$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/PuqPyCpjRrIuC0iBZT-XjNN87IA.roa File: PuqPyCpjRrIuC0iBZT-XjNN87IA.roa (raw, json) Hash identifier: IgikUllrnIuag1jxO8dhYeLC4qzcs9llouuRqZT7ZAA= Subject key identifier: 3E:EA:8F:C8:2A:63:46:B2:2E:0B:48:81:65:3F:97:8C:D3:7C:EC:80 Certificate issuer: /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16 Certificate serial: 04 Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/PuqPyCpjRrIuC0iBZT-XjNN87IA.roa Signing time: Mon 28 Apr 2025 09:59:10 +0000 ROA not before: Mon 28 Apr 2025 09:59:10 +0000 ROA not after: Tue 28 Apr 2026 09:50:35 +0000 asID: 131915 IP address blocks: 133.186.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16 Validity Not Before: Apr 28 09:59:10 2025 GMT Not After : Apr 28 09:50:35 2026 GMT Subject: CN=3EEA8FC82A6346B22E0B4881653F978CD37CEC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:5a:1d:5d:2f:83:72:dd:9f:79:19:29:b2: 31:93:55:9d:5a:00:03:1c:6f:25:70:92:4b:5f:26: 05:25:91:b6:99:cf:dd:96:3e:3d:06:6e:cd:79:2b: 82:9b:9c:40:3b:91:a9:32:80:48:e1:67:de:61:0d: 38:7b:ac:1e:83:19:1f:ff:17:13:81:7b:1c:fa:4e: bd:da:29:35:91:8c:36:2c:09:7a:20:2c:b6:7d:ca: 9f:8e:1b:42:76:68:a1:b4:75:1d:c7:80:e0:e1:1c: 6b:fd:f8:e0:0a:6d:83:d5:3f:1c:8b:80:3b:1b:26: 55:4c:1a:88:f0:a8:06:b0:1a:b7:cf:c8:a0:25:3d: 6b:d9:07:d5:fa:5e:87:60:21:34:4d:ca:7f:da:2f: ee:15:81:24:25:d0:78:94:ff:42:24:58:9a:e1:1a: e9:a7:2a:30:28:36:3a:a9:22:39:16:36:3c:0a:03: fb:df:66:08:73:e5:79:72:71:02:54:bb:56:3f:57: da:0a:64:02:c7:0d:19:0c:7e:ca:d1:49:d3:3b:b4: f2:fb:ed:db:56:17:b2:99:f5:a4:2c:41:ec:43:49: ca:fe:f4:04:17:31:96:30:2c:b8:d6:7d:45:bb:00: 95:ed:83:08:40:ee:d8:d9:3e:eb:e1:08:03:b2:cd: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:8F:C8:2A:63:46:B2:2E:0B:48:81:65:3F:97:8C:D3:7C:EC:80 X509v3 Authority Key Identifier: keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/PuqPyCpjRrIuC0iBZT-XjNN87IA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.186.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:ec:92:03:ac:6d:d2:0b:3b:08:37:10:41:cc:59:4c:88:06: db:80:ca:c2:a1:a4:c5:62:37:55:52:a8:84:5f:10:1a:cf:36: e6:71:d7:c4:54:ec:1a:5b:d1:e0:f2:ea:42:db:1c:54:85:4e: e5:7b:47:2d:8e:f7:fe:2d:b5:9a:4d:24:b2:d2:dc:bd:9c:c1: 8f:0d:a9:62:8e:15:bf:09:57:0a:0c:cb:60:70:1d:d0:d8:c2: d5:6b:0f:d0:89:3b:09:79:0d:b4:51:7c:87:71:4f:ea:ac:7c: a3:29:0c:a3:f7:3a:05:f7:b8:54:51:d7:0f:27:1e:f1:90:c8: 3f:1f:ca:8f:96:2a:42:89:42:c8:4a:7b:58:53:24:e2:1d:77: 3e:ba:22:87:7f:9a:94:c4:c8:aa:25:f1:e4:ed:96:51:78:f4: 40:3c:1a:39:8d:0d:71:d9:08:2a:c3:04:0d:87:69:87:e2:19: 8b:8f:d0:98:01:c2:11:cc:e6:68:9e:38:c3:88:79:31:f8:ef: 73:7e:0d:30:ff:d0:92:c7:d0:33:5b:71:e5:49:cb:f4:61:d1: 61:07:a9:27:5f:69:28:15:26:18:60:38:a2:28:2c:43:59:7d: 60:7d:33:00:ed:1a:48:19:f6:f0:d8:c4:f1:6e:32:38:ee:cf: 1d:ee:c3:27 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzZD QUJCRjA2RDMzRkJDMDAyRUUwN0IwMDAxNDBCQzNCNjEyQjE2MB4XDTI1MDQyODA5 NTkxMFoXDTI2MDQyODA5NTAzNVowMzExMC8GA1UEAxMoM0VFQThGQzgyQTYzNDZC MjJFMEI0ODgxNjUzRjk3OENEMzdDRUM4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKFcWh1dL4Ny3Z95GSmyMZNVnVoAAxxvJXCSS18mBSWRtpnP3ZY+ PQZuzXkrgpucQDuRqTKASOFn3mENOHusHoMZH/8XE4F7HPpOvdopNZGMNiwJeiAs tn3Kn44bQnZoobR1HceA4OEca/344Aptg9U/HIuAOxsmVUwaiPCoBrAat8/IoCU9 a9kH1fpeh2AhNE3Kf9ov7hWBJCXQeJT/QiRYmuEa6acqMCg2OqkiORY2PAoD+99m CHPleXJxAlS7Vj9X2gpkAscNGQx+ytFJ0zu08vvt21YXspn1pCxB7ENJyv70BBcx ljAsuNZ9RbsAle2DCEDu2Nk+6+EIA7LNIk8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBQ+6o/IKmNGsi4LSIFlP5eM03zsgDAfBgNVHSMEGDAWgBTXbKu/BtM/vAAu4HsA AUC8O2ErFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMjgvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2RHRoS3hZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2 RHRoS3hZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDI4L1B1cVB5Q3BqUnJJdUMwaUJaVC1Yak5OODdJQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAaFukAwDQYJKoZIhvcNAQELBQADggEBAA7skgOsbdILOwg3EEHMWUyI BtuAysKhpMViN1VSqIRfEBrPNuZx18RU7Bpb0eDy6kLbHFSFTuV7Ry2O9/4ttZpN JLLS3L2cwY8NqWKOFb8JVwoMy2BwHdDYwtVrD9CJOwl5DbRRfIdxT+qsfKMpDKP3 OgX3uFRR1w8nHvGQyD8fyo+WKkKJQshKe1hTJOIddz66Iod/mpTEyKol8eTtllF4 9EA8GjmNDXHZCCrDBA2HaYfiGYuP0JgBwhHM5mieOMOIeTH473N+DTD/0JLH0DNb ceVJy/Rh0WEHqSdfaSgVJhhgOKIoLENZfWB9MwDtGkgZ9vDYxPFuMjjuzx3uwyc= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:07 2025 by rpki-client on console.sobornost.net