$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30400/k2aH9fPLLYVbhtfsb91XKqSdQkg.roa File: k2aH9fPLLYVbhtfsb91XKqSdQkg.roa (raw, json) Hash identifier: 0P5nXKKPr5dzwgpMm8+0dSyrPd7s/wfh9hFSGhCqLyI= Subject key identifier: 93:66:87:F5:F3:CB:2D:85:5B:86:D7:EC:6F:DD:57:2A:A4:9D:42:48 Certificate issuer: /CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808 Certificate serial: 2E Authority key identifier: 0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/k2aH9fPLLYVbhtfsb91XKqSdQkg.roa Signing time: Fri 31 Jan 2025 01:29:05 +0000 ROA not before: Fri 31 Jan 2025 01:29:05 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 63784 IP address blocks: 2406:ab40::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808 Validity Not Before: Jan 31 01:29:05 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=936687F5F3CB2D855B86D7EC6FDD572AA49D4248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:71:a0:a9:6b:c9:d2:34:aa:eb:bd:66:82: f9:df:22:1e:f6:c2:c3:92:ef:7e:c8:ce:fa:ca:36: 93:c9:06:9a:92:e4:25:98:41:a6:25:b1:d5:c6:21: 60:ce:9e:35:44:e9:c1:a8:8e:0e:b2:72:6c:46:eb: 05:7f:c6:d0:9c:b8:36:9a:2d:c9:9c:17:0b:67:73: 34:d5:40:25:5b:fe:6e:63:a9:3f:fb:a0:8f:58:0e: 01:38:8f:68:32:74:53:44:61:1a:df:6a:22:10:d0: 3e:bc:05:15:2b:de:72:3b:b6:ed:82:18:99:54:a8: 16:5a:2a:56:32:1d:8e:86:3e:0a:97:e4:cf:40:53: db:d2:c7:d2:b4:37:c1:56:e5:40:68:92:94:83:26: 1c:cb:10:cc:c6:c6:ac:52:58:ca:f5:94:a7:7e:c8: 19:c2:d2:2d:09:4e:4e:e1:62:40:ba:26:59:66:e1: 7f:f9:e2:fc:ce:35:14:f0:51:2f:99:c1:53:5e:25: 6b:f4:c6:2e:17:e0:56:e7:67:ec:c2:33:be:6d:48: d9:bf:14:08:6e:84:e3:64:4b:a2:87:b8:f9:ff:12: c2:91:ca:2a:7e:f2:1f:ed:d8:51:18:41:cf:cc:66: 5e:cd:69:70:57:e2:9f:46:4c:48:44:70:16:c5:64: df:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:66:87:F5:F3:CB:2D:85:5B:86:D7:EC:6F:DD:57:2A:A4:9D:42:48 X509v3 Authority Key Identifier: keyid:0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/k2aH9fPLLYVbhtfsb91XKqSdQkg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:ab40::/28 Signature Algorithm: sha256WithRSAEncryption 45:85:99:ba:ff:d5:57:11:f7:b1:67:58:f7:8f:16:53:8d:8c: bf:ca:1a:f4:e8:d8:80:88:69:89:2d:de:aa:b0:50:6e:29:3a: af:b8:ae:50:63:28:ed:7d:4c:5b:e6:d5:4d:0b:d7:79:67:85: 97:b5:41:60:65:5a:c7:7a:c0:a6:c0:34:c2:32:35:f8:6e:75: 2e:08:26:4c:68:f5:7c:8d:e9:05:b4:c5:68:af:8b:e1:a0:cc: 4a:ac:28:c1:16:5c:e9:aa:ff:9a:14:f9:9c:02:e9:c2:84:41: 16:de:f8:20:fe:53:85:de:b8:80:82:86:93:1f:b9:43:ef:01: c8:56:8f:30:d3:8c:ba:d0:49:e9:ce:92:51:63:ee:38:2b:e2: 45:ce:12:86:f1:a1:ca:20:31:dd:c5:77:b9:b1:db:fc:1a:ae: a8:f0:bd:2e:31:53:62:94:8d:76:7a:2d:e3:87:8e:2c:58:31: 72:13:b8:33:f4:17:8a:c5:c0:78:85:46:55:80:bd:bd:3d:aa: 30:b6:22:79:4d:df:48:aa:1d:c3:79:28:c9:1c:3f:b9:3f:97: 6b:dc:92:99:3e:fb:c3:29:6d:60:b1:8b:6e:24:7d:4f:ba:d3: 9f:b7:39:47:c6:be:7a:f7:20:21:20:75:dd:22:67:6d:2c:c3: 0d:7b:5a:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwREVE QjI0QjVFNUNEQTgwRUE5QkQ4RDAwQkUyN0FBMDgwNEVBODA4MB4XDTI1MDEzMTAx MjkwNVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoOTM2Njg3RjVGM0NCMkQ4 NTVCODZEN0VDNkZERDU3MkFBNDlENDI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANdYcaCpa8nSNKrrvWaC+d8iHvbCw5LvfsjO+so2k8kGmpLkJZhB piWx1cYhYM6eNUTpwaiODrJybEbrBX/G0Jy4NpotyZwXC2dzNNVAJVv+bmOpP/ug j1gOATiPaDJ0U0RhGt9qIhDQPrwFFSvecju27YIYmVSoFloqVjIdjoY+Cpfkz0BT 29LH0rQ3wVblQGiSlIMmHMsQzMbGrFJYyvWUp37IGcLSLQlOTuFiQLomWWbhf/ni /M41FPBRL5nBU14la/TGLhfgVudn7MIzvm1I2b8UCG6E42RLooe4+f8SwpHKKn7y H+3YURhBz8xmXs1pcFfin0ZMSERwFsVk360CAwEAAaOCAikwggIlMB0GA1UdDgQW BBSTZof188sthVuG1+xv3VcqpJ1CSDAfBgNVHSMEGDAWgBQN7bJLXlzagOqb2NAL 4nqggE6oCDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDAvRGUyeVMxNWMyb0RxbTlqUUMtSjZvSUJPcUFnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRGUyeVMxNWMyb0RxbTlqUUMtSjZv SUJPcUFnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDAwL2syYUg5ZlBMTFlWYmh0ZnNiOTFYS3FTZFFrZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQQkBqtAMA0GCSqGSIb3DQEBCwUAA4IBAQBFhZm6/9VXEfexZ1j3jxZT jYy/yhr06NiAiGmJLd6qsFBuKTqvuK5QYyjtfUxb5tVNC9d5Z4WXtUFgZVrHesCm wDTCMjX4bnUuCCZMaPV8jekFtMVor4vhoMxKrCjBFlzpqv+aFPmcAunChEEW3vgg /lOF3riAgoaTH7lD7wHIVo8w04y60EnpzpJRY+44K+JFzhKG8aHKIDHdxXe5sdv8 Gq6o8L0uMVNilI12ei3jh44sWDFyE7gz9BeKxcB4hUZVgL29PaowtiJ5Td9Iqh3D eSjJHD+5P5dr3JKZPvvDKW1gsYtuJH1PutOftzlHxr569yAhIHXdImdtLMMNe1qY -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:35 2025 by rpki-client on console.sobornost.net