$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EhdHshXdliiVg15_MmnRBIbH8XU.roa File: EhdHshXdliiVg15_MmnRBIbH8XU.roa (raw, json) Hash identifier: fE/IC3G7e8l93Jcj1woi3hEdaAGnhCs67Z+KDHk0Pk4= Subject key identifier: 12:17:47:B2:15:DD:96:28:95:83:5E:7F:32:69:D1:04:86:C7:F1:75 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DF0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EhdHshXdliiVg15_MmnRBIbH8XU.roa Signing time: Tue 01 Apr 2025 02:29:05 +0000 ROA not before: Tue 01 Apr 2025 02:29:05 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:05 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=121747B215DD962895835E7F3269D10486C7F175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:20:22:1e:aa:49:d4:43:3f:e7:2b:26:8e: c7:e9:4a:68:b7:fb:45:53:7c:dd:04:14:9c:3c:31: 15:78:30:e5:db:f3:8a:83:ac:14:7e:72:7c:ec:ca: d9:34:92:c6:f7:1e:05:63:fa:30:c1:7b:47:93:a4: 11:5d:f3:bd:0e:77:d0:c3:f3:a1:45:bc:da:61:2f: b4:c0:97:ef:d4:90:42:86:87:a0:5e:15:7b:8c:c1: 40:4e:78:e3:82:29:18:49:84:5d:19:5e:fc:42:ff: 6f:0d:d7:b0:e3:bb:eb:12:1e:39:a0:60:d1:fb:46: 1d:df:6c:ff:6f:1a:96:0f:9f:93:ed:2c:df:8c:1f: 7c:11:dd:66:76:f2:9e:31:3f:3c:66:98:04:57:c8: 2d:0b:f7:75:22:0e:3a:01:57:55:11:fb:80:4e:ae: 0e:32:3d:c5:7d:56:08:3d:f3:00:b3:d1:76:4a:fd: b1:89:4c:aa:18:90:22:2b:05:13:7e:e1:a2:aa:a1: 8f:c5:f1:03:db:22:63:07:9d:0d:1f:06:48:27:07: da:27:0c:47:22:c3:de:a5:f8:bb:21:79:8b:0a:d4: 98:bf:d8:0e:73:44:1c:ae:c3:a0:1b:46:85:74:45: 63:cb:c2:11:cd:ea:43:c3:b1:f4:03:e4:f1:45:24: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:17:47:B2:15:DD:96:28:95:83:5E:7F:32:69:D1:04:86:C7:F1:75 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EhdHshXdliiVg15_MmnRBIbH8XU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.84.0/23 Signature Algorithm: sha256WithRSAEncryption ce:11:f8:ca:df:0f:0e:4b:ae:a2:20:81:ef:df:34:c0:f4:28: 73:2f:b8:64:1c:d1:f0:ff:a8:8e:40:2c:df:99:a9:41:42:03: fd:8d:7f:88:dd:b9:c3:c7:0c:72:7d:b4:6d:28:bf:cc:19:54: 46:02:71:57:f4:1a:57:07:a6:02:12:69:27:72:8d:e5:90:a9: 98:6b:74:9e:ea:5e:d9:53:33:77:de:58:75:05:41:03:f3:b2: b9:79:35:54:11:84:31:bb:80:ad:47:c2:2c:f9:dd:8d:f8:38: 28:55:6e:98:87:55:d4:4f:fd:89:8b:65:ee:39:5e:97:e9:8c: f5:e0:74:e6:cd:83:4a:62:14:19:e5:be:00:ae:47:f4:f4:8d: 46:61:88:05:5f:29:dd:38:72:44:56:b4:e4:80:04:04:04:d0: 0e:a0:a9:08:51:c3:e2:a2:5d:b5:d9:f5:51:ab:2f:0f:49:ce: 01:2c:94:59:cc:58:dd:8f:02:b7:c0:7a:2c:51:45:86:a6:3e: 78:62:0e:01:3c:2e:a4:f9:9b:71:e1:2d:f2:48:53:c0:fa:d0: 86:ff:00:ee:c7:c4:62:74:a3:e9:52:df:71:ba:9d:bc:16:a8: f4:a3:de:ef:02:4e:49:85:60:38:16:c0:f5:17:df:df:11:48: 3e:a0:3d:b5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MDVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEyMTc0N0IyMTVERDk2 Mjg5NTgzNUU3RjMyNjlEMTA0ODZDN0YxNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7ZSAiHqpJ1EM/5ysmjsfpSmi3+0VTfN0EFJw8MRV4MOXb84qD rBR+cnzsytk0ksb3HgVj+jDBe0eTpBFd870Od9DD86FFvNphL7TAl+/UkEKGh6Be FXuMwUBOeOOCKRhJhF0ZXvxC/28N17Dju+sSHjmgYNH7Rh3fbP9vGpYPn5PtLN+M H3wR3WZ28p4xPzxmmARXyC0L93UiDjoBV1UR+4BOrg4yPcV9Vgg98wCz0XZK/bGJ TKoYkCIrBRN+4aKqoY/F8QPbImMHnQ0fBkgnB9onDEciw96l+LsheYsK1Ji/2A5z RByuw6AbRoV0RWPLwhHN6kPDsfQD5PFFJN5fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEhdHshXdliiVg15/MmnRBIbH8XUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VoZEhzaFhkbGlpVmcxNV9NbW5SQkliSDhYVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaVQwDQYJKoZIhvcNAQELBQADggEBAM4R+MrfDw5LrqIgge/fNMD0KHMv uGQc0fD/qI5ALN+ZqUFCA/2Nf4jducPHDHJ9tG0ov8wZVEYCcVf0GlcHpgISaSdy jeWQqZhrdJ7qXtlTM3feWHUFQQPzsrl5NVQRhDG7gK1Hwiz53Y34OChVbpiHVdRP /YmLZe45XpfpjPXgdObNg0piFBnlvgCuR/T0jUZhiAVfKd04ckRWtOSABAQE0A6g qQhRw+KiXbXZ9VGrLw9JzgEslFnMWN2PArfAeixRRYamPnhiDgE8LqT5m3HhLfJI U8D60Ib/AO7HxGJ0o+lS33G6nbwWqPSj3u8CTkmFYDgWwPUX398RSD6gPbU= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:44 2025 by rpki-client on console.sobornost.net