$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5le3Ng1OjU6vOmejVXVq7nGINzk.roa File: 5le3Ng1OjU6vOmejVXVq7nGINzk.roa (raw, json) Hash identifier: bEtDhu35eGlghv6GNopux0ismq4zFORsUYYRo9/mW5w= Subject key identifier: E6:57:B7:36:0D:4E:8D:4E:AF:3A:67:A3:55:75:6A:EE:71:88:37:39 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 093F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5le3Ng1OjU6vOmejVXVq7nGINzk.roa Signing time: Sun 30 Jun 2024 01:29:28 +0000 ROA not before: Sun 30 Jun 2024 01:29:28 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 211.14.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:28 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=E657B7360D4E8D4EAF3A67A355756AEE71883739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:e6:95:b6:7d:b1:e5:cf:58:6b:e8:33:25: 50:2a:0f:2b:35:91:54:f0:12:88:f6:31:c9:29:14: 61:58:2b:c8:83:19:4f:53:57:7b:9a:a1:ac:54:49: f0:69:58:69:ac:a4:62:ef:97:c8:8e:86:35:47:04: b5:6a:b5:ac:91:56:13:96:1a:26:f5:d1:77:a4:08: 80:d6:72:23:76:a7:7e:7a:7c:af:6e:ca:1e:d4:fd: ec:6f:b5:09:8a:b7:53:9a:76:ba:96:de:14:b9:41: e2:70:0a:28:70:4c:e7:77:e8:4a:2e:ee:24:d0:2a: a1:e5:40:83:15:6c:5d:b8:85:4f:04:b1:a2:af:bc: fd:24:96:d4:1e:a0:fa:eb:56:65:d5:61:b2:67:e3: dc:78:06:ca:84:4f:d3:42:b0:41:bc:c4:fc:12:f6: 96:d6:bb:66:a4:f9:f8:79:56:1c:fc:14:c5:f7:ae: 67:cf:d1:dc:bd:21:0a:4f:86:48:4c:3f:6a:35:0a: 74:af:b8:51:76:c1:2e:5b:8d:d4:b2:c3:fc:a6:f9: 31:3f:de:9b:1f:75:42:e2:f1:de:39:74:bb:f2:64: 8f:62:b3:f6:bd:e7:27:13:0e:e2:01:bc:a6:91:15: fb:cd:e8:da:4d:5f:e2:1b:01:05:90:e6:2f:dd:0d: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:B7:36:0D:4E:8D:4E:AF:3A:67:A3:55:75:6A:EE:71:88:37:39 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5le3Ng1OjU6vOmejVXVq7nGINzk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.14.114.0/23 Signature Algorithm: sha256WithRSAEncryption 90:39:89:1f:d9:10:17:c3:98:41:5b:86:07:82:a1:13:6e:11: d5:42:36:7b:33:72:0d:95:ef:e8:33:78:14:e2:74:1d:c3:a2: 66:db:dc:57:40:43:be:b6:5c:92:17:24:c6:57:92:03:f6:4a: fd:35:f4:b1:f0:f3:6a:a5:8a:99:4f:9e:6d:d8:47:7b:7e:13: 89:a7:ed:2f:fd:1f:31:a8:96:0d:f6:4e:3f:d7:e7:c7:85:57: 9a:cd:65:15:5f:ca:d0:94:d1:4d:1c:ab:c1:72:3d:78:1e:71: f1:f1:59:2c:c4:d3:30:1e:03:5c:eb:e0:b0:9d:1b:d7:3b:c0: dc:57:e0:0c:65:90:c4:e0:c1:d6:03:86:6e:66:53:0d:b1:1f: 77:03:e1:01:f5:8a:db:30:ae:94:35:c6:9d:55:4d:57:91:47: 7d:58:51:2c:de:66:2a:2c:1d:cb:46:34:2a:56:f4:ac:72:4e: c5:84:a3:54:2b:b1:92:8d:1f:e7:28:36:f9:fb:31:cc:e2:dd: a9:45:fe:3d:4c:4a:e7:e9:a7:72:39:29:25:03:b3:f7:58:45: 75:c6:ac:b7:2c:ac:18:6c:25:04:2c:8b:49:02:20:8d:98:0a: 45:2b:4a:b7:c7:c4:6e:1e:b8:64:9e:10:34:0f:21:f6:3e:9f: ad:89:55:0b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MjhaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEU2NTdCNzM2MEQ0RThE NEVBRjNBNjdBMzU1NzU2QUVFNzE4ODM3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeDeaVtn2x5c9Ya+gzJVAqDys1kVTwEoj2MckpFGFYK8iDGU9T V3uaoaxUSfBpWGmspGLvl8iOhjVHBLVqtayRVhOWGib10XekCIDWciN2p356fK9u yh7U/exvtQmKt1OadrqW3hS5QeJwCihwTOd36Eou7iTQKqHlQIMVbF24hU8EsaKv vP0kltQeoPrrVmXVYbJn49x4BsqET9NCsEG8xPwS9pbWu2ak+fh5Vhz8FMX3rmfP 0dy9IQpPhkhMP2o1CnSvuFF2wS5bjdSyw/ym+TE/3psfdULi8d45dLvyZI9is/a9 5ycTDuIBvKaRFfvN6NpNX+IbAQWQ5i/dDT83AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5le3Ng1OjU6vOmejVXVq7nGINzkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzVsZTNOZzFPalU2dk9tZWpWWFZxN25HSU56ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTDnIwDQYJKoZIhvcNAQELBQADggEBAJA5iR/ZEBfDmEFbhgeCoRNuEdVC Nnszcg2V7+gzeBTidB3Dombb3FdAQ762XJIXJMZXkgP2Sv019LHw82qliplPnm3Y R3t+E4mn7S/9HzGolg32Tj/X58eFV5rNZRVfytCU0U0cq8FyPXgecfHxWSzE0zAe A1zr4LCdG9c7wNxX4AxlkMTgwdYDhm5mUw2xH3cD4QH1itswrpQ1xp1VTVeRR31Y USzeZiosHctGNCpW9KxyTsWEo1QrsZKNH+coNvn7Mczi3alF/j1MSufpp3I5KSUD s/dYRXXGrLcsrBhsJQQsi0kCII2YCkUrSrfHxG4euGSeEDQPIfY+n62JVQs= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:40 2025 by rpki-client on console.sobornost.net