$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/QJeVI1Vk0hev7slQXak1WKugI0E.roa File: QJeVI1Vk0hev7slQXak1WKugI0E.roa (raw, json) Hash identifier: UcoYnWiavzfeTvnokmqGTOgQix3Em9gP8AGC5idoKxs= Subject key identifier: 40:97:95:23:55:64:D2:17:AF:EE:C9:50:5D:A9:35:58:AB:A0:23:41 Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Certificate serial: 35 Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/QJeVI1Vk0hev7slQXak1WKugI0E.roa Signing time: Fri 31 Jan 2025 01:33:30 +0000 ROA not before: Fri 31 Jan 2025 01:33:30 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 7679 IP address blocks: 58.3.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B Validity Not Before: Jan 31 01:33:30 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=409795235564D217AFEEC9505DA93558ABA02341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:33:a2:71:68:d4:64:77:06:63:0c:e1:4c: 14:48:9e:f3:56:22:da:83:47:93:3c:03:2a:34:86: 2e:d5:21:69:eb:38:2a:d6:dd:50:59:0b:92:19:3d: 1f:d6:df:87:fa:ec:14:50:6d:89:2b:c3:a0:97:3e: 59:97:65:a8:10:6b:c4:4e:91:22:10:4c:95:34:29: db:b3:f7:63:c3:e4:02:1f:6c:20:73:e5:df:c6:50: 81:2a:22:1a:ac:d9:22:f1:b7:e0:6a:51:33:bc:74: 1c:31:b8:c5:cf:22:a5:5f:50:3e:0d:7b:bf:d6:ae: dd:22:37:90:37:23:3e:a9:b0:d6:d0:f8:fc:28:e9: 32:93:25:6c:30:a9:20:d8:f9:b8:c7:61:14:c2:71: d9:d8:a3:df:0d:24:89:96:b3:be:98:46:ff:e0:f6: 5a:1f:9c:00:7f:6f:82:fc:b2:e2:8d:9a:9a:ac:d7: 8f:a9:1e:1a:46:01:e9:a2:0d:21:a2:b4:bb:49:46: 21:b3:6e:eb:32:dc:8e:94:f5:62:dc:23:d8:19:50: bf:d4:14:29:0d:91:42:f5:60:b2:94:05:9f:b6:59: 91:55:8c:2a:2d:80:8e:b2:5d:ea:24:cd:c5:91:47: cf:9a:7c:02:e3:37:45:6c:ef:49:d3:e0:9b:d4:ba: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:95:23:55:64:D2:17:AF:EE:C9:50:5D:A9:35:58:AB:A0:23:41 X509v3 Authority Key Identifier: keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/QJeVI1Vk0hev7slQXak1WKugI0E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.3.0.0/17 Signature Algorithm: sha256WithRSAEncryption 88:97:a3:45:fb:f7:1a:02:f6:3a:fd:04:95:a6:a4:3f:3e:5e: d1:7f:90:9f:07:de:ac:06:ec:6a:7d:b7:d4:55:c7:46:39:1e: c2:69:37:35:15:ce:f4:76:d8:96:fc:1a:8f:92:68:ed:01:84: ca:a0:18:7e:58:f4:21:4e:48:b1:4c:5a:a5:78:52:67:37:b8: d6:db:74:29:06:97:c2:4b:73:e9:7a:16:26:8e:3f:ca:ff:d9: 53:17:04:bc:c6:09:5e:ab:15:97:49:5d:91:d1:19:e6:de:a2: 05:9b:3a:29:91:f9:c8:69:6a:cf:41:c7:08:e4:b4:ac:63:11: 39:a8:a5:11:fb:b8:c6:95:4f:16:b1:e7:c8:53:64:ec:fd:f1: e3:14:83:69:37:de:24:64:c7:fa:41:2d:9c:28:1d:45:2d:c4: a0:8a:d3:19:43:ff:57:79:b3:b0:4f:36:81:5a:55:5a:43:f0: a1:8e:1d:52:8f:44:bc:08:4f:0c:70:e3:1e:b2:c9:31:54:47: 24:fc:1f:a9:a0:77:5b:97:a5:0a:53:6a:53:a8:3c:8f:5a:a3: c8:26:15:76:79:bd:23:89:6b:2c:c2:ac:6a:f3:f4:9e:c9:a5: b8:24:d1:db:2b:d0:86:df:c6:28:4a:02:f2:16:c7:8d:5c:b5: ae:f3:d8:35 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI1MDEzMTAx MzMzMFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNDA5Nzk1MjM1NTY0RDIx N0FGRUVDOTUwNURBOTM1NThBQkEwMjM0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK1LM6JxaNRkdwZjDOFMFEie81Yi2oNHkzwDKjSGLtUhaes4Ktbd UFkLkhk9H9bfh/rsFFBtiSvDoJc+WZdlqBBrxE6RIhBMlTQp27P3Y8PkAh9sIHPl 38ZQgSoiGqzZIvG34GpRM7x0HDG4xc8ipV9QPg17v9au3SI3kDcjPqmw1tD4/Cjp MpMlbDCpINj5uMdhFMJx2dij3w0kiZazvphG/+D2Wh+cAH9vgvyy4o2amqzXj6ke GkYB6aINIaK0u0lGIbNu6zLcjpT1Ytwj2BlQv9QUKQ2RQvVgspQFn7ZZkVWMKi2A jrJd6iTNxZFHz5p8AuM3RWzvSdPgm9S6AccCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRAl5UjVWTSF6/uyVBdqTVYq6AjQTAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yNDkvUUplVkkxVmswaGV2N3NsUVhhazFXS3VnSTBFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBzoDADANBgkqhkiG9w0BAQsFAAOCAQEAiJejRfv3GgL2Ov0ElaakPz5e0X+Q nwferAbsan231FXHRjkewmk3NRXO9HbYlvwaj5Jo7QGEyqAYflj0IU5IsUxapXhS Zze41tt0KQaXwktz6XoWJo4/yv/ZUxcEvMYJXqsVl0ldkdEZ5t6iBZs6KZH5yGlq z0HHCOS0rGMROailEfu4xpVPFrHnyFNk7P3x4xSDaTfeJGTH+kEtnCgdRS3EoIrT GUP/V3mzsE82gVpVWkPwoY4dUo9EvAhPDHDjHrLJMVRHJPwfqaB3W5elClNqU6g8 j1qjyCYVdnm9I4lrLMKsavP0nsmluCTR2yvQht/GKEoC8hbHjVy1rvPYNQ== -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:18 2025 by rpki-client on console.sobornost.net