$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NGBgwPl873_LqKvCCjeHDC1Q22U.roa File: NGBgwPl873_LqKvCCjeHDC1Q22U.roa (raw, json) Hash identifier: 0KdpTWdhpSdvR7OVxHi8nSf6/6OMyhiJe6EJNHkH2gk= Subject key identifier: 34:60:60:C0:F9:7C:EF:7F:CB:A8:AB:C2:0A:37:87:0C:2D:50:DB:65 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0532 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NGBgwPl873_LqKvCCjeHDC1Q22U.roa Signing time: Fri 31 Jan 2025 01:30:20 +0000 ROA not before: Fri 31 Jan 2025 01:30:20 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 220.216.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:30:20 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=346060C0F97CEF7FCBA8ABC20A37870C2D50DB65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b0:80:86:bf:0e:d4:7c:14:82:2c:f1:cf:86: 6f:2a:cf:72:a1:55:6c:d6:a9:b9:d3:17:fb:c5:ea: ad:eb:28:1b:00:da:40:af:11:84:6c:50:5f:a7:28: e9:b1:ba:db:97:ac:fd:9b:ab:87:dc:84:f7:90:3f: 1e:3b:72:11:6e:a2:7b:43:11:31:82:d4:f8:27:79: 53:a4:56:29:30:fb:37:8e:19:8a:3c:9c:28:33:bc: d9:7f:63:87:b5:1f:a0:ee:53:1c:e0:30:36:c9:df: 90:23:4c:8d:15:39:a4:b6:0e:04:5d:91:02:1e:f5: 90:6f:0d:df:8c:12:a0:ad:04:50:4e:c9:fd:2d:d5: c5:53:cc:8d:c2:cf:8e:6d:23:d3:2b:19:28:90:84: 82:85:a7:cf:67:88:52:d3:cc:c7:c8:c3:53:a1:56: 11:35:81:1f:81:99:ad:b6:f6:1b:a0:72:b7:da:19: c9:0e:e3:dd:25:8b:81:a8:43:0b:29:f4:bb:26:2b: d1:ce:e6:ae:08:15:5a:33:a7:17:c1:90:84:9e:2d: 11:e4:b3:da:7d:ca:f0:8a:6c:d3:2d:be:0b:4f:3d: da:a2:77:36:a1:7d:c8:3a:fe:99:6d:0e:5b:6d:0f: 3e:65:52:79:83:b1:c4:2d:c9:c2:39:ba:db:30:b5: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:60:C0:F9:7C:EF:7F:CB:A8:AB:C2:0A:37:87:0C:2D:50:DB:65 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NGBgwPl873_LqKvCCjeHDC1Q22U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.216.56.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:22:57:ab:91:b9:1e:11:71:c7:9b:e3:b3:f9:58:bb:6f:9b: ca:9c:29:37:29:2b:90:81:60:bf:ec:0d:37:58:87:40:3f:12: 7d:c2:41:c7:7e:e1:df:01:ca:f8:6c:2c:4e:92:2a:0c:f4:16: 59:79:24:02:72:09:54:ff:d5:7d:a2:b4:9f:5e:6b:3b:e1:73: 4b:42:cd:70:f4:3b:1f:46:bb:56:f6:52:01:20:0c:28:12:db: 43:47:f6:79:a7:87:82:cc:cf:e8:d8:e0:18:dd:c5:11:59:04: 45:12:00:04:ff:43:72:e5:a4:c1:67:e6:ff:48:6d:12:29:71: dd:8c:28:a1:2b:92:96:d7:2b:3b:e5:69:1f:62:c7:fd:5d:23: 8b:3a:6e:e7:2f:c0:15:44:a1:34:88:8f:78:70:74:3e:00:75: 1d:3a:dc:1b:79:47:39:32:ac:80:3f:b0:46:e0:f5:c7:30:58: cc:1f:e3:78:92:86:af:92:cf:36:34:21:80:44:86:59:a8:47: 56:97:26:89:55:22:4e:48:09:d7:24:f7:d3:bb:98:c1:b7:a0: 8b:ca:af:bb:2e:a4:7b:7b:1d:f8:39:44:c7:0b:c4:09:6e:2c: 6d:4e:97:51:b4:95:ce:4b:21:52:e0:1d:0e:a5:60:ff:eb:9d: b0:1c:a7:54 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTMwMjBaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM0NjA2MEMwRjk3Q0VG N0ZDQkE4QUJDMjBBMzc4NzBDMkQ1MERCNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3sICGvw7UfBSCLPHPhm8qz3KhVWzWqbnTF/vF6q3rKBsA2kCv EYRsUF+nKOmxutuXrP2bq4fchPeQPx47chFuontDETGC1PgneVOkVikw+zeOGYo8 nCgzvNl/Y4e1H6DuUxzgMDbJ35AjTI0VOaS2DgRdkQIe9ZBvDd+MEqCtBFBOyf0t 1cVTzI3Cz45tI9MrGSiQhIKFp89niFLTzMfIw1OhVhE1gR+Bma229hugcrfaGckO 490li4GoQwsp9LsmK9HO5q4IFVozpxfBkISeLRHks9p9yvCKbNMtvgtPPdqidzah fcg6/pltDlttDz5lUnmDscQtycI5utswtWGRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNGBgwPl873/LqKvCCjeHDC1Q22UwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L05HQmd3UGw4NzNfTHFLdkNDamVIREMxUTIyVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc2DgwDQYJKoZIhvcNAQELBQADggEBAAoiV6uRuR4Rcceb47P5WLtvm8qc KTcpK5CBYL/sDTdYh0A/En3CQcd+4d8ByvhsLE6SKgz0Fll5JAJyCVT/1X2itJ9e azvhc0tCzXD0Ox9Gu1b2UgEgDCgS20NH9nmnh4LMz+jY4BjdxRFZBEUSAAT/Q3Ll pMFn5v9IbRIpcd2MKKErkpbXKzvlaR9ix/1dI4s6bucvwBVEoTSIj3hwdD4AdR06 3Bt5RzkyrIA/sEbg9ccwWMwf43iShq+SzzY0IYBEhlmoR1aXJolVIk5ICdck99O7 mMG3oIvKr7supHt7Hfg5RMcLxAluLG1Ol1G0lc5LIVLgHQ6lYP/rnbAcp1Q= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:44 2025 by rpki-client on console.sobornost.net