$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HM5-2mNjIdsEr0Gsh57i779LDps.roa File: HM5-2mNjIdsEr0Gsh57i779LDps.roa (raw, json) Hash identifier: B7tYtHFyTsu8RclpkRXIDpBzYgk+m4gAUKHgepYYeRQ= Subject key identifier: 1C:CE:7E:DA:63:63:21:DB:04:AF:41:AC:87:9E:E2:EF:BF:4B:0E:9B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DD3 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HM5-2mNjIdsEr0Gsh57i779LDps.roa Signing time: Tue 01 Apr 2025 02:27:22 +0000 ROA not before: Tue 01 Apr 2025 02:27:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3539 (0xdd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1CCE7EDA636321DB04AF41AC879EE2EFBF4B0E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:84:fa:17:b3:d7:f3:7e:a9:0b:8d:dc:ad: 9f:e9:97:ea:f8:50:63:dd:79:94:5a:b0:3a:c7:f4: 23:bb:5d:31:8e:59:0c:b0:7a:c6:b1:ee:a2:bd:7d: d8:c3:a9:a0:75:5c:61:6d:bc:a6:48:af:13:1e:cf: 36:ca:c4:f1:21:5b:1b:cf:f8:bd:34:6c:3c:26:ab: ce:53:a8:a3:36:80:57:98:59:af:3d:4b:53:21:37: 8d:33:32:b0:0c:5c:c0:3b:a6:ae:17:3b:a5:2a:50: ff:2f:9c:9a:25:d4:6a:ea:ba:9a:ff:b8:86:fa:95: 8c:a7:15:cd:81:e0:c3:a0:25:32:a4:de:87:71:4d: 67:80:aa:4a:8c:fa:e7:58:b5:e0:9e:73:bc:c6:6c: a6:43:14:2d:c2:51:a6:10:6a:40:a6:e0:15:ed:03: 29:48:36:2b:35:2d:ad:d8:b3:d1:a4:b4:c9:f5:2f: 55:57:63:76:17:4f:80:68:c6:73:7b:5e:d3:2c:41: 1c:94:e8:6f:15:c3:2a:d6:3a:9c:9a:08:e5:69:4b: 9e:55:b2:c1:05:49:33:3f:4b:28:d1:28:02:1d:ff: b0:2c:f7:ce:da:04:ec:70:c7:a2:48:12:e1:56:08: 2e:9a:2a:90:41:7f:51:3b:d9:bb:87:6e:4b:36:26: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CE:7E:DA:63:63:21:DB:04:AF:41:AC:87:9E:E2:EF:BF:4B:0E:9B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HM5-2mNjIdsEr0Gsh57i779LDps.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.41.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:e5:bb:9c:46:68:c9:74:0c:a0:a4:9e:6e:f7:03:cd:1c:c3: 5a:47:db:66:a2:aa:bd:05:9c:3f:0e:0c:3b:2b:0f:90:88:3c: c4:4b:1e:28:73:1a:74:fd:3c:f8:85:f5:7b:67:52:bb:d4:c5: 14:ad:e0:e4:59:a0:e4:43:0f:5d:16:39:ea:28:f3:60:da:b0: 7f:b1:8f:8b:fe:e6:df:97:1a:fb:01:64:b2:36:41:08:a9:5c: 8a:69:23:19:d0:a4:d4:8c:0f:da:7f:68:05:8c:8d:ac:7f:3d: f5:de:c1:65:fd:11:ff:5f:a0:38:0f:8f:65:7e:c4:db:f4:05: 77:7e:0f:62:e3:50:03:90:b3:ee:6f:7e:75:3b:98:97:f8:d0: a1:7a:08:1f:f5:76:2c:e0:13:f2:b9:4a:e7:9b:5c:1d:db:a4: a7:56:2c:ee:05:3a:e6:7d:a9:18:48:9e:c5:21:b5:bd:bf:c8: 42:60:09:67:1b:4f:7f:98:54:bb:3f:fa:75:9d:58:8a:bb:1b: 4c:51:ab:34:3f:82:d8:95:2a:46:4b:b7:51:cb:2e:7e:27:8d: 37:8b:b7:b8:81:29:fe:26:6a:4c:1d:e2:0a:98:4c:03:e7:d2: 4a:00:91:e0:e4:d7:4e:30:87:e0:d6:b9:d1:60:b7:13:2f:fe: 33:41:8e:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFDQ0U3RURBNjM2MzIx REIwNEFGNDFBQzg3OUVFMkVGQkY0QjBFOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChy4T6F7PX836pC43crZ/pl+r4UGPdeZRasDrH9CO7XTGOWQyw esax7qK9fdjDqaB1XGFtvKZIrxMezzbKxPEhWxvP+L00bDwmq85TqKM2gFeYWa89 S1MhN40zMrAMXMA7pq4XO6UqUP8vnJol1Grqupr/uIb6lYynFc2B4MOgJTKk3odx TWeAqkqM+udYteCec7zGbKZDFC3CUaYQakCm4BXtAylINis1La3Ys9GktMn1L1VX Y3YXT4BoxnN7XtMsQRyU6G8VwyrWOpyaCOVpS55VssEFSTM/SyjRKAId/7As987a BOxwx6JIEuFWCC6aKpBBf1E72buHbks2Jq87AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHM5+2mNjIdsEr0Gsh57i779LDpswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hNNS0ybU5qSWRzRXIwR3NoNTdpNzc5TERwcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYikwDQYJKoZIhvcNAQELBQADggEBAD/lu5xGaMl0DKCknm73A80cw1pH 22aiqr0FnD8ODDsrD5CIPMRLHihzGnT9PPiF9XtnUrvUxRSt4ORZoORDD10WOeoo 82DasH+xj4v+5t+XGvsBZLI2QQipXIppIxnQpNSMD9p/aAWMjax/PfXewWX9Ef9f oDgPj2V+xNv0BXd+D2LjUAOQs+5vfnU7mJf40KF6CB/1dizgE/K5SuebXB3bpKdW LO4FOuZ9qRhInsUhtb2/yEJgCWcbT3+YVLs/+nWdWIq7G0xRqzQ/gtiVKkZLt1HL Ln4njTeLt7iBKf4makwd4gqYTAPn0koAkeDk104wh+DWudFgtxMv/jNBjl8= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:45 2025 by rpki-client on console.sobornost.net