$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa File: 5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa (raw, json) Hash identifier: h++UVfaLe/BmKGUiIcwOv1RKXapjc6WQXz9GNBufWlI= Subject key identifier: E5:6A:39:90:B3:6D:A8:09:20:CF:20:80:B9:3D:71:BC:BF:13:A6:F9 Certificate issuer: /CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A Certificate serial: 5C Authority key identifier: E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa Signing time: Fri 31 Jan 2025 01:31:16 +0000 ROA not before: Fri 31 Jan 2025 01:31:16 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7671 IP address blocks: 157.3.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A Validity Not Before: Jan 31 01:31:16 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=E56A3990B36DA80920CF2080B93D71BCBF13A6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:ac:12:62:7d:2b:1b:7e:5c:16:d8:f3:8a: b0:84:e9:94:df:e7:d1:23:ce:e7:73:b7:20:9a:ad: 31:1b:94:40:81:55:bf:d8:60:4f:33:3f:fa:dd:6f: 52:5b:53:7b:d2:9e:29:25:31:44:25:c9:8b:99:29: f0:a8:53:f3:8f:bb:86:49:c1:05:5d:f0:f6:8b:c9: d9:7d:4e:fa:67:d0:1b:a3:58:98:38:23:38:25:21: e8:52:26:8b:03:cd:ac:68:57:53:94:94:be:05:c4: 40:f0:d5:2a:50:47:9f:7e:14:18:ac:ba:ec:5f:3e: b7:60:0b:ad:01:79:b1:71:ad:f3:ed:2a:23:3e:50: d9:6c:53:69:d3:57:da:a6:cd:d6:3c:7a:e7:64:97: 2d:20:9e:bd:ef:72:dc:8b:31:a6:da:31:37:06:a5: 13:a9:98:a6:32:1e:2a:d0:ce:9a:7a:23:00:3b:9f: b1:da:c7:80:56:57:8f:b3:93:73:d6:3e:1d:23:83: 24:e1:21:21:f7:97:5f:a3:dd:61:d4:b7:b4:f9:74: 39:f6:6a:b7:14:82:9f:b1:f8:a6:5b:e0:6e:a3:35: f4:e7:a6:6d:94:31:07:1e:88:19:05:1b:b4:50:32: 57:b8:8d:c7:91:49:c1:78:8d:f0:f2:85:75:0b:c7: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:39:90:B3:6D:A8:09:20:CF:20:80:B9:3D:71:BC:BF:13:A6:F9 X509v3 Authority Key Identifier: keyid:E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:be:d5:e4:80:36:f7:68:a5:9c:25:26:c6:c5:0f:7e:c7:15: 40:60:12:38:35:b0:df:51:24:f5:6d:6e:00:d0:4c:8b:e4:5f: d2:01:1b:82:a3:ad:1f:21:ec:8c:ab:4d:9c:33:7b:c7:fa:fd: 1e:0e:24:31:62:3f:d4:81:5e:8b:85:72:9f:c2:47:bc:eb:f0: 8d:d7:a2:da:51:a5:15:8b:54:a2:fd:8f:16:ec:5d:2a:9f:c4: 95:2e:01:a2:56:e8:87:43:d2:b0:60:4e:e9:cd:52:3f:49:eb: e0:7c:9a:40:2f:f8:27:da:67:2f:09:75:12:cc:06:58:7b:69: 66:fe:00:46:63:ff:cf:37:94:a2:e2:11:6d:71:f9:df:14:7c: ff:98:12:ba:23:52:7c:ce:bf:b4:f4:43:ef:f1:07:2c:4a:a4: f1:48:cf:28:a4:42:92:ed:7e:3e:31:77:ac:57:e6:c8:aa:e9: 3b:9d:f0:37:74:07:e6:8a:54:14:89:fb:c8:db:0b:28:cd:e1: 0d:1c:6f:0f:2d:a7:7c:d2:58:75:6e:d4:5a:8d:8e:48:24:8f: 37:c1:1b:c9:f6:36:70:df:2e:12:5c:54:94:f3:71:70:8b:5d: 02:7a:5f:80:72:cf:25:aa:d6:30:18:85:f5:02:84:a6:b1:07: 6f:3e:7a:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjJG NjlDOTVBMDk4RjgwNzNGNUYzQzNDMUE5OEI3NkNCRjg1MDJBMB4XDTI1MDEzMTAx MzExNloXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRTU2QTM5OTBCMzZEQTgw OTIwQ0YyMDgwQjkzRDcxQkNCRjEzQTZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANFBrBJifSsbflwW2POKsITplN/n0SPO53O3IJqtMRuUQIFVv9hg TzM/+t1vUltTe9KeKSUxRCXJi5kp8KhT84+7hknBBV3w9ovJ2X1O+mfQG6NYmDgj OCUh6FImiwPNrGhXU5SUvgXEQPDVKlBHn34UGKy67F8+t2ALrQF5sXGt8+0qIz5Q 2WxTadNX2qbN1jx652SXLSCeve9y3IsxptoxNwalE6mYpjIeKtDOmnojADufsdrH gFZXj7OTc9Y+HSODJOEhIfeXX6PdYdS3tPl0OfZqtxSCn7H4plvgbqM19OembZQx Bx6IGQUbtFAyV7iNx5FJwXiN8PKFdQvH7KMCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBTlajmQs22oCSDPIIC5PXG8vxOm+TAfBgNVHSMEGDAWgBTmL2nJWgmPgHP188PB qYt2y/hQKjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQzMi81aTlweVZvSmo0Qno5ZlBEd2FtTGRzdjRVQ28uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC81aTlweVZvSmo0Qno5ZlBEd2FtTGRz djRVQ28uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQzMi81V281a0xOdHFBa2d6eUNBdVQxeHZMOFRwdmsucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAnQMwDQYJKoZIhvcNAQELBQADggEBABe+1eSANvdopZwlJsbFD37HFUBg Ejg1sN9RJPVtbgDQTIvkX9IBG4KjrR8h7IyrTZwze8f6/R4OJDFiP9SBXouFcp/C R7zr8I3XotpRpRWLVKL9jxbsXSqfxJUuAaJW6IdD0rBgTunNUj9J6+B8mkAv+Cfa Zy8JdRLMBlh7aWb+AEZj/883lKLiEW1x+d8UfP+YErojUnzOv7T0Q+/xByxKpPFI zyikQpLtfj4xd6xX5siq6Tud8Dd0B+aKVBSJ+8jbCyjN4Q0cbw8tp3zSWHVu1FqN jkgkjzfBG8n2NnDfLhJcVJTzcXCLXQJ6X4ByzyWq1jAYhfUChKaxB28+enA= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:17 2025 by rpki-client on console.sobornost.net