$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kGsYIJ8v5v7291no8kvdNBtMSIU.roa File: kGsYIJ8v5v7291no8kvdNBtMSIU.roa (raw, json) Hash identifier: iYjcTUEK1tS5KvKtQ+ddWe71VEudeKLQtyLe5PLX1bM= Subject key identifier: 90:6B:18:20:9F:2F:E6:FE:F6:F7:59:E8:F2:4B:DD:34:1B:4C:48:85 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DA6 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kGsYIJ8v5v7291no8kvdNBtMSIU.roa Signing time: Tue 01 Apr 2025 02:24:38 +0000 ROA not before: Tue 01 Apr 2025 02:24:38 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.104.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:38 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=906B18209F2FE6FEF6F759E8F24BDD341B4C4885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ed:2d:76:51:fe:6d:2b:d5:d9:6b:bb:ab:f2: 37:89:8d:90:c6:1b:a6:2c:ba:92:a1:13:88:fa:b6: 71:8c:49:50:2b:93:b4:cc:d2:8f:dd:e8:1b:3d:24: 9c:ad:44:b6:5c:65:92:49:9d:4c:8c:25:f1:cf:b8: 49:82:5c:1b:78:a1:1c:1a:60:dc:70:39:50:b6:7f: 75:0f:54:87:06:a3:49:a4:0e:70:51:53:8d:e2:92: eb:1b:c5:2f:d2:95:fa:8a:1d:7d:2d:64:15:fe:f8: 69:97:e3:15:38:1c:25:7c:a1:67:c1:0c:47:ea:0b: b8:8c:7d:68:e2:5f:8c:1a:85:7f:65:51:6b:80:2d: 12:32:04:73:4e:07:61:e2:95:e8:13:1a:fb:9a:e4: 63:95:02:9f:b1:1e:7a:8f:54:63:2f:59:ab:c7:01: 74:c8:98:97:49:ca:90:24:5a:42:48:1a:9f:6b:04: 55:9e:ac:ba:a7:8e:94:a9:ea:ac:83:11:34:17:69: 02:e4:5a:ab:76:77:35:39:31:ad:14:e4:10:e0:1e: e0:15:89:6b:5e:7a:36:65:b6:68:33:a7:37:32:86: 00:33:d6:f6:f8:44:6e:78:be:57:c6:d6:69:03:90: eb:7e:f0:86:1a:c2:1f:5d:eb:58:d0:da:42:f1:34: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6B:18:20:9F:2F:E6:FE:F6:F7:59:E8:F2:4B:DD:34:1B:4C:48:85 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kGsYIJ8v5v7291no8kvdNBtMSIU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.104.4.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:3c:1d:8c:e5:66:0b:48:28:b2:1f:4b:63:95:89:10:a1:11: 06:16:45:11:c3:2f:25:ed:75:01:f9:af:44:8a:f3:5a:5a:54: 0c:6c:05:1b:9d:f1:38:8a:0a:81:49:4c:33:76:a3:6c:69:f0: 82:23:ed:d3:bd:58:48:aa:47:ab:64:c3:bd:f1:4b:7e:38:09: dc:04:74:22:ec:3f:45:82:9f:bf:55:d2:9b:f9:66:83:6d:64: 7f:65:fa:7d:88:a6:ce:cf:a1:5a:89:1f:50:41:e5:0f:a6:57: 4c:60:2b:41:d2:fc:a9:df:71:3f:01:5e:8c:e2:c6:ce:7d:a2: 9f:51:36:6d:d3:62:1d:31:b3:54:b8:dc:0c:3b:50:63:df:62: 48:d1:c2:d2:73:7f:90:e3:94:c3:05:4a:b4:a5:41:bc:96:20: 92:e1:ec:4d:ae:7b:d1:a6:0c:a4:fe:9f:5c:ef:d6:5c:04:15: d7:db:74:55:e0:6f:98:a8:ac:0b:9a:ea:65:9c:05:5b:0e:fd: 12:35:db:f3:c1:f7:cf:6f:ef:72:52:fb:ef:21:a2:6f:6b:eb: 3c:8a:cd:49:7b:27:5c:83:f1:14:a8:dd:8d:9c:72:ac:a1:7e: 2a:de:43:de:01:ee:5c:c6:bc:a6:9d:a0:71:7f:ff:3a:6b:ad: 9d:7b:a9:34 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0MzhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkwNkIxODIwOUYyRkU2 RkVGNkY3NTlFOEYyNEJERDM0MUI0QzQ4ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDt7S12Uf5tK9XZa7ur8jeJjZDGG6YsupKhE4j6tnGMSVArk7TM 0o/d6Bs9JJytRLZcZZJJnUyMJfHPuEmCXBt4oRwaYNxwOVC2f3UPVIcGo0mkDnBR U43ikusbxS/SlfqKHX0tZBX++GmX4xU4HCV8oWfBDEfqC7iMfWjiX4wahX9lUWuA LRIyBHNOB2HilegTGvua5GOVAp+xHnqPVGMvWavHAXTImJdJypAkWkJIGp9rBFWe rLqnjpSp6qyDETQXaQLkWqt2dzU5Ma0U5BDgHuAViWteejZltmgzpzcyhgAz1vb4 RG54vlfG1mkDkOt+8IYawh9d61jQ2kLxNMNpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkGsYIJ8v5v7291no8kvdNBtMSIUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tHc1lJSjh2NXY3Mjkxbm84a3ZkTkJ0TVNJVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaAQwDQYJKoZIhvcNAQELBQADggEBACw8HYzlZgtIKLIfS2OViRChEQYW RRHDLyXtdQH5r0SK81paVAxsBRud8TiKCoFJTDN2o2xp8IIj7dO9WEiqR6tkw73x S344CdwEdCLsP0WCn79V0pv5ZoNtZH9l+n2Ips7PoVqJH1BB5Q+mV0xgK0HS/Knf cT8BXozixs59op9RNm3TYh0xs1S43Aw7UGPfYkjRwtJzf5DjlMMFSrSlQbyWIJLh 7E2ue9GmDKT+n1zv1lwEFdfbdFXgb5iorAua6mWcBVsO/RI12/PB989v73JS++8h om9r6zyKzUl7J1yD8RSo3Y2ccqyhfireQ94B7lzGvKadoHF//zprrZ17qTQ= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:00 2025 by rpki-client on console.sobornost.net