$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/c7-0ItGXexjTI27C3DmutygG7ZY.roa File: c7-0ItGXexjTI27C3DmutygG7ZY.roa (raw, json) Hash identifier: 8qJov1ffG8nsFdmFEewqc1zm8mghzAoYpzkvp8+bO/Q= Subject key identifier: 73:BF:B4:22:D1:97:7B:18:D3:23:6E:C2:DC:39:AE:B7:28:06:ED:96 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C41 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c7-0ItGXexjTI27C3DmutygG7ZY.roa Signing time: Tue 01 Apr 2025 01:57:17 +0000 ROA not before: Tue 01 Apr 2025 01:57:17 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.106.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:57:17 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=73BFB422D1977B18D3236EC2DC39AEB72806ED96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:f7:aa:e3:c9:02:3a:62:14:41:9c:e0:25: 2c:43:2f:65:a5:29:88:1c:bb:e9:09:af:ee:91:c8: 81:8a:f8:fe:e5:36:e0:6a:c0:5e:d8:98:50:20:f1: 8d:c7:dd:c7:6e:df:37:a2:53:07:90:cd:78:50:e7: 0b:ee:54:57:7d:3b:85:e5:67:f9:40:78:2c:c0:08: 87:fb:4b:46:a2:66:ec:74:61:a9:0f:49:f1:3c:d0: e4:02:b2:ee:c2:b1:4c:2e:c8:7f:9a:4b:b7:d6:95: b4:6a:c5:9a:7c:a9:88:c9:a5:95:c2:61:3b:43:22: 81:2f:82:6f:96:3a:87:12:21:07:b7:9d:7a:29:70: 71:3d:93:ba:18:73:1f:b1:27:cb:a1:80:36:71:60: 3e:04:95:8a:7e:d3:d2:9d:d9:47:3d:2c:52:38:85: 24:bc:28:aa:f5:a3:f4:9d:d4:4a:02:61:d7:8e:72: 5e:42:bd:97:88:bf:2a:f1:80:c7:05:3b:4e:b0:bf: 9b:02:6f:b0:a5:12:be:50:a0:45:f1:20:05:e6:ce: c0:25:d9:36:ad:62:b0:6a:9c:a2:43:91:00:40:b3: 7b:bb:dc:75:4b:d6:8b:c1:17:9f:fe:9d:73:ee:77: 2c:4c:fb:3a:72:16:57:69:4b:74:b5:e3:79:af:d3: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BF:B4:22:D1:97:7B:18:D3:23:6E:C2:DC:39:AE:B7:28:06:ED:96 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/c7-0ItGXexjTI27C3DmutygG7ZY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.106.220.0/23 Signature Algorithm: sha256WithRSAEncryption 53:2b:a8:9d:ff:d7:d7:19:31:5e:b7:26:a6:42:e0:f6:25:d5: 41:f8:54:ac:89:bc:02:05:f7:16:11:12:17:1b:6a:97:a9:c1: 0a:4a:13:99:e8:07:83:cb:36:d9:03:5a:78:b0:dd:be:b2:13: 56:a6:75:e5:b0:7b:69:8f:cd:45:34:72:fc:e1:be:ee:ec:ab: f6:13:00:60:f5:ce:42:7a:56:48:e4:7f:cb:7b:1f:33:0f:9b: fe:5c:e0:25:00:f7:ab:b1:0d:cb:3e:45:9d:0c:50:80:18:4e: 5e:c2:07:c4:c8:ed:09:d1:52:6f:48:9d:37:53:27:a6:d0:c1: 7b:94:e2:1e:42:b7:26:9b:f1:25:48:46:73:17:0b:48:0b:58: a5:a8:69:02:d6:3e:e2:d3:88:dd:d2:f5:6b:9a:8e:b8:b4:d7: bb:65:e4:61:4f:6f:28:e2:3d:89:9f:d5:a5:b3:80:d5:9a:57: 2f:43:31:d7:7b:c6:56:27:eb:26:15:1f:ea:78:17:38:5c:b0: 25:4e:00:3e:ae:2e:12:6d:51:92:c8:95:13:58:fd:e2:b1:ee: 46:8d:99:30:f4:3c:26:75:23:71:9b:e0:a7:bd:7e:25:46:94: e9:b1:63:aa:38:dc:c3:d3:f0:0c:c6:91:71:91:b1:04:01:5b: 3d:4a:85:10 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTU3MTdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDczQkZCNDIyRDE5NzdC MThEMzIzNkVDMkRDMzlBRUI3MjgwNkVEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC81/eq48kCOmIUQZzgJSxDL2WlKYgcu+kJr+6RyIGK+P7lNuBq wF7YmFAg8Y3H3cdu3zeiUweQzXhQ5wvuVFd9O4XlZ/lAeCzACIf7S0aiZux0YakP SfE80OQCsu7CsUwuyH+aS7fWlbRqxZp8qYjJpZXCYTtDIoEvgm+WOocSIQe3nXop cHE9k7oYcx+xJ8uhgDZxYD4ElYp+09Kd2Uc9LFI4hSS8KKr1o/Sd1EoCYdeOcl5C vZeIvyrxgMcFO06wv5sCb7ClEr5QoEXxIAXmzsAl2TatYrBqnKJDkQBAs3u73HVL 1ovBF5/+nXPudyxM+zpyFldpS3S143mv0yJxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUc7+0ItGXexjTI27C3DmutygG7ZYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2M3LTBJdEdYZXhqVEkyN0MzRG11dHlnRzdaWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExatwwDQYJKoZIhvcNAQELBQADggEBAFMrqJ3/19cZMV63JqZC4PYl1UH4 VKyJvAIF9xYREhcbapepwQpKE5noB4PLNtkDWniw3b6yE1amdeWwe2mPzUU0cvzh vu7sq/YTAGD1zkJ6Vkjkf8t7HzMPm/5c4CUA96uxDcs+RZ0MUIAYTl7CB8TI7QnR Um9InTdTJ6bQwXuU4h5Ctyab8SVIRnMXC0gLWKWoaQLWPuLTiN3S9Wuajri017tl 5GFPbyjiPYmf1aWzgNWaVy9DMdd7xlYn6yYVH+p4FzhcsCVOAD6uLhJtUZLIlRNY /eKx7kaNmTD0PCZ1I3Gb4Ke9fiVGlOmxY6o43MPT8AzGkXGRsQQBWz1KhRA= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:56 2025 by rpki-client on console.sobornost.net