$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YdvLCLkjVEuGZm7lJu3WEUuExMQ.roa File: YdvLCLkjVEuGZm7lJu3WEUuExMQ.roa (raw, json) Hash identifier: PA5Ip/8O3gRyAwUfFC6WsrrKHAWDBJWGljlH8D6m/sw= Subject key identifier: 61:DB:CB:08:B9:23:54:4B:86:66:6E:E5:26:ED:D6:11:4B:84:C4:C4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D32 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YdvLCLkjVEuGZm7lJu3WEUuExMQ.roa Signing time: Tue 01 Apr 2025 02:13:54 +0000 ROA not before: Tue 01 Apr 2025 02:13:54 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.79.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:54 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=61DBCB08B923544B86666EE526EDD6114B84C4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:e3:7b:0e:1a:8a:e3:0e:08:b2:96:6c:9c: 67:b2:c2:2b:ad:bd:09:5d:d2:a1:5d:ac:60:ec:11: b0:31:05:3b:2d:dd:2d:23:bd:79:3b:a9:3c:24:18: 3c:ff:81:2f:8d:67:52:56:24:ef:40:d9:09:79:15: bf:9a:46:62:6f:b0:44:87:da:1c:e8:8f:94:bd:67: b5:83:f1:15:41:09:a1:2a:51:5b:d7:11:b7:5b:92: 3e:03:95:56:13:20:59:f1:d5:25:68:10:50:cd:5a: a2:cd:2b:dd:6a:90:43:ac:3c:bf:69:90:bc:ab:c8: 24:0d:0e:ad:9b:f9:4e:ce:35:6b:72:b3:c1:b4:a5: 99:04:c5:83:63:33:dc:66:4e:51:36:d8:d5:dd:76: 6d:39:75:13:52:e5:8c:ff:23:87:0b:5e:31:34:e8: 72:ba:1f:d6:92:72:69:a0:8e:cc:96:5c:6b:4f:e2: 8d:83:60:ec:46:7a:c2:93:23:56:d9:bb:ec:64:e7: f8:61:5a:7a:eb:87:f6:6f:fe:b3:0a:eb:0e:c4:c6: 43:4a:9b:58:bf:2f:c9:51:df:25:68:c9:8e:5d:34: 80:76:12:98:3f:1e:51:4a:d2:32:63:92:66:53:df: 32:c3:e1:97:4d:a3:a3:1f:42:f8:c8:f6:2b:96:48: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DB:CB:08:B9:23:54:4B:86:66:6E:E5:26:ED:D6:11:4B:84:C4:C4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YdvLCLkjVEuGZm7lJu3WEUuExMQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.67.0/24 Signature Algorithm: sha256WithRSAEncryption 45:e2:ab:fd:dd:b0:e3:20:ac:13:45:d7:a6:d3:b9:22:c9:37: b4:78:0c:65:92:40:9b:45:30:f3:05:a8:f6:45:5a:d3:fe:64: e3:c4:80:44:f7:6c:c3:79:58:4f:22:0b:76:9c:dd:fa:c2:ac: 90:c3:42:08:cc:92:5e:8a:e1:e1:90:04:a0:ef:a2:7a:8f:7d: 07:b0:fb:32:14:60:73:c0:1b:88:36:95:2f:0c:33:82:fb:05: d8:ff:5d:19:d9:41:88:c6:53:53:cf:ef:4d:9d:09:e6:55:29: 08:51:58:36:51:cd:e4:64:39:80:a9:b4:19:cd:47:49:30:7c: 35:c1:61:23:df:2d:29:4f:82:c5:9f:d4:00:87:60:0c:00:19: c8:c9:80:5b:eb:67:28:04:ca:01:46:c2:b0:a5:3b:8d:83:0c: dc:ff:58:44:55:67:e2:a0:f0:12:d7:1d:7b:94:84:d3:77:21: 02:ef:da:48:04:6e:8b:9d:b8:7c:18:dc:a6:7d:9d:f2:46:43: cf:33:36:27:28:39:fd:0d:7a:a1:89:ab:93:a7:92:78:b3:80: 70:0f:5d:ff:04:39:d1:fe:ef:6f:69:cc:85:74:b5:16:f5:f2: 65:6b:71:ff:09:9e:78:f4:bb:78:43:17:8c:e5:b5:fb:6e:d4: 38:a6:52:e2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYxREJDQjA4QjkyMzU0 NEI4NjY2NkVFNTI2RURENjExNEI4NEM0QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCa3eN7DhqK4w4IspZsnGeywiutvQld0qFdrGDsEbAxBTst3S0j vXk7qTwkGDz/gS+NZ1JWJO9A2Ql5Fb+aRmJvsESH2hzoj5S9Z7WD8RVBCaEqUVvX Ebdbkj4DlVYTIFnx1SVoEFDNWqLNK91qkEOsPL9pkLyryCQNDq2b+U7ONWtys8G0 pZkExYNjM9xmTlE22NXddm05dRNS5Yz/I4cLXjE06HK6H9aScmmgjsyWXGtP4o2D YOxGesKTI1bZu+xk5/hhWnrrh/Zv/rMK6w7ExkNKm1i/L8lR3yVoyY5dNIB2Epg/ HlFK0jJjkmZT3zLD4ZdNo6MfQvjI9iuWSF/pAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYdvLCLkjVEuGZm7lJu3WEUuExMQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lkdkxDTGtqVkV1R1ptN2xKdTNXRVV1RXhNUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABT0MwDQYJKoZIhvcNAQELBQADggEBAEXiq/3dsOMgrBNF16bTuSLJN7R4 DGWSQJtFMPMFqPZFWtP+ZOPEgET3bMN5WE8iC3ac3frCrJDDQgjMkl6K4eGQBKDv onqPfQew+zIUYHPAG4g2lS8MM4L7Bdj/XRnZQYjGU1PP702dCeZVKQhRWDZRzeRk OYCptBnNR0kwfDXBYSPfLSlPgsWf1ACHYAwAGcjJgFvrZygEygFGwrClO42DDNz/ WERVZ+Kg8BLXHXuUhNN3IQLv2kgEbouduHwY3KZ9nfJGQ88zNicoOf0NeqGJq5On knizgHAPXf8EOdH+729pzIV0tRb18mVrcf8Jnnj0u3hDF4zltftu1DimUuI= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:54 2025 by rpki-client on console.sobornost.net