$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/I1nOES7-uQcvCo2Fh8tCFU20Kgs.roa File: I1nOES7-uQcvCo2Fh8tCFU20Kgs.roa (raw, json) Hash identifier: V53bH3ux5/HHZgTwBTXDO+04wTZmHaE40BwfQhyKPf0= Subject key identifier: 23:59:CE:11:2E:FE:B9:07:2F:0A:8D:85:87:CB:42:15:4D:B4:2A:0B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D80 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I1nOES7-uQcvCo2Fh8tCFU20Kgs.roa Signing time: Tue 01 Apr 2025 02:21:27 +0000 ROA not before: Tue 01 Apr 2025 02:21:27 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:21:27 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=2359CE112EFEB9072F0A8D8587CB42154DB42A0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:82:bf:cd:68:1b:fc:6f:2d:e7:2a:e7:6c:49: a6:14:03:98:4c:48:fc:c3:c0:21:f6:8e:cd:71:99: af:fd:0c:4f:41:9f:fb:6f:90:33:78:00:f4:59:96: 52:3a:e6:46:d9:6e:20:ef:b7:b7:42:91:89:17:64: 18:f6:22:8e:c5:4e:7c:73:f3:4d:4b:e8:93:05:b2: e4:05:00:77:be:0d:43:5f:0c:ce:c1:c4:2a:25:f7: fd:48:d0:e7:16:df:91:b9:12:5b:66:92:69:12:e1: 97:fc:48:c8:73:8b:44:9e:fc:9c:95:dd:28:18:a3: ab:c4:be:df:23:bd:34:0f:63:64:cf:2f:dd:e2:c8: 76:89:61:4f:7b:e5:92:64:c2:7c:38:e4:cc:dd:1e: ad:52:60:d3:9f:83:3e:57:5c:48:22:3f:75:56:87: a0:0a:f0:42:e8:30:59:14:2c:57:4d:71:b1:75:76: f1:6f:42:c4:f2:ea:d6:2d:b3:99:bd:81:38:0c:b7: ac:ae:8b:76:52:e9:33:0c:99:d1:68:4c:0a:f0:8f: 0d:06:d2:82:6f:bf:45:9e:38:02:d0:a6:82:2b:99: b4:7a:23:9b:5c:0f:9f:81:83:96:7e:42:2f:52:02: ee:ce:bf:65:6d:1a:80:87:d3:83:36:5f:ee:6f:01: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:CE:11:2E:FE:B9:07:2F:0A:8D:85:87:CB:42:15:4D:B4:2A:0B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/I1nOES7-uQcvCo2Fh8tCFU20Kgs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.216.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:4f:f7:80:1a:fc:21:b0:0e:46:a3:c8:62:61:56:40:dd:3b: 12:d8:5c:c7:82:77:a3:4d:7b:ab:06:6e:25:57:33:6d:61:e7: 7a:53:30:31:34:56:fc:de:ca:d6:82:3e:7e:80:b4:bc:f4:bb: 97:59:f1:ad:eb:ad:df:11:45:03:20:0e:40:46:b9:71:9d:df: 2a:94:ba:d3:1e:a7:1b:dc:b4:95:95:47:da:14:c1:78:aa:56: ac:12:9a:57:3d:36:b0:51:47:01:d0:f2:e1:24:d1:a8:05:72: 2c:cc:52:c5:f0:e9:af:2b:98:96:35:eb:70:bb:58:c1:54:6d: 5a:08:50:c6:31:c9:43:aa:75:72:2d:d5:0d:85:82:a4:11:16: 2b:ce:0d:c5:f4:58:2d:8f:69:60:35:5d:8b:af:d0:65:71:be: 4b:1b:ba:cb:9c:ed:03:44:33:74:ff:25:01:38:5f:3d:63:7b: c5:80:8c:29:7f:94:d1:a7:e2:35:99:c3:88:86:a9:34:ce:e4: b3:98:f9:57:b9:61:ba:15:68:f1:a8:18:85:01:55:20:2f:d3: 66:e2:dd:25:b7:54:b4:3a:96:65:78:f2:a6:ba:73:8d:14:da: 46:db:36:ca:e8:0e:4a:fe:db:57:0b:fc:64:fc:57:04:a5:6a: a8:2c:7f:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjIxMjdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIzNTlDRTExMkVGRUI5 MDcyRjBBOEQ4NTg3Q0I0MjE1NERCNDJBMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDogr/NaBv8by3nKudsSaYUA5hMSPzDwCH2js1xma/9DE9Bn/tv kDN4APRZllI65kbZbiDvt7dCkYkXZBj2Io7FTnxz801L6JMFsuQFAHe+DUNfDM7B xCol9/1I0OcW35G5EltmkmkS4Zf8SMhzi0Se/JyV3SgYo6vEvt8jvTQPY2TPL93i yHaJYU975ZJkwnw45MzdHq1SYNOfgz5XXEgiP3VWh6AK8ELoMFkULFdNcbF1dvFv QsTy6tYts5m9gTgMt6yui3ZS6TMMmdFoTArwjw0G0oJvv0WeOALQpoIrmbR6I5tc D5+Bg5Z+Qi9SAu7Ov2VtGoCH04M2X+5vAWuvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUI1nOES7+uQcvCo2Fh8tCFU20KgswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0kxbk9FUzctdVFjdkNvMkZoOHRDRlUyMEtncy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYNgwDQYJKoZIhvcNAQELBQADggEBAH9P94Aa/CGwDkajyGJhVkDdOxLY XMeCd6NNe6sGbiVXM21h53pTMDE0VvzeytaCPn6AtLz0u5dZ8a3rrd8RRQMgDkBG uXGd3yqUutMepxvctJWVR9oUwXiqVqwSmlc9NrBRRwHQ8uEk0agFcizMUsXw6a8r mJY163C7WMFUbVoIUMYxyUOqdXIt1Q2FgqQRFivODcX0WC2PaWA1XYuv0GVxvksb usuc7QNEM3T/JQE4Xz1je8WAjCl/lNGn4jWZw4iGqTTO5LOY+Ve5YboVaPGoGIUB VSAv02bi3SW3VLQ6lmV48qa6c40U2kbbNsroDkr+21cL/GT8VwSlaqgsf9g= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:46 2025 by rpki-client on console.sobornost.net