$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/00CRl8SHDmyKHnN0XfqIbfrf8BU.roa File: 00CRl8SHDmyKHnN0XfqIbfrf8BU.roa (raw, json) Hash identifier: qv/mJWJGod9Q3DZSjDTduxREDy9kmIpIr0jGQVzq8vo= Subject key identifier: D3:40:91:97:C4:87:0E:6C:8A:1E:73:74:5D:FA:88:6D:FA:DF:F0:15 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 058C Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/00CRl8SHDmyKHnN0XfqIbfrf8BU.roa Signing time: Fri 31 Jan 2025 01:42:07 +0000 ROA not before: Fri 31 Jan 2025 01:42:07 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 219.124.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1420 (0x58c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:42:07 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=D3409197C4870E6C8A1E73745DFA886DFADFF015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:71:be:ee:83:9e:8a:85:ce:17:8d:87:d0: 24:2c:25:a9:97:2f:a3:d4:7a:02:8c:48:33:16:d8: 2c:f0:9b:fd:7f:e5:85:f2:96:1a:ca:be:03:06:7d: 6b:b8:08:1b:2b:98:35:e6:00:4f:63:3e:af:3c:b4: cd:dc:d9:38:b3:3f:0d:1c:ca:dc:3e:ea:31:79:b3: 29:c6:08:29:25:a0:02:1c:28:c9:69:6e:47:19:f3: fe:65:78:d6:d0:7b:52:3f:6a:86:27:47:50:17:00: cd:20:cb:44:fc:af:9b:e5:0a:a1:29:11:cd:af:88: 78:e9:50:00:77:3f:9f:a7:e4:f9:74:ec:39:ff:3a: dd:27:95:b9:ef:3f:95:1d:fa:14:aa:6a:a1:2b:01: 29:c8:12:6b:c4:ca:d8:a7:28:df:4e:bc:e7:58:47: 9e:48:e0:8d:da:89:af:14:f2:bd:62:21:37:bd:aa: 48:98:62:1c:83:28:fc:ac:06:b4:7f:ad:88:cd:34: d5:9e:a4:87:ab:08:37:a0:67:3e:8c:7a:d8:9f:da: aa:a3:c3:df:9c:96:7c:ba:d9:29:5d:77:43:f4:ea: 34:f9:6e:dc:60:11:a2:40:da:3d:0a:de:8c:12:33: cf:ad:92:e8:d7:99:c3:6d:1f:a9:99:44:26:6e:1e: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:91:97:C4:87:0E:6C:8A:1E:73:74:5D:FA:88:6D:FA:DF:F0:15 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/00CRl8SHDmyKHnN0XfqIbfrf8BU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.128.0/19 Signature Algorithm: sha256WithRSAEncryption c5:df:3e:29:94:1c:36:67:09:ce:e4:28:99:c8:d9:31:38:e7: 13:02:79:76:34:9d:a7:54:c2:0e:c1:80:16:cf:bc:c3:b0:8b: 9f:da:c3:37:bf:30:28:38:f3:13:9b:d6:36:21:62:59:87:dd: 7f:02:a2:95:8a:d5:9b:0d:d7:a4:f2:53:f8:33:1b:03:f8:d0: 19:28:8d:c1:98:2d:af:95:2f:be:cf:64:ca:7d:fa:a7:d8:f2: 85:84:96:8e:8b:4a:2b:be:30:a4:94:1a:e1:d2:d1:a1:1c:f0: 03:28:85:a6:14:98:84:d9:41:59:5d:2c:8d:ce:f8:5a:1a:d5: d7:19:70:f5:97:48:7b:11:8e:70:7c:57:c9:83:b6:32:72:d1: 21:28:65:10:a0:b7:6e:04:96:f0:96:de:af:e3:6f:c0:16:b9: 9a:96:e7:f9:54:69:78:d3:de:f6:b9:76:6f:10:2d:bd:6c:43: 13:66:5b:15:c0:47:78:d4:7f:6a:be:67:36:5c:db:b3:df:2a: f6:c9:41:9b:e0:00:c8:6e:72:3d:1d:0e:04:93:b6:6b:db:e4: c5:dd:e8:8d:e3:0f:bc:a9:a7:f1:98:4a:0f:e3:13:2b:06:8e: 8d:c1:99:fc:1e:02:2c:a0:04:9a:a1:f7:b7:98:8a:47:f8:93: 50:d9:17:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTQyMDdaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQzNDA5MTk3QzQ4NzBF NkM4QTFFNzM3NDVERkE4ODZERkFERkYwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcsHG+7oOeioXOF42H0CQsJamXL6PUegKMSDMW2Czwm/1/5YXy lhrKvgMGfWu4CBsrmDXmAE9jPq88tM3c2TizPw0cytw+6jF5synGCCkloAIcKMlp bkcZ8/5leNbQe1I/aoYnR1AXAM0gy0T8r5vlCqEpEc2viHjpUAB3P5+n5Pl07Dn/ Ot0nlbnvP5Ud+hSqaqErASnIEmvEytinKN9OvOdYR55I4I3aia8U8r1iITe9qkiY YhyDKPysBrR/rYjNNNWepIerCDegZz6Metif2qqjw9+clny62Sldd0P06jT5btxg EaJA2j0K3owSM8+tkujXmcNtH6mZRCZuHt3BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU00CRl8SHDmyKHnN0XfqIbfrf8BUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzAwQ1JsOFNIRG15S0huTjBYZnFJYmZyZjhCVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXbfIAwDQYJKoZIhvcNAQELBQADggEBAMXfPimUHDZnCc7kKJnI2TE45xMC eXY0nadUwg7BgBbPvMOwi5/awze/MCg48xOb1jYhYlmH3X8CopWK1ZsN16TyU/gz GwP40BkojcGYLa+VL77PZMp9+qfY8oWElo6LSiu+MKSUGuHS0aEc8AMohaYUmITZ QVldLI3O+Foa1dcZcPWXSHsRjnB8V8mDtjJy0SEoZRCgt24ElvCW3q/jb8AWuZqW 5/lUaXjT3va5dm8QLb1sQxNmWxXAR3jUf2q+ZzZc27PfKvbJQZvgAMhucj0dDgST tmvb5MXd6I3jD7ypp/GYSg/jEysGjo3BmfweAiygBJqh97eYikf4k1DZF5g= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:44 2025 by rpki-client on console.sobornost.net