$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/XL98O6Q2CQeVmj2_rbDs3AMWjkE.roa File: XL98O6Q2CQeVmj2_rbDs3AMWjkE.roa (raw, json) Hash identifier: aw0pBx0Fh12GakkwKtkeAOBXlJG//BXMDDJcFKpBNX4= Subject key identifier: 5C:BF:7C:3B:A4:36:09:07:95:9A:3D:BF:AD:B0:EC:DC:03:16:8E:41 Certificate issuer: /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16 Certificate serial: 03 Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/XL98O6Q2CQeVmj2_rbDs3AMWjkE.roa Signing time: Mon 28 Apr 2025 09:59:09 +0000 ROA not before: Mon 28 Apr 2025 09:59:09 +0000 ROA not after: Tue 28 Apr 2026 09:50:35 +0000 asID: 131915 IP address blocks: 133.186.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16 Validity Not Before: Apr 28 09:59:09 2025 GMT Not After : Apr 28 09:50:35 2026 GMT Subject: CN=5CBF7C3BA4360907959A3DBFADB0ECDC03168E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:65:4b:37:51:2c:25:1a:b8:3c:93:f5:25: f1:34:f9:7f:a7:ae:d7:d8:45:1e:1e:a0:0f:4d:6e: 14:21:a4:63:d1:3b:d4:2e:20:17:a5:e0:3d:48:e4: 77:f1:11:e9:7e:aa:83:4b:30:bd:e4:b7:32:43:71: a8:07:8e:1f:76:07:07:6f:ee:00:22:0b:8c:92:05: f7:2e:23:8b:c0:08:41:a0:56:31:63:df:66:d0:70: f5:e8:4c:0e:3b:d5:78:03:7f:e9:a0:a0:f1:bb:38: 85:6e:6b:36:a9:6e:11:77:2a:c8:6c:b4:38:19:d1: 61:0d:62:55:34:a5:84:5a:8c:de:d0:a9:4f:d4:31: d5:9b:6f:d1:9a:76:b5:2a:fd:5e:96:3d:2f:23:11: 06:4d:0c:78:29:4b:9e:0e:21:7e:fa:d2:a7:07:c8: e7:d7:0b:fd:7c:47:d8:24:7b:2e:c8:1b:ea:53:c3: dc:a7:c4:f4:6d:c1:eb:53:9e:15:a2:85:43:1e:5c: ac:90:e4:26:8d:8a:75:64:68:7d:c7:d2:c9:a4:55: 11:88:b0:da:a3:5d:5a:94:36:8b:22:c8:7c:33:8d: 47:ff:78:2a:e8:d6:92:4f:59:d0:26:27:47:58:2b: 10:24:06:36:bc:b1:e7:56:6a:6c:b8:e4:b5:97:b4: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BF:7C:3B:A4:36:09:07:95:9A:3D:BF:AD:B0:EC:DC:03:16:8E:41 X509v3 Authority Key Identifier: keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/XL98O6Q2CQeVmj2_rbDs3AMWjkE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.186.16.0/20 Signature Algorithm: sha256WithRSAEncryption d7:5a:d8:19:d7:d2:80:94:5a:ea:a5:a8:a3:63:73:0a:e9:3b: 51:c7:d2:49:40:37:26:d4:8e:e4:40:d1:f6:3f:95:45:2e:1d: 17:d2:d1:a4:5f:a9:2c:5d:1d:8a:63:5e:d5:1f:50:48:20:4a: da:69:19:f2:d0:fc:11:6e:1b:c8:74:07:c4:7b:b4:de:3e:8b: 94:73:bd:87:49:3b:69:87:41:72:02:33:e4:ec:62:75:67:0a: 0e:2a:d0:d6:47:99:d6:2c:09:b3:2f:8d:61:e6:fd:d6:a8:db: 59:98:f1:18:63:6e:72:9a:33:25:89:01:7d:c1:c8:32:c3:c2: 86:b0:f1:ae:87:71:78:10:d7:11:28:60:4a:7c:93:e7:44:8e: f1:8f:84:e5:b9:20:df:e9:dc:d2:a4:20:a1:41:ad:09:93:2b: 4a:ee:af:5c:d4:88:80:37:f9:af:e9:fa:a1:fd:34:95:aa:37: 55:03:c1:ad:8a:61:be:1a:46:d7:6b:05:6d:d8:f1:b1:dd:fa: 32:f0:83:70:35:62:c8:0d:4b:42:9b:41:cc:8b:a3:79:b2:12: 78:9c:e1:a7:1e:51:36:fe:9d:31:56:b3:b4:26:39:0c:0f:52: d5:03:5b:18:8c:88:3f:b8:c3:23:03:ab:28:57:82:d1:c2:4c: 83:8a:e4:bc -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzZD QUJCRjA2RDMzRkJDMDAyRUUwN0IwMDAxNDBCQzNCNjEyQjE2MB4XDTI1MDQyODA5 NTkwOVoXDTI2MDQyODA5NTAzNVowMzExMC8GA1UEAxMoNUNCRjdDM0JBNDM2MDkw Nzk1OUEzREJGQURCMEVDREMwMzE2OEU0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMJNZUs3USwlGrg8k/Ul8TT5f6eu19hFHh6gD01uFCGkY9E71C4g F6XgPUjkd/ER6X6qg0swveS3MkNxqAeOH3YHB2/uACILjJIF9y4ji8AIQaBWMWPf ZtBw9ehMDjvVeAN/6aCg8bs4hW5rNqluEXcqyGy0OBnRYQ1iVTSlhFqM3tCpT9Qx 1Ztv0Zp2tSr9XpY9LyMRBk0MeClLng4hfvrSpwfI59cL/XxH2CR7Lsgb6lPD3KfE 9G3B61OeFaKFQx5crJDkJo2KdWRofcfSyaRVEYiw2qNdWpQ2iyLIfDONR/94KujW kk9Z0CYnR1grECQGNryx51ZqbLjktZe0IycCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRcv3w7pDYJB5WaPb+tsOzcAxaOQTAfBgNVHSMEGDAWgBTXbKu/BtM/vAAu4HsA AUC8O2ErFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMjgvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2RHRoS3hZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMTJ5cnZ3YlRQN3dBTHVCN0FBRkF2 RHRoS3hZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDI4L1hMOThPNlEyQ1FlVm1qMl9yYkRzM0FNV2prRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASFuhAwDQYJKoZIhvcNAQELBQADggEBANda2BnX0oCUWuqlqKNjcwrp O1HH0klANybUjuRA0fY/lUUuHRfS0aRfqSxdHYpjXtUfUEggStppGfLQ/BFuG8h0 B8R7tN4+i5RzvYdJO2mHQXICM+TsYnVnCg4q0NZHmdYsCbMvjWHm/dao21mY8Rhj bnKaMyWJAX3ByDLDwoaw8a6HcXgQ1xEoYEp8k+dEjvGPhOW5IN/p3NKkIKFBrQmT K0rur1zUiIA3+a/p+qH9NJWqN1UDwa2KYb4aRtdrBW3Y8bHd+jLwg3A1YsgNS0Kb QcyLo3myEnic4aceUTb+nTFWs7QmOQwPUtUDWxiMiD+4wyMDqyhXgtHCTIOK5Lw= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:07 2025 by rpki-client on console.sobornost.net