$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/tc9YL4JAXC3NqASONMQz7PScN58.roa File: tc9YL4JAXC3NqASONMQz7PScN58.roa (raw, json) Hash identifier: FdZIpga27RivdGUq73NDukdkrlhxwjwgigUav316iRI= Subject key identifier: B5:CF:58:2F:82:40:5C:2D:CD:A8:04:8E:34:C4:33:EC:F4:9C:37:9F Certificate issuer: /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Certificate serial: 5D Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/tc9YL4JAXC3NqASONMQz7PScN58.roa Signing time: Tue 01 Apr 2025 01:29:42 +0000 ROA not before: Tue 01 Apr 2025 01:29:42 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7687 IP address blocks: 160.246.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B Validity Not Before: Apr 1 01:29:42 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B5CF582F82405C2DCDA8048E34C433ECF49C379F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:fb:c9:7f:87:a5:60:14:f2:21:0d:c0:47: 8e:a7:6a:a7:69:40:bc:56:ae:40:1a:57:45:b2:1b: d1:89:90:8c:aa:32:e8:1d:16:8c:b3:f2:d7:07:fb: 26:23:ac:c3:3d:0d:e8:54:a1:d4:68:a2:9c:29:a8: d2:0f:58:a6:6b:96:25:ff:2e:6b:7c:cf:5a:62:81: 30:5d:16:09:3c:d7:f9:ab:39:42:14:70:eb:a9:73: 70:d4:ed:ad:67:da:b5:30:24:bf:72:78:6e:8a:e5: 15:6e:67:c0:43:f0:0b:a4:01:2a:1b:04:88:09:3b: 0a:12:86:ec:e2:41:c0:d5:02:be:c6:91:e3:e5:67: 58:aa:0f:65:86:cc:92:f0:73:f7:50:01:f6:3b:13: 7a:eb:f2:7b:10:14:70:9a:30:b7:9f:2f:06:57:9c: 01:7b:70:13:15:a5:ac:31:3d:9f:c8:59:d2:a5:68: 4a:00:98:bb:f3:63:88:c0:3c:47:76:fa:95:84:f5: 14:45:1b:e2:b1:8f:13:74:70:3c:b1:0b:d2:ca:f9: 95:7a:09:39:e4:df:9b:8d:13:c2:9f:50:85:2e:00: 97:92:26:20:c4:80:f0:39:b5:3d:03:21:72:48:e5: 9f:8d:6d:5d:fd:9e:d2:09:87:49:23:7d:06:13:64: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:58:2F:82:40:5C:2D:CD:A8:04:8E:34:C4:33:EC:F4:9C:37:9F X509v3 Authority Key Identifier: keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/tc9YL4JAXC3NqASONMQz7PScN58.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.246.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9b:c0:12:a5:c1:4e:9d:db:ab:ee:50:ab:5d:73:19:c7:97:70: 05:b7:16:9d:9f:1d:a9:84:b3:71:11:1e:b6:1e:6d:c4:55:ef: 5d:af:9b:2a:9a:ef:9f:ad:48:c4:6c:d3:12:d2:49:b4:6d:d2: e7:e3:3d:a2:5a:98:ae:ce:e8:65:e1:a1:30:cd:1f:1b:de:fd: 83:c6:12:ee:24:94:1b:02:fd:57:33:b6:20:42:d2:85:c8:49: 3d:b2:ad:6c:f4:1d:cf:4b:fd:67:19:76:50:a8:8f:68:49:41: 10:c4:b2:fb:6b:c2:dc:90:61:2e:10:a9:89:5d:c2:d2:83:2c: 98:1d:3c:3d:e1:47:63:6e:f1:9c:e4:18:b1:7e:f2:2f:01:db: ca:9d:06:7b:77:d4:2b:6a:10:7e:db:98:32:7c:73:30:94:1b: 64:49:a2:37:14:1f:e5:e7:38:0c:49:cf:57:f3:ba:2d:24:fb: ff:3b:39:e2:f0:98:a0:1f:d2:b8:94:64:9f:fa:15:41:6c:56: c3:de:ec:cf:fc:db:e4:86:c3:c1:96:82:d8:c7:27:6e:f8:67: cd:ae:ed:0d:c7:cd:ca:d8:8b:1b:77:f4:46:ca:8f:84:7e:a0: 95:98:4e:34:45:3f:7d:5f:0b:df:4d:1b:3e:3a:ff:05:d5:8d: c7:a0:3a:33 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1 M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI1MDQwMTAx Mjk0MloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQjVDRjU4MkY4MjQwNUMy RENEQTgwNDhFMzRDNDMzRUNGNDlDMzc5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK3q+8l/h6VgFPIhDcBHjqdqp2lAvFauQBpXRbIb0YmQjKoy6B0W jLPy1wf7JiOswz0N6FSh1GiinCmo0g9YpmuWJf8ua3zPWmKBMF0WCTzX+as5QhRw 66lzcNTtrWfatTAkv3J4borlFW5nwEPwC6QBKhsEiAk7ChKG7OJBwNUCvsaR4+Vn WKoPZYbMkvBz91AB9jsTeuvyexAUcJowt58vBlecAXtwExWlrDE9n8hZ0qVoSgCY u/NjiMA8R3b6lYT1FEUb4rGPE3RwPLEL0sr5lXoJOeTfm40Twp9QhS4Al5ImIMSA 8Dm1PQMhckjln41tXf2e0gmHSSN9BhNkE98CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBS1z1gvgkBcLc2oBI40xDPs9Jw3nzAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7 r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjQ5MC90YzlZTDRKQVhDM05xQVNPTk1RejdQU2NONTgucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHoPaAMA0GCSqGSIb3DQEBCwUAA4IBAQCbwBKlwU6d26vuUKtdcxnHl3AF txadnx2phLNxER62Hm3EVe9dr5sqmu+frUjEbNMS0km0bdLn4z2iWpiuzuhl4aEw zR8b3v2DxhLuJJQbAv1XM7YgQtKFyEk9sq1s9B3PS/1nGXZQqI9oSUEQxLL7a8Lc kGEuEKmJXcLSgyyYHTw94UdjbvGc5BixfvIvAdvKnQZ7d9QrahB+25gyfHMwlBtk SaI3FB/l5zgMSc9X87otJPv/Ozni8JigH9K4lGSf+hVBbFbD3uzP/NvkhsPBloLY xydu+GfNru0Nx83K2Isbd/RGyo+EfqCVmE40RT99XwvfTRs+Ov8F1Y3HoDoz -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:19 2025 by rpki-client on console.sobornost.net