$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/amPAVdwkl1yxi33tXeQl0uojmkQ.roa File: amPAVdwkl1yxi33tXeQl0uojmkQ.roa (raw, json) Hash identifier: hI2o4Iu/h4rod6KOErAaorxAdyPRrJwLWirdsC8U3uE= Subject key identifier: 6A:63:C0:55:DC:24:97:5C:B1:8B:7D:ED:5D:E4:25:D2:EA:23:9A:44 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D0D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/amPAVdwkl1yxi33tXeQl0uojmkQ.roa Signing time: Tue 01 Apr 2025 02:11:42 +0000 ROA not before: Tue 01 Apr 2025 02:11:42 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3341 (0xd0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:11:42 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=6A63C055DC24975CB18B7DED5DE425D2EA239A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:17:b6:82:41:c0:26:db:7c:ea:50:bf:a9: 23:39:73:93:95:f7:53:55:62:9f:59:4a:05:9d:64: b9:a9:9f:e9:e1:ac:13:ae:19:6a:6d:5e:27:bb:ac: dc:3a:4e:2f:8e:50:de:f0:a7:0d:8f:2b:ac:0a:33: d6:9f:50:3a:cf:05:ce:bb:00:77:62:89:eb:e4:36: a2:49:74:0f:8f:76:75:33:c5:f5:66:90:c0:2a:aa: f3:6b:1c:83:21:c4:88:14:34:dd:c6:2f:7b:9a:72: 7f:bc:df:5b:3c:54:60:de:c9:1a:82:c0:1b:6b:5f: 1b:24:1d:33:54:52:b5:7e:65:eb:34:be:01:0a:5d: f3:95:11:5e:bf:12:cb:28:62:5d:c2:4f:67:20:d9: 32:fe:5b:80:e2:d8:4d:45:d0:54:15:9c:41:c1:8a: 06:e8:6e:e8:ca:1e:18:a7:6d:f6:f4:4a:c2:8c:79: 65:2d:c2:a0:70:5c:88:9c:8d:1e:4c:1f:58:ff:64: ed:3d:85:ef:09:8e:39:95:29:4b:c0:51:78:51:00: 94:70:38:56:69:77:da:9d:13:df:4f:ae:6f:58:94: 86:0c:53:4e:db:db:1f:f0:66:57:7a:01:14:e8:45: 18:c3:7e:c8:be:18:ae:37:05:f2:d2:61:e5:12:d7: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:63:C0:55:DC:24:97:5C:B1:8B:7D:ED:5D:E4:25:D2:EA:23:9A:44 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/amPAVdwkl1yxi33tXeQl0uojmkQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.211.0/24 Signature Algorithm: sha256WithRSAEncryption 19:cc:90:b4:c6:3f:de:1e:6c:b0:e8:ed:e7:c2:26:b4:01:6c: 73:02:98:88:b2:f6:81:08:83:0e:5c:0f:6a:6a:6e:d4:07:d0: 7a:f4:97:b9:90:8f:fb:df:61:38:2b:cf:71:eb:76:39:3f:a6: 3c:56:ee:c3:40:2a:0c:c5:31:be:8d:7a:b1:f2:cf:86:6c:36: 8a:de:93:7f:05:ec:fa:cf:6c:a3:fe:37:12:6b:30:15:b3:63: 79:60:52:2d:42:07:a6:8c:e6:cd:e8:f6:d4:e8:3f:c5:51:ab: 1a:86:88:80:9c:a7:fc:a9:3c:3b:f8:60:88:40:2f:b1:60:5d: 67:21:49:48:1d:ec:52:6c:35:2c:2a:3d:a9:fb:53:79:18:6c: 21:29:be:c9:c3:66:0e:86:0a:69:31:12:f4:57:1a:6c:9a:e3: 01:b8:3d:94:58:25:39:bb:8b:19:fd:2c:43:8f:88:78:d8:a5: 65:1f:6f:07:5a:a5:4b:30:ef:f5:44:4a:91:e6:cc:b7:a8:4e: 11:1b:3a:3a:55:f0:c0:3a:89:5d:fc:d7:2c:a5:3e:e9:da:35: 3c:21:f3:f8:17:f2:3e:43:de:76:97:44:3f:1c:75:b6:a9:55: 20:89:10:33:5f:5f:41:52:c6:d6:8d:e8:86:e8:c3:e2:a7:59: df:53:2e:75 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjExNDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBNjNDMDU1REMyNDk3 NUNCMThCN0RFRDVERTQyNUQyRUEyMzlBNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvzBe2gkHAJtt86lC/qSM5c5OV91NVYp9ZSgWdZLmpn+nhrBOu GWptXie7rNw6Ti+OUN7wpw2PK6wKM9afUDrPBc67AHdiievkNqJJdA+PdnUzxfVm kMAqqvNrHIMhxIgUNN3GL3uacn+831s8VGDeyRqCwBtrXxskHTNUUrV+Zes0vgEK XfOVEV6/EssoYl3CT2cg2TL+W4Di2E1F0FQVnEHBigbobujKHhinbfb0SsKMeWUt wqBwXIicjR5MH1j/ZO09he8JjjmVKUvAUXhRAJRwOFZpd9qdE99Prm9YlIYMU07b 2x/wZld6ARToRRjDfsi+GK43BfLSYeUS12C7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUamPAVdwkl1yxi33tXeQl0uojmkQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2FtUEFWZHdrbDF5eGkzM3RYZVFsMHVvam1rUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxatMwDQYJKoZIhvcNAQELBQADggEBABnMkLTGP94ebLDo7efCJrQBbHMC mIiy9oEIgw5cD2pqbtQH0Hr0l7mQj/vfYTgrz3Hrdjk/pjxW7sNAKgzFMb6NerHy z4ZsNorek38F7PrPbKP+NxJrMBWzY3lgUi1CB6aM5s3o9tToP8VRqxqGiICcp/yp PDv4YIhAL7FgXWchSUgd7FJsNSwqPan7U3kYbCEpvsnDZg6GCmkxEvRXGmya4wG4 PZRYJTm7ixn9LEOPiHjYpWUfbwdapUsw7/VESpHmzLeoThEbOjpV8MA6iV381yyl PunaNTwh8/gX8j5D3naXRD8cdbapVSCJEDNfX0FSxtaN6Ibow+KnWd9TLnU= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:56 2025 by rpki-client on console.sobornost.net