$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y0kHRx92-zAJGMqQGNO6BtdxVog.roa File: Y0kHRx92-zAJGMqQGNO6BtdxVog.roa (raw, json) Hash identifier: rkPpD+WDPe/VhfkOYI1ToqjJBGKxYu2agnUYhqCViPY= Subject key identifier: 63:49:07:47:1F:76:FB:30:09:18:CA:90:18:D3:BA:06:D7:71:56:88 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B64 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y0kHRx92-zAJGMqQGNO6BtdxVog.roa Signing time: Tue 01 Apr 2025 01:33:26 +0000 ROA not before: Tue 01 Apr 2025 01:33:26 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.110.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:33:26 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=634907471F76FB300918CA9018D3BA06D7715688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:25:78:d9:45:4e:5a:71:d3:7e:a4:42:3e: 91:50:e9:e5:1b:46:a7:74:fd:89:7e:d7:26:b6:db: cf:da:b4:0d:62:60:4b:b3:8e:6f:91:38:35:d1:0c: 3d:fc:0d:f3:b5:70:8d:d0:9c:6c:7c:19:18:4c:12: 31:57:82:91:fd:72:a4:ac:8b:b7:32:69:e9:cb:4a: 23:6d:98:18:b1:3d:87:13:05:0c:29:52:5c:f0:fb: 50:9d:32:1d:97:dc:ee:49:7f:d7:40:de:11:45:9f: fa:25:bb:db:96:4c:35:23:63:8b:fd:66:11:18:4f: 91:0c:1e:ba:5b:de:9b:98:df:bf:2e:ac:18:23:f8: 28:97:26:7a:19:d2:ef:21:1d:ea:43:92:74:af:ea: 9c:cc:14:2f:b3:48:31:0d:d5:e9:82:77:a5:4e:13: bf:5a:47:d9:91:a6:88:84:c1:dc:56:45:f2:da:8f: e8:58:df:ed:3f:67:a7:ad:55:2a:8d:01:bb:a4:58: 4d:03:3c:e4:85:68:a7:28:f2:bc:1b:dc:a3:5c:9c: 8a:09:a8:11:95:56:27:44:d7:73:81:20:14:68:fb: 72:a9:8f:23:32:69:0c:60:b7:5d:74:c6:f1:6e:0e: 04:d1:37:22:cb:13:e1:b9:f5:32:77:ec:c5:b8:85: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:49:07:47:1F:76:FB:30:09:18:CA:90:18:D3:BA:06:D7:71:56:88 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Y0kHRx92-zAJGMqQGNO6BtdxVog.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.110.124.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:33:83:f6:2f:38:ea:e6:d9:50:f6:38:91:dd:e6:d5:54:dd: a9:01:32:ba:7c:73:af:69:b0:90:03:98:4c:a4:53:21:d0:ac: 14:48:d1:29:3d:f8:68:63:1e:1e:55:72:89:61:19:b0:e2:ea: 47:51:e3:83:49:07:5d:59:0a:47:7f:f9:38:77:d9:8b:7f:f6: 95:eb:ab:83:e0:ca:ae:07:11:13:1d:35:fe:20:7a:ed:da:d9: 44:29:a2:e8:b7:f2:da:b7:c9:69:fb:82:3c:d5:96:38:f4:a3: 9d:de:38:57:90:e5:41:d6:fb:4c:c7:5e:50:09:6e:e1:2f:e1: 20:19:77:fb:49:38:bf:6d:04:d9:7a:a4:d6:98:8a:31:5e:97: c8:d3:38:ff:e0:70:e7:bc:45:21:61:c0:03:d6:69:92:6b:e2: 10:4b:e9:87:85:50:2d:9c:4d:4a:46:c2:22:90:cb:ce:f3:80: a6:f7:2e:1e:f7:3d:2c:cb:1d:57:ef:5e:02:a2:ce:de:f1:1e: ed:30:ef:b2:a9:b8:f8:20:ef:c4:ab:1e:dd:a6:a1:41:0a:42: d6:13:bd:f1:f8:99:4b:d3:fb:23:67:38:bc:08:45:b6:09:0c: af:39:14:39:e5:22:14:3f:dd:35:f2:45:fc:ba:bc:b3:c0:5c: 76:3d:6f:d1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTMzMjZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYzNDkwNzQ3MUY3NkZC MzAwOTE4Q0E5MDE4RDNCQTA2RDc3MTU2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVqyV42UVOWnHTfqRCPpFQ6eUbRqd0/Yl+1ya228/atA1iYEuz jm+RODXRDD38DfO1cI3QnGx8GRhMEjFXgpH9cqSsi7cyaenLSiNtmBixPYcTBQwp Ulzw+1CdMh2X3O5Jf9dA3hFFn/olu9uWTDUjY4v9ZhEYT5EMHrpb3puY378urBgj +CiXJnoZ0u8hHepDknSv6pzMFC+zSDEN1emCd6VOE79aR9mRpoiEwdxWRfLaj+hY 3+0/Z6etVSqNAbukWE0DPOSFaKco8rwb3KNcnIoJqBGVVidE13OBIBRo+3KpjyMy aQxgt110xvFuDgTRNyLLE+G59TJ37MW4heQPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUY0kHRx92+zAJGMqQGNO6BtdxVogwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1kwa0hSeDkyLXpBSkdNcVFHTk82QnRkeFZvZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxbnwwDQYJKoZIhvcNAQELBQADggEBAF8zg/YvOOrm2VD2OJHd5tVU3akB Mrp8c69psJADmEykUyHQrBRI0Sk9+GhjHh5VcolhGbDi6kdR44NJB11ZCkd/+Th3 2Yt/9pXrq4Pgyq4HERMdNf4geu3a2UQpoui38tq3yWn7gjzVljj0o53eOFeQ5UHW +0zHXlAJbuEv4SAZd/tJOL9tBNl6pNaYijFel8jTOP/gcOe8RSFhwAPWaZJr4hBL 6YeFUC2cTUpGwiKQy87zgKb3Lh73PSzLHVfvXgKizt7xHu0w77KpuPgg78SrHt2m oUEKQtYTvfH4mUvT+yNnOLwIRbYJDK85FDnlIhQ/3TXyRfy6vLPAXHY9b9E= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:53 2025 by rpki-client on console.sobornost.net