$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/szu0WeMqZzJNyuNiHtY7Cg2xmnQ.roa File: szu0WeMqZzJNyuNiHtY7Cg2xmnQ.roa (raw, json) Hash identifier: YxmUY/096AkzlayURPRU4mA6WumaVpZDk+E2DGsa7LU= Subject key identifier: B3:3B:B4:59:E3:2A:67:32:4D:CA:E3:62:1E:D6:3B:0A:0D:B1:9A:74 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B79 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/szu0WeMqZzJNyuNiHtY7Cg2xmnQ.roa Signing time: Tue 01 Apr 2025 01:36:48 +0000 ROA not before: Tue 01 Apr 2025 01:36:48 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.98.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:36:48 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B33BB459E32A67324DCAE3621ED63B0A0DB19A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:44:b6:b5:90:ef:8c:dc:9e:78:ff:ea:61: 8a:8c:93:ff:07:4a:b1:08:87:40:4d:20:97:8b:4a: 26:b1:70:a2:65:01:1d:25:9a:ce:ec:f1:4e:8a:c5: 63:a9:08:22:d9:73:0c:51:1d:9e:41:3c:88:d8:a9: a0:60:6f:c9:f2:37:ef:6e:1d:22:19:b1:97:d6:dd: c0:4c:11:d3:c7:0a:af:1f:ac:28:44:65:52:ab:2f: 7c:68:79:39:66:5d:7d:6d:ac:25:a0:75:61:a2:0f: 06:e8:40:22:70:ea:60:fe:a3:55:02:bb:c8:c6:f7: de:56:e5:63:76:ae:b7:e3:9e:6e:d2:97:6a:5e:37: 34:6c:6b:fc:5f:e7:1d:5f:0d:53:83:b9:0c:80:11: f6:86:71:b8:81:bc:18:72:95:2a:65:c9:90:cb:24: 7f:2e:14:ed:ee:7a:83:37:d8:8c:05:d4:60:ce:c0: fc:21:b7:87:08:ce:d2:27:20:d6:e4:af:23:44:1f: 27:41:da:67:5d:89:50:08:a5:7d:6a:27:46:4a:92: e5:d2:d5:06:47:ca:b6:8a:fd:a0:de:10:86:8d:71: 86:f5:c0:e6:69:18:01:68:38:d1:39:93:1c:ab:f4: 4f:fe:a8:60:82:44:7b:cb:99:67:e3:68:3a:f9:d0: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:B4:59:E3:2A:67:32:4D:CA:E3:62:1E:D6:3B:0A:0D:B1:9A:74 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/szu0WeMqZzJNyuNiHtY7Cg2xmnQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.0.0/22 Signature Algorithm: sha256WithRSAEncryption a9:59:ec:42:b2:3b:46:15:7f:84:0e:54:44:10:8c:80:e2:10: de:50:b4:d3:10:22:7f:d7:db:b8:a8:a6:91:82:31:fa:86:33: ba:8b:2c:cd:35:d2:82:32:b5:84:2b:cf:7a:a6:42:c3:de:c4: a3:87:42:77:45:ea:51:44:de:e6:09:0f:49:60:8f:05:42:bd: 02:f8:68:31:fe:d5:76:f3:b8:b4:4b:e9:a1:44:70:d8:5f:0f: 9f:f8:00:05:b3:37:a5:bc:3f:17:6b:f3:b0:46:11:11:a9:f3: b7:34:ce:04:b0:f0:03:46:b3:2b:26:65:09:a4:36:4f:6e:62: e1:95:a9:a8:62:fc:09:81:01:dc:57:ba:a2:37:0a:a7:f8:e8: 00:4f:73:2e:fb:12:ea:eb:1b:85:c3:90:f4:08:b1:40:80:31: 55:db:16:a7:a6:04:8a:2c:23:e9:20:ad:9a:19:65:ac:d9:66: 6a:06:78:03:00:4d:97:dc:c8:52:ad:d2:53:57:62:0d:52:c7: b5:cf:c9:08:ee:16:87:03:9b:91:65:1a:b9:95:8c:3d:2b:f2: 24:e7:43:09:80:4b:79:41:d2:f9:10:34:e8:db:22:97:d3:3c: 96:db:fb:fc:c9:a3:80:e3:56:bb:06:1c:e3:ec:28:ff:cf:34: 17:3a:2d:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTM2NDhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIzM0JCNDU5RTMyQTY3 MzI0RENBRTM2MjFFRDYzQjBBMERCMTlBNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnPkS2tZDvjNyeeP/qYYqMk/8HSrEIh0BNIJeLSiaxcKJlAR0l ms7s8U6KxWOpCCLZcwxRHZ5BPIjYqaBgb8nyN+9uHSIZsZfW3cBMEdPHCq8frChE ZVKrL3xoeTlmXX1trCWgdWGiDwboQCJw6mD+o1UCu8jG995W5WN2rrfjnm7Sl2pe NzRsa/xf5x1fDVODuQyAEfaGcbiBvBhylSplyZDLJH8uFO3ueoM32IwF1GDOwPwh t4cIztInINbkryNEHydB2mddiVAIpX1qJ0ZKkuXS1QZHyraK/aDeEIaNcYb1wOZp GAFoONE5kxyr9E/+qGCCRHvLmWfjaDr50HoZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUszu0WeMqZzJNyuNiHtY7Cg2xmnQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3N6dTBXZU1xWnpKTnl1TmlIdFk3Q2cyeG1uUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYgAwDQYJKoZIhvcNAQELBQADggEBAKlZ7EKyO0YVf4QOVEQQjIDiEN5Q tNMQIn/X27ioppGCMfqGM7qLLM010oIytYQrz3qmQsPexKOHQndF6lFE3uYJD0lg jwVCvQL4aDH+1XbzuLRL6aFEcNhfD5/4AAWzN6W8Pxdr87BGERGp87c0zgSw8ANG sysmZQmkNk9uYuGVqahi/AmBAdxXuqI3Cqf46ABPcy77EurrG4XDkPQIsUCAMVXb FqemBIosI+kgrZoZZazZZmoGeAMATZfcyFKt0lNXYg1Sx7XPyQjuFocDm5FlGrmV jD0r8iTnQwmAS3lB0vkQNOjbIpfTPJbb+/zJo4DjVrsGHOPsKP/PNBc6LUg= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:26 2025 by rpki-client on console.sobornost.net