$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Rar2cxidluqshYbejrZwOf7we98.roa File: Rar2cxidluqshYbejrZwOf7we98.roa (raw, json) Hash identifier: k3FyC14Hlx4WpbxqcbBeKpfxUxj4HB1oozC8H0+/3tI= Subject key identifier: 45:AA:F6:73:18:9D:96:EA:AC:85:86:DE:8E:B6:70:39:FE:F0:7B:DF Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DE4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Rar2cxidluqshYbejrZwOf7we98.roa Signing time: Tue 01 Apr 2025 02:27:29 +0000 ROA not before: Tue 01 Apr 2025 02:27:29 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3556 (0xde4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:27:29 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=45AAF673189D96EAAC8586DE8EB67039FEF07BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:d6:2e:aa:1c:ae:e9:4c:1c:6b:67:b2:15: fe:7f:64:96:d6:75:ca:20:c3:47:b9:d5:76:de:e2: f8:72:80:a8:26:f9:3f:59:c8:46:35:aa:06:35:3c: b1:0c:c7:6f:2e:21:2f:29:30:60:c8:5d:45:1c:c4: c5:49:ab:24:b8:4d:bf:f2:7c:68:2a:2d:1c:81:06: ad:a7:18:70:ee:be:b9:9d:80:d7:24:97:52:00:e9: 94:3e:b7:58:f2:36:2a:18:e4:1b:81:6e:58:3e:5b: f9:97:0f:31:f7:ca:86:e3:3d:2c:f4:91:da:9a:bf: 3b:a5:6a:e5:e1:98:80:f3:15:c9:b5:5b:e8:24:1b: 8c:9b:f7:85:7f:9e:d8:a7:a7:67:82:47:31:52:3b: 21:80:cf:a5:35:d6:9d:5f:c5:d4:7a:e2:ee:b1:c7: 85:ef:25:f9:fe:fc:ef:ae:46:2b:01:ec:b8:62:51: 53:5d:8e:95:2a:85:cc:9b:ca:9f:4d:73:3c:5a:fb: a5:47:44:85:73:64:eb:4c:4d:9f:a7:76:f2:f9:59: a3:22:3e:3f:db:25:e0:27:fd:cc:66:67:63:e8:ba: 68:b5:fa:c4:7e:40:da:31:4f:f2:7a:aa:08:a3:bf: dc:22:c3:10:29:20:ae:7b:84:69:4f:d6:fe:c8:b5: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:F6:73:18:9D:96:EA:AC:85:86:DE:8E:B6:70:39:FE:F0:7B:DF X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Rar2cxidluqshYbejrZwOf7we98.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.76.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:d7:38:3c:f4:2c:0b:cc:f8:0a:d5:ad:4b:2d:f0:cc:4f:fa: 82:40:7e:01:61:c7:2d:07:55:4c:27:cc:e6:f0:ec:ea:4c:1b: 5c:95:af:0f:bb:e8:13:16:f1:51:05:bb:ae:70:f9:aa:97:e5: 1c:18:5f:54:a8:d6:eb:10:ef:75:49:8c:54:b1:53:b5:e7:f2: fb:a2:42:26:7c:88:42:27:08:f4:a1:da:41:06:fd:31:3c:26: 9f:25:e8:4c:87:7f:a8:d1:25:6a:b7:96:97:33:d1:86:bf:46: f1:2d:8a:49:50:51:f4:42:5b:df:f4:84:77:7a:38:4c:53:9a: c1:ab:0f:23:ad:de:1a:8e:00:e0:a1:0c:37:e4:58:8e:61:38: 1d:b0:44:e0:85:b2:b4:27:e4:61:28:6e:cf:1c:08:a1:a6:65: e0:3a:12:78:6b:22:1a:a5:a4:69:80:0f:c3:01:a9:0b:60:6d: f6:37:bc:d1:e9:67:db:5a:00:bd:0d:4a:c5:d2:6a:9e:c6:9d: 87:94:3f:b9:7a:2e:0e:09:03:20:55:9b:6b:5f:15:e9:31:b1: f3:dd:d6:82:09:2a:78:ca:4f:92:94:52:91:ca:d5:d6:b3:90: b6:0a:19:76:08:45:3e:5b:02:ae:08:d1:4b:88:98:7c:24:15: 2a:23:1a:7d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI3MjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ1QUFGNjczMTg5RDk2 RUFBQzg1ODZERThFQjY3MDM5RkVGMDdCREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCYdYuqhyu6Uwca2eyFf5/ZJbWdcogw0e51Xbe4vhygKgm+T9Z yEY1qgY1PLEMx28uIS8pMGDIXUUcxMVJqyS4Tb/yfGgqLRyBBq2nGHDuvrmdgNck l1IA6ZQ+t1jyNioY5BuBblg+W/mXDzH3yobjPSz0kdqavzulauXhmIDzFcm1W+gk G4yb94V/ntinp2eCRzFSOyGAz6U11p1fxdR64u6xx4XvJfn+/O+uRisB7LhiUVNd jpUqhcybyp9Nczxa+6VHRIVzZOtMTZ+ndvL5WaMiPj/bJeAn/cxmZ2Poumi1+sR+ QNoxT/J6qgijv9wiwxApIK57hGlP1v7ItdopAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURar2cxidluqshYbejrZwOf7we98wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1JhcjJjeGlkbHVxc2hZYmVqclp3T2Y3d2U5OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBT0wwDQYJKoZIhvcNAQELBQADggEBACzXODz0LAvM+ArVrUst8MxP+oJA fgFhxy0HVUwnzObw7OpMG1yVrw+76BMW8VEFu65w+aqX5RwYX1So1usQ73VJjFSx U7Xn8vuiQiZ8iEInCPSh2kEG/TE8Jp8l6EyHf6jRJWq3lpcz0Ya/RvEtiklQUfRC W9/0hHd6OExTmsGrDyOt3hqOAOChDDfkWI5hOB2wROCFsrQn5GEobs8cCKGmZeA6 EnhrIhqlpGmAD8MBqQtgbfY3vNHpZ9taAL0NSsXSap7GnYeUP7l6Lg4JAyBVm2tf FekxsfPd1oIJKnjKT5KUUpHK1dazkLYKGXYIRT5bAq4I0UuImHwkFSojGn0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:50 2025 by rpki-client on console.sobornost.net