$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/nU01yj7_aHa6Lc5mZPy_NOX02rM.roa File: nU01yj7_aHa6Lc5mZPy_NOX02rM.roa (raw, json) Hash identifier: go8LEHCcA+9Os6fsf3xbDlXc+/UMevfGmp6dMh3OTKM= Subject key identifier: 9D:4D:35:CA:3E:FF:68:76:BA:2D:CE:66:64:FC:BF:34:E5:F4:DA:B3 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D67 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nU01yj7_aHa6Lc5mZPy_NOX02rM.roa Signing time: Tue 01 Apr 2025 02:19:19 +0000 ROA not before: Tue 01 Apr 2025 02:19:19 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:19:19 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9D4D35CA3EFF6876BA2DCE6664FCBF34E5F4DAB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:74:07:33:18:73:a4:33:42:aa:01:70:20: 51:0d:05:83:39:0e:c6:6c:d2:56:98:f2:e3:63:6f: 62:3d:09:17:a1:78:1d:05:f7:d6:b4:27:a7:e1:ed: 1f:95:60:53:2e:75:ab:6b:ea:6f:3d:f6:95:ff:ee: 53:2e:a7:b8:cc:1e:19:5e:f1:ff:f2:06:4b:f6:9f: 60:66:30:e9:bc:11:f5:5c:90:34:c8:54:97:19:97: f6:f3:4d:ae:f3:49:69:4d:2e:ff:49:99:fe:66:33: 4d:52:1e:71:36:da:38:e8:a3:ff:e2:a5:60:84:3c: e3:34:22:b0:78:ee:9c:17:55:6d:8f:fd:5e:62:71: f5:96:1d:38:81:39:75:33:31:0d:4b:07:c3:cf:2f: e9:d5:65:6a:56:2d:8e:35:76:f2:87:f7:a1:33:95: 73:5d:5c:68:6f:0f:f0:a6:51:10:c1:50:59:a2:d7: 2c:df:4f:32:9c:db:6d:e7:d4:d9:1d:4d:86:cc:db: 12:22:37:75:87:0c:6b:31:52:db:d0:c6:17:e0:b2: aa:55:cb:70:c8:4a:ff:5f:ca:ac:c7:ae:b5:ad:fa: 4d:47:12:f1:98:c6:3d:06:22:03:8c:f8:3b:a6:96: cb:26:56:47:c3:d4:d9:98:fc:61:14:f7:8f:39:26: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4D:35:CA:3E:FF:68:76:BA:2D:CE:66:64:FC:BF:34:E5:F4:DA:B3 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/nU01yj7_aHa6Lc5mZPy_NOX02rM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.84.0/22 Signature Algorithm: sha256WithRSAEncryption 92:cd:5a:79:63:7d:48:b7:32:70:d5:c3:83:48:09:9e:1d:90: 9b:c8:0d:b2:fd:04:77:74:c7:ec:47:ac:ea:b5:ae:d6:2e:14: 46:0f:43:43:ae:65:d3:12:61:cf:2c:5f:28:cc:c8:d6:82:16: 08:e2:c2:b7:91:76:e3:47:82:eb:32:8c:92:b7:11:8c:ae:cc: 3c:50:b7:b8:26:8a:28:49:58:95:5a:fc:50:5c:d1:f2:a4:86: 88:48:44:12:a1:99:88:70:8d:6f:b5:63:6f:d7:26:54:6b:9d: 1a:e5:fb:2a:08:dc:1b:86:11:f0:19:26:b4:fa:02:bd:19:ea: 5b:b8:d5:9b:71:16:4f:84:02:f3:cd:e0:f4:bb:76:dd:65:e6: e8:63:99:2a:a0:9f:c1:9f:ef:6f:61:48:fd:d0:ce:f7:43:7c: 77:17:2b:1d:b6:53:2d:1c:ca:74:cd:1d:f1:69:da:70:80:55: 46:2c:a1:61:dc:3d:18:99:0a:55:93:14:08:f3:74:7b:5b:a4: a1:3c:a9:51:30:c3:a4:9b:9b:86:55:e5:45:6f:ef:2b:e1:63: 70:ac:3d:a1:88:42:ff:55:69:c4:53:b7:f8:ef:c5:80:a7:2a: 0d:b6:f2:84:88:fb:d1:ae:32:dd:3e:97:b0:2e:33:8c:18:f8: d7:a7:99:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjE5MTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlENEQzNUNBM0VGRjY4 NzZCQTJEQ0U2NjY0RkNCRjM0RTVGNERBQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyqnQHMxhzpDNCqgFwIFENBYM5DsZs0laY8uNjb2I9CReheB0F 99a0J6fh7R+VYFMudatr6m899pX/7lMup7jMHhle8f/yBkv2n2BmMOm8EfVckDTI VJcZl/bzTa7zSWlNLv9Jmf5mM01SHnE22jjoo//ipWCEPOM0IrB47pwXVW2P/V5i cfWWHTiBOXUzMQ1LB8PPL+nVZWpWLY41dvKH96EzlXNdXGhvD/CmURDBUFmi1yzf TzKc223n1NkdTYbM2xIiN3WHDGsxUtvQxhfgsqpVy3DISv9fyqzHrrWt+k1HEvGY xj0GIgOM+DumlssmVkfD1NmY/GEU9485Jvs/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnU01yj7/aHa6Lc5mZPy/NOX02rMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L25VMDF5ajdfYUhhNkxjNW1aUHlfTk9YMDJyTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYlQwDQYJKoZIhvcNAQELBQADggEBAJLNWnljfUi3MnDVw4NICZ4dkJvI DbL9BHd0x+xHrOq1rtYuFEYPQ0OuZdMSYc8sXyjMyNaCFgjiwreRduNHgusyjJK3 EYyuzDxQt7gmiihJWJVa/FBc0fKkhohIRBKhmYhwjW+1Y2/XJlRrnRrl+yoI3BuG EfAZJrT6Ar0Z6lu41ZtxFk+EAvPN4PS7dt1l5uhjmSqgn8Gf729hSP3QzvdDfHcX Kx22Uy0cynTNHfFp2nCAVUYsoWHcPRiZClWTFAjzdHtbpKE8qVEww6Sbm4ZV5UVv 7yvhY3CsPaGIQv9VacRTt/jvxYCnKg228oSI+9GuMt0+l7AuM4wY+NenmTM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:02 2025 by rpki-client on console.sobornost.net