$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa File: PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa (raw, json) Hash identifier: 2fd7AkDmcrOBTKoU5BEXtXaQsq17L5ZDbPuAtMG288k= Subject key identifier: 3C:2C:90:AC:8D:27:38:43:E3:15:98:0A:88:39:55:24:AF:BA:55:55 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 0545 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa Signing time: Fri 31 Jan 2025 01:30:29 +0000 ROA not before: Fri 31 Jan 2025 01:30:29 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 42.125.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Jan 31 01:30:29 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=3C2C90AC8D273843E315980A88395524AFBA5555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:01:87:f9:12:41:9d:39:a8:dc:a2:65:ad: 1a:3b:04:ac:de:43:fc:35:8a:86:5c:b8:46:88:7a: e1:5d:42:89:83:21:b5:55:80:de:04:87:27:f5:1d: 2b:6c:27:83:60:5d:f2:ad:8b:a2:f3:11:73:71:9e: 6d:bf:20:73:47:14:44:53:b6:fe:5f:76:22:ba:4c: 4d:11:cd:76:e6:cc:91:6c:9f:87:cb:26:38:77:95: 45:e9:76:e6:fe:3e:3b:83:e9:67:a1:1e:92:d8:a7: da:52:5d:b1:d8:c6:26:73:e7:9a:6c:8d:3a:16:de: 12:84:7e:62:ad:64:06:8f:93:90:e9:8b:ae:66:db: e5:d1:f4:6c:17:72:80:ed:ee:79:c7:1b:a8:06:c0: cb:da:97:da:2f:bd:7d:81:36:99:ed:71:59:aa:a9: f7:6a:87:29:91:fc:1c:31:49:7d:65:8e:69:7d:13: dd:42:dd:5b:68:eb:44:a0:2d:1b:a8:3e:92:2c:a6: b3:20:95:5b:7e:21:29:35:a9:c4:a4:50:0f:6b:82: 60:6f:c9:ca:25:31:68:ab:c3:1b:ba:11:d5:34:36: bc:a8:25:83:2f:50:1c:94:39:ca:08:9f:8c:46:43: 3c:6a:fa:e6:8d:13:6c:0f:c3:9a:5e:57:9a:af:ed: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2C:90:AC:8D:27:38:43:E3:15:98:0A:88:39:55:24:AF:BA:55:55 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PCyQrI0nOEPjFZgKiDlVJK-6VVU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.125.228.0/22 Signature Algorithm: sha256WithRSAEncryption 39:b7:52:a1:44:8d:bc:1a:47:d5:80:e1:86:8e:9a:20:7e:bb: 25:1f:d1:28:16:c3:15:4d:74:fa:b1:fc:29:62:aa:e6:05:1d: ce:63:1d:1d:b1:7a:a7:50:2a:fb:e0:37:a8:55:08:ab:6b:bf: c7:da:23:53:3f:f3:c1:f8:fb:a0:2d:cc:59:ad:00:58:f2:d1: c4:68:e9:c9:9e:7c:18:10:88:44:4d:01:24:51:a6:bf:fb:43: 8d:74:31:c0:96:48:d1:ee:cb:ff:28:78:96:a8:cc:c9:38:3f: 45:77:e1:35:b1:12:cb:4c:d8:dd:31:24:b9:25:bc:c4:02:14: 0e:23:72:5c:81:4b:09:ab:16:03:0c:fe:df:84:a9:d0:cd:68: c8:48:43:ed:4f:da:83:6f:92:92:fe:22:d3:f9:63:d5:84:47: 2c:84:f1:62:98:54:01:5e:03:dc:c8:c0:2f:86:06:30:63:f7: ee:69:9e:37:2f:87:f6:c3:6f:b1:86:e2:cb:ca:d6:b6:cb:de: c0:d3:19:9f:90:6f:55:b5:23:a0:c0:58:25:1c:12:70:b9:1d: 80:27:f8:79:49:2f:6f:fa:5f:26:7b:03:a5:1b:fc:6f:90:d1: 01:11:ec:cc:a8:72:43:40:67:9c:2d:97:d5:22:04:8f:ef:4a: 5a:b9:ea:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNTAxMzEw MTMwMjlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNDMkM5MEFDOEQyNzM4 NDNFMzE1OTgwQTg4Mzk1NTI0QUZCQTU1NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/9wGH+RJBnTmo3KJlrRo7BKzeQ/w1ioZcuEaIeuFdQomDIbVV gN4Ehyf1HStsJ4NgXfKti6LzEXNxnm2/IHNHFERTtv5fdiK6TE0RzXbmzJFsn4fL Jjh3lUXpdub+PjuD6WehHpLYp9pSXbHYxiZz55psjToW3hKEfmKtZAaPk5Dpi65m 2+XR9GwXcoDt7nnHG6gGwMval9ovvX2BNpntcVmqqfdqhymR/BwxSX1ljml9E91C 3Vto60SgLRuoPpIsprMglVt+ISk1qcSkUA9rgmBvycolMWirwxu6EdU0NryoJYMv UByUOcoIn4xGQzxq+uaNE2wPw5peV5qv7eypAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPCyQrI0nOEPjFZgKiDlVJK+6VVUwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L1BDeVFySTBuT0VQakZaZ0tpRGxWSkstNlZWVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIqfeQwDQYJKoZIhvcNAQELBQADggEBADm3UqFEjbwaR9WA4YaOmiB+uyUf 0SgWwxVNdPqx/CliquYFHc5jHR2xeqdQKvvgN6hVCKtrv8faI1M/88H4+6AtzFmt AFjy0cRo6cmefBgQiERNASRRpr/7Q410McCWSNHuy/8oeJaozMk4P0V34TWxEstM 2N0xJLklvMQCFA4jclyBSwmrFgMM/t+EqdDNaMhIQ+1P2oNvkpL+ItP5Y9WERyyE 8WKYVAFeA9zIwC+GBjBj9+5pnjcvh/bDb7GG4svK1rbL3sDTGZ+Qb1W1I6DAWCUc EnC5HYAn+HlJL2/6XyZ7A6Ub/G+Q0QER7MyockNAZ5wtl9UiBI/vSlq56lc= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:45 2025 by rpki-client on console.sobornost.net