$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XE4pf9VGDBxvjD5aZ5rsOJL_NaU.roa File: XE4pf9VGDBxvjD5aZ5rsOJL_NaU.roa (raw, json) Hash identifier: 65Eqq1oq5Q8p19BeC9HdBUIpmbGpULEpSlqax9RMh7c= Subject key identifier: 5C:4E:29:7F:D5:46:0C:1C:6F:8C:3E:5A:67:9A:EC:38:92:FF:35:A5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DFE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XE4pf9VGDBxvjD5aZ5rsOJL_NaU.roa Signing time: Tue 01 Apr 2025 02:29:13 +0000 ROA not before: Tue 01 Apr 2025 02:29:13 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:29:13 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=5C4E297FD5460C1C6F8C3E5A679AEC3892FF35A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:af:00:f9:02:6b:eb:7b:2c:37:a3:f6:19: b5:e5:60:2f:45:59:5c:af:15:4e:48:07:37:28:6b: c0:7f:e1:f4:0d:fa:11:40:67:27:96:fe:44:19:49: a6:b9:8f:40:70:aa:21:8d:f2:29:66:b9:3b:3a:1d: 6a:e4:41:48:1d:1c:db:3d:f0:8f:b7:54:b5:ed:86: 3e:3f:66:1e:aa:30:e8:05:a6:e9:4c:29:17:67:77: 43:e4:be:9c:3c:0d:41:36:08:ce:5c:a9:3f:cf:b4: 15:64:68:32:91:35:2d:cd:e6:13:3a:63:7a:ff:41: 1a:7f:bf:2a:d6:c1:70:7f:fc:8e:bc:25:12:dc:de: c3:5f:45:da:ad:da:0a:31:eb:ee:db:50:20:ec:5e: 34:49:68:37:83:56:20:7c:b8:ae:fd:3f:1f:0f:0e: 8a:f4:0b:7f:6c:d7:7e:2d:b4:a7:66:79:e6:c0:8d: f8:71:25:e4:c0:5c:7b:7c:c9:51:fd:75:03:b2:99: 0c:05:7b:f6:fb:41:56:e9:51:b7:2a:48:41:02:49: 10:4a:a9:30:82:71:36:0e:3a:66:21:34:71:9c:b2: 86:71:ec:19:17:e0:f9:6e:fb:a9:bd:92:df:cc:e6: 45:67:7a:04:20:17:20:ca:b4:e6:ba:18:8b:da:e8: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4E:29:7F:D5:46:0C:1C:6F:8C:3E:5A:67:9A:EC:38:92:FF:35:A5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XE4pf9VGDBxvjD5aZ5rsOJL_NaU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.40.0/23 Signature Algorithm: sha256WithRSAEncryption ce:79:bf:95:77:19:78:0f:14:25:80:98:94:6b:be:1d:5f:b0: 7c:7a:60:ad:a8:2a:7c:43:e1:01:f8:a2:17:21:37:82:47:32: ab:d4:c5:c7:0c:34:05:4d:ba:04:27:bc:10:e9:af:ed:4c:d9: 00:b6:9c:c4:f8:ca:a2:c8:b3:96:40:e7:16:62:79:48:e7:0b: b3:b8:bd:dd:fa:bd:1c:30:78:06:1e:0a:0f:ff:b4:2c:71:9b: 89:3b:06:97:fd:19:d5:a2:f6:e7:88:20:33:a8:1e:08:d6:92: 4b:65:27:26:a0:9a:54:fd:34:60:de:96:7e:46:7a:9e:70:94: 2c:12:f6:6f:c9:b9:fe:64:4e:ae:45:b0:15:c7:c3:32:b6:1f: 91:1b:f0:f5:ab:5a:68:03:80:da:4e:95:db:f6:79:6b:db:a3: 92:6a:7f:25:ae:5f:6f:15:2d:29:b8:a7:47:2d:b9:bb:79:9a: c3:cb:66:84:36:aa:b2:55:d1:5f:21:8d:3f:02:fb:14:8f:55: 23:fb:7a:5c:64:a2:82:77:90:c3:3d:39:96:13:ec:d2:ff:4d: 29:ef:e0:6a:92:32:ca:5a:e5:3e:d0:77:84:c2:36:02:4f:c8: 79:d8:ca:6b:fc:8b:ca:4a:a4:fb:39:65:7a:69:aa:2c:a5:90: 78:6f:cb:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI5MTNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVDNEUyOTdGRDU0NjBD MUM2RjhDM0U1QTY3OUFFQzM4OTJGRjM1QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+aq8A+QJr63ssN6P2GbXlYC9FWVyvFU5IBzcoa8B/4fQN+hFA ZyeW/kQZSaa5j0BwqiGN8ilmuTs6HWrkQUgdHNs98I+3VLXthj4/Zh6qMOgFpulM KRdnd0Pkvpw8DUE2CM5cqT/PtBVkaDKRNS3N5hM6Y3r/QRp/vyrWwXB//I68JRLc 3sNfRdqt2gox6+7bUCDsXjRJaDeDViB8uK79Px8PDor0C39s134ttKdmeebAjfhx JeTAXHt8yVH9dQOymQwFe/b7QVbpUbcqSEECSRBKqTCCcTYOOmYhNHGcsoZx7BkX 4Plu+6m9kt/M5kVnegQgFyDKtOa6GIva6DjjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXE4pf9VGDBxvjD5aZ5rsOJL/NaUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1hFNHBmOVZHREJ4dmpENWFaNXJzT0pMX05hVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBTigwDQYJKoZIhvcNAQELBQADggEBAM55v5V3GXgPFCWAmJRrvh1fsHx6 YK2oKnxD4QH4ohchN4JHMqvUxccMNAVNugQnvBDpr+1M2QC2nMT4yqLIs5ZA5xZi eUjnC7O4vd36vRwweAYeCg//tCxxm4k7Bpf9GdWi9ueIIDOoHgjWkktlJyagmlT9 NGDeln5Gep5wlCwS9m/Juf5kTq5FsBXHwzK2H5Eb8PWrWmgDgNpOldv2eWvbo5Jq fyWuX28VLSm4p0ctubt5msPLZoQ2qrJV0V8hjT8C+xSPVSP7elxkooJ3kMM9OZYT 7NL/TSnv4GqSMspa5T7Qd4TCNgJPyHnYymv8i8pKpPs5ZXppqiylkHhvyyM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:53 2025 by rpki-client on console.sobornost.net