$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-FQn4vDLUMPvKz0j5dLmBtb0Cu4.roa File: -FQn4vDLUMPvKz0j5dLmBtb0Cu4.roa (raw, json) Hash identifier: Oe81d8r0IDxK9VgpKcQpDxBQHOf3aT+thwTONZWD9Xo= Subject key identifier: F8:54:27:E2:F0:CB:50:C3:EF:2B:3D:23:E5:D2:E6:06:D6:F4:0A:EE Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04E9 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-FQn4vDLUMPvKz0j5dLmBtb0Cu4.roa Signing time: Wed 18 Dec 2024 02:37:08 +0000 ROA not before: Wed 18 Dec 2024 02:37:08 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.9.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:08 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=F85427E2F0CB50C3EF2B3D23E5D2E606D6F40AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:73:b5:58:2b:83:ba:43:a2:e2:da:13:88: 20:aa:9b:d5:3f:4c:63:55:95:f7:cc:05:a1:89:86: e4:c4:79:54:84:e5:69:a9:fa:20:50:69:e6:c1:07: fa:31:6f:06:fe:ca:3d:d7:b1:ed:e4:f7:99:53:3c: 11:b7:8a:6c:49:3b:a0:ae:88:3c:51:34:f1:f8:d1: 7d:1b:70:f1:58:38:7f:c0:5f:1b:cf:20:c7:81:02: 6f:ba:ef:b3:05:0c:5b:a3:9a:b4:b5:7b:d6:ae:a5: 11:d0:90:17:72:fd:ba:bf:a3:1d:ed:61:ae:b8:12: c9:e8:03:0d:b9:99:6c:57:75:51:17:6c:1a:2a:3f: 60:77:0d:da:49:0c:f2:14:79:32:4c:98:da:a8:3c: 88:e8:53:7f:95:8d:62:6c:d2:84:70:2a:9f:02:46: 9b:d1:a9:cf:02:b5:23:81:1f:9a:3c:55:e4:be:42: ca:bf:e2:41:81:d2:2d:73:8e:24:4f:f7:02:53:2a: f6:1a:6e:62:89:93:80:21:7a:19:c6:f6:8e:c1:d7: 56:cb:4e:b1:41:12:e7:fe:45:1d:a2:32:5d:19:8b: dc:62:2f:da:85:4c:e8:92:a6:dd:9d:cd:3f:db:3c: 55:57:1e:f2:9d:57:63:a0:3e:dd:93:22:ec:42:11: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:54:27:E2:F0:CB:50:C3:EF:2B:3D:23:E5:D2:E6:06:D6:F4:0A:EE X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-FQn4vDLUMPvKz0j5dLmBtb0Cu4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.9.190.0/23 Signature Algorithm: sha256WithRSAEncryption 20:8a:6c:5f:b1:42:5c:e8:09:cf:09:4a:bf:65:25:0e:a9:98: 40:74:d5:ce:76:0a:ae:dc:06:bf:57:fc:81:09:a0:84:65:ff: da:b7:20:de:3a:89:b4:71:a3:30:e2:30:ed:a8:26:d2:05:2e: 2f:d2:40:d6:7d:f9:fe:2b:9b:e4:ca:f4:d2:20:af:e4:54:62: b1:01:a1:fa:5d:c4:e7:50:19:96:ec:81:55:8b:14:c2:0f:cd: 16:28:95:c6:99:36:a3:8a:ee:89:32:5a:d6:cf:71:9b:b2:49: e9:b7:26:7b:84:35:58:d8:e1:19:df:e3:67:79:be:14:5c:23: c0:80:e3:9d:64:85:12:96:90:bd:fc:12:9d:e1:a4:6e:6e:bd: 02:62:cc:f2:9c:35:b0:79:59:11:31:cf:55:0d:e6:a0:86:38: 82:18:ce:41:28:81:e7:10:af:d9:0f:30:27:ee:cb:3d:42:c8: 72:94:e5:78:3f:de:5a:34:f9:c0:ac:39:a2:eb:2d:32:0e:01: 2f:3b:9f:09:79:19:26:d2:5d:6d:6d:12:11:59:55:f2:e5:df: a0:58:db:73:b8:a2:96:b5:5f:17:8f:14:6e:19:a7:1a:21:13: 0d:bd:f8:e0:35:8b:56:cb:ac:85:f8:da:84:c0:4b:e8:c7:b1: 39:09:bd:bb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDhaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY4NTQyN0UyRjBDQjUw QzNFRjJCM0QyM0U1RDJFNjA2RDZGNDBBRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4ZXO1WCuDukOi4toTiCCqm9U/TGNVlffMBaGJhuTEeVSE5Wmp +iBQaebBB/oxbwb+yj3Xse3k95lTPBG3imxJO6CuiDxRNPH40X0bcPFYOH/AXxvP IMeBAm+677MFDFujmrS1e9aupRHQkBdy/bq/ox3tYa64EsnoAw25mWxXdVEXbBoq P2B3DdpJDPIUeTJMmNqoPIjoU3+VjWJs0oRwKp8CRpvRqc8CtSOBH5o8VeS+Qsq/ 4kGB0i1zjiRP9wJTKvYabmKJk4AhehnG9o7B11bLTrFBEuf+RR2iMl0Zi9xiL9qF TOiSpt2dzT/bPFVXHvKdV2OgPt2TIuxCEemBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU+FQn4vDLUMPvKz0j5dLmBtb0Cu4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLy1GUW40dkRMVU1Qdkt6MGo1ZExtQnRiMEN1NC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTCb4wDQYJKoZIhvcNAQELBQADggEBACCKbF+xQlzoCc8JSr9lJQ6pmEB0 1c52Cq7cBr9X/IEJoIRl/9q3IN46ibRxozDiMO2oJtIFLi/SQNZ9+f4rm+TK9NIg r+RUYrEBofpdxOdQGZbsgVWLFMIPzRYolcaZNqOK7okyWtbPcZuySem3JnuENVjY 4Rnf42d5vhRcI8CA451khRKWkL38Ep3hpG5uvQJizPKcNbB5WRExz1UN5qCGOIIY zkEogecQr9kPMCfuyz1CyHKU5Xg/3lo0+cCsOaLrLTIOAS87nwl5GSbSXW1tEhFZ VfLl36BY23O4opa1XxePFG4ZpxohEw29+OA1i1bLrIX42oTAS+jHsTkJvbs= -----END CERTIFICATE-----Generated at Sat Apr 5 17:20:08 2025 by rpki-client