$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m9Ld98x2d1tcfzpmh3OK1BeZDLo.roa File: m9Ld98x2d1tcfzpmh3OK1BeZDLo.roa (raw, json) Hash identifier: ZMYdVb3Dcopc3XoZss3IS427pBNvla6iCka3MYKp3nw= Subject key identifier: 9B:D2:DD:F7:CC:76:77:5B:5C:7F:3A:66:87:73:8A:D4:17:99:0C:BA Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 043C Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m9Ld98x2d1tcfzpmh3OK1BeZDLo.roa Signing time: Tue 01 Apr 2025 01:39:30 +0000 ROA not before: Tue 01 Apr 2025 01:39:30 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:61:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:39:30 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=9BD2DDF7CC76775B5C7F3A6687738AD417990CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:1f:0d:14:e6:b5:46:36:09:ba:e2:b2:27: 40:71:b7:68:52:fd:82:db:bf:1e:c0:b5:6c:2e:0d: b5:17:60:f8:0e:96:e4:4f:95:7c:49:1a:f8:53:9f: 8a:39:95:8f:58:9b:04:e6:e8:af:ec:26:5b:12:36: 44:56:9b:8a:53:dc:96:10:3c:8a:67:05:c0:81:f8: b0:d6:54:b6:1c:8f:b0:f9:21:e2:86:3e:4a:15:cd: 13:ef:18:d3:9d:a8:48:4f:f0:ab:79:6a:53:7b:67: c8:77:4e:63:53:06:df:a6:98:ca:75:b7:ea:77:25: d9:eb:ae:a7:ac:ff:11:9f:c7:c6:71:13:1c:d7:e5: b2:06:98:9b:47:c9:d6:d4:50:28:c7:be:e3:47:4b: 1d:45:f1:10:ba:d9:05:43:d4:f0:70:45:5f:5d:fa: d2:91:09:40:86:fc:68:54:fb:98:75:22:dd:39:36: 0d:79:39:20:83:c3:fe:09:c3:2f:dd:5b:c3:d7:ae: 2d:d0:a7:a5:e9:d9:8f:c6:25:67:e8:2e:0f:91:19: a2:1d:51:8d:c8:07:e1:25:ef:d1:2c:da:3b:30:69: e9:07:26:29:a3:1f:70:7a:06:66:8e:bf:11:0c:ae: 06:93:7c:3a:c0:75:68:12:57:54:55:7b:dc:a7:60: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:DD:F7:CC:76:77:5B:5C:7F:3A:66:87:73:8A:D4:17:99:0C:BA X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m9Ld98x2d1tcfzpmh3OK1BeZDLo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:61:800::/38 Signature Algorithm: sha256WithRSAEncryption 83:32:5f:cd:44:3a:7a:77:80:fc:a5:a4:e9:41:3f:d1:5f:8d: 49:35:a1:c1:2f:c7:83:91:c1:f0:e0:cb:3f:d5:bd:ef:25:d5: b9:81:6d:2f:a1:ba:7b:d6:4a:77:55:b2:5c:89:33:6e:6c:e1: 14:d1:e1:7e:81:af:13:a9:53:16:3f:5a:75:7c:ad:46:8b:18: 52:0e:bd:e1:73:56:0e:18:57:01:1a:b4:41:66:64:4a:d2:c5: 5f:86:d7:b8:b9:42:2f:74:c5:d3:1a:20:4e:12:e8:04:9c:5c: 60:45:22:f1:b5:ee:cc:e9:82:a8:a4:af:ab:5f:7f:4c:f8:24: 42:b1:c9:61:db:82:e6:c5:ce:9e:74:a1:67:e3:aa:67:44:d8: 29:46:ca:2c:76:08:f9:88:fc:89:f9:fd:aa:e0:16:b9:81:ca: 0b:16:7d:11:2a:93:08:aa:60:0e:9e:4c:3b:85:3c:f5:2b:22: 46:f4:c2:15:e3:f4:54:f0:9b:f3:52:e0:7f:9b:12:bf:a0:ca: 26:bd:e9:d2:f7:2c:e3:c5:61:cc:7d:35:b1:04:c5:2d:6a:67: 39:48:ba:27:48:72:ae:83:09:e8:75:ed:e2:e0:db:fb:b6:9e: 28:86:b2:35:8c:c8:55:37:1b:5a:5a:92:86:f1:7b:68:dc:58: 2a:d5:2d:e3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTM5MzBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlCRDJEREY3Q0M3Njc3 NUI1QzdGM0E2Njg3NzM4QUQ0MTc5OTBDQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmcB8NFOa1RjYJuuKyJ0Bxt2hS/YLbvx7AtWwuDbUXYPgOluRP lXxJGvhTn4o5lY9YmwTm6K/sJlsSNkRWm4pT3JYQPIpnBcCB+LDWVLYcj7D5IeKG PkoVzRPvGNOdqEhP8Kt5alN7Z8h3TmNTBt+mmMp1t+p3Jdnrrqes/xGfx8ZxExzX 5bIGmJtHydbUUCjHvuNHSx1F8RC62QVD1PBwRV9d+tKRCUCG/GhU+5h1It05Ng15 OSCDw/4Jwy/dW8PXri3Qp6Xp2Y/GJWfoLg+RGaIdUY3IB+El79Es2jswaekHJimj H3B6BmaOvxEMrgaTfDrAdWgSV1RVe9ynYFxJAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUm9Ld98x2d1tcfzpmh3OK1BeZDLowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9tOUxkOTh4MmQxdGNmenBtaDNPSzFCZVpETG8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAoAYQgwDQYJKoZIhvcNAQELBQADggEBAIMyX81EOnp3gPylpOlB P9FfjUk1ocEvx4ORwfDgyz/Vve8l1bmBbS+hunvWSndVslyJM25s4RTR4X6BrxOp UxY/WnV8rUaLGFIOveFzVg4YVwEatEFmZErSxV+G17i5Qi90xdMaIE4S6AScXGBF IvG17szpgqikr6tff0z4JEKxyWHbgubFzp50oWfjqmdE2ClGyix2CPmI/In5/arg FrmBygsWfREqkwiqYA6eTDuFPPUrIkb0whXj9FTwm/NS4H+bEr+gyia96dL3LOPF Ycx9NbEExS1qZzlIuidIcq6DCeh17eLg2/u2niiGsjWMyFU3G1pakobxe2jcWCrV LeM= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:28 2025 by rpki-client on console.sobornost.net