$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QaAf70CeUtwBIcftQNsHi0mnK4s.roa File: QaAf70CeUtwBIcftQNsHi0mnK4s.roa (raw, json) Hash identifier: KsG5ArZNtJ4sMfxXqMcudY2ftY2S2vquvL8rwbzmoAU= Subject key identifier: 41:A0:1F:EF:40:9E:52:DC:01:21:C7:ED:40:DB:07:8B:49:A7:2B:8B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DCF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QaAf70CeUtwBIcftQNsHi0mnK4s.roa Signing time: Tue 01 Apr 2025 02:27:20 +0000 ROA not before: Tue 01 Apr 2025 02:27:20 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.76.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3535 (0xdcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:20 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=41A01FEF409E52DC0121C7ED40DB078B49A72B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3b:f7:60:f3:5c:93:0a:c9:8d:a3:91:92:65: 02:96:d1:e4:99:fa:27:34:07:09:fd:15:a2:02:0b: 49:9f:29:15:16:d2:e7:03:df:06:a7:4a:9a:bd:70: 82:96:eb:0f:ec:1a:67:45:53:a8:83:62:b2:fd:62: e8:3c:19:a7:15:04:7a:14:07:86:f0:16:0a:e7:db: ee:fe:bc:f0:cf:7f:9d:b2:be:2b:98:72:bc:fa:f9: eb:7d:57:db:f8:39:35:e1:cc:28:d1:3f:b2:2e:3b: 56:c4:ee:55:03:88:a7:61:72:f4:aa:62:8e:d2:45: 07:94:17:1c:f8:a1:e2:67:e2:07:33:89:f9:a3:e7: df:4d:c9:5f:83:01:bf:c9:40:fd:03:63:4b:3a:9b: c1:af:ce:f4:1f:29:8a:1d:8e:df:ed:34:cc:92:25: 2c:55:47:c8:7e:07:8e:26:d9:23:98:c7:f0:4b:00: e7:55:cd:af:5a:6a:50:2f:03:4c:ab:32:10:e7:d7: 21:0f:d7:4f:1b:ec:16:d5:b7:ab:70:8c:1b:1e:a1: 97:20:c8:1f:36:bf:f2:af:16:0d:a2:d8:4c:6a:28: 9e:7f:7c:12:48:54:3c:60:51:48:e3:32:f8:d9:85: 40:b2:2c:7c:89:ff:98:8a:14:e9:7d:89:99:f0:27: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A0:1F:EF:40:9E:52:DC:01:21:C7:ED:40:DB:07:8B:49:A7:2B:8B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QaAf70CeUtwBIcftQNsHi0mnK4s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.76.8.0/21 Signature Algorithm: sha256WithRSAEncryption c8:ad:05:64:da:48:b8:d7:7e:49:15:aa:dd:15:13:99:6b:0b: d4:a7:dd:b8:86:f7:45:fb:54:48:1a:c5:cb:74:10:71:62:c0: 62:c6:fa:62:3b:88:12:8b:53:7c:22:68:dd:80:ba:ce:e4:bf: 2d:1f:e1:47:75:66:e5:d3:fb:47:7e:b3:8f:2d:f2:c1:f8:a7: a6:58:a1:7e:82:61:ff:53:57:5c:d2:1b:fd:d8:3b:42:e5:31: a5:2e:1d:64:67:ed:03:59:53:dd:2c:c7:4b:fc:50:e9:43:82: 1d:87:43:2f:c5:d3:7b:02:a6:f9:48:f7:86:66:25:48:ab:0b: af:8a:7d:49:b6:43:ba:15:34:51:d5:1f:21:8a:59:ef:a4:2e: a2:24:57:fb:e4:5d:17:9b:9c:f4:c6:48:4f:53:9a:6b:15:04: 32:16:f2:48:f4:0b:df:54:8c:33:b0:a4:8e:51:02:7f:d3:9a: 1e:a9:27:74:8c:21:d3:7b:80:e5:0b:82:e0:78:33:15:c7:f2: 33:3d:18:f1:fb:db:16:1c:23:9c:b1:80:3b:9f:a5:e5:b8:44: d1:ac:d0:d7:e8:47:e6:48:b5:da:72:4d:16:ca:81:d3:14:3e: 37:3e:23:f4:57:ac:47:fa:54:83:0b:a2:53:54:84:41:3d:00: 9f:8a:33:0d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQxQTAxRkVGNDA5RTUy REMwMTIxQzdFRDQwREIwNzhCNDlBNzJCOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxO/dg81yTCsmNo5GSZQKW0eSZ+ic0Bwn9FaICC0mfKRUW0ucD 3wanSpq9cIKW6w/sGmdFU6iDYrL9Yug8GacVBHoUB4bwFgrn2+7+vPDPf52yviuY crz6+et9V9v4OTXhzCjRP7IuO1bE7lUDiKdhcvSqYo7SRQeUFxz4oeJn4gczifmj 599NyV+DAb/JQP0DY0s6m8GvzvQfKYodjt/tNMySJSxVR8h+B44m2SOYx/BLAOdV za9aalAvA0yrMhDn1yEP108b7BbVt6twjBseoZcgyB82v/KvFg2i2ExqKJ5/fBJI VDxgUUjjMvjZhUCyLHyJ/5iKFOl9iZnwJ9UXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQaAf70CeUtwBIcftQNsHi0mnK4swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FhQWY3MENlVXR3QkljZnRRTnNIaTBtbks0cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBTAgwDQYJKoZIhvcNAQELBQADggEBAMitBWTaSLjXfkkVqt0VE5lrC9Sn 3biG90X7VEgaxct0EHFiwGLG+mI7iBKLU3wiaN2Aus7kvy0f4Ud1ZuXT+0d+s48t 8sH4p6ZYoX6CYf9TV1zSG/3YO0LlMaUuHWRn7QNZU90sx0v8UOlDgh2HQy/F03sC pvlI94ZmJUirC6+KfUm2Q7oVNFHVHyGKWe+kLqIkV/vkXRebnPTGSE9TmmsVBDIW 8kj0C99UjDOwpI5RAn/Tmh6pJ3SMIdN7gOULguB4MxXH8jM9GPH72xYcI5yxgDuf peW4RNGs0NfoR+ZItdpyTRbKgdMUPjc+I/RXrEf6VIMLolNUhEE9AJ+KMw0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:50 2025 by rpki-client on console.sobornost.net