2e: 64:a1:85:a7:4c:be:9a:63:4e:ae:be:c9:da:2c:33: 17:eb:d0:f7:54:4b:7d:5a:0d:fd:6a:f1:73:27:4c: d7:38:30:e3:ff:7f:a9:9d:60:be:7e:69:10:94:1d: b5:e9:27:4c:28:9d:8d:9d:b1:4a:9d:a1:6f:d0:2f: 3d:ee:20:81:02:98:0c:0e:3a:34:f5:6d:c6:4c:c6: 70:94:40:a6:9a:8f:45:7e:49:57:ff:b6:0b:7f:47: 06:2b:5b:bd:b5:d4:c0:f1:fa:17:d3:89:1c:74:05: 5a:67:4f:5e:29:5b:e1:e0:df:3d:62:1a:c4:ea:2b: ab:a4:f6:86:5a:ab:18:7e:36:e0:db:7f:bb:0a:26: 8a:e0:a7:c8:e8:10:7e:f4:0e:1e:31:bd:23:2f:b3: 3e:8e:05:ab:55:d5:52:25:46:79:2f:f1:d8:35:8c: ad:77:ce:58:5b:4a:11:6f:c3:35:b0:69:5e:64:3f: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:17:83:C6:CB:E4:38:25:82:58:24:A2:4B:5F:DE:2D:6C:C5:EB X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4msXg8bL5Dglglgkoktf3i1sxes.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.102.132.0/23 Signature Algorithm: sha256WithRSAEncryption 35:e9:3f:32:10:0f:e4:df:19:40:c9:32:2b:4d:fb:5a:99:03: 98:45:3f:77:ef:39:b9:9f:d1:85:4e:9c:da:0f:41:99:cb:7b: 07:f6:d2:2b:a7:50:fc:20:bc:32:63:82:e4:c1:db:ad:9c:f5: 6b:bb:de:b6:20:8c:8d:a5:10:cb:85:94:ad:5a:10:b2:35:4d: b6:45:cc:9f:4e:06:ec:a4:f7:38:16:3e:eb:6b:d6:ce:8f:bd: 33:c7:35:0c:57:23:4a:80:88:f2:d4:48:23:af:3c:55:7e:f5: 7f:15:f6:80:4d:f4:3e:ce:04:d1:6b:2c:ae:f2:d7:c6:46:0b: c2:30:a1:46:9b:c9:5c:c9:26:f2:c3:80:4f:f5:e5:ee:08:92: 71:47:f3:2c:14:0b:c5:f4:7f:1c:c0:c0:d2:eb:cd:55:a8:94: 75:7e:5b:ea:1f:30:7f:70:aa:4f:97:e4:6b:6a:16:d2:c2:2d: a5:7a:17:d4:9b:a9:a7:2f:e0:01:a8:44:86:c3:b6:eb:83:bc: 7a:73:8d:1a:86:24:ce:69:60:36:2c:af:b1:28:ad:67:07:8e: b4:56:dd:3c:61:a5:00:a8:77:45:2e:01:95:5d:c5:55:0e:cb: 53:36:bc:2f:46:55:fe:0b:2b:e2:6d:52:59:0f:a0:04:d3:c8: bd:a1:ea:26 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExMjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUyNkIxNzgzQzZDQkU0 MzgyNTgyNTgyNEEyNEI1RkRFMkQ2Q0M1RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0GMZpndllwDUkkjNn8oxdNJh08G5gmRwNJvCi7yqGZOJveZFL eR8hI4mkXQXbg27f8M9dBzM/S6TwdoFGb++GQ5mK4I9mEMAyLmShhadMvppjTq6+ ydosMxfr0PdUS31aDf1q8XMnTNc4MOP/f6mdYL5+aRCUHbXpJ0wonY2dsUqdoW/Q Lz3uIIECmAwOOjT1bcZMxnCUQKaaj0V+SVf/tgt/RwYrW7211MDx+hfTiRx0BVpn T14pW+Hg3z1iGsTqK6uk9oZaqxh+NuDbf7sKJorgp8joEH70Dh4xvSMvsz6OBatV 1VIlRnkv8dg1jK13zlhbShFvwzWwaV5kP/YHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4msXg8bL5Dglglgkoktf3i1sxeswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRtc1hnOGJMNURnbGdsZ2tva3RmM2kxc3hlcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExZoQwDQYJKoZIhvcNAQELBQADggEBADXpPzIQD+TfGUDJMitN+1qZA5hF P3fvObmf0YVOnNoPQZnLewf20iunUPwgvDJjguTB262c9Wu73rYgjI2lEMuFlK1a ELI1TbZFzJ9OBuyk9zgWPutr1s6PvTPHNQxXI0qAiPLUSCOvPFV+9X8V9oBN9D7O BNFrLK7y18ZGC8IwoUabyVzJJvLDgE/15e4IknFH8ywUC8X0fxzAwNLrzVWolHV+ W+ofMH9wqk+X5GtqFtLCLaV6F9Sbqacv4AGoRIbDtuuDvHpzjRqGJM5pYDYsr7Eo rWcHjrRW3TxhpQCod0UuAZVdxVUOy1M2vC9GVf4LK+JtUlkPoATTyL2h6iY= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:39 2025 by rpki-client on console.sobornost.net