$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VYNAElr7EuYBOqsBRtc4POWsqHI.roa File: VYNAElr7EuYBOqsBRtc4POWsqHI.roa (raw, json) Hash identifier: kag8aVGpLulEK83ZNxzQ7Pu84tA8ej4jzynqcdnrlcQ= Subject key identifier: 55:83:40:12:5A:FB:12:E6:01:3A:AB:01:46:D7:38:3C:E5:AC:A8:72 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C88 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VYNAElr7EuYBOqsBRtc4POWsqHI.roa Signing time: Tue 01 Apr 2025 02:03:18 +0000 ROA not before: Tue 01 Apr 2025 02:03:18 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:18 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=558340125AFB12E6013AAB0146D7383CE5ACA872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:e6:41:dc:db:64:18:9a:3d:27:3d:f8:92: ce:c0:37:8a:20:c7:67:60:bf:8b:7d:60:4e:0f:51: 37:79:45:1d:ea:2f:c3:64:02:d4:06:da:a8:b9:6a: 45:e1:4f:10:e0:f8:b6:26:f7:08:08:28:47:93:f2: 74:f2:44:8d:c9:88:50:1d:a3:ba:a5:db:8b:0c:bb: d1:a5:ab:04:96:60:db:78:4c:0d:b0:f3:bf:bd:76: 71:c7:08:fe:ae:04:30:8a:1c:63:a3:d3:de:d5:77: 7a:c2:e8:58:ce:5f:3a:14:07:1f:10:5b:c3:70:fd: b7:b8:94:17:1d:79:4b:46:b6:bc:cb:c5:c6:43:75: 82:5e:51:09:bf:6d:c4:e7:1d:74:ba:a3:83:c8:ad: 3f:70:f2:13:e3:9a:39:38:b1:e7:b4:11:00:01:fd: d1:fe:65:1f:54:a2:5a:1c:48:5f:eb:81:f2:fa:fd: 9c:9f:4c:a0:58:0d:22:58:52:0c:8a:10:bc:56:74: 77:7c:09:59:46:2b:c5:5e:81:76:34:a4:d2:9f:12: 36:14:45:e5:6c:02:55:19:49:82:f3:fc:f0:a7:6c: b1:fa:bb:15:43:43:25:7f:f5:42:78:48:93:a2:ec: 34:af:4a:2b:3b:a1:92:24:95:91:a2:15:79:34:e1: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:83:40:12:5A:FB:12:E6:01:3A:AB:01:46:D7:38:3C:E5:AC:A8:72 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VYNAElr7EuYBOqsBRtc4POWsqHI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.172.0/22 Signature Algorithm: sha256WithRSAEncryption 31:c2:f3:c8:03:4a:09:5a:77:41:4e:d7:2d:55:60:e5:3b:96: 9f:ec:ce:33:90:d8:15:cc:ce:8f:97:b9:5b:42:55:eb:0a:c6: ec:6e:a1:e6:d7:3f:38:ae:0e:df:c1:8a:9e:25:c1:08:37:a9: 2f:09:64:a1:b7:53:68:39:69:10:0a:3d:0e:5e:cd:99:74:72: 26:03:0e:eb:32:cb:39:1b:e8:99:8b:54:09:eb:0b:5b:2c:6d: 09:cb:c3:8e:e5:16:d1:50:54:5a:e6:ae:e1:fd:e3:4d:8f:b6: 50:37:b0:03:53:02:c9:b5:36:df:36:47:89:d9:e8:99:39:25: cb:f4:01:79:b8:9d:21:aa:a2:84:13:66:13:78:19:ac:dc:e5: b1:71:15:10:ba:93:d4:6b:d4:ea:bb:a7:82:45:45:23:75:e7: 03:59:cb:e7:3e:cb:30:43:61:c5:9b:ce:ca:cf:42:e9:c1:63: 0e:b0:13:af:1f:74:1d:d2:b2:8a:eb:64:e1:9c:ea:ef:13:df: b5:af:e8:2d:bf:f5:5d:9a:9c:ba:6f:b1:04:df:7b:18:0a:17: e3:ae:98:01:92:72:f5:05:55:28:e1:02:42:b5:dc:31:b8:9a: 9d:e9:e8:d4:4b:e0:cf:7f:83:37:de:9d:f0:5d:c4:be:70:89: 51:19:f0:e4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMThaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU1ODM0MDEyNUFGQjEy RTYwMTNBQUIwMTQ2RDczODNDRTVBQ0E4NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/YOZB3NtkGJo9Jz34ks7AN4ogx2dgv4t9YE4PUTd5RR3qL8Nk AtQG2qi5akXhTxDg+LYm9wgIKEeT8nTyRI3JiFAdo7ql24sMu9GlqwSWYNt4TA2w 87+9dnHHCP6uBDCKHGOj097Vd3rC6FjOXzoUBx8QW8Nw/be4lBcdeUtGtrzLxcZD dYJeUQm/bcTnHXS6o4PIrT9w8hPjmjk4see0EQAB/dH+ZR9UolocSF/rgfL6/Zyf TKBYDSJYUgyKELxWdHd8CVlGK8VegXY0pNKfEjYUReVsAlUZSYLz/PCnbLH6uxVD QyV/9UJ4SJOi7DSvSis7oZIklZGiFXk04UipAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVYNAElr7EuYBOqsBRtc4POWsqHIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1ZZTkFFbHI3RXVZQk9xc0JSdGM0UE9Xc3FISS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT6wwDQYJKoZIhvcNAQELBQADggEBADHC88gDSglad0FO1y1VYOU7lp/s zjOQ2BXMzo+XuVtCVesKxuxuoebXPziuDt/Bip4lwQg3qS8JZKG3U2g5aRAKPQ5e zZl0ciYDDusyyzkb6JmLVAnrC1ssbQnLw47lFtFQVFrmruH9402PtlA3sANTAsm1 Nt82R4nZ6Jk5Jcv0AXm4nSGqooQTZhN4Gazc5bFxFRC6k9Rr1Oq7p4JFRSN15wNZ y+c+yzBDYcWbzsrPQunBYw6wE68fdB3SsorrZOGc6u8T37Wv6C2/9V2anLpvsQTf exgKF+OumAGScvUFVSjhAkK13DG4mp3p6NRL4M9/gzfenfBdxL5wiVEZ8OQ= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:52 2025 by rpki-client on console.sobornost.net