$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tKYN2IQl0SnEbDxYFBOzUsCnBro.roa File: tKYN2IQl0SnEbDxYFBOzUsCnBro.roa (raw, json) Hash identifier: d/QbxutUuDbkdVtVYvNsqMkz+KsS33HdjdBgc7MyqrQ= Subject key identifier: B4:A6:0D:D8:84:25:D1:29:C4:6C:3C:58:14:13:B3:52:C0:A7:06:BA Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04A3 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tKYN2IQl0SnEbDxYFBOzUsCnBro.roa Signing time: Tue 01 Apr 2025 01:49:24 +0000 ROA not before: Tue 01 Apr 2025 01:49:24 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:49:24 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=B4A60DD88425D129C46C3C581413B352C0A706BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:3b:bc:1d:47:c2:b1:de:4e:62:f4:cf:08: c4:f6:87:b1:16:c3:c3:b6:f1:17:7a:6f:53:56:5f: fd:76:38:26:ba:1d:17:17:ed:9b:2f:40:b1:8e:54: b5:56:e6:ab:f8:11:b7:4e:e7:84:6b:45:6c:89:3d: 31:0e:8f:35:3b:3b:74:ca:77:37:d7:24:e0:cd:ee: 16:81:02:eb:82:24:11:6e:5c:46:2b:a7:53:c8:c6: 58:79:a1:2c:ac:04:97:93:b6:2e:41:19:02:07:6c: 31:4e:6b:e4:7f:86:68:2b:8d:b0:5a:2c:4a:dd:7c: e3:8c:cf:0f:40:13:04:a7:0f:5a:06:7f:7f:9b:5d: fe:31:09:fd:5e:4c:e1:86:c6:e8:37:54:61:b4:a7: e3:75:4f:dc:50:66:e5:c2:be:4c:c0:f5:85:85:71: 2c:7c:44:8a:3f:cd:e3:5b:39:01:55:45:88:fc:b5: 08:8b:d9:e3:c6:0f:87:88:19:a1:a3:f3:64:d7:23: 99:00:87:cd:2c:e4:f6:63:90:7a:05:55:03:7e:37: 84:06:d2:9c:1d:74:d9:72:5e:46:e4:3f:ba:b6:75: ce:d9:cb:33:85:c9:e6:bb:e9:26:57:51:73:e6:b0: 38:d9:13:dd:12:fa:79:3e:f2:69:db:04:5c:03:a7: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A6:0D:D8:84:25:D1:29:C4:6C:3C:58:14:13:B3:52:C0:A7:06:BA X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tKYN2IQl0SnEbDxYFBOzUsCnBro.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 41:02:47:35:c7:41:f6:08:08:25:15:77:f7:ef:21:1c:bd:50: c4:60:40:e7:32:6e:d7:dd:a9:76:c3:cd:94:b2:22:9b:38:de: 44:22:2e:47:51:d9:53:ad:87:c1:bc:79:1b:bd:a9:37:e8:b0: 08:ca:7a:9f:d4:07:b5:0b:b1:9c:d2:bf:e4:a5:48:eb:2f:5c: 92:59:3f:dc:16:e0:bd:db:23:85:80:d5:ac:68:d8:2d:23:48: 7a:a0:4f:cd:fd:95:b5:d1:dd:64:82:ac:bb:10:b9:db:9a:63: 25:7d:66:2b:3e:c6:c2:c1:9f:37:ed:97:ec:c5:e4:c4:d5:bd: 0e:7a:61:d8:2b:a3:27:34:9a:0f:f6:b2:2d:72:5f:b2:e5:d3: 36:88:f1:76:25:bc:ad:2c:ad:15:b0:b8:e9:e2:5a:b5:0c:53: 9c:8f:ca:48:94:2d:a9:0c:f0:2e:dc:b7:c9:18:de:9a:d7:3b: 0e:9a:a5:86:52:7f:7f:0b:f9:69:e4:14:05:0c:30:b4:45:74: d3:69:50:c7:fa:12:d0:c2:30:62:82:63:c6:af:54:f3:e9:72: 83:b9:31:2b:62:9c:1e:f2:9d:68:90:7c:e1:1c:13:fe:44:11: 95:c2:ff:c7:95:0e:05:66:1b:ab:24:9e:31:60:a3:34:3e:3c: f2:db:13:6c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTQ5MjRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI0QTYwREQ4ODQyNUQx MjlDNDZDM0M1ODE0MTNCMzUyQzBBNzA2QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/0ju8HUfCsd5OYvTPCMT2h7EWw8O28Rd6b1NWX/12OCa6HRcX 7ZsvQLGOVLVW5qv4EbdO54RrRWyJPTEOjzU7O3TKdzfXJODN7haBAuuCJBFuXEYr p1PIxlh5oSysBJeTti5BGQIHbDFOa+R/hmgrjbBaLErdfOOMzw9AEwSnD1oGf3+b Xf4xCf1eTOGGxug3VGG0p+N1T9xQZuXCvkzA9YWFcSx8RIo/zeNbOQFVRYj8tQiL 2ePGD4eIGaGj82TXI5kAh80s5PZjkHoFVQN+N4QG0pwddNlyXkbkP7q2dc7ZyzOF yea76SZXUXPmsDjZE90S+nk+8mnbBFwDp3z5AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUtKYN2IQl0SnEbDxYFBOzUsCnBrowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS90S1lOMklRbDBTbkViRHhZRkJPelVzQ25Ccm8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAaxowDQYJKoZIhvcNAQELBQADggEBAEECRzXHQfYICCUVd/fv IRy9UMRgQOcybtfdqXbDzZSyIps43kQiLkdR2VOth8G8eRu9qTfosAjKep/UB7UL sZzSv+SlSOsvXJJZP9wW4L3bI4WA1axo2C0jSHqgT839lbXR3WSCrLsQuduaYyV9 Zis+xsLBnzftl+zF5MTVvQ56Ydgroyc0mg/2si1yX7Ll0zaI8XYlvK0srRWwuOni WrUMU5yPykiULakM8C7ct8kY3prXOw6apYZSf38L+WnkFAUMMLRFdNNpUMf6EtDC MGKCY8avVPPpcoO5MStinB7ynWiQfOEcE/5EEZXC/8eVDgVmG6sknjFgozQ+PPLb E2w= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net