$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJxKmO44CmHQeAcy8RQII0MooxM.roa File: rJxKmO44CmHQeAcy8RQII0MooxM.roa (raw, json) Hash identifier: clgIyXMDVc1KTGWsNJu7DH8yoKWGCeOmc1bVZm1PP9Y= Subject key identifier: AC:9C:4A:98:EE:38:0A:61:D0:78:07:32:F1:14:08:23:43:28:A3:13 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 09E5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJxKmO44CmHQeAcy8RQII0MooxM.roa Signing time: Sun 30 Jun 2024 01:42:20 +0000 ROA not before: Sun 30 Jun 2024 01:42:20 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 220.159.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:42:20 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=AC9C4A98EE380A61D0780732F11408234328A313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:d0:66:a3:b5:c1:ef:0e:0a:09:71:e1:72: e8:70:67:61:ff:60:c9:53:74:0c:fc:9c:1b:c6:92: b1:48:cb:b5:6f:18:94:ba:52:ee:c3:d7:e7:1b:70: 52:ef:ba:a3:28:b3:59:4a:93:9e:06:4f:a6:f5:fe: a4:27:a6:25:38:a6:ec:76:2b:6c:f9:64:e4:48:d4: c0:4f:4a:06:cc:c5:59:72:6f:5d:dc:56:fc:64:21: 25:d0:2b:04:70:01:84:52:93:0d:54:3f:4e:dc:40: f7:81:28:70:36:96:47:71:ea:3d:f6:7f:c6:c5:f3: 41:d4:4e:b7:1b:82:b8:c0:63:a0:dc:2b:e4:ac:9b: 27:4d:e3:53:f2:da:2e:c9:31:5c:ef:a0:d2:3b:6b: 3e:19:61:aa:8d:a8:35:15:2d:37:44:e0:46:35:fb: 90:d6:d5:26:54:87:e4:f1:7c:b6:c9:06:3b:af:d7: b4:59:76:f9:9c:5a:7b:21:32:8e:83:e4:94:38:6b: 24:60:53:53:35:cd:24:e4:09:dc:31:64:4f:d2:03: ba:58:b5:a2:73:c9:22:c0:5e:e8:17:f6:e5:41:6e: 28:9f:b4:7d:59:a6:be:81:d0:9a:a6:a2:1e:d8:d2: be:9a:a6:18:12:de:de:85:82:87:bb:7c:2f:ed:8b: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:4A:98:EE:38:0A:61:D0:78:07:32:F1:14:08:23:43:28:A3:13 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJxKmO44CmHQeAcy8RQII0MooxM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.159.216.0/22 Signature Algorithm: sha256WithRSAEncryption be:7a:08:c3:ac:73:2f:24:22:14:a2:98:ab:61:61:9b:3c:78: 72:96:85:8f:b0:e7:ea:9b:7b:ba:73:0a:ec:6e:03:a2:71:da: 76:ee:fd:a2:cf:ef:e3:94:e6:0e:86:08:6b:ca:17:84:0f:15: 37:a2:a0:f2:56:d6:e9:b3:df:6f:61:d7:34:36:a6:a2:ba:0f: 52:c0:06:a2:d5:7c:1d:eb:40:23:15:5c:91:df:d3:2c:23:e9: 69:27:63:ce:63:fc:5f:1f:46:13:78:50:58:bf:4b:d2:c9:1b: ec:a8:2c:aa:9a:24:f3:87:45:3f:0c:83:14:d1:87:49:6a:02: 68:fa:18:d8:a2:82:be:e5:c1:8d:81:a0:20:f7:26:a8:e3:38: c0:90:4e:84:37:d9:47:42:77:54:21:31:0b:46:94:36:18:12: 1e:d8:70:e1:de:96:61:b7:80:36:b8:2f:02:91:94:6f:de:87: f5:9d:37:b3:6d:17:c4:e5:2c:f1:fe:54:e2:03:ef:d8:38:f4: 21:9c:b5:02:1e:69:be:9d:3b:56:af:4a:aa:d3:db:74:cb:ef: ad:c4:c0:18:fd:1e:fd:9d:70:e5:13:90:d0:f3:5b:a7:15:eb: 75:50:de:3f:64:d5:eb:04:73:93:98:5e:65:7d:08:4f:ef:33: de:90:da:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQyMjBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKEFDOUM0QTk4RUUzODBB NjFEMDc4MDczMkYxMTQwODIzNDMyOEEzMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ3tBmo7XB7w4KCXHhcuhwZ2H/YMlTdAz8nBvGkrFIy7VvGJS6 Uu7D1+cbcFLvuqMos1lKk54GT6b1/qQnpiU4pux2K2z5ZORI1MBPSgbMxVlyb13c VvxkISXQKwRwAYRSkw1UP07cQPeBKHA2lkdx6j32f8bF80HUTrcbgrjAY6DcK+Ss mydN41Py2i7JMVzvoNI7az4ZYaqNqDUVLTdE4EY1+5DW1SZUh+TxfLbJBjuv17RZ dvmcWnshMo6D5JQ4ayRgU1M1zSTkCdwxZE/SA7pYtaJzySLAXugX9uVBbiiftH1Z pr6B0Jqmoh7Y0r6aphgS3t6Fgoe7fC/ti8t3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrJxKmO44CmHQeAcy8RQII0MooxMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3JKeEttTzQ0Q21IUWVBY3k4UlFJSTBNb294TS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALcn9gwDQYJKoZIhvcNAQELBQADggEBAL56CMOscy8kIhSimKthYZs8eHKW hY+w5+qbe7pzCuxuA6Jx2nbu/aLP7+OU5g6GCGvKF4QPFTeioPJW1umz329h1zQ2 pqK6D1LABqLVfB3rQCMVXJHf0ywj6WknY85j/F8fRhN4UFi/S9LJG+yoLKqaJPOH RT8MgxTRh0lqAmj6GNiigr7lwY2BoCD3JqjjOMCQToQ32UdCd1QhMQtGlDYYEh7Y cOHelmG3gDa4LwKRlG/eh/WdN7NtF8TlLPH+VOID79g49CGctQIeab6dO1avSqrT 23TL763EwBj9Hv2dcOUTkNDzW6cV63VQ3j9k1esEc5OYXmV9CE/vM96Q2jM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:25 2025 by rpki-client on console.sobornost.net