$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/73BnTvNfdmvjgBbtFj7I_e2ZYfw.roa File: 73BnTvNfdmvjgBbtFj7I_e2ZYfw.roa (raw, json) Hash identifier: okY8miV6+MMuAYa7a/1h9tNM+1GMWjgoN49qWP43M0c= Subject key identifier: EF:70:67:4E:F3:5F:76:6B:E3:80:16:ED:16:3E:C8:FD:ED:99:61:FC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CD2 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/73BnTvNfdmvjgBbtFj7I_e2ZYfw.roa Signing time: Tue 01 Apr 2025 02:09:14 +0000 ROA not before: Tue 01 Apr 2025 02:09:14 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.108.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:14 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=EF70674EF35F766BE38016ED163EC8FDED9961FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:ba:a9:dd:1e:ac:f4:c6:ef:12:c0:69:45: 5d:7b:81:5f:8c:e7:45:c5:67:e6:97:41:25:9d:a9: 19:78:a2:34:8e:04:8d:c9:7f:f4:5d:fe:74:8e:1f: 9d:fa:32:98:a7:3f:f0:f7:0a:58:9d:ad:3c:69:41: bb:73:73:16:a5:bc:0e:a0:d8:35:55:98:e7:40:d1: b7:cc:e5:cf:5b:88:60:af:52:e1:71:f5:42:b3:cd: 50:63:84:fe:77:59:4d:d4:24:69:74:98:04:aa:fc: 1d:a4:6d:3f:ea:9c:b5:8a:91:7a:6b:8c:c0:b0:0f: aa:9f:13:a6:a0:84:46:e2:ba:46:74:5e:b5:07:9f: a1:65:62:99:d2:5f:1c:57:a2:9a:3c:8f:36:66:03: 82:e9:fc:42:d6:1f:e1:3f:03:b4:b3:44:d9:03:02: de:f5:25:a3:8e:d3:32:d1:2f:6d:5b:18:d6:57:a5: 34:3c:f5:bf:84:94:7b:a5:5f:34:09:d5:ba:e8:71: 5c:dd:33:2f:43:72:67:24:6a:3a:c7:a1:c1:da:eb: 75:dc:3d:e6:47:3b:40:87:4f:b4:ad:76:9d:a9:2a: 5e:c5:3d:4d:df:c0:3b:3a:dd:db:07:26:46:c5:8e: 9f:5d:09:de:68:ea:cb:a7:9b:89:eb:17:a4:8c:4c: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:70:67:4E:F3:5F:76:6B:E3:80:16:ED:16:3E:C8:FD:ED:99:61:FC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/73BnTvNfdmvjgBbtFj7I_e2ZYfw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.192.0/19 Signature Algorithm: sha256WithRSAEncryption c6:e0:4a:e3:de:3c:2f:31:7c:6a:73:f1:16:52:f3:c0:4f:66: 29:80:56:7b:a7:0f:49:af:24:a4:5f:5f:1f:f0:ff:ab:c6:e3: 4e:2b:5d:6a:a9:3e:12:29:79:7a:e1:fe:1d:8e:38:80:63:a1: 4f:78:43:d1:e0:8c:80:03:bf:0f:e8:f7:47:93:2a:3a:dd:9a: f2:e1:d7:ea:58:1a:4d:e5:01:10:d7:c5:1b:eb:b6:9a:a8:64: 5f:8f:9a:b6:ff:97:6d:bd:29:01:0a:81:9c:2f:3c:06:c4:36: ca:36:4b:a8:4a:18:75:a5:b0:ed:2e:21:da:4b:9d:89:23:c5: 5c:49:c4:6f:d0:9c:e5:a4:01:35:96:b9:51:08:59:c2:fe:47: 5e:68:d3:b4:22:57:8b:cf:ed:c6:54:e5:bb:2f:a5:3e:5c:f4: ba:4d:a2:be:6a:05:c5:7b:ec:3c:66:80:2b:f0:28:e9:df:39: 6f:1c:83:bb:ff:38:14:11:79:85:ab:26:1a:99:99:00:7e:2b: 04:87:fc:74:8c:69:bf:04:93:67:06:b3:a6:43:68:37:72:6f: 47:d5:49:df:37:f1:6e:c2:75:d2:9f:15:83:84:71:ea:d0:d2: 83:46:b2:39:bb:ba:d0:8c:b9:55:81:ec:0f:31:91:4a:d9:3d: 34:e5:bc:55 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVGNzA2NzRFRjM1Rjc2 NkJFMzgwMTZFRDE2M0VDOEZERUQ5OTYxRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvSbqp3R6s9MbvEsBpRV17gV+M50XFZ+aXQSWdqRl4ojSOBI3J f/Rd/nSOH536MpinP/D3ClidrTxpQbtzcxalvA6g2DVVmOdA0bfM5c9biGCvUuFx 9UKzzVBjhP53WU3UJGl0mASq/B2kbT/qnLWKkXprjMCwD6qfE6aghEbiukZ0XrUH n6FlYpnSXxxXopo8jzZmA4Lp/ELWH+E/A7SzRNkDAt71JaOO0zLRL21bGNZXpTQ8 9b+ElHulXzQJ1brocVzdMy9DcmckajrHocHa63XcPeZHO0CHT7Stdp2pKl7FPU3f wDs63dsHJkbFjp9dCd5o6sunm4nrF6SMTPwvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU73BnTvNfdmvjgBbtFj7I/e2ZYfwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzczQm5Udk5mZG12amdCYnRGajdJX2UyWllmdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUxbMAwDQYJKoZIhvcNAQELBQADggEBAMbgSuPePC8xfGpz8RZS88BPZimA VnunD0mvJKRfXx/w/6vG404rXWqpPhIpeXrh/h2OOIBjoU94Q9HgjIADvw/o90eT KjrdmvLh1+pYGk3lARDXxRvrtpqoZF+Pmrb/l229KQEKgZwvPAbENso2S6hKGHWl sO0uIdpLnYkjxVxJxG/QnOWkATWWuVEIWcL+R15o07QiV4vP7cZU5bsvpT5c9LpN or5qBcV77DxmgCvwKOnfOW8cg7v/OBQReYWrJhqZmQB+KwSH/HSMab8Ek2cGs6ZD aDdyb0fVSd838W7CddKfFYOEcerQ0oNGsjm7utCMuVWB7A8xkUrZPTTlvFU= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:40 2025 by rpki-client on console.sobornost.net