$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa File: fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa (raw, json) Hash identifier: Fpg/h/kKD5IeQ89A/dFKFezEOGd/VAouxHV4J6Q1EJ8= Subject key identifier: 7C:B4:65:13:0C:64:47:B2:CC:01:53:65:9E:08:30:62:17:14:A7:C6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B9F Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa Signing time: Tue 01 Apr 2025 01:39:52 +0000 ROA not before: Tue 01 Apr 2025 01:39:52 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.107.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2975 (0xb9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:39:52 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=7CB465130C6447B2CC0153659E0830621714A7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:9b:2a:b9:5f:6b:17:10:0c:2c:3e:14:bb: 9f:98:52:8e:05:0b:84:51:49:e2:20:dc:6e:fc:39: b9:3a:80:75:e6:8d:1e:8c:74:3f:7a:db:e1:49:b0: 49:36:41:ab:59:f2:82:fb:3a:30:70:12:16:11:bf: 50:fb:62:1c:60:c8:a2:6d:3b:58:f0:4d:a7:b6:8f: be:43:96:91:51:ee:0d:3d:49:54:3c:9c:88:80:12: ac:29:2e:41:24:ed:57:79:b0:e7:10:df:95:e1:43: 8b:39:8a:d1:c7:27:14:ee:db:22:22:8a:71:8e:4a: 13:b0:66:34:e9:a3:a1:82:69:71:7f:50:f3:8f:e3: be:16:c4:c8:0e:aa:0c:35:59:82:1e:ac:0a:a4:04: 75:44:2f:87:4a:df:5a:b0:a2:87:cb:d0:fb:b3:18: 9f:3a:bb:14:fc:3c:8e:f0:72:8f:f1:1e:9e:8c:87: 6c:1a:72:58:eb:53:35:25:b3:69:4d:8c:35:dc:40: fe:1a:b0:ec:43:0b:ef:4d:92:6e:72:a8:bc:a7:b6: 1e:62:e5:8e:18:83:e1:f1:19:53:d5:04:b6:06:08: 07:e3:81:8c:59:f4:30:13:7b:ff:2b:7d:b8:91:13: 50:b5:a2:a7:5f:af:19:bc:f4:ef:a0:1e:04:76:44: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:65:13:0C:64:47:B2:CC:01:53:65:9E:08:30:62:17:14:A7:C6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fLRlEwxkR7LMAVNlnggwYhcUp8Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.107.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3c:07:55:51:9c:d4:f6:c8:c9:5e:29:dd:0d:7c:ff:c9:f6:4b: b0:5b:c3:a7:8b:7e:9d:22:b5:91:67:68:b1:be:de:86:e2:a9: e8:0a:d8:1f:e8:db:3e:95:b7:eb:27:70:7f:94:99:fa:ad:da: a2:2f:12:e3:40:ad:a4:68:04:74:06:bb:be:d6:44:70:e0:3e: ca:9c:e0:13:9a:f7:78:d3:0d:65:6d:fd:1e:19:5f:a7:a0:ac: e8:10:f5:3a:9b:02:88:b3:3e:cd:b8:88:1d:c1:c2:77:f4:5d: 8d:49:53:c4:25:79:20:3d:c8:a6:7e:b9:29:85:2a:fe:dd:3d: 20:11:40:9c:4d:17:7b:4c:fd:53:ec:05:56:5b:4b:7a:9e:da: 2f:45:68:84:80:5e:a6:68:94:77:29:94:fb:37:61:03:d6:52: fd:04:66:d5:64:f5:8f:e1:48:71:ad:a2:63:38:5b:27:cf:93: d6:1d:80:e1:0c:3a:75:4f:6e:3f:25:2b:3b:28:08:8f:71:17: 82:2f:73:bf:c2:4a:f9:b9:01:70:44:56:50:1d:e0:46:e8:2e: 3f:cf:77:4a:d6:62:92:b3:3a:25:0d:a3:93:b8:8b:0d:4f:69: 5c:a5:b7:2a:db:af:c0:0d:f8:3c:2c:2d:9d:04:87:18:b3:64: 01:b8:ef:0b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM5NTJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdDQjQ2NTEzMEM2NDQ3 QjJDQzAxNTM2NTlFMDgzMDYyMTcxNEE3QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRXZsquV9rFxAMLD4Uu5+YUo4FC4RRSeIg3G78Obk6gHXmjR6M dD962+FJsEk2QatZ8oL7OjBwEhYRv1D7YhxgyKJtO1jwTae2j75DlpFR7g09SVQ8 nIiAEqwpLkEk7Vd5sOcQ35XhQ4s5itHHJxTu2yIiinGOShOwZjTpo6GCaXF/UPOP 474WxMgOqgw1WYIerAqkBHVEL4dK31qwoofL0PuzGJ86uxT8PI7wco/xHp6Mh2wa cljrUzUls2lNjDXcQP4asOxDC+9Nkm5yqLynth5i5Y4Yg+HxGVPVBLYGCAfjgYxZ 9DATe/8rfbiRE1C1oqdfrxm89O+gHgR2ROPTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfLRlEwxkR7LMAVNlnggwYhcUp8YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2ZMUmxFd3hrUjdMTUFWTmxuZ2d3WWhjVXA4WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxawAwDQYJKoZIhvcNAQELBQADggEBADwHVVGc1PbIyV4p3Q18/8n2S7Bb w6eLfp0itZFnaLG+3obiqegK2B/o2z6Vt+sncH+Umfqt2qIvEuNAraRoBHQGu77W RHDgPsqc4BOa93jTDWVt/R4ZX6egrOgQ9TqbAoizPs24iB3Bwnf0XY1JU8QleSA9 yKZ+uSmFKv7dPSARQJxNF3tM/VPsBVZbS3qe2i9FaISAXqZolHcplPs3YQPWUv0E ZtVk9Y/hSHGtomM4WyfPk9YdgOEMOnVPbj8lKzsoCI9xF4Ivc7/CSvm5AXBEVlAd 4EboLj/Pd0rWYpKzOiUNo5O4iw1PaVyltyrbr8AN+DwsLZ0EhxizZAG47ws= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:58 2025 by rpki-client on console.sobornost.net