$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa File: sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa (raw, json) Hash identifier: HKHx7menY1hofg7JzygUQjTkn9R6fF0mWiLlfj66KZU= Subject key identifier: B2:0D:21:02:40:C8:DC:63:9E:A5:6A:92:4D:49:29:34:30:7A:56:C9 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B38 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa Signing time: Fri 21 Feb 2025 04:19:17 +0000 ROA not before: Fri 21 Feb 2025 04:19:17 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.96.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 21 04:19:17 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=B20D210240C8DC639EA56A924D492934307A56C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:bb:cd:ea:28:b6:de:00:8b:4a:33:51:37: 14:ae:c2:b2:cf:37:22:a1:b2:65:70:ac:ff:3a:cc: 69:ae:96:00:84:9c:7c:0d:e9:96:f5:5d:41:af:63: ea:f7:1d:8f:11:8b:f6:74:58:8b:93:30:c3:fe:8c: 13:2f:8f:08:91:cd:2c:68:6e:33:49:ad:ef:fe:f7: 02:72:64:d0:b4:9b:b3:78:a7:e9:b5:9b:07:d8:2a: ba:9d:04:08:19:91:87:ee:a9:21:74:5c:46:3c:3a: 18:3e:61:9b:5e:90:6d:46:c9:2a:b3:b9:b5:67:16: 19:b2:b7:fc:57:06:d1:f6:e8:84:2d:e8:a1:10:f5: 9d:5e:0c:00:14:e7:cc:ab:2f:42:c7:8b:e1:de:56: dd:a0:43:1a:09:50:6d:29:c7:43:42:f3:7b:e8:13: 08:22:39:46:b6:eb:02:0c:a9:52:5f:c0:20:29:51: 5d:1a:a6:5a:3b:4b:ee:50:28:a9:33:10:8c:20:f7: 52:b1:08:01:5b:24:10:7c:c1:ac:8e:6d:aa:79:4d: a8:47:bf:41:6e:cf:b5:40:1b:8d:b2:2d:f0:e9:55: bd:06:6e:1b:18:f7:ea:7b:79:c6:c9:a0:1b:23:e1: 36:cf:48:35:b4:f8:d0:4b:8c:76:1c:2d:a1:50:24: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0D:21:02:40:C8:DC:63:9E:A5:6A:92:4D:49:29:34:30:7A:56:C9 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/sg0hAkDI3GOepWqSTUkpNDB6Vsk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.96.148.0/24 Signature Algorithm: sha256WithRSAEncryption c8:76:06:ba:38:47:8d:47:1c:c7:06:c8:b8:ff:b8:a7:b0:d3: 0b:6c:b4:c0:48:20:eb:d4:b7:0f:57:93:10:0b:72:84:6b:b4: f5:5e:25:5e:ab:8d:06:2b:1c:e2:f2:27:97:4f:2b:8a:2c:35: 8a:ab:95:21:cb:cf:e1:03:31:6d:ab:9b:26:f5:c2:4e:a2:c1: ed:b3:93:3c:6d:9a:b4:a8:5d:a8:2a:41:ed:23:ac:15:bf:b7: 9d:4d:28:a5:2d:fe:39:99:65:21:ef:83:8f:78:6d:d5:cb:56: 9f:2f:b6:88:1c:ae:72:b0:bb:6c:17:6b:0f:0c:9f:87:db:e8: db:d5:6b:e2:43:c5:2d:de:65:20:d5:06:3c:b6:dc:6e:d8:88: 83:09:e5:19:40:61:00:f5:38:12:f8:44:1f:db:94:65:fa:2a: c4:1d:73:5f:bb:bc:99:6a:eb:11:8f:54:fb:9f:af:48:46:dd: 90:1c:59:84:01:22:97:95:0a:47:42:83:cc:88:33:db:9b:d3: 76:6b:a8:ac:67:0a:40:01:12:1b:7a:69:fc:1a:b9:26:21:03: ef:15:ad:b6:95:0f:a1:ae:85:df:1f:07:ee:b8:0e:f4:97:e3: 8f:27:1a:17:ea:19:44:86:05:cb:ca:cd:08:7b:ae:65:ed:17: 33:61:45:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAyMjEw NDE5MTdaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIyMEQyMTAyNDBDOERD NjM5RUE1NkE5MjRENDkyOTM0MzA3QTU2QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqMLvN6ii23gCLSjNRNxSuwrLPNyKhsmVwrP86zGmulgCEnHwN 6Zb1XUGvY+r3HY8Ri/Z0WIuTMMP+jBMvjwiRzSxobjNJre/+9wJyZNC0m7N4p+m1 mwfYKrqdBAgZkYfuqSF0XEY8Ohg+YZtekG1GySqzubVnFhmyt/xXBtH26IQt6KEQ 9Z1eDAAU58yrL0LHi+HeVt2gQxoJUG0px0NC83voEwgiOUa26wIMqVJfwCApUV0a plo7S+5QKKkzEIwg91KxCAFbJBB8wayObap5TahHv0Fuz7VAG42yLfDpVb0GbhsY 9+p7ecbJoBsj4TbPSDW0+NBLjHYcLaFQJEC/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsg0hAkDI3GOepWqSTUkpNDB6VskwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3NnMGhBa0RJM0dPZXBXcVNUVWtwTkRCNlZzay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAxYJQwDQYJKoZIhvcNAQELBQADggEBAMh2Bro4R41HHMcGyLj/uKew0wts tMBIIOvUtw9XkxALcoRrtPVeJV6rjQYrHOLyJ5dPK4osNYqrlSHLz+EDMW2rmyb1 wk6iwe2zkzxtmrSoXagqQe0jrBW/t51NKKUt/jmZZSHvg494bdXLVp8vtogcrnKw u2wXaw8Mn4fb6NvVa+JDxS3eZSDVBjy23G7YiIMJ5RlAYQD1OBL4RB/blGX6KsQd c1+7vJlq6xGPVPufr0hG3ZAcWYQBIpeVCkdCg8yIM9ub03ZrqKxnCkABEht6afwa uSYhA+8VrbaVD6Guhd8fB+64DvSX448nGhfqGUSGBcvKzQh7rmXtFzNhRV8= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:26 2025 by rpki-client on console.sobornost.net