$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TG1LKeOpaT3idSYXyj1GW2tgtJU.roa File: TG1LKeOpaT3idSYXyj1GW2tgtJU.roa (raw, json) Hash identifier: rXSBRSkHOpwX0Oyqj3sOMld1FkMZ7WRdfp3rx/ytapY= Subject key identifier: 4C:6D:4B:29:E3:A9:69:3D:E2:75:26:17:CA:3D:46:5B:6B:60:B4:95 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D64 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TG1LKeOpaT3idSYXyj1GW2tgtJU.roa Signing time: Tue 01 Apr 2025 02:19:18 +0000 ROA not before: Tue 01 Apr 2025 02:19:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.105.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=4C6D4B29E3A9693DE2752617CA3D465B6B60B495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e2:8f:c6:53:b2:0e:b3:72:db:29:e5:8d:c4: d8:71:bf:6a:ed:2b:e1:3a:08:ae:ca:43:06:24:79: 93:70:4b:61:86:f3:21:92:57:82:dd:31:cb:a0:23: 42:c9:4e:1e:70:9e:3f:b3:24:19:bb:a8:dd:b2:89: 62:82:29:57:c5:ae:e0:95:4e:9c:6b:37:50:2f:ea: 3a:26:da:a0:e3:11:1d:2a:98:3b:eb:5f:4e:ad:02: 73:1e:d5:de:f6:44:2c:7e:90:58:a1:3f:b6:22:2c: 26:e8:ea:35:71:3b:1e:ac:1a:76:d6:2d:f5:22:bd: 52:c5:c5:d4:cc:34:30:e0:f8:4f:7a:38:b8:d3:58: dc:80:3f:d3:07:a7:09:15:91:16:59:c9:15:42:90: a3:94:67:dd:9a:e1:56:09:35:06:52:7d:e5:81:e5: 4f:7b:5f:d0:4e:d4:18:e6:15:e2:20:99:fa:08:22: f0:ee:1d:15:05:ae:d9:c6:4c:58:61:c4:cc:99:52: b8:e3:f1:25:c9:0d:93:f8:48:bc:77:d0:7e:63:ec: de:3d:81:75:bb:84:1b:fd:5d:41:41:1e:9b:b3:5b: f3:71:df:29:2e:c0:38:7d:03:27:34:c0:88:ca:0f: 40:fa:b7:2e:1e:b9:e1:be:80:83:ff:90:ef:5a:e4: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6D:4B:29:E3:A9:69:3D:E2:75:26:17:CA:3D:46:5B:6B:60:B4:95 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TG1LKeOpaT3idSYXyj1GW2tgtJU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.116.0/22 Signature Algorithm: sha256WithRSAEncryption af:0f:10:2e:16:94:6c:72:ab:28:ec:71:c0:2a:52:53:08:f5: a5:e4:ee:b3:c2:2f:3f:04:c7:e8:57:5c:25:74:be:c0:1a:3d: 58:c5:1c:86:7a:70:c4:93:d4:00:14:6a:ed:fe:f3:8e:86:d0: 8c:8e:fe:33:9f:b2:d9:9e:90:10:5a:cd:12:68:5b:c5:71:2c: 0a:d3:bd:77:12:e0:b0:de:2e:d0:aa:c8:89:bd:c2:ec:f8:c9: 36:a7:45:2d:f4:59:e3:76:27:fb:40:dd:76:19:24:d8:20:44: 80:c3:db:52:4d:64:ea:42:20:3d:a9:65:1e:ea:c4:16:41:59: b3:a4:63:28:66:ce:e1:43:ee:28:7b:4d:42:f5:fa:3d:39:96: 9e:9e:d7:24:27:c2:99:8d:2e:42:84:26:8f:a6:7d:91:a1:48: cf:68:09:bf:e5:c3:14:46:73:88:e5:f5:63:65:29:b1:8a:d5: 10:02:96:f3:2c:a9:7e:b3:67:7a:57:c0:c4:c2:0c:4d:dc:b2: e8:52:86:9f:a2:57:33:bd:fb:00:6d:54:56:5c:38:ff:34:01: a6:17:ee:01:10:90:79:fa:c9:85:32:6e:72:d1:36:6c:ea:e7: eb:6a:c2:f6:3b:67:a9:60:0a:be:bb:00:96:e2:02:79:b3:76: ce:ce:1a:d8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRDNkQ0QjI5RTNBOTY5 M0RFMjc1MjYxN0NBM0Q0NjVCNkI2MEI0OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw4o/GU7IOs3LbKeWNxNhxv2rtK+E6CK7KQwYkeZNwS2GG8yGS V4LdMcugI0LJTh5wnj+zJBm7qN2yiWKCKVfFruCVTpxrN1Av6jom2qDjER0qmDvr X06tAnMe1d72RCx+kFihP7YiLCbo6jVxOx6sGnbWLfUivVLFxdTMNDDg+E96OLjT WNyAP9MHpwkVkRZZyRVCkKOUZ92a4VYJNQZSfeWB5U97X9BO1BjmFeIgmfoIIvDu HRUFrtnGTFhhxMyZUrjj8SXJDZP4SLx30H5j7N49gXW7hBv9XUFBHpuzW/Nx3yku wDh9Ayc0wIjKD0D6ty4eueG+gIP/kO9a5MIzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTG1LKeOpaT3idSYXyj1GW2tgtJUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1RHMUxLZU9wYVQzaWRTWVh5ajFHVzJ0Z3RKVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxaXQwDQYJKoZIhvcNAQELBQADggEBAK8PEC4WlGxyqyjsccAqUlMI9aXk 7rPCLz8Ex+hXXCV0vsAaPVjFHIZ6cMST1AAUau3+846G0IyO/jOfstmekBBazRJo W8VxLArTvXcS4LDeLtCqyIm9wuz4yTanRS30WeN2J/tA3XYZJNggRIDD21JNZOpC ID2pZR7qxBZBWbOkYyhmzuFD7ih7TUL1+j05lp6e1yQnwpmNLkKEJo+mfZGhSM9o Cb/lwxRGc4jl9WNlKbGK1RAClvMsqX6zZ3pXwMTCDE3csuhShp+iVzO9+wBtVFZc OP80AaYX7gEQkHn6yYUybnLRNmzq5+tqwvY7Z6lgCr67AJbiAnmzds7OGtg= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:51 2025 by rpki-client on console.sobornost.net