$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30248/zdqnAY7WSJB2IjBYjFMOV4gm__A.roa File: zdqnAY7WSJB2IjBYjFMOV4gm__A.roa (raw, json) Hash identifier: +Ja2ZUfHNQPup9TrzjWXlgMj5v/uu5ZQbeOd8CHhiPw= Subject key identifier: CD:DA:A7:01:8E:D6:48:90:76:22:30:58:8C:53:0E:57:88:26:FF:F0 Certificate issuer: /CN=EDC085084F8F13D9228C94C2D2F98336341E373F Certificate serial: 02 Authority key identifier: ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/zdqnAY7WSJB2IjBYjFMOV4gm__A.roa Signing time: Mon 02 Dec 2024 01:10:50 +0000 ROA not before: Mon 02 Dec 2024 01:10:50 +0000 ROA not after: Thu 20 Nov 2025 01:30:11 +0000 asID: 17936 IP address blocks: 2406:9900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDC085084F8F13D9228C94C2D2F98336341E373F Validity Not Before: Dec 2 01:10:50 2024 GMT Not After : Nov 20 01:30:11 2025 GMT Subject: CN=CDDAA7018ED64890762230588C530E578826FFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:a7:cc:7f:58:c2:55:f5:c6:8f:51:f4:f2: e0:93:2e:d6:50:bc:7d:e1:ba:4c:b1:16:28:2e:4d: c6:17:8c:e4:ac:27:aa:65:bf:fb:06:a0:cf:7f:76: 8f:66:20:97:a6:c7:16:4a:82:9e:77:61:f1:19:71: c1:83:ed:3e:3f:7a:c5:df:12:d9:26:6c:a3:f7:73: 27:a4:af:08:13:2b:c8:65:4b:f2:7d:dc:37:96:0f: c0:ba:c9:4c:1f:5a:13:1e:4c:79:88:89:dc:12:85: ef:d2:0a:06:6e:bb:8f:e1:6b:2c:62:a6:70:df:46: e4:60:12:3e:61:0a:cf:22:5e:a3:f0:46:1a:4a:51: 53:32:97:ef:86:8d:a8:fe:3f:eb:9d:18:09:8c:70: 9f:c6:8c:59:ea:56:11:fa:2a:3b:d0:9e:fc:40:16: 97:cb:0e:17:6c:e6:82:4f:eb:c9:98:96:54:37:09: bf:8c:19:88:c7:5c:47:98:0b:61:6d:6d:cb:b3:e0: 7b:95:fd:35:71:69:7c:c9:ea:a9:06:72:69:c4:f6: ee:1b:80:4b:66:a6:60:1d:34:62:e5:31:5f:44:e0: 90:b7:25:f9:57:c8:12:ea:12:d3:43:2d:2f:3f:c8: 55:b0:91:cb:bb:f4:5e:ac:b8:26:00:92:01:dd:77: 1c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:A7:01:8E:D6:48:90:76:22:30:58:8C:53:0E:57:88:26:FF:F0 X509v3 Authority Key Identifier: keyid:ED:C0:85:08:4F:8F:13:D9:22:8C:94:C2:D2:F9:83:36:34:1E:37:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/7cCFCE-PE9kijJTC0vmDNjQeNz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7cCFCE-PE9kijJTC0vmDNjQeNz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30248/zdqnAY7WSJB2IjBYjFMOV4gm__A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:9900::/32 Signature Algorithm: sha256WithRSAEncryption 85:b8:45:90:2b:f7:51:01:4d:7f:b2:58:30:54:f3:a9:cb:d9: f1:7c:f2:bd:23:ab:90:97:fe:f3:ee:20:6e:39:f4:20:58:1f: e9:4d:5c:d0:00:29:5a:fd:7d:23:39:e7:1b:3d:1e:a2:e6:0e: bd:8f:20:10:86:5b:80:f9:10:05:3c:c9:1d:fe:48:c5:d2:1d: 7a:86:f4:b2:a4:f9:8e:9c:fe:50:4c:5a:a5:2a:74:a7:ee:3a: 9c:6d:9e:5d:cf:a2:da:20:77:b6:46:9d:b0:46:f1:06:3f:dd: cf:24:6e:c7:10:51:f7:c2:f4:0b:d7:12:17:79:bb:f8:16:30: 90:e2:ae:00:f5:97:88:4e:46:0f:74:9b:e8:ea:7e:9f:60:a7: ae:47:4e:b1:ac:0c:57:8c:3d:e9:e7:0d:25:e5:1e:f5:04:c3: d7:55:22:ba:77:05:14:dd:8e:81:f0:e2:8a:70:61:2f:85:2e: ef:e9:1b:2a:0a:c8:d2:3f:91:68:d1:6d:78:e0:72:ff:92:c1: ee:9c:f9:8d:55:a2:d7:e7:8c:03:46:c2:9e:02:8c:31:1e:cf: 80:2c:da:17:fd:0f:d3:21:92:1e:46:5b:6a:16:54:0b:0b:5e: 4b:62:90:a6:55:27:6e:2d:cb:45:50:45:7e:89:84:e1:13:2d: 5f:9e:39:64 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFREMw ODUwODRGOEYxM0Q5MjI4Qzk0QzJEMkY5ODMzNjM0MUUzNzNGMB4XDTI0MTIwMjAx MTA1MFoXDTI1MTEyMDAxMzAxMVowMzExMC8GA1UEAxMoQ0REQUE3MDE4RUQ2NDg5 MDc2MjIzMDU4OEM1MzBFNTc4ODI2RkZGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK3Cp8x/WMJV9caPUfTy4JMu1lC8feG6TLEWKC5NxheM5KwnqmW/ +wagz392j2Ygl6bHFkqCnndh8RlxwYPtPj96xd8S2SZso/dzJ6SvCBMryGVL8n3c N5YPwLrJTB9aEx5MeYiJ3BKF79IKBm67j+FrLGKmcN9G5GASPmEKzyJeo/BGGkpR UzKX74aNqP4/650YCYxwn8aMWepWEfoqO9Ce/EAWl8sOF2zmgk/ryZiWVDcJv4wZ iMdcR5gLYW1ty7Pge5X9NXFpfMnqqQZyacT27huAS2amYB00YuUxX0TgkLcl+VfI EuoS00MtLz/IVbCRy7v0Xqy4JgCSAd13HDkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTN2qcBjtZIkHYiMFiMUw5XiCb/8DAfBgNVHSMEGDAWgBTtwIUIT48T2SKMlMLS +YM2NB43PzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDgvN2NDRkNFLVBFOWtpakpUQzB2bUROalFlTno4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN2NDRkNFLVBFOWtpakpUQzB2bURO alFlTno4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ4L3pkcW5BWTdXU0pCMklqQllqRk1PVjRnbV9fQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBpkAMA0GCSqGSIb3DQEBCwUAA4IBAQCFuEWQK/dRAU1/slgwVPOp y9nxfPK9I6uQl/7z7iBuOfQgWB/pTVzQACla/X0jOecbPR6i5g69jyAQhluA+RAF PMkd/kjF0h16hvSypPmOnP5QTFqlKnSn7jqcbZ5dz6LaIHe2Rp2wRvEGP93PJG7H EFH3wvQL1xIXebv4FjCQ4q4A9ZeITkYPdJvo6n6fYKeuR06xrAxXjD3p5w0l5R71 BMPXVSK6dwUU3Y6B8OKKcGEvhS7v6RsqCsjSP5Fo0W144HL/ksHunPmNVaLX54wD RsKeAowxHs+ALNoX/Q/TIZIeRltqFlQLC15LYpCmVSduLctFUEV+iYThEy1fnjlk -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:31 2025 by rpki-client on console.sobornost.net