$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/w_GOaZVmMtB3cKLrlHAfaJWe3FU.roa File: w_GOaZVmMtB3cKLrlHAfaJWe3FU.roa (raw, json) Hash identifier: g1kIhTFhtcgUUBh0nXkj/JhT3g9EVu2nZiNF1qXwtiQ= Subject key identifier: C3:F1:8E:69:95:66:32:D0:77:70:A2:EB:94:70:1F:68:95:9E:DC:55 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E21 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w_GOaZVmMtB3cKLrlHAfaJWe3FU.roa Signing time: Tue 01 Apr 2025 02:31:37 +0000 ROA not before: Tue 01 Apr 2025 02:31:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.108.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:31:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C3F18E69956632D07770A2EB94701F68959EDC55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:cf:57:80:96:50:db:ad:91:6d:88:d2:f3: 68:c0:3e:dd:d5:93:e9:92:d1:52:ec:78:d1:0c:a8: b3:6d:ad:e1:88:10:4a:6e:cf:e1:b1:e6:b5:52:cb: c2:f7:b2:de:91:aa:ca:ef:c5:40:68:ac:62:de:35: f2:12:c5:63:fe:b7:49:81:09:06:ac:a0:82:4b:ea: 43:b7:7a:6a:d7:bc:39:cd:63:3f:e9:27:14:65:00: cb:ed:50:fa:71:e9:49:10:c1:a8:71:8a:c2:01:27: 05:5e:f1:35:33:be:f9:26:ba:4a:fb:a0:f7:05:40: 0b:a3:f9:5d:87:a9:a7:9e:7e:a6:e9:c9:ab:f4:7b: 32:88:ad:90:e6:61:9a:76:d8:ff:2c:bc:29:ec:34: 88:20:1f:4f:a6:77:37:d0:c8:a2:f5:11:d5:e9:5c: b6:65:16:03:1b:6b:32:9f:09:25:c8:38:38:19:0c: 2b:98:00:5d:d0:c7:26:92:1c:63:4e:e8:26:71:54: 93:60:ed:04:a8:dd:52:6f:34:82:a4:73:7c:4b:81: 9a:9b:d8:0f:6b:b7:1f:51:c8:42:95:27:5c:43:0e: 2a:f1:5d:48:6d:a0:ba:94:e9:04:c3:4f:16:e8:ea: 65:f0:94:f3:ea:1e:0b:78:ca:77:2a:f9:7e:4d:43: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:8E:69:95:66:32:D0:77:70:A2:EB:94:70:1F:68:95:9E:DC:55 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/w_GOaZVmMtB3cKLrlHAfaJWe3FU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.108.0.0/17 Signature Algorithm: sha256WithRSAEncryption 34:22:c2:bf:e7:0b:88:5d:08:70:95:c3:84:6c:59:8c:82:76: 68:e6:a2:48:75:0e:a3:43:e8:2c:77:b0:cf:22:57:3a:84:c9: 5e:72:0e:0d:c1:f2:50:45:83:d8:ee:7b:81:eb:65:87:a9:6d: 5a:11:a7:98:c6:b8:54:a7:60:56:38:2c:42:27:27:17:e7:da: a9:0c:0c:8e:f3:d2:a5:57:9c:73:b5:79:db:ed:04:e7:ec:b1: b6:67:47:2c:09:2a:d8:07:c1:d5:59:21:45:b3:6c:a9:90:c4: c8:d4:39:8b:c5:14:84:29:af:ed:20:18:4c:bb:f5:2f:b4:83: 0d:15:1f:0f:65:a5:3f:d2:a6:f5:38:57:26:e4:e0:e1:32:f0: 07:ef:4f:61:5f:5e:d5:6a:60:6e:76:a3:82:02:e3:5a:b2:ff: b2:0f:a3:a4:a7:bd:59:6a:75:9f:67:1e:c6:6e:cf:6b:3c:c7: 8a:98:f5:61:68:95:58:44:56:b9:2a:c4:4e:4a:7b:3d:e4:9a: 11:66:3b:58:80:ef:fc:f2:c7:ea:99:92:92:b1:50:72:a1:2f: c6:c5:9b:8a:5e:5e:d8:24:7b:22:01:14:e8:61:9b:78:6c:c0: 26:ba:da:f3:96:f9:93:a8:e0:82:30:85:c5:63:a1:bb:8e:44: a5:4d:6d:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjMxMzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMzRjE4RTY5OTU2NjMy RDA3NzcwQTJFQjk0NzAxRjY4OTU5RURDNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhk89XgJZQ262RbYjS82jAPt3Vk+mS0VLseNEMqLNtreGIEEpu z+Gx5rVSy8L3st6RqsrvxUBorGLeNfISxWP+t0mBCQasoIJL6kO3emrXvDnNYz/p JxRlAMvtUPpx6UkQwahxisIBJwVe8TUzvvkmukr7oPcFQAuj+V2Hqaeefqbpyav0 ezKIrZDmYZp22P8svCnsNIggH0+mdzfQyKL1EdXpXLZlFgMbazKfCSXIODgZDCuY AF3QxyaSHGNO6CZxVJNg7QSo3VJvNIKkc3xLgZqb2A9rtx9RyEKVJ1xDDirxXUht oLqU6QTDTxbo6mXwlPPqHgt4yncq+X5NQ2obAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUw/GOaZVmMtB3cKLrlHAfaJWe3FUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3dfR09hWlZtTXRCM2NLTHJsSEFmYUpXZTNGVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxbAAwDQYJKoZIhvcNAQELBQADggEBADQiwr/nC4hdCHCVw4RsWYyCdmjm okh1DqND6Cx3sM8iVzqEyV5yDg3B8lBFg9jue4HrZYepbVoRp5jGuFSnYFY4LEIn Jxfn2qkMDI7z0qVXnHO1edvtBOfssbZnRywJKtgHwdVZIUWzbKmQxMjUOYvFFIQp r+0gGEy79S+0gw0VHw9lpT/SpvU4Vybk4OEy8AfvT2FfXtVqYG52o4IC41qy/7IP o6SnvVlqdZ9nHsZuz2s8x4qY9WFolVhEVrkqxE5Kez3kmhFmO1iA7/zyx+qZkpKx UHKhL8bFm4peXtgkeyIBFOhhm3hswCa62vOW+ZOo4IIwhcVjobuORKVNbV8= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:27 2025 by rpki-client on console.sobornost.net