$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/BPSElcwh9wllDRqk29qafs1N_Ek.roa File: BPSElcwh9wllDRqk29qafs1N_Ek.roa (raw, json) Hash identifier: NWDpfv2HG0w2n54sVAM+pALLQrma3NdwBhZupQw+ZqA= Subject key identifier: 04:F4:84:95:CC:21:F7:09:65:0D:1A:A4:DB:DA:9A:7E:CD:4D:FC:49 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DA3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BPSElcwh9wllDRqk29qafs1N_Ek.roa Signing time: Tue 01 Apr 2025 02:24:37 +0000 ROA not before: Tue 01 Apr 2025 02:24:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3491 (0xda3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=04F48495CC21F709650D1AA4DBDA9A7ECD4DFC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:a0:a0:bd:6f:a3:10:aa:14:e1:8f:e1:c2: 98:94:3f:17:95:be:5e:f4:46:90:94:64:c4:61:c6: e4:24:47:a8:21:b8:1e:dc:4f:a2:a4:55:ec:ab:6f: 4d:1f:83:bd:3c:82:2a:6f:bb:b3:58:8b:6a:f3:c9: c2:01:be:c5:53:e9:c5:72:34:23:87:e5:ff:35:b5: 85:26:c0:50:c1:cb:46:18:fc:27:11:41:c6:6c:66: f7:a0:6a:c1:c9:ef:cf:8a:16:45:29:4c:bf:f9:66: dd:61:9a:bd:49:90:b2:5d:32:e2:24:cf:cb:99:1a: 90:a6:bf:db:35:4d:0d:1a:2c:95:76:6c:00:12:a6: c8:27:85:22:82:8c:0f:d3:68:b4:2b:98:a1:98:87: 2e:47:af:3c:54:06:a0:d3:f5:3e:21:2c:19:35:9f: 13:54:8a:6a:6c:52:33:e9:5c:25:81:6c:1e:40:13: 83:19:07:10:3c:ed:59:f5:da:d8:f9:00:ce:a3:60: ce:53:b1:f6:a5:c8:3c:0f:19:20:48:97:13:07:19: 25:f0:aa:c0:2c:a7:7d:cf:0a:f5:e2:6d:d4:96:10: 9b:b5:69:95:4d:5e:89:99:4d:2d:d4:b7:b0:8a:ea: 9f:8a:d3:06:02:7c:7b:41:69:73:ca:f4:3a:94:bb: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:84:95:CC:21:F7:09:65:0D:1A:A4:DB:DA:9A:7E:CD:4D:FC:49 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/BPSElcwh9wllDRqk29qafs1N_Ek.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.88.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:6f:97:6a:69:07:05:99:13:57:5c:cb:c7:a9:e5:26:26:40: 4e:8c:4b:be:d5:5f:b2:16:3b:de:d1:8a:5c:e6:4f:0c:1e:0d: e3:3b:04:0b:bb:82:c3:52:6e:47:f6:1e:44:67:be:99:7e:3d: d0:d0:ea:e6:72:e5:b5:24:17:ca:c5:5d:cc:87:52:e9:41:7f: 91:ae:e3:82:9b:a0:6b:31:42:e4:ff:3f:9c:72:e5:66:71:17: a3:ed:43:c1:fe:bf:ee:e9:80:1a:63:a6:4a:66:c8:36:5f:5d: df:e9:94:53:79:92:d5:52:a9:a0:01:5e:f4:2b:95:98:b0:60: 17:eb:a0:ab:7e:de:5e:b6:b2:39:02:44:a1:b1:8a:59:29:82: e9:5b:e1:bf:e5:d5:f2:84:a2:72:4e:ce:cd:55:b8:78:05:bc: 83:fe:29:d0:67:d4:a2:5f:e7:e3:8b:64:24:ff:cb:1e:c2:17: a0:0b:e9:69:0c:4e:3c:a0:6c:b9:cd:e9:0d:a3:2b:6d:c9:a8: 9d:c0:5d:63:c9:61:1d:c1:05:48:88:f6:fb:a5:72:57:31:36: 2b:db:df:b7:36:7b:2a:6b:50:91:ab:51:52:39:71:3e:6d:8f: 3e:b4:13:b4:88:86:1e:e3:93:83:c4:48:52:5d:d8:25:d6:3c: dc:d4:e9:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA0RjQ4NDk1Q0MyMUY3 MDk2NTBEMUFBNERCREE5QTdFQ0Q0REZDNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGkqCgvW+jEKoU4Y/hwpiUPxeVvl70RpCUZMRhxuQkR6ghuB7c T6KkVeyrb00fg708gipvu7NYi2rzycIBvsVT6cVyNCOH5f81tYUmwFDBy0YY/CcR QcZsZvegasHJ78+KFkUpTL/5Zt1hmr1JkLJdMuIkz8uZGpCmv9s1TQ0aLJV2bAAS psgnhSKCjA/TaLQrmKGYhy5HrzxUBqDT9T4hLBk1nxNUimpsUjPpXCWBbB5AE4MZ BxA87Vn12tj5AM6jYM5TsfalyDwPGSBIlxMHGSXwqsAsp33PCvXibdSWEJu1aZVN XomZTS3Ut7CK6p+K0wYCfHtBaXPK9DqUu2OZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBPSElcwh9wllDRqk29qafs1N/EkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0JQU0VsY3doOXdsbERScWsyOXFhZnMxTl9Fay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaVgwDQYJKoZIhvcNAQELBQADggEBAA5vl2ppBwWZE1dcy8ep5SYmQE6M S77VX7IWO97RilzmTwweDeM7BAu7gsNSbkf2HkRnvpl+PdDQ6uZy5bUkF8rFXcyH UulBf5Gu44KboGsxQuT/P5xy5WZxF6PtQ8H+v+7pgBpjpkpmyDZfXd/plFN5ktVS qaABXvQrlZiwYBfroKt+3l62sjkCRKGxilkpgulb4b/l1fKEonJOzs1VuHgFvIP+ KdBn1KJf5+OLZCT/yx7CF6AL6WkMTjygbLnN6Q2jK23JqJ3AXWPJYR3BBUiI9vul clcxNivb37c2eyprUJGrUVI5cT5tjz60E7SIhh7jk4PESFJd2CXWPNzU6aA= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:42 2025 by rpki-client on console.sobornost.net