$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HskCCe1GEbzi7OWCcVxmJfGgrpo.roa File: HskCCe1GEbzi7OWCcVxmJfGgrpo.roa (raw, json) Hash identifier: xp2iOmcoFwliWeiRwEF6rxcE2afwdr5pd/Um5gQRwLs= Subject key identifier: 1E:C9:02:09:ED:46:11:BC:E2:EC:E5:82:71:5C:66:25:F1:A0:AE:9A Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BD7 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HskCCe1GEbzi7OWCcVxmJfGgrpo.roa Signing time: Tue 01 Apr 2025 01:47:36 +0000 ROA not before: Tue 01 Apr 2025 01:47:36 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:36 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=1EC90209ED4611BCE2ECE582715C6625F1A0AE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:87:a0:68:2a:51:95:c3:40:12:79:d1:60: d1:86:64:e2:aa:76:b5:b5:68:2f:40:90:69:7a:c9: 0c:0b:b9:85:48:ef:59:d1:cf:0b:ff:b7:be:f7:ea: 4c:23:4d:46:66:6f:0f:7d:5d:05:27:b6:ba:70:79: 26:22:e2:0f:b0:a5:7a:24:7e:fe:b3:77:18:a8:62: 5c:8f:f9:01:6f:1c:62:c2:62:49:c5:af:1a:23:19: fd:16:06:83:89:7d:57:d0:4f:e9:68:33:a3:d5:02: d7:e5:1c:11:9e:d4:21:2f:89:f8:19:6b:6e:3e:0b: eb:ee:58:15:6c:28:45:1e:af:a1:b9:9e:6f:bd:19: 56:18:5a:94:a3:e9:68:ad:bb:ef:45:6f:18:b6:4c: 74:4b:38:79:0c:64:c8:2a:ba:8a:96:3e:97:da:d7: 63:b1:00:ea:12:e7:03:f5:1d:2b:51:f9:d4:c4:a4: 8c:cf:27:76:65:36:94:96:28:f1:48:77:49:70:d1: 92:d8:09:10:2a:b3:7a:37:30:86:06:84:4e:d0:5f: 8d:7a:92:a9:a5:a8:c4:6a:08:0a:c5:41:c5:85:b4: 86:b0:92:36:b3:9e:6d:4f:53:f4:8d:10:39:ec:ab: d9:6f:29:fc:d2:8d:ce:58:70:37:78:88:7f:4f:24: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:02:09:ED:46:11:BC:E2:EC:E5:82:71:5C:66:25:F1:A0:AE:9A X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HskCCe1GEbzi7OWCcVxmJfGgrpo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.42.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:71:fe:6d:b6:0a:0f:44:5c:6e:13:53:f5:11:40:6a:ec:c3: 6d:45:57:7e:32:5d:55:1d:5c:ae:53:b3:43:9d:57:f6:b5:9b: 8b:b1:9d:8f:81:f7:96:32:e7:cc:fd:16:e5:f3:0e:15:b6:30: 15:42:9f:59:4e:ad:6f:15:15:d1:4d:a9:1f:09:45:ec:75:40: 4e:a2:14:01:3e:34:81:65:60:43:84:32:4f:21:18:d9:fa:23: ad:19:43:aa:e9:0f:f1:6b:9f:ae:fb:79:09:7e:8e:53:44:ae: ee:eb:25:05:b8:f3:83:d1:5a:11:a5:ee:8e:76:f6:30:94:91: 48:7a:3d:20:64:92:c8:a5:3f:ca:ec:d9:2a:46:4d:93:24:47: 02:75:d8:1a:09:5b:08:1f:e6:dc:5c:50:01:6e:1e:ad:37:f8: 09:20:3f:ee:f2:6d:e5:17:8c:c7:57:7f:d0:89:4b:d6:60:15: 27:57:34:e0:e7:90:a7:60:73:a6:5e:88:32:cb:fa:38:b3:ab: dc:ee:f7:f0:ae:08:f8:d6:7b:7b:b8:7b:5b:00:70:28:d1:2d: f0:a5:59:a0:b3:59:de:eb:fb:7a:2c:59:09:9e:74:a4:f7:80: 38:75:db:27:c3:49:da:37:2a:af:e1:c6:c8:77:a3:2a:88:66: a6:a9:f5:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3MzZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFFQzkwMjA5RUQ0NjEx QkNFMkVDRTU4MjcxNUM2NjI1RjFBMEFFOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuDIegaCpRlcNAEnnRYNGGZOKqdrW1aC9AkGl6yQwLuYVI71nR zwv/t7736kwjTUZmbw99XQUntrpweSYi4g+wpXokfv6zdxioYlyP+QFvHGLCYknF rxojGf0WBoOJfVfQT+loM6PVAtflHBGe1CEvifgZa24+C+vuWBVsKEUer6G5nm+9 GVYYWpSj6Witu+9Fbxi2THRLOHkMZMgquoqWPpfa12OxAOoS5wP1HStR+dTEpIzP J3ZlNpSWKPFId0lw0ZLYCRAqs3o3MIYGhE7QX416kqmlqMRqCArFQcWFtIawkjaz nm1PU/SNEDnsq9lvKfzSjc5YcDd4iH9PJIq7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHskCCe1GEbzi7OWCcVxmJfGgrpowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0hza0NDZTFHRWJ6aTdPV0NjVnhtSmZHZ3Jwby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTiowDQYJKoZIhvcNAQELBQADggEBAH5x/m22Cg9EXG4TU/URQGrsw21F V34yXVUdXK5Ts0OdV/a1m4uxnY+B95Yy58z9FuXzDhW2MBVCn1lOrW8VFdFNqR8J Rex1QE6iFAE+NIFlYEOEMk8hGNn6I60ZQ6rpD/Frn677eQl+jlNEru7rJQW484PR WhGl7o529jCUkUh6PSBkksilP8rs2SpGTZMkRwJ12BoJWwgf5txcUAFuHq03+Akg P+7ybeUXjMdXf9CJS9ZgFSdXNODnkKdgc6ZeiDLL+jizq9zu9/CuCPjWe3u4e1sA cCjRLfClWaCzWd7r+3osWQmedKT3gDh12yfDSdo3Kq/hxsh3oyqIZqap9Zg= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:46 2025 by rpki-client on console.sobornost.net