$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/zi-FnjZQqbN7zTYFlmVQaxh-haw.roa File: zi-FnjZQqbN7zTYFlmVQaxh-haw.roa (raw, json) Hash identifier: b/MmYlp5gsMQzK2P+tx/frgtT/Z8yLHtpMIJ8ivJjyA= Subject key identifier: CE:2F:85:9E:36:50:A9:B3:7B:CD:36:05:96:65:50:6B:18:7E:85:AC Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21 Certificate serial: 7A Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/zi-FnjZQqbN7zTYFlmVQaxh-haw.roa Signing time: Fri 31 Jan 2025 01:30:53 +0000 ROA not before: Fri 31 Jan 2025 01:30:53 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 10010 IP address blocks: 2406:bb04::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21 Validity Not Before: Jan 31 01:30:53 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=CE2F859E3650A9B37BCD36059665506B187E85AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:a4:e6:0e:fe:87:8e:4d:cf:a6:e2:64:05: da:92:c7:e4:c5:e8:6c:75:67:fc:d3:81:86:5c:67: 87:d9:5e:21:bf:b0:f9:31:f6:68:f4:2a:44:9c:13: ff:e4:19:37:f0:a3:3c:f4:0e:d3:57:30:f2:69:0b: 1c:79:ce:fc:5a:a3:3c:1f:f8:b0:79:46:54:54:18: 37:f3:c8:3d:e0:2f:e6:72:c4:9c:ae:e0:48:c5:31: ff:f8:77:7e:e5:0b:9c:0f:d3:46:cd:a3:fe:ab:10: 5c:d0:f0:e2:0b:14:3d:4d:56:cf:50:8e:7e:8e:f5: c9:79:f0:ea:c8:f2:44:ef:33:5a:38:0a:e7:6d:1b: eb:6e:9c:99:30:37:30:28:e0:7c:bb:d9:a0:ba:cf: 57:44:19:8f:91:e2:8f:63:44:bf:9f:3f:74:a9:5d: da:f7:0b:a8:94:14:f2:fa:1b:3d:ea:0f:dc:e2:b0: 46:8a:5a:8e:dd:55:46:5a:eb:09:25:b5:83:e0:f3: af:08:f7:37:82:01:24:48:8e:b7:b6:f3:74:dd:6b: ee:c9:33:45:64:30:06:74:e1:b4:13:b2:af:80:5f: 56:98:fa:67:bd:9e:25:5c:66:81:46:42:fa:9c:fa: c2:38:00:c2:9a:c3:cb:38:cb:f9:68:f3:b9:68:c3: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2F:85:9E:36:50:A9:B3:7B:CD:36:05:96:65:50:6B:18:7E:85:AC X509v3 Authority Key Identifier: keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/zi-FnjZQqbN7zTYFlmVQaxh-haw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:bb04::/30 Signature Algorithm: sha256WithRSAEncryption 27:f8:89:c5:68:17:ce:80:03:f1:84:9b:97:72:4e:d7:6c:47: 9a:34:35:0c:4f:81:44:c8:80:cd:95:5d:c9:9b:5d:51:ae:ee: ed:e7:b2:59:96:67:37:d5:7c:7e:86:1f:db:ed:1d:eb:07:18: 72:4b:55:61:10:aa:6b:ef:1a:dd:4b:5f:43:b1:1f:44:6d:9e: 0e:9d:e5:af:53:f4:a5:a1:03:33:b8:c0:33:01:f3:e6:77:5d: 7c:5c:ac:96:0f:34:89:6e:eb:52:38:e9:26:51:48:65:f5:f8: a2:1d:67:f2:9e:ae:bb:fb:3c:e3:93:ad:77:2c:46:20:87:13: 77:c5:3e:49:95:90:b7:6c:d0:93:e3:3f:53:15:0b:b0:95:05: f2:35:75:9e:93:a6:51:fb:f2:61:84:c0:7a:8c:8c:ac:07:1d: b9:79:50:e0:7b:87:cc:16:3c:25:6f:4c:55:eb:f4:16:59:9c: 63:e5:26:23:e6:59:dc:03:a5:bb:cf:12:a6:ed:b5:99:2f:66: 86:15:6e:f2:39:8a:5f:3f:39:76:df:12:8d:5e:87:98:41:2b: c6:9c:9d:7a:fa:a7:e1:47:e1:fb:81:7e:82:81:8d:b4:7f:94: 1c:7d:b8:9e:cf:08:95:6f:5e:fa:35:9e:77:1f:6f:a4:ca:a2: 2d:0c:63:af -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTBE ODg2NTgyQkRERjQ4QjA0MTg1MUMzOEMwQjYzMjExNUY1QzIxMB4XDTI1MDEzMTAx MzA1M1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoQ0UyRjg1OUUzNjUwQTlC MzdCQ0QzNjA1OTY2NTUwNkIxODdFODVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALbQpOYO/oeOTc+m4mQF2pLH5MXobHVn/NOBhlxnh9leIb+w+TH2 aPQqRJwT/+QZN/CjPPQO01cw8mkLHHnO/FqjPB/4sHlGVFQYN/PIPeAv5nLEnK7g SMUx//h3fuULnA/TRs2j/qsQXNDw4gsUPU1Wz1COfo71yXnw6sjyRO8zWjgK520b 626cmTA3MCjgfLvZoLrPV0QZj5Hij2NEv58/dKld2vcLqJQU8vobPeoP3OKwRopa jt1VRlrrCSW1g+Dzrwj3N4IBJEiOt7bzdN1r7skzRWQwBnThtBOyr4BfVpj6Z72e JVxmgUZC+pz6wjgAwprDyzjL+WjzuWjDJ/sCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTOL4WeNlCps3vNNgWWZVBrGH6FrDAfBgNVHSMEGDAWgBTRDYhlgr3fSLBBhRw4 wLYyEV9cITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMjgvMFEySVpZSzkzMGl3UVlVY09NQzJNaEZmWENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFEySVpZSzkzMGl3UVlVY09NQzJN aEZmWENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjI4L3ppLUZualpRcWJON3pUWUZsbVZRYXhoLWhhdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQIkBrsEMA0GCSqGSIb3DQEBCwUAA4IBAQAn+InFaBfOgAPxhJuXck7X bEeaNDUMT4FEyIDNlV3Jm11Rru7t57JZlmc31Xx+hh/b7R3rBxhyS1VhEKpr7xrd S19DsR9EbZ4OneWvU/SloQMzuMAzAfPmd118XKyWDzSJbutSOOkmUUhl9fiiHWfy nq67+zzjk613LEYghxN3xT5JlZC3bNCT4z9TFQuwlQXyNXWek6ZR+/JhhMB6jIys Bx25eVDge4fMFjwlb0xV6/QWWZxj5SYj5lncA6W7zxKm7bWZL2aGFW7yOYpfPzl2 3xKNXoeYQSvGnJ16+qfhR+H7gX6CgY20f5QcfbiezwiVb176NZ53H2+kyqItDGOv -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:41 2025 by rpki-client