$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v3SoCs3SNDFZBVhqE3LgON2lFAc.roa File: v3SoCs3SNDFZBVhqE3LgON2lFAc.roa (raw, json) Hash identifier: k64GN4ArRBbnLtoCnpOTHvzZiBgch00xle4NvOkRha4= Subject key identifier: BF:74:A8:0A:CD:D2:34:31:59:05:58:6A:13:72:E0:38:DD:A5:14:07 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0DBA Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v3SoCs3SNDFZBVhqE3LgON2lFAc.roa Signing time: Tue 01 Apr 2025 02:24:46 +0000 ROA not before: Tue 01 Apr 2025 02:24:46 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.231.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:24:46 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=BF74A80ACDD234315905586A1372E038DDA51407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:ee:e6:5f:a4:d5:d0:58:e9:7a:13:1c:cd: ee:69:ab:a5:98:a0:e3:26:d0:d4:af:1d:60:7a:6d: 13:e1:9d:7a:c6:30:08:bb:ec:4e:d6:40:21:5c:b5: e1:c2:df:a6:99:dc:65:5a:c9:5d:ff:87:99:62:0a: 96:a1:03:97:e6:8d:79:66:dc:78:b4:49:a4:98:c2: 9d:49:7d:dd:b3:a5:45:8f:12:33:94:23:c9:d3:65: 7a:81:23:f7:d3:e4:09:1f:af:2c:7b:2a:5d:d8:8c: cc:c7:f7:b1:bc:5a:b0:3c:e2:c6:86:79:90:d4:ff: 4c:69:50:67:cf:15:04:a7:e8:f7:c5:a0:9e:e4:a3: 1c:61:c1:ba:bf:2a:b2:17:14:45:5c:3b:e9:72:57: 40:4f:4e:f3:67:1c:e2:19:0c:f9:02:fe:cb:f4:b6: 1a:cc:19:05:ee:8a:45:0c:b9:a8:88:38:81:43:24: a4:d4:c8:68:18:dd:de:a3:74:19:9f:ad:ca:6a:36: 49:41:b4:15:c2:c1:51:45:70:a5:e3:a8:51:aa:37: b6:16:2d:c2:54:75:95:0f:c7:24:53:93:96:bd:6e: d6:99:f6:8d:23:37:a9:00:0a:65:5f:70:21:4e:2c: eb:1c:61:2c:8f:34:c3:5a:5e:37:6a:2c:15:b9:4d: c9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:74:A8:0A:CD:D2:34:31:59:05:58:6A:13:72:E0:38:DD:A5:14:07 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v3SoCs3SNDFZBVhqE3LgON2lFAc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.231.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:af:84:ee:35:3a:b4:54:61:e5:3a:4f:82:3b:b6:28:0c:bb: ad:a5:ae:8e:e2:2f:1b:84:6d:5e:e2:63:1a:e5:ef:76:46:da: 6e:b9:0b:6c:75:d8:dd:f2:9f:ad:29:fd:3f:51:d8:53:c9:20: 47:9f:6b:00:24:d3:7d:d9:6e:ac:2b:e9:4e:52:6f:4c:76:77: c0:11:1a:ff:d2:b3:d0:ac:df:4b:9b:9c:5a:b4:d0:18:a8:cf: e8:49:c3:66:32:b2:0f:cc:0c:fc:e3:72:d2:42:36:2f:ca:bc: 6f:01:29:46:ed:68:6d:87:6f:05:63:c6:05:22:56:26:4c:43: f3:0e:0a:f5:37:16:74:44:9f:56:53:8d:0c:23:31:cb:1b:b8: 19:ae:4f:e7:e3:92:1c:6c:27:a4:93:1f:f9:5e:00:d7:09:b8: e1:e6:28:ef:98:a4:5e:4f:fb:19:7d:d8:95:af:39:0b:b7:78: c3:be:43:0d:37:94:f3:df:e7:79:e5:0e:2d:6f:6a:06:01:b2: 6e:17:41:9d:ad:2e:d9:a7:66:02:6a:25:c9:f1:71:3d:60:7c: 98:15:a7:e9:c8:78:b7:41:32:c9:99:cd:0c:ba:83:12:c8:c4: a2:29:3a:69:41:27:77:56:38:57:bb:7a:94:7a:b1:42:fd:7d: 7a:d1:0a:52 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICDbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjI0NDZaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJGNzRBODBBQ0REMjM0 MzE1OTA1NTg2QTEzNzJFMDM4RERBNTE0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWwO7mX6TV0FjpehMcze5pq6WYoOMm0NSvHWB6bRPhnXrGMAi7 7E7WQCFcteHC36aZ3GVayV3/h5liCpahA5fmjXlm3Hi0SaSYwp1Jfd2zpUWPEjOU I8nTZXqBI/fT5Akfryx7Kl3YjMzH97G8WrA84saGeZDU/0xpUGfPFQSn6PfFoJ7k oxxhwbq/KrIXFEVcO+lyV0BPTvNnHOIZDPkC/sv0thrMGQXuikUMuaiIOIFDJKTU yGgY3d6jdBmfrcpqNklBtBXCwVFFcKXjqFGqN7YWLcJUdZUPxyRTk5a9btaZ9o0j N6kACmVfcCFOLOscYSyPNMNaXjdqLBW5TclXAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUv3SoCs3SNDFZBVhqE3LgON2lFAcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3YzU29DczNTTkRGWkJWaHFFM0xnT04ybEZBYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAb5zANBgkqhkiG9w0BAQsFAAOCAQEAZ6+E7jU6tFRh5TpPgju2KAy7raWu juIvG4RtXuJjGuXvdkbabrkLbHXY3fKfrSn9P1HYU8kgR59rACTTfdlurCvpTlJv THZ3wBEa/9Kz0KzfS5ucWrTQGKjP6EnDZjKyD8wM/ONy0kI2L8q8bwEpRu1obYdv BWPGBSJWJkxD8w4K9TcWdESfVlONDCMxyxu4Ga5P5+OSHGwnpJMf+V4A1wm44eYo 75ikXk/7GX3Yla85C7d4w75DDTeU89/neeUOLW9qBgGybhdBna0u2admAmolyfFx PWB8mBWn6ch4t0EyyZnNDLqDEsjEoik6aUEnd1Y4V7t6lHqxQv19etEKUg== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:27 2025 by rpki-client on console.sobornost.net