$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/5v9aJ-QfTE31-sm-E56QCI1YIsc.roa File: 5v9aJ-QfTE31-sm-E56QCI1YIsc.roa (raw, json) Hash identifier: DzC0kX8GK+UqmI8FSTNsytWnc0n9HvfbFAekYn3aqDI= Subject key identifier: E6:FF:5A:27:E4:1F:4C:4D:F5:FA:C9:BE:13:9E:90:08:8D:58:22:C7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A34 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5v9aJ-QfTE31-sm-E56QCI1YIsc.roa Signing time: Sun 30 Jun 2024 01:46:34 +0000 ROA not before: Sun 30 Jun 2024 01:46:34 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.72.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:34 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=E6FF5A27E41F4C4DF5FAC9BE139E90088D5822C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:66:de:0e:9c:1b:cc:40:4d:d5:e3:89:44: 56:86:87:b9:16:a5:63:79:c1:89:17:29:70:ae:1b: 2e:ae:b5:92:f2:3c:c9:2f:1b:1f:ce:fe:7f:d2:cb: 67:53:d6:43:8d:ea:2b:0b:d4:88:d9:40:30:f7:b6: 00:f7:2a:f3:af:a2:db:d8:6f:40:12:df:b5:9f:b2: 55:67:31:b9:98:36:a0:ed:66:26:4e:9f:46:ba:0c: 12:7d:1e:6c:df:d6:73:33:a1:f8:48:a3:6a:a9:28: 39:73:e9:71:53:0d:32:12:06:66:60:c0:94:ae:77: aa:97:80:16:8e:3c:03:e4:a3:ee:05:dc:1a:ff:b5: f9:36:1f:e0:53:17:19:14:e8:5b:53:dc:2e:e6:2c: 12:8f:c7:66:e1:66:91:b0:5a:84:9d:11:e9:7b:b7: 31:d1:13:62:15:d1:ac:61:ef:7d:9a:60:11:9c:33: 72:c9:68:f7:36:2c:02:06:9b:ea:ed:c4:15:ed:c7: 2a:c5:b7:20:8c:07:1c:f5:75:57:13:04:08:8d:8d: 2a:d8:3c:92:b4:81:56:a1:73:8b:8a:12:0e:89:ca: 4d:25:e7:92:55:45:9b:3b:e2:45:4b:9b:aa:b1:a2: 14:97:0d:24:bd:71:ed:a7:c5:30:51:eb:1c:2e:7e: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:5A:27:E4:1F:4C:4D:F5:FA:C9:BE:13:9E:90:08:8D:58:22:C7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/5v9aJ-QfTE31-sm-E56QCI1YIsc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.24.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:a3:d0:55:dd:9c:08:6c:72:4e:45:0f:f1:e7:a5:d6:0d:73: 5f:af:f4:18:01:46:e0:c6:da:07:ec:87:dc:3f:59:cb:58:e7: c3:68:b4:5f:cd:2a:7c:0a:a5:af:95:20:8c:e8:79:54:71:8f: f1:9f:8c:12:35:0e:b9:26:ee:63:08:0f:ec:e2:a4:e6:35:d1: 56:00:b4:df:f8:cc:a5:55:69:e8:a9:73:cd:2e:e0:e4:bc:ef: a2:ba:5f:ac:71:71:89:b6:0f:af:8f:76:b0:15:50:47:83:dd: 5e:5c:8f:6b:bf:19:5a:d3:87:d9:3f:c2:37:d1:bb:53:bf:a8: a5:75:6d:85:8e:93:1b:5f:08:a6:d5:71:49:51:f4:9e:bc:a5: e2:18:44:5c:f9:e0:7b:55:b3:07:4b:a8:c5:a9:6c:82:c2:13: e2:c5:e9:3a:2a:7e:fc:f1:ca:0e:09:50:ff:e4:97:18:4a:42: 97:3f:55:35:46:9f:48:0e:43:77:3e:0a:82:9e:47:5f:a7:4b: 55:31:c5:81:d6:79:b3:c2:b7:c0:2b:b4:bf:51:82:5a:39:0e: e3:56:d3:81:d9:fe:8e:88:63:bb:5b:92:90:8b:d6:9c:98:a0: 39:80:43:73:b1:b5:0c:f4:42:1b:fc:0a:a2:87:fc:0f:06:07: c2:b5:75:e7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEU2RkY1QTI3RTQxRjRD NERGNUZBQzlCRTEzOUU5MDA4OEQ1ODIyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjVmbeDpwbzEBN1eOJRFaGh7kWpWN5wYkXKXCuGy6utZLyPMkv Gx/O/n/Sy2dT1kON6isL1IjZQDD3tgD3KvOvotvYb0AS37WfslVnMbmYNqDtZiZO n0a6DBJ9Hmzf1nMzofhIo2qpKDlz6XFTDTISBmZgwJSud6qXgBaOPAPko+4F3Br/ tfk2H+BTFxkU6FtT3C7mLBKPx2bhZpGwWoSdEel7tzHRE2IV0axh732aYBGcM3LJ aPc2LAIGm+rtxBXtxyrFtyCMBxz1dVcTBAiNjSrYPJK0gVahc4uKEg6Jyk0l55JV RZs74kVLm6qxohSXDSS9ce2nxTBR6xwufm3DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU5v9aJ+QfTE31+sm+E56QCI1YIscwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzV2OWFKLVFmVEUzMS1zbS1FNTZRQ0kxWUlzYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSBgwDQYJKoZIhvcNAQELBQADggEBAJ2j0FXdnAhsck5FD/HnpdYNc1+v 9BgBRuDG2gfsh9w/WctY58NotF/NKnwKpa+VIIzoeVRxj/GfjBI1Drkm7mMID+zi pOY10VYAtN/4zKVVaeipc80u4OS876K6X6xxcYm2D6+PdrAVUEeD3V5cj2u/GVrT h9k/wjfRu1O/qKV1bYWOkxtfCKbVcUlR9J68peIYRFz54HtVswdLqMWpbILCE+LF 6Toqfvzxyg4JUP/klxhKQpc/VTVGn0gOQ3c+CoKeR1+nS1UxxYHWebPCt8ArtL9R glo5DuNW04HZ/o6IY7tbkpCL1pyYoDmAQ3OxtQz0Qhv8CqKH/A8GB8K1dec= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:40 2025 by rpki-client on console.sobornost.net