$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gnXY462WeGcKymToEEkcxdTXJzY.roa File: gnXY462WeGcKymToEEkcxdTXJzY.roa (raw, json) Hash identifier: 2UCQST1tMnO43rpxkVOm4Lgfe6HEHAeYE/Z2NuOGw0k= Subject key identifier: 82:75:D8:E3:AD:96:78:67:0A:CA:64:E8:10:49:1C:C5:D4:D7:27:36 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0BDE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gnXY462WeGcKymToEEkcxdTXJzY.roa Signing time: Tue 01 Apr 2025 01:47:38 +0000 ROA not before: Tue 01 Apr 2025 01:47:38 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:47:38 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8275D8E3AD9678670ACA64E810491CC5D4D72736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:56:50:36:c1:68:cc:e9:0b:7e:5f:8c:1f:cc: 0f:d9:bf:e1:cc:e3:c7:88:82:c1:10:6f:71:17:44: 0f:f0:c8:56:7c:11:69:54:05:de:aa:c7:44:67:23: 00:51:20:ed:f7:67:1d:b6:34:93:af:8c:58:c7:ff: 41:7f:89:5a:f1:b2:61:aa:82:68:8d:19:b8:eb:eb: 20:9b:8a:cd:3f:67:05:bd:21:03:ad:03:8f:7e:5a: 9f:cb:c0:95:5e:7e:63:ca:06:56:54:b3:17:1e:95: 72:a8:13:46:ac:25:7e:2d:63:d1:43:d8:b1:4a:20: d1:5b:fd:ab:26:41:66:0b:69:c2:32:8c:93:82:48: 69:aa:db:b1:d3:67:8b:be:c6:b8:b8:53:ff:38:e5: ca:78:8a:57:c5:ac:03:9f:a8:e8:64:c8:05:d1:8d: 46:db:98:c9:3f:fa:bb:60:6b:bb:44:b3:69:a1:2b: 93:62:b5:38:09:88:8d:94:0d:f5:0e:02:0d:b6:08: 92:2f:61:38:bc:81:e5:61:a5:33:b7:76:76:5f:0c: 69:53:d7:4f:32:6d:b5:21:04:bf:9d:39:52:37:41: fa:fb:79:c8:92:11:59:1d:c5:3b:2c:66:96:f1:57: 2c:c5:37:4b:70:24:46:e7:c2:44:1b:93:b5:f7:85: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:75:D8:E3:AD:96:78:67:0A:CA:64:E8:10:49:1C:C5:D4:D7:27:36 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gnXY462WeGcKymToEEkcxdTXJzY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.22.0/24 Signature Algorithm: sha256WithRSAEncryption aa:21:cc:94:50:80:f3:fb:78:3a:d1:0c:68:fc:64:4a:d9:6f: 8f:cc:19:d7:4f:9c:5c:f1:7a:3d:fd:f7:4f:ff:66:1c:4e:31: 4b:85:78:f5:08:4b:73:5d:2a:fa:65:9a:ac:09:1e:24:b5:77: da:24:f5:f8:20:cf:3b:08:78:42:70:fa:af:50:b0:08:05:3c: 89:1f:7b:ad:ec:df:02:78:82:b1:21:05:84:86:23:bf:c3:b5: 57:6c:68:c0:12:1c:4d:85:12:2c:f1:a7:b4:1a:b0:d1:3d:53: 5e:94:b5:a7:c2:a7:71:5b:0c:d8:3d:5e:3a:4e:7a:b9:fe:4c: 3e:d9:11:97:25:ab:5c:8d:4e:c1:bc:66:aa:1e:fa:27:c9:ce: 0a:3e:a0:45:89:32:fe:74:c1:91:99:36:57:22:c6:80:97:32: 31:4e:e6:62:d2:dd:bd:86:fe:cd:7b:55:6f:c4:8f:90:af:2c: 14:de:6e:d5:e6:9a:26:fa:de:a8:75:a8:db:44:bc:22:f3:36: e0:4c:8a:e1:f2:0f:aa:87:e9:cf:da:7b:7e:87:60:c7:2c:f0: 96:ff:9f:3f:90:0b:36:9a:ea:c2:43:7e:31:6b:4b:f3:3a:67: 82:4d:d1:79:c5:ac:29:98:4a:79:fd:42:50:64:ea:9b:a6:15: df:0a:e0:65 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTQ3MzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyNzVEOEUzQUQ5Njc4 NjcwQUNBNjRFODEwNDkxQ0M1RDRENzI3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWVlA2wWjM6Qt+X4wfzA/Zv+HM48eIgsEQb3EXRA/wyFZ8EWlU Bd6qx0RnIwBRIO33Zx22NJOvjFjH/0F/iVrxsmGqgmiNGbjr6yCbis0/ZwW9IQOt A49+Wp/LwJVefmPKBlZUsxcelXKoE0asJX4tY9FD2LFKINFb/asmQWYLacIyjJOC SGmq27HTZ4u+xri4U/845cp4ilfFrAOfqOhkyAXRjUbbmMk/+rtga7tEs2mhK5Ni tTgJiI2UDfUOAg22CJIvYTi8geVhpTO3dnZfDGlT108ybbUhBL+dOVI3Qfr7eciS EVkdxTssZpbxVyzFN0twJEbnwkQbk7X3hYWfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgnXY462WeGcKymToEEkcxdTXJzYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2duWFk0NjJXZUdjS3ltVG9FRWtjeGRUWEp6WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc0hYwDQYJKoZIhvcNAQELBQADggEBAKohzJRQgPP7eDrRDGj8ZErZb4/M GddPnFzxej3990//ZhxOMUuFePUIS3NdKvplmqwJHiS1d9ok9fggzzsIeEJw+q9Q sAgFPIkfe63s3wJ4grEhBYSGI7/DtVdsaMASHE2FEizxp7QasNE9U16UtafCp3Fb DNg9XjpOern+TD7ZEZclq1yNTsG8Zqoe+ifJzgo+oEWJMv50wZGZNlcixoCXMjFO 5mLS3b2G/s17VW/Ej5CvLBTebtXmmib63qh1qNtEvCLzNuBMiuHyD6qH6c/ae36H YMcs8Jb/nz+QCzaa6sJDfjFrS/M6Z4JN0XnFrCmYSnn9QlBk6pumFd8K4GU= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:59 2025 by rpki-client on console.sobornost.net