$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa File: Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa (raw, json) Hash identifier: +pLtV5NsfnVZDc8xHjsyc38LoOIF4snx2uyMjzDyVC4= Subject key identifier: 16:4E:77:49:64:F6:42:43:F9:BD:D9:10:1F:84:43:C4:07:7F:23:3A Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0576 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa Signing time: Fri 31 Jan 2025 01:39:48 +0000 ROA not before: Fri 31 Jan 2025 01:39:48 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 220.216.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:39:48 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=164E774964F64243F9BDD9101F8443C4077F233A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:a8:fe:4e:2a:bd:51:37:fd:5f:b7:4b:38: 91:aa:f1:44:a4:b8:13:89:b9:80:5f:13:71:b4:4b: 24:05:ef:e3:c3:a9:bd:de:23:bf:69:44:c0:f3:ac: 43:8a:5c:7e:af:e8:ea:3f:08:e1:11:ef:5f:4c:a4: 87:a6:5e:1d:4b:01:9c:04:53:ec:40:ba:bf:7c:72: 89:75:cf:83:36:a7:30:39:10:b5:2b:70:13:00:84: 89:36:d8:c0:a4:8b:4b:86:2f:de:5e:f9:ca:03:c7: 9a:23:f0:43:c8:c2:dd:5c:d5:32:e2:1a:19:e3:30: 41:77:cf:7d:13:c3:a5:c4:d0:d4:53:c0:01:69:46: 95:60:bb:77:68:9a:ed:83:0f:a3:2f:bc:ea:eb:5e: 4b:00:22:8a:2f:03:f4:4d:4a:b7:ca:d5:50:ce:0d: b9:4f:e6:25:1c:b6:87:96:18:55:6c:d5:52:52:1e: 2c:e5:9b:1e:f7:97:0c:ec:b2:a7:9c:78:20:f0:76: 29:6f:16:d5:79:ab:a9:6f:ff:cd:1f:67:fe:72:26: 35:44:ab:ad:1a:2e:20:45:02:a2:f2:48:da:a3:e2: ef:d9:80:ad:95:b4:8a:eb:d5:41:43:86:56:4a:a7: 75:db:6c:82:3b:8b:db:1d:4f:51:4a:78:0e:92:b2: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4E:77:49:64:F6:42:43:F9:BD:D9:10:1F:84:43:C4:07:7F:23:3A X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Fk53SWT2QkP5vdkQH4RDxAd_Izo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.216.110.0/24 Signature Algorithm: sha256WithRSAEncryption b9:d5:af:c3:04:96:15:7b:6a:7a:0e:87:b5:f8:c1:cd:fc:1e: a9:83:10:9c:a9:9b:2e:22:40:a9:aa:87:fc:f3:70:67:cf:50: 41:8b:44:17:be:07:92:e6:ec:b6:bd:41:8b:b8:2c:27:6a:93: f9:3f:34:66:73:23:3f:c0:0f:16:39:f0:83:57:ed:92:7c:23: b5:bd:3e:a5:ce:f4:32:0a:83:38:31:57:5f:74:49:60:86:e9: 3f:e1:d7:d0:01:55:59:19:13:f6:46:b7:e9:9d:94:5b:73:d1: 2e:3f:a7:34:61:fa:cb:6c:b3:62:45:ad:4f:43:ce:5b:d0:0e: ca:49:c1:29:2a:99:33:ad:b3:49:24:65:84:af:01:f1:b4:7f: 52:2b:ae:dd:e5:06:aa:a3:95:53:09:c1:52:e2:29:6e:c9:2c: ab:b5:cd:fa:55:48:84:8e:91:f5:b2:40:f2:91:8f:73:b3:1f: b6:4f:5a:64:22:c0:e7:45:10:78:d2:3e:9c:a8:11:01:a4:f5: bd:8b:5f:18:bb:eb:20:8c:dd:a4:5a:b3:a6:de:61:29:65:d1: fd:f5:ae:7d:51:78:d2:09:06:53:9d:e0:68:3c:1e:b3:b7:0d: fd:fc:4e:3e:4b:de:0d:c9:82:6b:6a:f7:b7:bb:ec:87:5a:94: aa:24:a9:31 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTM5NDhaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2NEU3NzQ5NjRGNjQy NDNGOUJERDkxMDFGODQ0M0M0MDc3RjIzM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuZqj+Tiq9UTf9X7dLOJGq8USkuBOJuYBfE3G0SyQF7+PDqb3e I79pRMDzrEOKXH6v6Oo/COER719MpIemXh1LAZwEU+xAur98col1z4M2pzA5ELUr cBMAhIk22MCki0uGL95e+coDx5oj8EPIwt1c1TLiGhnjMEF3z30Tw6XE0NRTwAFp RpVgu3domu2DD6MvvOrrXksAIoovA/RNSrfK1VDODblP5iUctoeWGFVs1VJSHizl mx73lwzssqeceCDwdilvFtV5q6lv/80fZ/5yJjVEq60aLiBFAqLySNqj4u/ZgK2V tIrr1UFDhlZKp3XbbII7i9sdT1FKeA6Sst+rAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFk53SWT2QkP5vdkQH4RDxAd/IzowHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L0ZrNTNTV1QyUWtQNXZka1FINFJEeEFkX0l6by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADc2G4wDQYJKoZIhvcNAQELBQADggEBALnVr8MElhV7anoOh7X4wc38HqmD EJypmy4iQKmqh/zzcGfPUEGLRBe+B5Lm7La9QYu4LCdqk/k/NGZzIz/ADxY58INX 7ZJ8I7W9PqXO9DIKgzgxV190SWCG6T/h19ABVVkZE/ZGt+mdlFtz0S4/pzRh+sts s2JFrU9DzlvQDspJwSkqmTOts0kkZYSvAfG0f1Irrt3lBqqjlVMJwVLiKW7JLKu1 zfpVSISOkfWyQPKRj3OzH7ZPWmQiwOdFEHjSPpyoEQGk9b2LXxi76yCM3aRas6be YSll0f31rn1ReNIJBlOd4Gg8HrO3Df38Tj5L3g3Jgmtq97e77IdalKokqTE= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:44 2025 by rpki-client on console.sobornost.net