$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_-IKSFJGd-hC0kHWG4gEUjhKDP0.roa File: _-IKSFJGd-hC0kHWG4gEUjhKDP0.roa (raw, json) Hash identifier: zcsH4nosbeESqHafCYd7LCAFpDPqrFWjyxOlPvvNrk8= Subject key identifier: FF:E2:0A:48:52:46:77:E8:42:D2:41:D6:1B:88:04:52:38:4A:0C:FD Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 094A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_-IKSFJGd-hC0kHWG4gEUjhKDP0.roa Signing time: Sun 30 Jun 2024 01:29:34 +0000 ROA not before: Sun 30 Jun 2024 01:29:34 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.72.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:29:34 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=FFE20A48524677E842D241D61B880452384A0CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:32:34:67:b4:36:ff:ef:ec:a7:40:91:38: d3:21:c1:50:f9:f7:da:bf:a0:34:27:fe:37:4a:da: 4d:37:f9:04:30:1b:c8:16:57:d4:be:ee:7e:b1:01: a1:be:dd:22:71:bb:36:33:87:7f:ff:5e:d9:3a:76: fb:0c:f9:84:ab:15:9c:6f:cb:3b:eb:75:72:d1:19: 42:84:f9:07:75:de:c9:5d:e6:ff:02:72:c3:cc:37: ca:62:de:f0:81:da:4b:9a:cc:b0:b9:83:89:d0:78: 8e:d5:f5:d4:4d:3e:6e:a9:a6:a7:82:86:7f:63:61: d5:74:33:24:18:f2:c3:85:fd:f8:40:3a:b5:ce:36: 42:c5:1b:58:a7:51:c7:64:45:30:68:a1:0c:83:a8: 51:60:7d:02:a8:03:f9:e1:5f:98:1f:1b:13:30:ea: 98:0f:6d:2b:86:7d:b2:46:66:14:fb:3d:c6:aa:1e: 5a:7f:38:fd:81:c5:cf:53:de:dc:ce:99:f9:7a:c8: 3b:62:f3:3f:f6:5c:ab:18:cf:72:20:0d:7e:3c:1a: b2:8a:4b:3b:3a:fa:c8:15:40:80:3e:ea:dc:57:17: a9:0b:05:62:7d:83:41:c2:fa:f7:17:63:7b:e2:d0: 48:8d:c3:af:04:1b:c2:78:ed:18:46:f4:1b:de:df: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E2:0A:48:52:46:77:E8:42:D2:41:D6:1B:88:04:52:38:4A:0C:FD X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_-IKSFJGd-hC0kHWG4gEUjhKDP0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.72.16.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:00:a1:d9:05:01:9f:77:b4:46:6b:28:df:98:56:b1:a8:51: c2:d0:a6:dd:96:c5:09:a5:d9:a7:fb:0a:85:99:38:cc:b5:79: 1c:4e:18:7e:06:4c:02:f7:39:d4:07:fc:b1:c0:c2:52:70:5d: 07:ef:1b:15:71:4d:05:93:0f:74:b9:92:7a:52:e4:b3:da:d0: c2:cc:9c:48:6e:0d:e3:35:98:94:0b:3a:df:46:e4:d6:a7:b8: 8b:2a:46:72:45:ac:05:1b:c9:68:98:cf:4d:68:d9:73:4e:87: f9:a8:4a:50:3e:f7:48:0b:f1:ce:e5:f2:ee:81:61:28:d2:4c: 83:23:21:a5:87:a7:09:3c:4a:fa:db:81:0c:ff:91:8d:58:2f: a9:49:3e:da:a1:35:31:e6:e1:c3:30:b8:5a:a3:c6:74:bf:a0: eb:4d:5c:05:8e:f5:c0:b9:fa:1d:0a:43:ab:2b:94:bc:0b:27: bf:e5:02:c3:de:dd:b6:7e:32:96:a4:04:42:c5:8b:42:36:6e: b1:cd:84:95:53:34:34:e1:5a:a6:fa:b6:1a:7c:81:bb:20:45: 3e:70:8b:e9:f9:b1:3c:5d:66:45:b4:9d:b9:09:78:c9:fe:0b: e6:82:c3:7c:f0:e3:e3:37:1f:83:0a:df:c5:b4:3d:2e:36:46: 92:d7:22:a9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTI5MzRaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEZGRTIwQTQ4NTI0Njc3 RTg0MkQyNDFENjFCODgwNDUyMzg0QTBDRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL4jI0Z7Q2/+/sp0CRONMhwVD599q/oDQn/jdK2k03+QQwG8gW V9S+7n6xAaG+3SJxuzYzh3//Xtk6dvsM+YSrFZxvyzvrdXLRGUKE+Qd13sld5v8C csPMN8pi3vCB2kuazLC5g4nQeI7V9dRNPm6ppqeChn9jYdV0MyQY8sOF/fhAOrXO NkLFG1inUcdkRTBooQyDqFFgfQKoA/nhX5gfGxMw6pgPbSuGfbJGZhT7PcaqHlp/ OP2Bxc9T3tzOmfl6yDti8z/2XKsYz3IgDX48GrKKSzs6+sgVQIA+6txXF6kLBWJ9 g0HC+vcXY3vi0EiNw68EG8J47RhG9Bve33dBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU/+IKSFJGd+hC0kHWG4gEUjhKDP0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L18tSUtTRkpHZC1oQzBrSFdHNGdFVWpoS0RQMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBSBAwDQYJKoZIhvcNAQELBQADggEBAA4AodkFAZ93tEZrKN+YVrGoUcLQ pt2WxQml2af7CoWZOMy1eRxOGH4GTAL3OdQH/LHAwlJwXQfvGxVxTQWTD3S5knpS 5LPa0MLMnEhuDeM1mJQLOt9G5NanuIsqRnJFrAUbyWiYz01o2XNOh/moSlA+90gL 8c7l8u6BYSjSTIMjIaWHpwk8SvrbgQz/kY1YL6lJPtqhNTHm4cMwuFqjxnS/oOtN XAWO9cC5+h0KQ6srlLwLJ7/lAsPe3bZ+MpakBELFi0I2brHNhJVTNDThWqb6thp8 gbsgRT5wi+n5sTxdZkW0nbkJeMn+C+aCw3zw4+M3H4MK38W0PS42RpLXIqk= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:54 2025 by rpki-client on console.sobornost.net