$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gBMGI7SXonWktIrRXVAu3UbC744.roa File: gBMGI7SXonWktIrRXVAu3UbC744.roa (raw, json) Hash identifier: OV+8y1KEkpUHaumztyriW7QnNkV1R47liF3Bc8LIwsc= Subject key identifier: 80:13:06:23:B4:97:A2:75:A4:B4:8A:D1:5D:50:2E:DD:46:C2:EF:8E Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DA9 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gBMGI7SXonWktIrRXVAu3UbC744.roa Signing time: Tue 01 Apr 2025 02:24:40 +0000 ROA not before: Tue 01 Apr 2025 02:24:40 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:40 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=80130623B497A275A4B48AD15D502EDD46C2EF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:2d:1d:60:cf:25:99:43:32:8c:b4:c0:04: d3:7c:61:f6:4a:bd:e6:0d:6f:ea:25:1b:57:d2:e9: 93:c3:b6:71:23:82:86:10:4a:d8:85:bc:0c:40:20: bc:7d:b6:52:03:03:9d:57:ba:cc:9c:92:7f:83:d8: b1:aa:be:e9:3c:3c:e9:03:c9:c2:d0:3e:3e:e2:7b: 7d:d5:3e:97:12:13:da:71:7c:d8:55:f5:e0:b7:7f: 83:21:3b:7d:b5:47:88:a6:6e:20:d5:be:a4:9d:36: a9:f8:51:4d:bb:8c:57:8d:9a:e5:2d:af:d6:a9:6b: 1c:fd:07:a3:e8:85:08:72:25:a7:fd:73:53:56:de: f5:66:56:68:09:4d:67:ee:fd:27:c2:d1:df:58:bf: bc:5e:01:a5:aa:45:a7:da:f8:cb:36:a2:21:80:50: a9:9e:c4:18:2d:9d:5c:e0:5a:5b:c9:d1:87:c4:17: cb:74:ea:ff:15:32:ae:5f:1b:5b:a8:48:5c:6e:ed: e4:d5:8a:f7:02:0b:37:7a:5a:c8:de:86:5f:3d:ed: 47:af:cf:4b:57:1d:76:2b:75:80:d3:77:b8:c7:33: 20:2d:ca:ef:f9:15:79:ba:47:1f:17:3e:5b:66:bc: ad:61:dd:c1:78:df:5d:f1:b6:e8:1b:8b:dd:8e:b3: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:06:23:B4:97:A2:75:A4:B4:8A:D1:5D:50:2E:DD:46:C2:EF:8E X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gBMGI7SXonWktIrRXVAu3UbC744.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption b2:2f:61:8e:1c:50:7f:92:84:fb:80:34:3e:40:2a:a2:60:c8: 4e:5a:d8:54:d0:5f:08:b4:9c:10:e2:7a:67:93:fc:05:af:c4: 63:85:db:56:22:21:f5:12:ca:cd:c2:7a:05:3b:a0:bd:3c:e6: 47:fa:de:7b:a5:e8:0d:42:e0:5d:3e:1a:fa:dc:05:6f:bd:87: 22:ae:ce:cf:d8:4d:4c:a9:54:a7:a3:fa:9c:58:43:57:c8:c7: 77:3b:2c:17:82:37:b7:42:23:27:2c:64:aa:76:1a:bf:e7:c4: 9f:d2:3c:8e:80:04:d1:9d:34:81:17:82:0c:d0:30:d6:07:f9: f3:ad:2c:a4:92:8d:d7:74:7a:5a:69:dc:e8:73:0c:47:23:ec: c7:03:2a:ae:62:73:df:67:87:2a:63:c0:10:3b:03:2a:09:48: b5:5f:7a:57:a4:8d:14:e7:71:9f:1a:ca:55:af:a4:88:84:65: 3d:d0:1b:92:a1:5e:5c:09:de:d8:b2:f5:62:c3:30:ea:99:80: 52:72:66:a9:09:1c:fe:8c:52:db:5d:ee:c2:53:41:ee:35:bd: 77:cb:7a:74:25:d6:4e:68:e0:74:65:17:e5:cf:9b:8e:7a:f9: 6a:da:d5:cd:65:59:86:50:e8:53:e9:bf:18:23:7a:8e:9d:f5: 8a:35:39:42 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwMTMwNjIzQjQ5N0Ey NzVBNEI0OEFEMTVENTAyRURENDZDMkVGOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrVC0dYM8lmUMyjLTABNN8YfZKveYNb+olG1fS6ZPDtnEjgoYQ StiFvAxAILx9tlIDA51Xusyckn+D2LGqvuk8POkDycLQPj7ie33VPpcSE9pxfNhV 9eC3f4MhO321R4imbiDVvqSdNqn4UU27jFeNmuUtr9apaxz9B6PohQhyJaf9c1NW 3vVmVmgJTWfu/SfC0d9Yv7xeAaWqRafa+Ms2oiGAUKmexBgtnVzgWlvJ0YfEF8t0 6v8VMq5fG1uoSFxu7eTVivcCCzd6Wsjehl897Uevz0tXHXYrdYDTd7jHMyAtyu/5 FXm6Rx8XPltmvK1h3cF4313xtugbi92Os0vNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgBMGI7SXonWktIrRXVAu3UbC744wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dCTUdJN1NYb25Xa3RJclJYVkF1M1ViQzc0NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYPQwDQYJKoZIhvcNAQELBQADggEBALIvYY4cUH+ShPuAND5AKqJgyE5a 2FTQXwi0nBDiemeT/AWvxGOF21YiIfUSys3CegU7oL085kf63nul6A1C4F0+Gvrc BW+9hyKuzs/YTUypVKej+pxYQ1fIx3c7LBeCN7dCIycsZKp2Gr/nxJ/SPI6ABNGd NIEXggzQMNYH+fOtLKSSjdd0elpp3OhzDEcj7McDKq5ic99nhypjwBA7AyoJSLVf elekjRTncZ8aylWvpIiEZT3QG5KhXlwJ3tiy9WLDMOqZgFJyZqkJHP6MUttd7sJT Qe41vXfLenQl1k5o4HRlF+XPm456+Wra1c1lWYZQ6FPpvxgjeo6d9Yo1OUI= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:58 2025 by rpki-client on console.sobornost.net