$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2OaKaEVECXoIA887IY-Hdja8gTU.roa File: 2OaKaEVECXoIA887IY-Hdja8gTU.roa (raw, json) Hash identifier: wHFxSE2ucUwWfsFkVWzviltMQ53KlyPWUf2F54GbMAI= Subject key identifier: D8:E6:8A:68:45:44:09:7A:08:03:CF:3B:21:8F:87:76:36:BC:81:35 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0487 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2OaKaEVECXoIA887IY-Hdja8gTU.roa Signing time: Wed 18 Dec 2024 02:26:29 +0000 ROA not before: Wed 18 Dec 2024 02:26:29 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.140.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:26:29 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=D8E68A684544097A0803CF3B218F877636BC8135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:0e:da:a6:26:a5:e8:82:dd:81:be:c4:1b: f9:1c:89:af:ba:a8:5c:a3:47:e1:43:ac:a6:79:cb: 8c:78:96:47:67:2d:60:b6:95:e5:84:99:f0:a4:42: 5e:64:c5:ed:42:86:59:85:34:b3:4e:73:b6:5b:10: c5:a9:19:17:be:c6:3b:12:9f:29:00:f5:a0:b5:75: 4b:be:16:34:bb:00:8a:66:0e:87:fb:da:dd:22:07: ed:9e:60:b1:d9:3f:78:16:eb:e2:48:62:19:37:6c: 56:af:e1:57:b5:cc:87:3e:74:ab:84:82:ca:7e:47: d5:2f:45:fb:7c:98:d4:26:1b:4b:80:5e:27:2a:2a: 70:b2:6c:47:3f:39:99:f0:20:30:17:01:5c:72:df: 43:3d:37:e4:79:db:da:3b:cb:af:33:b9:1e:7f:33: 31:ab:07:68:dd:73:5a:64:15:ab:69:0c:77:41:17: b6:f4:04:a2:01:18:ae:4c:be:00:79:a5:c1:3b:77: 5d:87:07:86:8f:13:94:81:a0:62:eb:13:17:3f:3a: aa:2e:e7:b8:ef:d8:88:5c:39:e3:b0:e2:76:35:13: a3:96:80:f1:96:e9:10:fb:9d:54:4d:50:c6:61:eb: 3f:3a:ab:2a:4f:c9:fb:df:0c:50:fb:85:a6:7f:8d: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E6:8A:68:45:44:09:7A:08:03:CF:3B:21:8F:87:76:36:BC:81:35 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2OaKaEVECXoIA887IY-Hdja8gTU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:e6:42:0d:e6:4f:87:a4:e7:0c:da:9f:df:98:6b:ca:75:e8: 04:ef:ed:f9:c4:8a:35:ae:36:60:2b:f0:a0:ee:32:e8:d4:cc: ce:2f:53:2b:94:98:3e:a8:cd:e8:07:55:47:6d:2b:87:c0:9f: 63:8e:f0:92:68:b6:24:83:ae:61:70:7c:ab:3a:b9:2d:25:b9: 90:00:fa:a5:d3:6d:2c:d6:22:73:2d:a2:f2:3c:d6:8a:11:b6: 10:a3:84:0c:04:6a:15:b2:0b:fe:57:49:9a:d1:09:06:32:67: fe:59:de:89:e2:f3:2a:aa:68:48:99:d9:01:69:6f:23:e1:ba: 93:bd:d1:f8:ea:b0:ee:ab:2c:37:84:c8:fb:df:fe:e3:14:b2: c3:6e:c5:7a:65:77:66:e4:50:1e:80:41:d0:35:b4:59:20:20: 0a:2a:29:b2:36:20:86:25:cc:1b:eb:1b:94:b6:58:49:91:bf: b8:85:ec:7d:53:e2:b8:7b:a4:dc:45:0f:c9:91:b4:28:9a:57: ca:15:7b:56:32:e1:15:77:8f:c1:5b:a5:a9:45:5e:45:eb:e0: 5f:90:5d:5e:a0:28:31:64:99:87:90:12:37:d7:3b:53:25:0a: 3d:3c:55:73:2a:f4:55:7b:9f:86:00:f3:ce:50:31:15:a2:ad: ac:de:b5:79 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI2MjlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4RTY4QTY4NDU0NDA5 N0EwODAzQ0YzQjIxOEY4Nzc2MzZCQzgxMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFw7apial6ILdgb7EG/kcia+6qFyjR+FDrKZ5y4x4lkdnLWC2 leWEmfCkQl5kxe1ChlmFNLNOc7ZbEMWpGRe+xjsSnykA9aC1dUu+FjS7AIpmDof7 2t0iB+2eYLHZP3gW6+JIYhk3bFav4Ve1zIc+dKuEgsp+R9UvRft8mNQmG0uAXicq KnCybEc/OZnwIDAXAVxy30M9N+R529o7y68zuR5/MzGrB2jdc1pkFatpDHdBF7b0 BKIBGK5MvgB5pcE7d12HB4aPE5SBoGLrExc/Oqou57jv2IhcOeOw4nY1E6OWgPGW 6RD7nVRNUMZh6z86qypPyfvfDFD7haZ/jYAxAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU2OaKaEVECXoIA887IY+Hdja8gTUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzJPYUthRVZFQ1hvSUE4ODdJWS1IZGphOGdUVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7jDANBgkqhkiG9w0BAQsFAAOCAQEAn+ZCDeZPh6TnDNqf35hrynXoBO/t +cSKNa42YCvwoO4y6NTMzi9TK5SYPqjN6AdVR20rh8CfY47wkmi2JIOuYXB8qzq5 LSW5kAD6pdNtLNYicy2i8jzWihG2EKOEDARqFbIL/ldJmtEJBjJn/lneieLzKqpo SJnZAWlvI+G6k73R+Oqw7qssN4TI+9/+4xSyw27FemV3ZuRQHoBB0DW0WSAgCiop sjYghiXMG+sblLZYSZG/uIXsfVPiuHuk3EUPyZG0KJpXyhV7VjLhFXePwVulqUVe RevgX5BdXqAoMWSZh5ASN9c7UyUKPTxVcyr0VXufhgDzzlAxFaKtrN61eQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:38:00 2025 by rpki-client