$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30136/wNfdKgJ6OKlz8ZqdeZVoj30ZfiQ.roa File: wNfdKgJ6OKlz8ZqdeZVoj30ZfiQ.roa (raw, json) Hash identifier: LBkC1wLXPqp+8nvhRuCK4MSo+nA3m4PKvz5VAUBrAJw= Subject key identifier: C0:D7:DD:2A:02:7A:38:A9:73:F1:9A:9D:79:95:68:8F:7D:19:7E:24 Certificate issuer: /CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Certificate serial: 02 Authority key identifier: D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/wNfdKgJ6OKlz8ZqdeZVoj30ZfiQ.roa Signing time: Mon 07 Apr 2025 01:44:09 +0000 ROA not before: Mon 07 Apr 2025 01:44:09 +0000 ROA not after: Tue 07 Apr 2026 01:31:52 +0000 asID: 18077 IP address blocks: 2402:5a00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FE27155314C148DD85B7223FA0D1F8FD2B2678 Validity Not Before: Apr 7 01:44:09 2025 GMT Not After : Apr 7 01:31:52 2026 GMT Subject: CN=C0D7DD2A027A38A973F19A9D7995688F7D197E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:f8:01:e8:f2:16:34:95:c7:b3:aa:df:76: 39:15:90:81:15:81:a9:9c:2f:cb:ac:3d:dd:05:3b: fd:09:a5:24:ce:e5:b4:d2:4d:3d:5f:00:7f:5e:7a: b2:34:7d:6b:4a:64:04:e8:fd:20:fa:dd:0d:43:99: 5f:0f:46:b0:ba:22:b6:8d:a8:17:60:ed:e7:34:f1: a4:9d:83:db:5b:e2:48:68:3a:92:ed:ad:52:47:05: 1c:8d:fe:37:89:c4:67:35:f6:6f:8f:31:c3:e3:69: 09:43:3c:9f:7b:73:3b:25:10:98:f2:64:26:73:eb: 3c:0f:b0:bb:c1:a7:b9:d5:67:a0:11:2f:37:20:7e: 39:05:81:3d:6c:99:75:41:a2:88:ed:92:7a:f4:7b: 74:9f:3e:39:be:53:e8:8e:97:c4:d2:f9:eb:fb:1f: 17:4d:7a:1e:93:dd:e5:12:5a:39:db:6d:e4:d3:4d: 04:3c:dd:18:16:40:25:56:e1:e1:86:be:47:5f:e1: 9c:cd:73:15:00:8f:bc:e7:ba:19:c1:f8:df:43:b2: 7b:f6:32:81:70:6b:b6:2a:2f:20:8d:33:08:2e:2b: 62:74:2d:80:48:ea:2a:9a:ac:8d:a3:c3:f6:45:9d: f0:fa:c8:00:41:e3:5c:53:71:4e:4e:16:6e:ff:4a: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D7:DD:2A:02:7A:38:A9:73:F1:9A:9D:79:95:68:8F:7D:19:7E:24 X509v3 Authority Key Identifier: keyid:D3:FE:27:15:53:14:C1:48:DD:85:B7:22:3F:A0:D1:F8:FD:2B:26:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/0_4nFVMUwUjdhbciP6DR-P0rJng.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0_4nFVMUwUjdhbciP6DR-P0rJng.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30136/wNfdKgJ6OKlz8ZqdeZVoj30ZfiQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:5a00::/32 Signature Algorithm: sha256WithRSAEncryption 09:35:ad:a6:30:13:d1:91:b8:63:cf:14:60:a0:6b:a5:08:07: ef:ea:5e:f3:fc:56:01:b9:af:98:37:f3:bb:51:88:81:4a:e9: ed:17:70:56:9a:bb:fe:1e:fa:9e:8e:87:4c:d6:27:04:35:4e: c4:e2:f0:1b:66:c9:cd:bd:af:84:ba:db:fe:cb:c6:d8:6c:08: 9b:ad:a8:7c:27:6f:68:4d:1a:d9:bd:07:e1:1c:b8:1d:84:64: 0f:3a:ef:ab:34:16:2e:78:cc:b6:c4:c2:03:41:81:33:53:49: f9:f7:8d:6d:fe:53:ee:b9:56:c8:0c:6c:a8:9b:a5:11:1c:91: e8:de:34:2a:99:fe:ac:5c:1e:f0:8c:5f:73:8f:6b:b7:3a:06: 00:37:37:89:80:62:96:1e:6b:5f:72:89:9d:4e:dd:ad:af:e2: 9d:12:8d:be:1e:26:13:61:b1:f3:0a:2b:44:7a:8f:d4:53:20: cc:14:bf:52:5b:f3:ae:8c:49:44:f5:55:6d:ba:10:ff:10:8c: 33:9e:65:fd:cb:71:81:b2:ef:66:9b:ad:83:4c:04:92:6a:43: c9:ed:b4:0b:e0:61:76:1e:8f:f6:8a:a6:06:6d:ee:39:5d:f0: 5d:3b:de:6f:85:6b:83:a0:6d:96:25:19:20:2d:c5:1e:94:ac: 6e:36:f3:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEM0ZF MjcxNTUzMTRDMTQ4REQ4NUI3MjIzRkEwRDFGOEZEMkIyNjc4MB4XDTI1MDQwNzAx NDQwOVoXDTI2MDQwNzAxMzE1MlowMzExMC8GA1UEAxMoQzBEN0REMkEwMjdBMzhB OTczRjE5QTlENzk5NTY4OEY3RDE5N0UyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0k+AHo8hY0lcezqt92ORWQgRWBqZwvy6w93QU7/QmlJM7ltNJN PV8Af156sjR9a0pkBOj9IPrdDUOZXw9GsLoito2oF2Dt5zTxpJ2D21viSGg6ku2t UkcFHI3+N4nEZzX2b48xw+NpCUM8n3tzOyUQmPJkJnPrPA+wu8GnudVnoBEvNyB+ OQWBPWyZdUGiiO2SevR7dJ8+Ob5T6I6XxNL56/sfF016HpPd5RJaOdtt5NNNBDzd GBZAJVbh4Ya+R1/hnM1zFQCPvOe6GcH430Oye/YygXBrtiovII0zCC4rYnQtgEjq KpqsjaPD9kWd8PrIAEHjXFNxTk4Wbv9KCbUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTA190qAno4qXPxmp15lWiPfRl+JDAfBgNVHSMEGDAWgBTT/icVUxTBSN2FtyI/ oNH4/SsmeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMzYvMF80bkZWTVV3VWpkaGJjaVA2RFItUDBySm5nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMF80bkZWTVV3VWpkaGJjaVA2RFIt UDBySm5nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTM2L3dOZmRLZ0o2T0tsejhacWRlWlZvajMwWmZpUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAloAMA0GCSqGSIb3DQEBCwUAA4IBAQAJNa2mMBPRkbhjzxRgoGul CAfv6l7z/FYBua+YN/O7UYiBSuntF3BWmrv+HvqejodM1icENU7E4vAbZsnNva+E utv+y8bYbAibrah8J29oTRrZvQfhHLgdhGQPOu+rNBYueMy2xMIDQYEzU0n5941t /lPuuVbIDGyom6URHJHo3jQqmf6sXB7wjF9zj2u3OgYANzeJgGKWHmtfcomdTt2t r+KdEo2+HiYTYbHzCitEeo/UUyDMFL9SW/OujElE9VVtuhD/EIwznmX9y3GBsu9m m62DTASSakPJ7bQL4GF2Ho/2iqYGbe45XfBdO95vhWuDoG2WJRkgLcUelKxuNvPM -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:29 2025 by rpki-client on console.sobornost.net