$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LHzKbRKc-q9a67vSfTi0lkZ1teI.roa File: LHzKbRKc-q9a67vSfTi0lkZ1teI.roa (raw, json) Hash identifier: iVLg4OXyksH0e0olmkQUBKGs6oBEaCAKN/shT/2mO0U= Subject key identifier: 2C:7C:CA:6D:12:9C:FA:AF:5A:EB:BB:D2:7D:38:B4:96:46:75:B5:E2 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 052E Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LHzKbRKc-q9a67vSfTi0lkZ1teI.roa Signing time: Fri 31 Jan 2025 01:30:19 +0000 ROA not before: Fri 31 Jan 2025 01:30:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 220.216.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:30:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=2C7CCA6D129CFAAF5AEBBBD27D38B4964675B5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:77:c9:cf:22:a0:2f:06:ed:f6:61:17:83: 4f:88:a5:95:ea:bc:aa:28:d2:b7:4a:48:03:85:07: f8:c9:a5:ce:88:64:d5:c1:48:7f:cd:f7:d8:79:d9: b0:f1:4d:8c:6f:9e:d1:f2:81:96:8d:74:44:a4:af: 20:7d:ef:31:f5:1d:13:c0:17:88:8f:e4:b3:5b:d5: 13:1d:eb:0e:ea:b9:9c:fe:86:3d:db:8b:29:3b:3f: f7:ae:64:09:e7:c8:56:f6:9a:5a:44:f8:59:da:2b: fd:84:a1:17:10:ed:a3:b0:17:ed:dc:e5:31:08:79: b8:ce:8d:dc:c3:2b:3c:3d:1d:63:ac:26:f1:e1:66: 09:bb:61:e8:c7:aa:0a:52:7f:5c:d6:57:8d:73:45: 0f:29:76:10:72:76:8a:b8:9e:44:36:2a:04:63:ef: 00:fd:d3:4e:5b:3e:ef:09:81:0f:a0:86:ae:8e:ea: d4:d7:4a:60:ce:3f:18:36:80:50:8a:9d:2b:12:65: 71:75:da:cb:0b:d2:6c:06:ce:a6:78:94:7d:3f:f6: dc:7a:03:61:59:a7:0c:08:bf:e6:15:61:fa:d0:20: d1:28:7b:df:97:9d:84:52:e4:13:d4:f8:75:66:18: 21:41:cc:2f:c9:d5:5a:ea:80:a7:88:69:75:c4:7a: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7C:CA:6D:12:9C:FA:AF:5A:EB:BB:D2:7D:38:B4:96:46:75:B5:E2 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LHzKbRKc-q9a67vSfTi0lkZ1teI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.216.112.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:bd:4c:41:79:fa:c9:fb:48:a8:e8:e4:57:84:9c:e1:60:40: 72:47:47:6d:e4:14:db:7f:93:df:a2:cc:5f:cc:c7:46:f6:43: d5:40:be:a6:05:94:1e:0d:bd:45:cb:a8:c3:50:ed:eb:31:86: 35:ea:8c:a3:12:11:8e:aa:dd:f1:6c:72:9d:44:c6:cf:e3:f2: 00:f2:30:f4:da:50:97:31:d8:89:a4:e3:4b:0e:58:e7:93:fa: 37:55:30:8c:fb:73:76:a1:d0:b9:da:16:95:8e:ad:8b:0b:cf: 48:a1:26:6e:a6:98:24:ab:0e:3e:07:a2:05:64:28:ac:3a:32: 6d:01:13:57:78:88:74:d3:7f:aa:94:d3:52:e7:6b:20:14:c6: 1e:6b:ee:a1:18:df:ae:1a:d8:9b:93:f5:e5:5f:32:3c:b6:fd: 3f:58:04:9f:ff:9c:1b:7f:10:cb:3c:4b:c4:ee:43:25:df:85: 18:28:bf:79:c6:d4:c5:34:51:d0:0f:4f:58:0a:60:5b:07:4e: 17:27:76:d4:61:69:84:44:57:bb:d2:f9:78:32:5d:3d:35:62: 4f:e0:30:f0:63:19:f4:74:19:c4:ca:a4:ab:7e:06:ab:58:b8: e1:dc:42:a6:90:78:8f:26:6a:76:62:ba:61:d1:fd:0c:cf:03: 86:02:f5:dc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTMwMTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDN0NDQTZEMTI5Q0ZB QUY1QUVCQkJEMjdEMzhCNDk2NDY3NUI1RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG13fJzyKgLwbt9mEXg0+IpZXqvKoo0rdKSAOFB/jJpc6IZNXB SH/N99h52bDxTYxvntHygZaNdESkryB97zH1HRPAF4iP5LNb1RMd6w7quZz+hj3b iyk7P/euZAnnyFb2mlpE+FnaK/2EoRcQ7aOwF+3c5TEIebjOjdzDKzw9HWOsJvHh Zgm7YejHqgpSf1zWV41zRQ8pdhBydoq4nkQ2KgRj7wD9005bPu8JgQ+ghq6O6tTX SmDOPxg2gFCKnSsSZXF12ssL0mwGzqZ4lH0/9tx6A2FZpwwIv+YVYfrQINEoe9+X nYRS5BPU+HVmGCFBzC/J1VrqgKeIaXXEeqTtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULHzKbRKc+q9a67vSfTi0lkZ1teIwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L0xIektiUktjLXE5YTY3dlNmVGkwbGtaMXRlSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc2HAwDQYJKoZIhvcNAQELBQADggEBAGy9TEF5+sn7SKjo5FeEnOFgQHJH R23kFNt/k9+izF/Mx0b2Q9VAvqYFlB4NvUXLqMNQ7esxhjXqjKMSEY6q3fFscp1E xs/j8gDyMPTaUJcx2Imk40sOWOeT+jdVMIz7c3ah0LnaFpWOrYsLz0ihJm6mmCSr Dj4HogVkKKw6Mm0BE1d4iHTTf6qU01LnayAUxh5r7qEY364a2JuT9eVfMjy2/T9Y BJ//nBt/EMs8S8TuQyXfhRgov3nG1MU0UdAPT1gKYFsHThcndtRhaYREV7vS+Xgy XT01Yk/gMPBjGfR0GcTKpKt+BqtYuOHcQqaQeI8manZiumHR/QzPA4YC9dw= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:44 2025 by rpki-client on console.sobornost.net