$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/Nzk8HihwpMsok8P4SUlzqCGMcGY.roa File: Nzk8HihwpMsok8P4SUlzqCGMcGY.roa (raw, json) Hash identifier: wjPKGEHzqEsVuYFyQuE/2vrV6fjEQNvIMhV6Itj0jnA= Subject key identifier: 37:39:3C:1E:28:70:A4:CB:28:93:C3:F8:49:49:73:A8:21:8C:70:66 Certificate issuer: /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Certificate serial: 62 Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Nzk8HihwpMsok8P4SUlzqCGMcGY.roa Signing time: Tue 18 Feb 2025 00:29:12 +0000 ROA not before: Tue 18 Feb 2025 00:29:12 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 55900 IP address blocks: 218.223.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5 Validity Not Before: Feb 18 00:29:12 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=37393C1E2870A4CB2893C3F8494973A8218C7066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:fe:c7:90:ee:03:7e:31:0e:de:51:82:87: 4f:c5:51:a8:91:9b:65:d7:4f:29:8f:6d:58:5a:94: 22:e4:23:84:45:dd:37:fe:d7:71:95:53:ff:31:08: 4d:4b:97:08:de:46:1c:64:9e:01:b8:d0:4a:ff:76: d9:25:8f:f5:a9:fe:93:a9:cc:77:41:30:60:59:4b: c8:0f:13:45:3b:c3:42:b7:b8:3c:52:aa:2c:45:d2: e0:89:df:78:ba:0c:c6:37:55:63:79:17:62:e1:e3: 8e:1b:50:70:1c:b6:04:6a:c1:c2:89:84:c5:a9:58: 15:c5:21:85:7b:52:1e:60:74:03:1c:e5:c0:15:b4: 9f:c8:5b:e2:86:d2:b5:ae:76:03:8c:c3:a8:61:04: c2:bb:4b:17:ad:f0:41:b7:3b:80:48:92:09:dc:f7: b5:a9:f4:bb:1d:ae:5f:a7:08:0c:0b:33:b1:ac:e9: cd:e9:cf:33:c8:77:b6:f9:0f:69:5f:05:30:95:4d: bc:45:5d:3b:90:60:0c:0d:a8:7f:b1:5f:db:fe:5e: 3a:4d:4b:92:ba:9b:56:5d:6c:6a:5f:7c:dd:eb:fe: d8:7a:3a:07:98:f3:32:48:32:1f:78:30:c9:ed:d9: d1:15:31:45:30:df:8a:43:61:14:6b:fb:dd:44:0c: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:39:3C:1E:28:70:A4:CB:28:93:C3:F8:49:49:73:A8:21:8C:70:66 X509v3 Authority Key Identifier: keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Nzk8HihwpMsok8P4SUlzqCGMcGY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.132.0/22 Signature Algorithm: sha256WithRSAEncryption af:a3:e0:d8:69:99:7a:eb:f9:a9:f3:a7:5b:25:8d:10:b6:5c: 32:d7:b6:4c:84:c8:73:8a:71:89:0c:e0:55:a6:31:dc:3e:98: 2f:e7:bb:de:f9:5d:16:c7:3f:4e:34:35:fd:7a:07:bc:96:75: 00:ef:9a:59:d8:24:5b:4a:40:cf:05:03:8a:9a:e8:b4:75:26: 4b:94:d9:1f:1a:1c:fc:f7:81:79:e4:8e:de:3d:d2:10:63:93: 45:22:c8:c9:11:2f:72:e8:93:df:f3:99:ad:44:0b:66:bb:3d: 29:36:ea:10:5f:b0:b5:84:b5:28:fc:8c:8d:3f:06:61:ce:d9: 79:ed:68:fe:06:57:7b:44:66:f5:d5:0a:04:e7:a8:7c:ed:a3: 03:3c:0b:a2:07:1c:4f:78:7c:21:43:0f:50:5e:27:31:f0:58: 84:80:5e:2a:f1:31:3c:4b:37:82:d5:ad:f1:95:21:13:d5:ba: 00:42:8f:7b:69:27:84:7b:ae:24:fd:a7:99:6e:9d:e3:f9:05: cf:52:d4:5a:f0:15:68:d5:bd:45:99:ad:97:94:2e:7a:a2:a1: f9:2c:70:87:89:77:06:e7:ef:59:9d:c6:4a:ec:8d:89:cf:14: 6e:9e:5f:21:1a:92:8f:55:e6:be:39:ba:3e:a8:0c:be:03:8f: 2d:42:27:1f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTI1MDIxODAw MjkxMloXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMzczOTNDMUUyODcwQTRD QjI4OTNDM0Y4NDk0OTczQTgyMThDNzA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALXN/seQ7gN+MQ7eUYKHT8VRqJGbZddPKY9tWFqUIuQjhEXdN/7X cZVT/zEITUuXCN5GHGSeAbjQSv922SWP9an+k6nMd0EwYFlLyA8TRTvDQre4PFKq LEXS4InfeLoMxjdVY3kXYuHjjhtQcBy2BGrBwomExalYFcUhhXtSHmB0AxzlwBW0 n8hb4obSta52A4zDqGEEwrtLF63wQbc7gEiSCdz3tan0ux2uX6cIDAszsazpzenP M8h3tvkPaV8FMJVNvEVdO5BgDA2of7Ff2/5eOk1LkrqbVl1sal983ev+2Ho6B5jz MkgyH3gwye3Z0RUxRTDfikNhFGv73UQMDuUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ3OTweKHCkyyiTw/hJSXOoIYxwZjAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96 YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvTnprOEhpaHdwTXNvazhQNFNVbHpxQ0dNY0dZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtrfhDANBgkqhkiG9w0BAQsFAAOCAQEAr6Pg2GmZeuv5qfOnWyWNELZcMte2 TITIc4pxiQzgVaYx3D6YL+e73vldFsc/TjQ1/XoHvJZ1AO+aWdgkW0pAzwUDipro tHUmS5TZHxoc/PeBeeSO3j3SEGOTRSLIyREvcuiT3/OZrUQLZrs9KTbqEF+wtYS1 KPyMjT8GYc7Zee1o/gZXe0Rm9dUKBOeofO2jAzwLogccT3h8IUMPUF4nMfBYhIBe KvExPEs3gtWt8ZUhE9W6AEKPe2knhHuuJP2nmW6d4/kFz1LUWvAVaNW9RZmtl5Qu eqKh+Sxwh4l3BufvWZ3GSuyNic8Ubp5fIRqSj1Xmvjm6PqgMvgOPLUInHw== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:43 2025 by rpki-client on console.sobornost.net