$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SKldx1KP4AB-NG8keGR9GGYEe8.roa File: 5SKldx1KP4AB-NG8keGR9GGYEe8.roa (raw, json) Hash identifier: VHa/yWgo51g8dYsagsUzw+9ZsUjkDpULvEjlrWQPFug= Subject key identifier: E5:22:A5:77:1D:4A:3F:80:01:F8:D1:BC:91:E1:91:F4:61:98:11:EF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CAD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SKldx1KP4AB-NG8keGR9GGYEe8.roa Signing time: Tue 01 Apr 2025 02:05:40 +0000 ROA not before: Tue 01 Apr 2025 02:05:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3245 (0xcad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:05:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E522A5771D4A3F8001F8D1BC91E191F4619811EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:f3:ad:9e:3a:4a:c1:8d:e6:0b:1b:e6:c0: 27:42:54:e8:07:2b:b0:04:2a:b9:68:85:fd:12:e8: 2a:bb:fe:e9:da:91:96:6e:2f:55:5b:70:91:1d:0c: 2d:e5:e8:a1:31:5d:6e:13:b3:45:f1:a3:86:23:36: 4e:1b:1f:95:7f:fd:29:3e:78:40:d9:40:c8:7a:58: ee:c0:5a:b3:98:d0:87:3b:56:49:96:b8:b2:ad:6a: 7f:4e:85:16:36:0d:40:51:2e:e4:6c:ec:5e:f6:33: 47:c3:6f:ac:c2:65:81:57:43:4b:23:e0:be:3e:d7: 7c:c3:a9:ff:56:2a:69:82:f3:39:5c:1e:cd:06:bc: 26:3d:f0:c7:14:a3:a3:73:56:ce:99:69:5c:5c:6e: 9e:42:16:27:5c:b6:b5:f2:1f:52:7e:5e:82:1e:26: 3a:33:44:53:27:de:52:b1:fa:88:06:12:36:72:53: 89:69:b4:25:49:30:a1:02:90:79:c6:a5:65:6a:5c: c1:9b:76:54:d9:cb:21:e3:cc:dd:30:ab:0e:d2:bf: ff:59:cd:06:a9:e1:cb:dd:20:16:ce:ac:aa:90:fe: 44:8f:27:45:1b:2b:36:16:c4:d3:7c:eb:61:4f:a6: c9:26:d1:18:c9:c9:a6:49:2b:7e:89:7e:ef:fb:44: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:22:A5:77:1D:4A:3F:80:01:F8:D1:BC:91:E1:91:F4:61:98:11:EF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5SKldx1KP4AB-NG8keGR9GGYEe8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.82.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:70:ea:1e:af:cb:30:76:29:58:3f:34:51:13:e2:6a:1a:e2: e8:e5:ea:4a:ca:af:83:3b:15:ed:12:06:15:af:d0:4a:2e:fa: b5:d5:e9:b0:95:6b:e4:0d:89:37:e4:5f:98:0c:1f:3c:d3:6e: 49:8f:97:ee:46:00:d5:e0:90:17:28:75:e5:21:4b:87:d1:71: 11:ef:07:91:a9:07:83:9b:15:1d:d1:96:b8:62:94:f9:7e:dc: 1f:71:1b:27:a4:0a:b1:27:6f:ed:04:f2:04:ca:3f:03:52:83: b1:bb:4f:a1:84:14:43:42:58:ac:bc:59:00:16:1d:72:61:8f: 5e:36:9f:18:6c:a5:d2:7d:5b:b1:dc:1d:10:d3:c2:4e:ef:d5: de:80:d0:8a:11:09:d7:64:29:7d:0f:0f:ab:89:85:33:2f:b3: c5:00:06:10:32:ce:a1:0b:29:a3:98:44:72:8b:f1:e8:fe:e7: 31:ec:87:04:32:01:5c:66:da:22:83:27:6a:2e:17:3a:74:cf: 53:c3:67:cf:6b:17:11:87:8e:06:63:30:7b:50:08:15:aa:8b: fc:db:e8:81:02:33:bb:a6:32:c0:f7:e4:96:36:92:e2:3e:f9: aa:73:e5:a4:54:28:b5:50:c3:a9:56:52:d0:c4:18:cf:e6:5e: 87:4d:ed:be -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA1NDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1MjJBNTc3MUQ0QTNG ODAwMUY4RDFCQzkxRTE5MUY0NjE5ODExRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6BPOtnjpKwY3mCxvmwCdCVOgHK7AEKrlohf0S6Cq7/unakZZu L1VbcJEdDC3l6KExXW4Ts0Xxo4YjNk4bH5V//Sk+eEDZQMh6WO7AWrOY0Ic7VkmW uLKtan9OhRY2DUBRLuRs7F72M0fDb6zCZYFXQ0sj4L4+13zDqf9WKmmC8zlcHs0G vCY98McUo6NzVs6ZaVxcbp5CFidctrXyH1J+XoIeJjozRFMn3lKx+ogGEjZyU4lp tCVJMKECkHnGpWVqXMGbdlTZyyHjzN0wqw7Sv/9ZzQap4cvdIBbOrKqQ/kSPJ0Ub KzYWxNN862FPpskm0RjJyaZJK36Jfu/7RL2DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5SKldx1KP4AB+NG8keGR9GGYEe8wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVTS2xkeDFLUDRBQi1ORzhrZUdSOUdHWUVlOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaVIwDQYJKoZIhvcNAQELBQADggEBAB1w6h6vyzB2KVg/NFET4moa4ujl 6krKr4M7Fe0SBhWv0Eou+rXV6bCVa+QNiTfkX5gMHzzTbkmPl+5GANXgkBcodeUh S4fRcRHvB5GpB4ObFR3RlrhilPl+3B9xGyekCrEnb+0E8gTKPwNSg7G7T6GEFENC WKy8WQAWHXJhj142nxhspdJ9W7HcHRDTwk7v1d6A0IoRCddkKX0PD6uJhTMvs8UA BhAyzqELKaOYRHKL8ej+5zHshwQyAVxm2iKDJ2ouFzp0z1PDZ89rFxGHjgZjMHtQ CBWqi/zb6IECM7umMsD35JY2kuI++apz5aRUKLVQw6lWUtDEGM/mXodN7b4= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:40 2025 by rpki-client on console.sobornost.net