$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jWSj_DZ4Qh6JrP6lQ1IMYWhj1uI.roa File: jWSj_DZ4Qh6JrP6lQ1IMYWhj1uI.roa (raw, json) Hash identifier: fIcdcpE6HwXZaqriFNMp9w7wV//KugEXYiAs/qQiHIA= Subject key identifier: 8D:64:A3:FC:36:78:42:1E:89:AC:FE:A5:43:52:0C:61:68:63:D6:E2 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CDF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jWSj_DZ4Qh6JrP6lQ1IMYWhj1uI.roa Signing time: Tue 01 Apr 2025 02:09:19 +0000 ROA not before: Tue 01 Apr 2025 02:09:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.78.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:09:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=8D64A3FC3678421E89ACFEA543520C616863D6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:e8:39:85:d1:15:69:d0:06:a2:5a:40:f0: c4:0f:c3:f4:11:ee:b3:24:c5:32:21:fc:b1:51:ec: 7b:ca:9e:22:24:a3:01:00:17:40:80:2e:08:8b:93: 9b:4c:23:af:16:2c:9c:9f:93:1a:02:62:5c:a9:45: dd:99:6d:e9:bb:9a:eb:d6:18:61:83:f9:23:58:7b: d1:2e:17:22:76:ae:13:e1:b2:58:81:2e:75:ec:db: 32:a3:d7:ee:b2:0e:d9:45:19:10:66:64:8c:3f:ae: 38:14:bb:08:a4:9a:36:13:c5:f9:18:58:b6:a0:ea: 59:8b:86:72:40:ef:5d:7b:c1:ce:29:2c:ae:50:85: 96:08:33:9e:44:d1:3d:9f:6c:8f:5d:de:e4:72:e8: bc:e7:31:54:25:ab:79:5c:62:2f:e1:98:5e:15:22: 2b:58:94:fd:d3:4a:be:6b:c7:0f:dd:3f:b0:7c:46: f0:a4:75:ca:3e:0c:7c:c5:25:aa:bb:6e:fd:cb:01: 22:2b:be:33:e1:60:d7:49:c1:ba:ba:99:25:8d:b9: d1:bf:80:f2:57:e7:4d:d9:6d:4c:b3:98:5a:04:34: f6:35:83:c2:02:03:1b:f2:bf:17:20:a1:46:9d:4e: 8c:be:30:58:96:de:f6:de:af:1b:7d:79:da:9d:c7: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:64:A3:FC:36:78:42:1E:89:AC:FE:A5:43:52:0C:61:68:63:D6:E2 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jWSj_DZ4Qh6JrP6lQ1IMYWhj1uI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.16.0/22 Signature Algorithm: sha256WithRSAEncryption dc:62:de:46:e6:6c:a1:7e:a8:e0:13:57:5c:04:de:70:93:76: 19:f8:a6:7d:06:17:25:7d:6f:69:c2:0b:b9:43:bc:73:49:78: 3b:f6:74:cb:a2:77:38:77:d9:44:26:01:4b:59:7c:70:67:df: ae:91:2e:03:89:8c:c1:60:cb:37:4d:d9:8d:ff:ff:87:47:b8: e3:75:3e:0b:d2:ef:63:e3:7a:b2:34:f6:1c:8d:30:c6:de:d3: 4b:10:ca:7b:fe:9a:23:9f:e9:d4:f9:2e:42:8d:ab:14:58:81: 75:61:39:84:01:07:83:91:ef:65:f9:e9:a8:b7:2f:80:ad:e2: 94:34:4c:e2:ec:ab:8d:91:fe:55:6d:21:7d:b7:89:bb:48:f2: 73:24:e4:67:cf:91:5e:86:83:c1:c5:4f:a3:4b:7e:30:95:6d: c0:d6:49:6c:fa:f3:45:f6:66:9f:25:87:57:a0:cb:ac:44:7b: 50:46:8d:ec:cb:96:fe:0b:5a:cd:93:f4:9b:49:62:97:96:5d: c9:3c:d3:80:e1:c3:7e:69:62:88:2c:c4:6a:b1:e7:16:9c:f0: ae:99:98:86:33:05:8d:e3:5d:fc:05:46:4a:b8:b1:24:08:37: cd:0f:c5:fb:63:be:e5:10:a5:ff:75:bb:57:87:37:36:6c:51: 8b:a5:d7:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjA5MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhENjRBM0ZDMzY3ODQy MUU4OUFDRkVBNTQzNTIwQzYxNjg2M0Q2RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJcOg5hdEVadAGolpA8MQPw/QR7rMkxTIh/LFR7HvKniIkowEA F0CALgiLk5tMI68WLJyfkxoCYlypRd2Zbem7muvWGGGD+SNYe9EuFyJ2rhPhsliB LnXs2zKj1+6yDtlFGRBmZIw/rjgUuwikmjYTxfkYWLag6lmLhnJA7117wc4pLK5Q hZYIM55E0T2fbI9d3uRy6LznMVQlq3lcYi/hmF4VIitYlP3TSr5rxw/dP7B8RvCk dco+DHzFJaq7bv3LASIrvjPhYNdJwbq6mSWNudG/gPJX503ZbUyzmFoENPY1g8IC AxvyvxcgoUadToy+MFiW3vberxt9edqdx64FAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjWSj/DZ4Qh6JrP6lQ1IMYWhj1uIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2pXU2pfRFo0UWg2SnJQNmxRMUlNWVdoajF1SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBThAwDQYJKoZIhvcNAQELBQADggEBANxi3kbmbKF+qOATV1wE3nCTdhn4 pn0GFyV9b2nCC7lDvHNJeDv2dMuidzh32UQmAUtZfHBn366RLgOJjMFgyzdN2Y3/ /4dHuON1PgvS72PjerI09hyNMMbe00sQynv+miOf6dT5LkKNqxRYgXVhOYQBB4OR 72X56ai3L4Ct4pQ0TOLsq42R/lVtIX23ibtI8nMk5GfPkV6Gg8HFT6NLfjCVbcDW SWz680X2Zp8lh1egy6xEe1BGjezLlv4LWs2T9JtJYpeWXck804Dhw35pYogsxGqx 5xac8K6ZmIYzBY3jXfwFRkq4sSQIN80PxftjvuUQpf91u1eHNzZsUYul15M= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:00 2025 by rpki-client on console.sobornost.net