$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/RHmtYLYVDuOxIogW_6YgiuWbgsY.roa File: RHmtYLYVDuOxIogW_6YgiuWbgsY.roa (raw, json) Hash identifier: 1Gv13zTZ2XNIhJtVDzTd2Pa++IQANo1bow9ymWZhA0I= Subject key identifier: 44:79:AD:60:B6:15:0E:E3:B1:22:88:16:FF:A6:20:8A:E5:9B:82:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D58 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RHmtYLYVDuOxIogW_6YgiuWbgsY.roa Signing time: Tue 01 Apr 2025 02:19:13 +0000 ROA not before: Tue 01 Apr 2025 02:19:13 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3416 (0xd58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:13 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4479AD60B6150EE3B1228816FFA6208AE59B82C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:c8:3f:27:07:40:f9:12:cb:01:e8:ee:be: 2f:fd:55:88:90:0b:8c:ac:40:f3:6b:ec:81:10:5f: c6:71:9f:31:b6:77:d2:a2:40:6b:cd:23:3c:0c:bf: eb:7a:18:6f:d4:a7:ef:e4:f8:8a:16:5e:c8:b2:be: 55:cc:85:ca:04:2f:5c:62:9b:65:56:56:ba:d4:1b: 02:fc:7c:6b:33:28:7f:26:fe:cb:7d:bc:e5:73:8e: 44:cf:f2:02:d6:2d:a0:3e:62:99:fd:b3:ca:7d:94: ec:2d:20:af:81:dd:36:5c:d6:c3:41:c3:1d:68:99: 01:18:0f:10:b4:ba:e5:59:f5:7c:06:2c:ff:eb:c3: 98:c6:75:57:5b:4a:c1:cc:2d:89:5b:d5:b2:2d:33: 2b:17:07:e7:43:71:52:30:72:2f:4c:7c:68:09:59: 6a:b1:7c:c1:00:f9:fc:f5:9b:4c:db:f3:21:c4:47: 7a:38:40:d8:e9:12:5b:d4:a7:a9:c5:4a:a1:61:d6: 11:c6:49:ae:82:47:85:40:4c:3b:41:09:70:d6:c8: 5a:1b:40:cc:c9:8f:37:ca:15:25:a8:11:4e:cc:b8: de:2d:89:b4:95:5e:00:9e:b3:9a:2f:6f:7e:bd:aa: f8:41:c0:30:a0:f1:50:9e:f1:73:42:da:2a:47:c5: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:AD:60:B6:15:0E:E3:B1:22:88:16:FF:A6:20:8A:E5:9B:82:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/RHmtYLYVDuOxIogW_6YgiuWbgsY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.200.0/22 Signature Algorithm: sha256WithRSAEncryption 72:56:00:b8:70:a4:9b:8e:a4:2c:6f:ce:7b:f3:ac:8a:5e:f3: a6:04:be:68:05:08:83:f2:92:a3:fd:e5:36:63:ec:0c:6d:3b: 06:1c:22:e4:0d:cf:a3:be:39:8c:26:1e:a3:58:51:93:de:23: 35:a9:27:cc:c6:29:83:09:46:ae:f2:79:97:23:54:02:a1:d5: 74:f2:b3:a6:1c:8d:2e:65:20:8c:56:ea:3e:4c:5e:a0:a8:a6: 4d:a1:92:c9:85:c9:b1:15:6a:bc:c7:cf:7e:30:c5:93:f5:3b: fb:df:e7:f6:99:ca:f9:e3:74:50:d6:f4:6b:ab:11:7f:0b:35: e2:df:8c:f7:10:27:d8:97:04:0d:ce:36:4e:e3:d2:3b:ba:47: 72:92:9b:6c:df:dd:5e:cb:8e:62:e3:2d:b3:9c:cd:c6:fe:ae: 48:45:9c:28:26:0e:f6:60:d6:ca:0c:96:50:2f:b1:ad:f6:b4: f3:de:a6:d8:cf:62:81:55:b1:db:b2:1b:77:1f:a1:b2:f1:2e: 92:7b:b8:29:78:89:fa:00:91:91:a0:48:b8:10:4c:44:87:f5: 94:5f:70:aa:76:cc:7d:5d:b8:82:ec:c8:8d:82:e6:ae:89:89: 14:af:fa:73:8d:39:ac:6a:5e:03:5e:d2:0f:7d:34:c8:5b:51: b4:8c:66:2e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ0NzlBRDYwQjYxNTBF RTNCMTIyODgxNkZGQTYyMDhBRTU5QjgyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBccg/JwdA+RLLAejuvi/9VYiQC4ysQPNr7IEQX8ZxnzG2d9Ki QGvNIzwMv+t6GG/Up+/k+IoWXsiyvlXMhcoEL1xim2VWVrrUGwL8fGszKH8m/st9 vOVzjkTP8gLWLaA+Ypn9s8p9lOwtIK+B3TZc1sNBwx1omQEYDxC0uuVZ9XwGLP/r w5jGdVdbSsHMLYlb1bItMysXB+dDcVIwci9MfGgJWWqxfMEA+fz1m0zb8yHER3o4 QNjpElvUp6nFSqFh1hHGSa6CR4VATDtBCXDWyFobQMzJjzfKFSWoEU7MuN4tibSV XgCes5ovb369qvhBwDCg8VCe8XNC2ipHxZlRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURHmtYLYVDuOxIogW/6YgiuWbgsYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JIbXRZTFlWRHVPeElvZ1dfNllnaXVXYmdzWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYsgwDQYJKoZIhvcNAQELBQADggEBAHJWALhwpJuOpCxvznvzrIpe86YE vmgFCIPykqP95TZj7AxtOwYcIuQNz6O+OYwmHqNYUZPeIzWpJ8zGKYMJRq7yeZcj VAKh1XTys6YcjS5lIIxW6j5MXqCopk2hksmFybEVarzHz34wxZP1O/vf5/aZyvnj dFDW9GurEX8LNeLfjPcQJ9iXBA3ONk7j0ju6R3KSm2zf3V7LjmLjLbOczcb+rkhF nCgmDvZg1soMllAvsa32tPPeptjPYoFVsduyG3cfobLxLpJ7uCl4ifoAkZGgSLgQ TESH9ZRfcKp2zH1duILsyI2C5q6JiRSv+nONOaxqXgNe0g99NMhbUbSMZi4= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:50 2025 by rpki-client on console.sobornost.net