$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/qWDoD-adYUPc3U3eQfHQ0hGBHXc.roa File: qWDoD-adYUPc3U3eQfHQ0hGBHXc.roa (raw, json) Hash identifier: yGvGDh3zJL/0nYpAOov7A28HTS6h0Mv+Ylt8DrHilQM= Subject key identifier: A9:60:E8:0F:E6:9D:61:43:DC:DD:4D:DE:41:F1:D0:D2:11:81:1D:77 Certificate issuer: /CN=C74DF50D0555514618B72AC45B42A850DACF0D64 Certificate serial: 12 Authority key identifier: C7:4D:F5:0D:05:55:51:46:18:B7:2A:C4:5B:42:A8:50:DA:CF:0D:64 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x031DQVVUUYYtyrEW0KoUNrPDWQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/qWDoD-adYUPc3U3eQfHQ0hGBHXc.roa Signing time: Sat 05 Apr 2025 01:22:22 +0000 ROA not before: Sat 05 Apr 2025 01:22:22 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 131931 IP address blocks: 157.120.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/x031DQVVUUYYtyrEW0KoUNrPDWQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/x031DQVVUUYYtyrEW0KoUNrPDWQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x031DQVVUUYYtyrEW0KoUNrPDWQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C74DF50D0555514618B72AC45B42A850DACF0D64 Validity Not Before: Apr 5 01:22:22 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A960E80FE69D6143DCDD4DDE41F1D0D211811D77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:99:bc:57:92:3e:f0:97:1a:27:84:95:56: 03:7e:b2:1a:a9:55:e3:a8:12:20:1f:67:cf:8b:ad: 29:dd:d3:7e:bc:0b:b4:a0:0d:40:d0:13:77:b9:2d: c0:de:70:af:2f:48:ad:77:47:75:c8:8d:1b:0b:bf: 98:73:af:8d:3e:5c:69:e5:00:4a:a2:a9:f5:7b:0c: 0d:36:36:ae:27:94:28:b7:60:ba:87:c1:33:ec:1a: 5f:47:fb:6c:47:f1:fe:23:e7:98:a8:76:91:25:af: 69:45:54:e4:02:4e:f1:ca:1f:08:1e:3a:be:ac:9a: 01:d0:17:e9:54:b4:15:e1:c8:9a:62:46:09:94:f2: 02:19:21:9e:51:eb:e1:5a:13:bc:d9:1b:4f:11:33: 73:14:fa:74:80:dd:da:bd:f4:60:41:60:fb:4d:ff: ae:4d:ac:e5:eb:23:54:eb:25:22:28:9d:a5:29:9e: e7:57:a5:5f:92:55:da:e2:a7:45:04:7c:2b:95:e4: cd:32:1e:ba:d7:ed:5d:e3:56:7a:19:1b:06:07:3d: 62:e6:ab:af:c2:d3:16:0f:74:cc:9e:0d:28:4b:59: 32:94:ea:d2:8d:bd:0e:20:57:71:c5:d3:35:5e:2e: 26:ba:04:59:6b:f4:e0:ce:0f:1d:72:c6:19:22:99: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:60:E8:0F:E6:9D:61:43:DC:DD:4D:DE:41:F1:D0:D2:11:81:1D:77 X509v3 Authority Key Identifier: keyid:C7:4D:F5:0D:05:55:51:46:18:B7:2A:C4:5B:42:A8:50:DA:CF:0D:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/x031DQVVUUYYtyrEW0KoUNrPDWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x031DQVVUUYYtyrEW0KoUNrPDWQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/qWDoD-adYUPc3U3eQfHQ0hGBHXc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.192.0/21 Signature Algorithm: sha256WithRSAEncryption 89:73:36:74:40:b2:71:fc:d9:cb:0a:7e:38:7c:55:5a:3e:ef: f5:0c:a2:4e:6f:24:29:77:e2:2d:e0:79:e7:cf:b7:96:15:ea: 56:58:0f:f3:50:61:b6:1f:11:f5:6c:5e:08:8a:90:d7:c3:74: 61:a1:f2:ed:32:d3:c1:94:70:04:99:28:6c:96:ef:99:cf:40: 85:a2:33:7d:36:9a:ae:06:49:02:a9:1b:78:f5:77:07:c7:9c: 43:d2:a3:ef:fa:b0:30:a3:0b:2a:b3:e6:8a:63:97:22:96:cc: 43:86:f4:10:89:d2:30:e2:fd:22:67:60:54:16:49:26:19:e9: 2a:e2:41:9e:1f:06:d8:65:02:e3:7d:75:97:77:2f:18:d1:92: 95:97:5a:f9:c9:be:09:27:e3:fd:39:be:c0:5f:6b:e5:e3:12: 4d:15:ec:f9:c5:f7:cc:e1:95:5c:87:77:82:7c:e9:22:d6:3a: c9:cc:4b:c5:4f:fd:c7:4b:ad:dd:de:41:a9:8a:b5:8c:e4:c3: 4c:4a:dc:c4:74:e3:22:41:98:4c:a3:a9:91:84:b7:63:15:cd: be:b6:56:fb:a7:7f:0a:c0:a1:34:f0:d8:45:29:2e:2c:29:32: 4e:e7:e2:68:a9:22:99:08:2f:05:31:23:42:f7:73:e0:1c:35: 5b:88:d5:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzRE RjUwRDA1NTU1MTQ2MThCNzJBQzQ1QjQyQTg1MERBQ0YwRDY0MB4XDTI1MDQwNTAx MjIyMloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQTk2MEU4MEZFNjlENjE0 M0RDREQ0RERFNDFGMUQwRDIxMTgxMUQ3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANXlmbxXkj7wlxonhJVWA36yGqlV46gSIB9nz4utKd3TfrwLtKAN QNATd7ktwN5wry9IrXdHdciNGwu/mHOvjT5caeUASqKp9XsMDTY2rieUKLdguofB M+waX0f7bEfx/iPnmKh2kSWvaUVU5AJO8cofCB46vqyaAdAX6VS0FeHImmJGCZTy AhkhnlHr4VoTvNkbTxEzcxT6dIDd2r30YEFg+03/rk2s5esjVOslIiidpSme51el X5JV2uKnRQR8K5XkzTIeutftXeNWehkbBgc9Yuarr8LTFg90zJ4NKEtZMpTq0o29 DiBXccXTNV4uJroEWWv04M4PHXLGGSKZaW0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSpYOgP5p1hQ9zdTd5B8dDSEYEddzAfBgNVHSMEGDAWgBTHTfUNBVVRRhi3KsRb QqhQ2s8NZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODE4L3gwMzFEUVZWVVVZWXR5ckVXMEtvVU5yUERXUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3gwMzFEUVZWVVVZWXR5ckVXMEtvVU5y UERXUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MTgvcVdEb0QtYWRZVVBjM1UzZVFmSFEwaEdCSFhjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA514wDANBgkqhkiG9w0BAQsFAAOCAQEAiXM2dECycfzZywp+OHxVWj7v9Qyi Tm8kKXfiLeB558+3lhXqVlgP81Bhth8R9WxeCIqQ18N0YaHy7TLTwZRwBJkobJbv mc9AhaIzfTaargZJAqkbePV3B8ecQ9Kj7/qwMKMLKrPmimOXIpbMQ4b0EInSMOL9 ImdgVBZJJhnpKuJBnh8G2GUC4311l3cvGNGSlZda+cm+CSfj/Tm+wF9r5eMSTRXs +cX3zOGVXId3gnzpItY6ycxLxU/9x0ut3d5BqYq1jOTDTErcxHTjIkGYTKOpkYS3 YxXNvrZW+6d/CsChNPDYRSkuLCkyTufiaKkimQgvBTEjQvdz4Bw1W4jVJQ== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:56 2025 by rpki-client on console.sobornost.net