$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa File: xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa (raw, json) Hash identifier: spVEtP+D3XWec/HAbkPh+mpoLmrh55m4KHUiKrvAOYw= Subject key identifier: C7:14:D6:95:84:7F:67:AD:96:B4:FB:32:BF:47:5F:A8:F1:DC:D4:31 Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Certificate serial: 32 Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa Signing time: Sun 30 Jun 2024 01:32:31 +0000 ROA not before: Sun 30 Jun 2024 01:32:31 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9615 IP address blocks: 202.224.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA Validity Not Before: Jun 30 01:32:31 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=C714D695847F67AD96B4FB32BF475FA8F1DCD431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:8f:a5:51:0b:68:7b:b9:d4:3f:48:bd:3d: f4:78:fa:d7:28:c0:3d:c0:48:9c:cb:b6:ec:69:14: 7e:60:49:5a:fb:50:e6:94:63:f3:af:80:4a:7e:3d: 9c:19:4f:88:5d:12:0c:db:0e:e8:e0:cc:92:f8:ca: 83:5c:cb:5e:e0:40:77:73:ee:a3:6d:ec:63:7f:ae: ff:7f:d5:a0:49:28:55:c4:1c:db:ee:fe:4b:c7:dd: 9a:4b:62:48:7c:13:2e:03:23:31:05:32:1d:26:4e: fb:4b:66:16:78:09:54:94:95:bc:c1:44:93:75:88: cd:90:e6:a3:64:de:a3:c7:28:f3:a1:43:8b:c3:21: 07:75:e8:1c:99:52:70:ea:8e:d1:1d:1a:fa:79:91: 2b:89:d9:e4:14:c1:b1:fc:7c:e7:c8:33:53:13:5c: 1b:c3:8d:df:2f:1a:4a:9a:ed:78:fd:78:ae:48:3e: 10:03:2a:d8:fe:7f:42:45:a6:fd:09:d9:30:4d:29: 6c:3b:9e:e5:1d:96:41:ae:d6:eb:f2:91:b0:76:57: 15:03:7e:87:28:57:e6:54:c2:48:ce:ac:bd:26:54: 91:e0:31:39:e7:3f:35:72:96:d3:b7:7a:44:0e:17: 50:3d:eb:0a:a9:14:c4:ad:d2:3d:55:4a:a9:99:84: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:14:D6:95:84:7F:67:AD:96:B4:FB:32:BF:47:5F:A8:F1:DC:D4:31 X509v3 Authority Key Identifier: keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/xxTWlYR_Z62WtPsyv0dfqPHc1DE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.224.112.0/20 Signature Algorithm: sha256WithRSAEncryption aa:6e:fc:00:b5:6e:2c:02:46:4c:ce:d4:3d:10:b3:d4:ac:cd: 9e:99:96:7e:21:9c:0d:ad:47:d6:8b:a6:31:6e:37:1a:0a:85: c4:5a:ae:3b:f2:53:09:f9:dc:9e:e2:77:77:c4:45:44:4b:6b: 1d:b8:55:1b:36:1b:b9:5d:19:e5:dd:e9:a7:5f:ad:82:ab:0a: f9:a4:bf:ce:8e:ab:47:3c:6b:68:14:ed:c9:1f:04:50:4f:f6: 5a:50:2f:72:ea:d3:37:e6:d5:01:34:cb:04:4d:08:03:39:48: c4:f9:99:58:92:92:e4:0d:84:4d:3f:13:dd:01:d4:9c:e3:ff: 27:45:c4:34:ec:6f:e3:9d:b5:16:d8:0d:75:ff:4e:d5:1f:a4: 1e:a9:85:88:5d:83:a6:32:d6:8e:73:80:cc:79:ac:50:6f:e8: 93:c5:ce:02:10:6f:d8:fb:c7:a8:ef:bd:2c:46:6d:66:32:1f: 15:05:6f:08:6d:37:e1:c2:c1:5d:29:9b:cb:cc:a4:24:36:9a: aa:28:c4:ea:74:9e:e7:b7:69:7d:f1:d5:c5:7a:5e:8d:e3:c8: f5:3c:f2:05:44:28:33:a5:af:cf:cc:94:c1:ae:bd:44:9d:b9: 5c:07:e3:b8:f7:f6:d0:c7:de:34:58:1a:26:2e:cf:72:61:b0: 81:dd:fc:7b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTI0MDYzMDAx MzIzMVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQzcxNEQ2OTU4NDdGNjdB RDk2QjRGQjMyQkY0NzVGQThGMURDRDQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKypj6VRC2h7udQ/SL099Hj61yjAPcBInMu27GkUfmBJWvtQ5pRj 86+ASn49nBlPiF0SDNsO6ODMkvjKg1zLXuBAd3Puo23sY3+u/3/VoEkoVcQc2+7+ S8fdmktiSHwTLgMjMQUyHSZO+0tmFngJVJSVvMFEk3WIzZDmo2Teo8co86FDi8Mh B3XoHJlScOqO0R0a+nmRK4nZ5BTBsfx858gzUxNcG8ON3y8aSprteP14rkg+EAMq 2P5/QkWm/QnZME0pbDue5R2WQa7W6/KRsHZXFQN+hyhX5lTCSM6svSZUkeAxOec/ NXKW07d6RA4XUD3rCqkUxK3SPVVKqZmEuRcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTHFNaVhH9nrZa0+zK/R1+o8dzUMTAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNzMveHhUV2xZUl9aNjJXdFBzeXYwZGZxUEhjMURFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrgcDANBgkqhkiG9w0BAQsFAAOCAQEAqm78ALVuLAJGTM7UPRCz1KzNnpmW fiGcDa1H1oumMW43GgqFxFquO/JTCfncnuJ3d8RFREtrHbhVGzYbuV0Z5d3pp1+t gqsK+aS/zo6rRzxraBTtyR8EUE/2WlAvcurTN+bVATTLBE0IAzlIxPmZWJKS5A2E TT8T3QHUnOP/J0XENOxv4521FtgNdf9O1R+kHqmFiF2DpjLWjnOAzHmsUG/ok8XO AhBv2PvHqO+9LEZtZjIfFQVvCG034cLBXSmby8ykJDaaqijE6nSe57dpffHVxXpe jePI9TzyBUQoM6Wvz8yUwa69RJ25XAfjuPf20MfeNFgaJi7PcmGwgd38ew== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:30 2025 by rpki-client on console.sobornost.net