$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yIvK53e2QdKA2NnLEpjfRaM5GUE.roa File: yIvK53e2QdKA2NnLEpjfRaM5GUE.roa (raw, json) Hash identifier: r/Rfg+53Gv3+f6XW4TnxkrIMvDoXuqN/KjDJDkWGT60= Subject key identifier: C8:8B:CA:E7:77:B6:41:D2:80:D8:D9:CB:12:98:DF:45:A3:39:19:41 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 04D4 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yIvK53e2QdKA2NnLEpjfRaM5GUE.roa Signing time: Tue 01 Apr 2025 01:53:02 +0000 ROA not before: Tue 01 Apr 2025 01:53:02 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 240a:6b:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 1 01:53:02 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=C88BCAE777B641D280D8D9CB1298DF45A3391941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6d:f2:43:03:ed:72:9a:03:e4:5b:69:a7:40: 19:8e:c3:69:52:df:3d:59:34:a0:7b:83:e8:1d:9b: 8f:ff:e8:58:b2:e9:0c:75:41:aa:db:f8:18:ae:c0: 68:98:86:8d:83:88:38:5e:54:76:cb:31:8e:f7:fb: 7e:0c:c1:1a:d3:23:27:d5:29:20:72:f9:ed:47:ba: 85:6e:f2:27:06:0e:f1:0c:d0:1f:44:f1:11:bc:92: f5:46:0c:ea:6c:6d:da:1c:23:1a:38:53:10:c9:c0: f0:47:d3:4d:02:47:62:9c:0f:52:50:82:79:f0:df: fa:e7:e2:c5:ff:db:f5:b3:b3:19:a5:1c:e3:2b:4f: 18:45:f4:14:8e:af:22:f3:26:e5:e6:04:f5:23:be: b0:22:7d:19:4c:db:e4:67:5b:a3:bd:1c:d1:bb:57: d0:03:d3:e7:c9:b2:ed:2b:c0:0e:3d:c4:e4:ff:ce: 64:1f:a0:d2:e2:00:ac:59:c0:a9:73:dd:47:ad:dd: 73:23:e9:8e:d5:44:d7:34:66:b1:6e:41:f6:30:af: cd:bb:ce:b2:5a:77:89:57:d4:80:e6:fa:f6:9d:d4: 49:6e:59:b8:ae:a3:9e:91:3c:ee:88:1a:52:1f:d0: b9:52:5b:12:d1:05:a9:67:05:2f:ec:fc:e3:59:de: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8B:CA:E7:77:B6:41:D2:80:D8:D9:CB:12:98:DF:45:A3:39:19:41 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yIvK53e2QdKA2NnLEpjfRaM5GUE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:3000::/40 Signature Algorithm: sha256WithRSAEncryption 30:07:24:58:84:bc:ab:3b:f9:2f:17:c6:fb:8a:21:22:b1:1f: e5:4d:77:fe:3c:97:35:97:e8:4f:fa:ae:a7:e2:45:65:06:ce: be:ad:36:5b:82:4c:a7:2c:9e:64:c4:dd:a9:1a:a3:48:7e:c8: 96:d4:01:da:6c:35:5a:25:d0:dc:a5:d5:cc:aa:bf:1f:16:96: 9e:5b:db:f9:b2:8e:96:be:32:3a:ad:e6:c6:de:00:8b:2d:11: 4f:46:09:b8:e1:8d:43:94:03:2c:eb:0c:b8:2f:a7:3d:8d:d1: 1a:21:8b:80:f3:b5:42:7d:5b:7a:32:71:08:24:6b:a9:7a:d1: 9d:7f:34:83:e8:ad:c0:e2:eb:02:c4:87:24:97:08:e0:76:9a: 4c:6b:09:ef:aa:a5:26:4d:b1:6d:2f:a1:3a:75:db:90:05:9a: d5:53:dc:1b:bd:5e:aa:ef:85:ee:e7:62:2e:7e:b5:af:e6:13: c8:aa:1b:10:3a:d9:ec:e0:97:32:31:c1:c9:86:92:a9:a0:87: ca:8c:39:a6:0b:cb:51:e3:43:29:e2:7f:5c:e4:f1:3c:00:47: 5c:54:93:11:68:84:34:39:4d:4a:2b:56:cf:ed:af:a3:10:e5: ba:be:d1:68:15:ad:c9:84:99:61:d1:ee:a1:1b:69:aa:38:38: ab:88:f5:f4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw MTUzMDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM4OEJDQUU3NzdCNjQx RDI4MEQ4RDlDQjEyOThERjQ1QTMzOTE5NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDobfJDA+1ymgPkW2mnQBmOw2lS3z1ZNKB7g+gdm4//6Fiy6Qx1 Qarb+BiuwGiYho2DiDheVHbLMY73+34MwRrTIyfVKSBy+e1HuoVu8icGDvEM0B9E 8RG8kvVGDOpsbdocIxo4UxDJwPBH000CR2KcD1JQgnnw3/rn4sX/2/WzsxmlHOMr TxhF9BSOryLzJuXmBPUjvrAifRlM2+RnW6O9HNG7V9AD0+fJsu0rwA49xOT/zmQf oNLiAKxZwKlz3Uet3XMj6Y7VRNc0ZrFuQfYwr827zrJad4lX1IDm+vad1EluWbiu o56RPO6IGlIf0LlSWxLRBalnBS/s/ONZ3kkTAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUyIvK53e2QdKA2NnLEpjfRaM5GUEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS95SXZLNTNlMlFkS0EyTm5MRXBqZlJhTTVHVUUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAazAwDQYJKoZIhvcNAQELBQADggEBADAHJFiEvKs7+S8XxvuK ISKxH+VNd/48lzWX6E/6rqfiRWUGzr6tNluCTKcsnmTE3akao0h+yJbUAdpsNVol 0Nyl1cyqvx8Wlp5b2/myjpa+Mjqt5sbeAIstEU9GCbjhjUOUAyzrDLgvpz2N0Roh i4DztUJ9W3oycQgka6l60Z1/NIPorcDi6wLEhySXCOB2mkxrCe+qpSZNsW0voTp1 25AFmtVT3Bu9Xqrvhe7nYi5+ta/mE8iqGxA62ezglzIxwcmGkqmgh8qMOaYLy1Hj Qynif1zk8TwAR1xUkxFohDQ5TUorVs/tr6MQ5bq+0WgVrcmEmWHR7qEbaao4OKuI 9fQ= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net