$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/fokcuLQdi7lL5niihvSROYk9t3E.roa File: fokcuLQdi7lL5niihvSROYk9t3E.roa (raw, json) Hash identifier: zZUVNVMAKWHGkuNskVMdDJuoIYYw5xNZt7m3U0ZTY1Y= Subject key identifier: 7E:89:1C:B8:B4:1D:8B:B9:4B:E6:78:A2:86:F4:91:39:89:3D:B7:71 Certificate issuer: /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Certificate serial: 6F Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/fokcuLQdi7lL5niihvSROYk9t3E.roa Signing time: Fri 31 Jan 2025 01:32:19 +0000 ROA not before: Fri 31 Jan 2025 01:32:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 37892 IP address blocks: 202.145.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB Validity Not Before: Jan 31 01:32:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=7E891CB8B41D8BB94BE678A286F49139893DB771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:4d:e4:94:28:4d:38:56:d7:78:6a:ba:04: 13:d3:75:e1:81:90:1f:ff:c6:3b:28:2a:03:e2:af: a1:39:ed:72:94:81:99:fd:9c:00:34:35:d4:8c:01: 98:6d:e2:ac:4f:14:cc:90:8e:da:39:0b:25:32:00: 1c:5d:03:bd:32:77:3e:06:ee:9f:48:b8:07:9c:a2: 3f:fb:39:64:94:f7:f1:96:2d:22:24:48:81:8b:52: 58:85:f7:66:6e:07:7d:95:ee:d9:00:f6:8e:bd:c9: c6:f1:3a:8e:1d:89:86:8f:c6:4e:b7:1c:4a:3b:b9: b1:1e:0e:a5:f5:5a:cf:e0:24:83:21:04:23:41:5c: 98:74:10:bd:9c:1c:9b:6c:1f:db:07:9d:59:c5:49: 00:0c:d3:25:c1:81:e3:a9:bb:de:00:d1:4c:97:9c: 02:e4:3f:c0:d2:3b:05:75:5d:25:e7:a0:eb:60:d7: 1a:20:92:e2:f5:81:20:94:1a:5f:dd:53:1c:bc:cb: 92:be:5a:8b:17:93:93:ed:bb:c3:54:e6:90:b4:aa: 49:eb:9e:11:15:7e:cc:29:ab:4b:0c:20:a1:d5:b2: b7:cf:46:2f:a6:2a:44:95:0a:83:fd:a2:9c:2a:5c: 50:13:e5:43:d5:50:bf:0d:c0:c8:94:8a:52:db:40: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:1C:B8:B4:1D:8B:B9:4B:E6:78:A2:86:F4:91:39:89:3D:B7:71 X509v3 Authority Key Identifier: keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/fokcuLQdi7lL5niihvSROYk9t3E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.145.20.0/22 Signature Algorithm: sha256WithRSAEncryption 58:1a:68:be:c3:02:8e:b2:e9:a7:d1:72:29:29:29:36:e3:3d: d3:0b:ed:47:a6:4f:18:c2:d0:4d:82:ad:db:bf:67:35:aa:50: 26:7d:f7:93:e4:25:d9:a9:6e:35:59:56:18:30:cd:02:91:0d: 79:b8:ac:ed:c1:ba:9c:e3:b6:f2:d3:8b:2a:1e:ef:d6:96:b1: e1:10:97:b7:be:ba:5a:25:25:78:b7:22:f5:3d:88:bd:0d:14: 94:58:d9:9b:77:25:0b:7d:5d:80:e8:8f:87:e3:57:71:b5:14: c9:d4:34:1e:f4:05:a0:32:5c:99:5a:72:b3:5f:bc:94:48:12: 93:71:4f:43:c0:27:96:49:9f:b9:cc:44:b2:03:12:64:81:9f: d3:65:31:f5:bf:d8:44:99:02:d5:5b:09:68:36:16:04:a0:da: a7:3d:63:6d:e3:f9:5d:80:1d:ce:94:66:97:e2:db:b7:fe:31: e2:05:25:45:c1:d8:c1:bf:d6:6d:bc:a4:8a:72:35:bc:ef:70: 4e:0f:f2:ac:81:c5:2e:92:23:2c:32:92:33:ad:30:d5:e7:ba: 04:70:38:a6:61:dd:b5:16:91:d3:39:21:56:b6:87:c6:0b:2c: 7b:4b:2e:54:6d:e5:2d:a5:5c:73:2e:27:2b:dc:42:46:9a:a6: ce:34:1f:df -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTI1MDEzMTAx MzIxOVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoN0U4OTFDQjhCNDFEOEJC OTRCRTY3OEEyODZGNDkxMzk4OTNEQjc3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+ATeSUKE04Vtd4aroEE9N14YGQH//GOygqA+KvoTntcpSBmf2c ADQ11IwBmG3irE8UzJCO2jkLJTIAHF0DvTJ3Pgbun0i4B5yiP/s5ZJT38ZYtIiRI gYtSWIX3Zm4HfZXu2QD2jr3JxvE6jh2Jho/GTrccSju5sR4OpfVaz+AkgyEEI0Fc mHQQvZwcm2wf2wedWcVJAAzTJcGB46m73gDRTJecAuQ/wNI7BXVdJeeg62DXGiCS 4vWBIJQaX91THLzLkr5aixeTk+27w1TmkLSqSeueERV+zCmrSwwgodWyt89GL6Yq RJUKg/2inCpcUBPlQ9VQvw3AyJSKUttASQUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR+iRy4tB2LuUvmeKKG9JE5iT23cTAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MzQvZm9rY3VMUWRpN2xMNW5paWh2U1JPWWs5dDNFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsqRFDANBgkqhkiG9w0BAQsFAAOCAQEAWBpovsMCjrLpp9FyKSkpNuM90wvt R6ZPGMLQTYKt279nNapQJn33k+Ql2aluNVlWGDDNApENebis7cG6nOO28tOLKh7v 1pax4RCXt766WiUleLci9T2IvQ0UlFjZm3clC31dgOiPh+NXcbUUydQ0HvQFoDJc mVpys1+8lEgSk3FPQ8AnlkmfucxEsgMSZIGf02Ux9b/YRJkC1VsJaDYWBKDapz1j beP5XYAdzpRml+Lbt/4x4gUlRcHYwb/WbbykinI1vO9wTg/yrIHFLpIjLDKSM60w 1ee6BHA4pmHdtRaR0zkhVraHxgsse0suVG3lLaVccy4nK9xCRpqmzjQf3w== -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:59 2025 by rpki-client on console.sobornost.net