$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1dTiMng2T2CAv6tGbE-NYtkY8Gg.roa File: 1dTiMng2T2CAv6tGbE-NYtkY8Gg.roa (raw, json) Hash identifier: ppHx+lIcMh2mZDdkZviCvYESepgWqgB0iT5qlAv4P1Q= Subject key identifier: D5:D4:E2:32:78:36:4F:60:80:BF:AB:46:6C:4F:8D:62:D9:18:F0:68 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04C3 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1dTiMng2T2CAv6tGbE-NYtkY8Gg.roa Signing time: Wed 18 Dec 2024 02:32:24 +0000 ROA not before: Wed 18 Dec 2024 02:32:24 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 118.155.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:32:24 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=D5D4E23278364F6080BFAB466C4F8D62D918F068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:01:48:70:cf:fa:28:86:ae:30:b6:20:51: d3:84:bd:0d:d3:c7:11:fc:10:5a:48:ff:9a:78:b5: 5c:44:b7:76:63:4b:46:44:80:7a:a6:c7:9b:af:cc: c8:75:ee:5d:75:64:c6:63:02:6e:9e:ed:5d:f2:66: 63:b4:11:78:13:0b:9c:51:b3:6d:e6:a2:9b:e9:e9: e5:53:14:39:f1:01:11:57:9d:95:d5:93:62:fd:e5: dc:1d:5c:aa:59:1f:93:b5:40:e3:f1:bb:02:83:3d: 5e:89:b0:7f:9f:ef:f0:d9:f1:85:2a:75:e6:58:82: 48:8f:3a:e4:16:f3:b3:a2:db:ee:8a:f9:31:71:08: 8a:3e:63:85:1d:22:95:b5:06:c5:6a:63:63:2e:19: 3e:8a:b6:b7:f0:83:d2:1c:6a:94:f3:0f:f9:ba:4c: 6e:f3:52:e8:1e:3b:f0:17:12:45:1d:5f:e2:36:45: 68:66:fe:54:78:2e:1d:ed:a9:dd:15:26:b0:4b:e3: 4d:f8:aa:6d:03:df:d5:8c:f4:84:86:76:9b:23:7b: 8c:17:af:5e:1b:a7:0a:17:3a:f6:28:94:70:db:35: fa:ac:e3:0d:3e:06:7d:49:40:29:ee:0d:e8:c3:63: be:f5:7b:59:2b:d3:28:d3:f8:a0:61:43:44:24:01: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:E2:32:78:36:4F:60:80:BF:AB:46:6C:4F:8D:62:D9:18:F0:68 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1dTiMng2T2CAv6tGbE-NYtkY8Gg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.155.192.0/18 Signature Algorithm: sha256WithRSAEncryption 65:2e:41:52:8c:c4:37:da:75:11:96:21:05:80:5a:66:d9:e3: 70:8b:40:6d:fe:f0:1e:1e:26:8f:5e:a5:e2:90:3b:74:a6:f6: 30:d1:14:65:58:72:c6:b6:1d:5f:9c:fd:59:d4:d8:63:81:da: 92:8e:9a:77:1d:1e:ea:90:81:12:42:42:64:fc:f9:eb:ad:e8: d8:68:7b:14:9a:b9:42:6d:b0:4f:1c:82:3d:78:b3:fe:50:e1: 1e:d2:93:88:ae:29:6d:91:08:e1:34:16:69:60:c5:0b:14:68: 02:a4:30:02:a3:0c:46:5c:7e:00:7b:c4:09:63:02:23:29:15: fe:78:2b:10:d0:e4:b3:6f:84:8e:57:f3:fa:e0:bf:16:be:a3: 65:52:9f:5a:9e:68:f1:aa:0c:fe:b2:9a:37:6a:cc:db:fa:76: b4:9d:ff:a6:d9:79:32:d3:eb:b1:75:5c:b8:44:33:17:e5:47: 86:c4:89:51:00:06:5d:0d:89:8e:5b:05:6c:f2:8d:7e:55:ad: 3c:76:79:41:c7:df:36:7c:6a:09:8e:c2:b8:1b:0b:f1:0b:39: a6:6f:19:e7:3d:92:86:60:0c:ca:67:3e:cc:07:50:6e:24:9e: 75:ab:0a:36:d6:35:36:46:a1:0b:55:ca:eb:a9:2e:0d:62:76: 80:90:52:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjMyMjRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ1RDRFMjMyNzgzNjRG NjA4MEJGQUI0NjZDNEY4RDYyRDkxOEYwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzgwFIcM/6KIauMLYgUdOEvQ3TxxH8EFpI/5p4tVxEt3ZjS0ZE gHqmx5uvzMh17l11ZMZjAm6e7V3yZmO0EXgTC5xRs23mopvp6eVTFDnxARFXnZXV k2L95dwdXKpZH5O1QOPxuwKDPV6JsH+f7/DZ8YUqdeZYgkiPOuQW87Oi2+6K+TFx CIo+Y4UdIpW1BsVqY2MuGT6Ktrfwg9IcapTzD/m6TG7zUugeO/AXEkUdX+I2RWhm /lR4Lh3tqd0VJrBL4034qm0D39WM9ISGdpsje4wXr14bpwoXOvYolHDbNfqs4w0+ Bn1JQCnuDejDY771e1kr0yjT+KBhQ0QkATVJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1dTiMng2T2CAv6tGbE+NYtkY8GgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzFkVGlNbmcyVDJDQXY2dEdiRS1OWXRrWThHZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ2m8AwDQYJKoZIhvcNAQELBQADggEBAGUuQVKMxDfadRGWIQWAWmbZ43CL QG3+8B4eJo9epeKQO3Sm9jDRFGVYcsa2HV+c/VnU2GOB2pKOmncdHuqQgRJCQmT8 +eut6NhoexSauUJtsE8cgj14s/5Q4R7Sk4iuKW2RCOE0FmlgxQsUaAKkMAKjDEZc fgB7xAljAiMpFf54KxDQ5LNvhI5X8/rgvxa+o2VSn1qeaPGqDP6ymjdqzNv6drSd /6bZeTLT67F1XLhEMxflR4bEiVEABl0NiY5bBWzyjX5VrTx2eUHH3zZ8agmOwrgb C/ELOaZvGec9koZgDMpnPswHUG4knnWrCjbWNTZGoQtVyuupLg1idoCQUmI= -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:33 2025 by rpki-client