$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MQ_vnq7FSsxxqF35V5Zg24mTyh4.roa File: MQ_vnq7FSsxxqF35V5Zg24mTyh4.roa (raw, json) Hash identifier: l6xXqnWEBI5vemTaqGa9XsqoELBOmbKQtIlH5wIcTIQ= Subject key identifier: 31:0F:EF:9E:AE:C5:4A:CC:71:A8:5D:F9:57:96:60:DB:89:93:CA:1E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CD8 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MQ_vnq7FSsxxqF35V5Zg24mTyh4.roa Signing time: Tue 01 Apr 2025 02:09:16 +0000 ROA not before: Tue 01 Apr 2025 02:09:16 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:16 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=310FEF9EAEC54ACC71A85DF9579660DB8993CA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:2d:67:d7:8e:85:71:cf:f3:23:c3:8c:70: 70:ee:23:2e:d9:73:73:18:bf:ae:d5:1d:f5:c8:c4: cd:28:e9:93:d6:ce:dd:98:e9:2e:d8:f8:9c:c7:0a: fc:88:bf:0e:05:fc:47:90:a1:d5:25:32:46:9d:7e: 0a:e8:a7:9e:ce:2b:5d:fd:93:52:9b:a3:7b:ab:18: 92:de:c1:e2:e9:3d:79:d1:bf:35:ff:76:b0:a3:d2: 5c:d3:71:41:e0:82:8c:e1:d8:db:6a:bd:05:b8:4d: 19:83:d5:e6:e2:95:fb:f6:99:d3:83:76:20:5b:5f: 1c:53:7a:2c:a4:53:14:72:c4:62:c2:fa:a2:1d:73: e6:3f:7e:d4:5e:d4:b1:2c:be:3e:31:43:d9:6b:06: 51:52:08:9c:a0:68:40:55:0e:f6:5a:62:6b:b4:4c: 31:57:b9:d4:07:2e:ef:11:b5:41:4d:f5:e2:af:56: 6d:ec:d8:48:d6:3f:bf:ff:4b:a0:34:3b:46:6a:2d: d7:3d:6f:27:11:34:16:8c:5d:27:1b:c6:ac:6f:b7: 5a:89:19:b5:46:eb:f3:97:ac:0e:71:72:74:01:f4: 38:8e:83:fc:e9:04:b1:02:bf:e8:b0:71:e6:43:88: 0b:59:b2:e0:79:8d:b7:26:68:90:57:84:de:30:d1: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0F:EF:9E:AE:C5:4A:CC:71:A8:5D:F9:57:96:60:DB:89:93:CA:1E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MQ_vnq7FSsxxqF35V5Zg24mTyh4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:4c:6f:d1:be:95:38:d9:c1:7d:9a:1b:9c:db:2b:8d:a1:30: e8:c4:0a:dc:a4:5d:69:9a:c8:ef:e2:bb:a8:1e:e4:00:67:c5: 0f:e5:7f:5c:a5:22:fa:d9:7c:43:31:8d:f9:da:ad:a4:5c:10: f6:82:b0:41:f5:51:e7:12:fb:31:2b:d7:1c:c8:22:36:78:55: d8:7f:43:39:8e:f2:bb:6f:99:19:01:48:35:3f:59:4c:09:95: ae:4a:c9:f8:a5:cc:a8:aa:e3:80:74:bd:98:a3:2d:9d:af:22: bf:ae:c1:3c:3d:54:6b:e6:4d:53:a7:80:08:b8:55:2d:8b:88: d8:a4:f7:af:73:a1:a0:e1:19:2f:c8:2d:8c:10:f3:78:c7:41: 36:5e:72:1a:e5:35:47:37:8c:a2:a0:be:12:9a:26:bc:1d:cc: 0e:e5:f2:ad:4f:c0:87:41:64:63:89:fa:d5:f5:4e:1a:4b:98: 94:35:76:c7:df:74:e1:ca:b7:eb:a5:81:84:df:ae:67:f1:41: 82:90:73:ca:a4:63:1b:3f:b4:cb:18:dc:68:d3:d6:eb:4d:a6: 20:7a:2b:03:e9:96:4d:c3:d0:dd:38:44:41:c4:1d:7e:36:e1: 59:08:97:1d:a0:c0:43:d0:b4:43:97:02:a2:d3:ee:d0:1a:f8: 68:f4:b4:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxMEZFRjlFQUVDNTRB Q0M3MUE4NURGOTU3OTY2MERCODk5M0NBMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE8C1n146Fcc/zI8OMcHDuIy7Zc3MYv67VHfXIxM0o6ZPWzt2Y 6S7Y+JzHCvyIvw4F/EeQodUlMkadfgrop57OK139k1Kbo3urGJLeweLpPXnRvzX/ drCj0lzTcUHggozh2NtqvQW4TRmD1ebilfv2mdODdiBbXxxTeiykUxRyxGLC+qId c+Y/ftRe1LEsvj4xQ9lrBlFSCJygaEBVDvZaYmu0TDFXudQHLu8RtUFN9eKvVm3s 2EjWP7//S6A0O0ZqLdc9bycRNBaMXScbxqxvt1qJGbVG6/OXrA5xcnQB9DiOg/zp BLECv+iwceZDiAtZsuB5jbcmaJBXhN4w0T3JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMQ/vnq7FSsxxqF35V5Zg24mTyh4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L01RX3ZucTdGU3N4eHFGMzVWNVpnMjRtVHloNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQBQnAwDQYJKoZIhvcNAQELBQADggEBAGtMb9G+lTjZwX2aG5zbK42hMOjE CtykXWmayO/iu6ge5ABnxQ/lf1ylIvrZfEMxjfnaraRcEPaCsEH1UecS+zEr1xzI IjZ4Vdh/QzmO8rtvmRkBSDU/WUwJla5KyfilzKiq44B0vZijLZ2vIr+uwTw9VGvm TVOngAi4VS2LiNik969zoaDhGS/ILYwQ83jHQTZechrlNUc3jKKgvhKaJrwdzA7l 8q1PwIdBZGOJ+tX1ThpLmJQ1dsffdOHKt+ulgYTfrmfxQYKQc8qkYxs/tMsY3GjT 1utNpiB6KwPplk3D0N04REHEHX424VkIlx2gwEPQtEOXAqLT7tAa+Gj0tG0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:48 2025 by rpki-client on console.sobornost.net