$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KNhhINSOA3Le6_x8lsmUsuU6Abo.roa File: KNhhINSOA3Le6_x8lsmUsuU6Abo.roa (raw, json) Hash identifier: wI2EjqBUPm6kFJ/oxn1F3ZHk/9PxX3bsubcTLmr5/B8= Subject key identifier: 28:D8:61:20:D4:8E:03:72:DE:EB:FC:7C:96:C9:94:B2:E5:3A:01:BA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D53 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KNhhINSOA3Le6_x8lsmUsuU6Abo.roa Signing time: Tue 01 Apr 2025 02:17:15 +0000 ROA not before: Tue 01 Apr 2025 02:17:15 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.107.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:17:15 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=28D86120D48E0372DEEBFC7C96C994B2E53A01BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:ee:92:39:0a:2d:08:18:0a:f7:33:ef:33: 43:c1:e4:4e:a1:23:d7:cb:52:31:b9:ca:78:93:3a: 92:54:db:cd:21:1e:0f:bd:2d:6c:56:af:af:3d:51: bc:24:19:96:f8:c8:b3:69:80:22:1d:41:44:bf:f6: 1b:ac:4a:41:f2:c3:f0:ca:75:d7:98:33:7f:41:74: d1:8c:a9:04:41:f2:5e:67:a0:52:42:0d:ce:04:9e: 24:06:fd:03:7c:ca:ac:da:0d:de:59:00:0b:9e:b7: 3a:2b:82:7e:5c:a4:05:74:f9:c1:01:20:ff:0d:eb: f6:4c:5b:46:f2:3c:b9:4f:62:41:1f:c5:b0:6e:4f: 6a:00:2a:c9:68:ef:06:e8:d7:35:9a:d2:31:b3:b5: 96:1c:30:1d:2f:2b:f1:af:75:f8:1e:b9:96:a1:b3: 80:af:19:eb:72:72:1f:79:64:06:fc:1c:60:1e:13: 1f:7f:38:d5:4c:c1:af:f1:09:2f:05:1f:6d:10:39: 48:b4:2c:c2:dd:06:18:e5:cc:e3:60:ac:03:e9:a6: 8c:99:ff:fa:56:0d:af:25:b2:de:86:f4:f4:5c:6c: 71:e3:fa:08:6b:0b:92:aa:55:c9:29:52:3c:e9:67: e5:36:78:84:5c:8a:8e:23:4a:a2:82:29:26:f3:e7: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D8:61:20:D4:8E:03:72:DE:EB:FC:7C:96:C9:94:B2:E5:3A:01:BA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KNhhINSOA3Le6_x8lsmUsuU6Abo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.107.128.0/18 Signature Algorithm: sha256WithRSAEncryption 38:74:91:4f:fe:88:89:eb:30:71:09:fe:0e:e3:32:5a:c7:2e: 45:9b:1a:25:d8:31:bd:f2:b7:e6:e2:af:5f:4e:ef:8f:61:8f: 73:22:03:fb:ee:dd:e6:c7:16:fb:76:3f:f2:12:0f:c0:94:99: ad:97:46:16:8e:de:44:0d:a9:a5:0f:b5:ed:d9:ff:43:ae:a8: bc:74:d5:3b:8c:c5:59:bc:84:64:4e:60:e5:b2:e7:cd:e9:a8: 00:e7:8d:04:eb:ec:33:6e:bc:39:bb:72:f2:a2:36:88:68:6f: c9:78:e1:10:92:ba:9e:86:da:e1:ad:dd:c9:85:a1:8b:2b:22: 68:ae:e3:85:44:4e:55:36:e3:36:e1:af:d6:c8:9f:b3:33:cd: 02:d0:97:1f:ee:7f:38:21:f6:26:09:38:1d:7f:ab:8c:43:48: 5b:3a:eb:9c:40:7d:b5:f4:c1:13:a1:7f:24:46:be:83:2d:5a: a4:18:71:a8:e0:5c:46:af:a7:37:58:5d:bf:19:04:20:fe:59: 72:d2:9b:c5:12:75:0b:5a:8b:12:92:bd:b7:9f:11:af:46:7d: 1a:c9:16:b7:a0:15:59:ac:3d:a9:bb:0f:63:a7:fa:f7:63:4e: 89:15:1c:75:19:3d:c1:df:62:a1:09:a8:34:81:50:24:8f:a0: 4e:d3:24:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE3MTVaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI4RDg2MTIwRDQ4RTAz NzJERUVCRkM3Qzk2Qzk5NEIyRTUzQTAxQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7mu6SOQotCBgK9zPvM0PB5E6hI9fLUjG5yniTOpJU280hHg+9 LWxWr689UbwkGZb4yLNpgCIdQUS/9husSkHyw/DKddeYM39BdNGMqQRB8l5noFJC Dc4EniQG/QN8yqzaDd5ZAAuetzorgn5cpAV0+cEBIP8N6/ZMW0byPLlPYkEfxbBu T2oAKslo7wbo1zWa0jGztZYcMB0vK/GvdfgeuZahs4CvGetych95ZAb8HGAeEx9/ ONVMwa/xCS8FH20QOUi0LMLdBhjlzONgrAPppoyZ//pWDa8lst6G9PRcbHHj+ghr C5KqVckpUjzpZ+U2eIRcio4jSqKCKSbz5zqPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKNhhINSOA3Le6/x8lsmUsuU6AbowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tOaGhJTlNPQTNMZTZfeDhsc21Vc3VVNkFiby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYxa4AwDQYJKoZIhvcNAQELBQADggEBADh0kU/+iInrMHEJ/g7jMlrHLkWb GiXYMb3yt+bir19O749hj3MiA/vu3ebHFvt2P/ISD8CUma2XRhaO3kQNqaUPte3Z /0OuqLx01TuMxVm8hGROYOWy583pqADnjQTr7DNuvDm7cvKiNohob8l44RCSup6G 2uGt3cmFoYsrImiu44VETlU24zbhr9bIn7MzzQLQlx/ufzgh9iYJOB1/q4xDSFs6 65xAfbX0wROhfyRGvoMtWqQYcajgXEavpzdYXb8ZBCD+WXLSm8USdQtaixKSvbef Ea9GfRrJFregFVmsPam7D2On+vdjTokVHHUZPcHfYqEJqDSBUCSPoE7TJEI= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:47 2025 by rpki-client on console.sobornost.net