$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa File: 3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa (raw, json) Hash identifier: Np3hcyG9mvh1O8ebgEMbIfdTzRf0/hrq7sOs4MgFeG8= Subject key identifier: DC:8D:DC:22:2A:82:16:16:C3:AB:A6:A4:94:A2:75:72:EB:05:87:66 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0538 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa Signing time: Fri 31 Jan 2025 01:30:23 +0000 ROA not before: Fri 31 Jan 2025 01:30:23 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 42.125.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:30:23 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=DC8DDC222A821616C3ABA6A494A27572EB058766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:a2:6d:41:e4:5e:ea:3a:70:75:39:ed:f9: 5b:1d:77:db:8f:f9:2e:68:03:50:0d:60:83:a8:f0: 6b:60:81:8f:4b:98:46:1f:4e:01:51:ae:9a:94:27: d1:27:e2:eb:45:ba:b1:a7:98:3d:a6:df:00:c7:83: 25:dd:c4:5e:68:57:70:9e:c4:20:88:1d:6e:92:7d: 6e:b9:3e:96:27:1a:58:65:0b:c3:20:39:6e:d6:8e: dc:a2:7e:62:d1:20:55:eb:3f:25:7a:92:d0:76:70: 45:40:4b:3d:2c:9f:6d:0a:80:bb:b0:9a:6e:82:c7: f1:53:d1:3b:b3:d3:97:86:5b:b0:32:a8:85:6b:b7: e8:73:db:e4:bc:20:b9:3f:73:d3:25:45:65:aa:ed: a2:fe:d3:99:a7:50:34:74:2d:73:6c:17:a1:92:10: 52:d2:44:c9:9e:c1:cd:79:47:c1:9d:5b:ce:51:4b: 1a:e9:b1:13:f7:36:25:53:3c:0b:95:fe:0c:d9:32: 21:69:13:42:f4:56:76:9c:e1:5f:5f:45:06:e9:8c: 6b:b1:89:b8:8c:75:fe:82:cb:32:3d:aa:59:a1:38: bb:f8:28:57:a0:af:26:cb:14:4c:d2:00:99:69:9e: 4d:1f:0c:bf:5b:e7:77:8e:7a:1f:91:8d:df:0a:b3: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:DC:22:2A:82:16:16:C3:AB:A6:A4:94:A2:75:72:EB:05:87:66 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3I3cIiqCFhbDq6aklKJ1cusFh2Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.125.226.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:d8:06:0e:59:53:c0:8d:76:96:6c:a5:31:21:90:2e:c3:2c: af:30:50:17:ad:06:47:0e:41:6f:32:cf:7f:48:76:14:de:a9: 88:a6:19:40:f6:c4:2d:7a:db:ad:f5:46:4f:4c:48:21:1f:13: 13:47:4f:c6:ab:9f:94:03:6f:42:5d:6f:12:cc:87:21:6c:ad: b3:bd:67:ce:db:1c:1c:34:00:8b:4d:96:3c:c5:88:21:c2:97: 6e:85:db:57:23:5b:5c:54:fd:9a:b0:87:99:be:e6:7d:13:64: dd:32:fa:49:65:c0:41:04:aa:41:3c:5a:ec:9d:14:2c:4a:b9: 42:e7:5c:b6:9a:ff:0d:d5:44:dc:e7:2d:7c:93:d3:b3:f9:13: b0:9b:74:06:43:07:20:45:bf:ca:4e:24:1c:30:7b:f1:7d:e8: 8f:ae:47:67:92:91:5a:15:33:fc:31:0d:c6:82:10:dc:d9:5d: 11:e8:78:1c:52:25:74:13:b4:ee:ed:67:f3:6e:61:97:d1:08: d2:d2:e8:c9:93:67:33:e7:aa:01:c6:0e:4e:e7:25:34:f8:55: 4a:28:dc:43:80:df:3e:6c:4c:f5:16:d3:c2:a0:28:89:31:64: b3:3e:cf:e8:a6:16:30:2b:0b:b5:7a:1d:73:8e:6a:fe:c4:b7: 3c:b9:47:9f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTMwMjNaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERDOEREQzIyMkE4MjE2 MTZDM0FCQTZBNDk0QTI3NTcyRUIwNTg3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv36JtQeRe6jpwdTnt+Vsdd9uP+S5oA1ANYIOo8GtggY9LmEYf TgFRrpqUJ9En4utFurGnmD2m3wDHgyXdxF5oV3CexCCIHW6SfW65PpYnGlhlC8Mg OW7WjtyifmLRIFXrPyV6ktB2cEVASz0sn20KgLuwmm6Cx/FT0Tuz05eGW7AyqIVr t+hz2+S8ILk/c9MlRWWq7aL+05mnUDR0LXNsF6GSEFLSRMmewc15R8GdW85RSxrp sRP3NiVTPAuV/gzZMiFpE0L0Vnac4V9fRQbpjGuxibiMdf6CyzI9qlmhOLv4KFeg rybLFEzSAJlpnk0fDL9b53eOeh+Rjd8KszNXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU3I3cIiqCFhbDq6aklKJ1cusFh2YwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1LzNJM2NJaXFDRmhiRHE2YWtsS0oxY3VzRmgyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEqfeIwDQYJKoZIhvcNAQELBQADggEBAJ7YBg5ZU8CNdpZspTEhkC7DLK8w UBetBkcOQW8yz39IdhTeqYimGUD2xC162631Rk9MSCEfExNHT8arn5QDb0JdbxLM hyFsrbO9Z87bHBw0AItNljzFiCHCl26F21cjW1xU/Zqwh5m+5n0TZN0y+kllwEEE qkE8WuydFCxKuULnXLaa/w3VRNznLXyT07P5E7CbdAZDByBFv8pOJBwwe/F96I+u R2eSkVoVM/wxDcaCENzZXRHoeBxSJXQTtO7tZ/NuYZfRCNLS6MmTZzPnqgHGDk7n JTT4VUoo3EOA3z5sTPUW08KgKIkxZLM+z+imFjArC7V6HXOOav7Etzy5R58= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:44 2025 by rpki-client on console.sobornost.net