$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4MmTwBeW0L9pOpIqGbhmDY_oIgY.roa File: 4MmTwBeW0L9pOpIqGbhmDY_oIgY.roa (raw, json) Hash identifier: zSTEQa5qgonLacxDpqDXKCS9xD8v2VNBQ6CplJDzZUA= Subject key identifier: E0:C9:93:C0:17:96:D0:BF:69:3A:92:2A:19:B8:66:0D:8F:E8:22:06 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 046B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4MmTwBeW0L9pOpIqGbhmDY_oIgY.roa Signing time: Wed 18 Dec 2024 02:24:16 +0000 ROA not before: Wed 18 Dec 2024 02:24:16 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 118.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:16 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=E0C993C01796D0BF693A922A19B8660D8FE82206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:be:d7:29:36:30:44:0e:c9:74:ce:7e:1e: b2:dd:a3:40:c9:7d:97:db:39:4b:41:4f:1a:42:3b: 82:eb:c8:5b:54:87:4c:09:98:a0:f6:86:2f:28:1f: 6a:29:76:0c:9c:08:2a:b6:3a:f7:fc:ae:1c:e1:10: b6:49:b3:25:08:99:81:b4:61:a9:61:d7:cb:2f:4b: 0b:30:ee:72:0c:0a:91:08:d0:c0:8f:80:0c:be:1b: 05:aa:f4:50:47:d7:d9:43:d9:cb:5f:c6:48:78:3d: 0c:c6:90:5e:cb:ea:1c:a5:89:67:06:2b:65:95:f0: d1:31:c9:d2:24:c2:db:7d:ec:10:77:73:2f:ec:be: a2:73:bd:8d:bf:e8:81:f7:b8:82:86:27:07:26:78: c3:dc:e6:5a:10:2a:23:2f:17:11:09:d1:52:1b:48: b1:bd:1c:d6:6c:2c:90:8d:13:3e:37:59:8e:5c:ff: 76:24:65:d3:0d:4e:f4:eb:9f:de:da:a8:82:3a:50: 7b:f7:7c:df:b5:f6:32:a6:27:66:df:0c:60:ed:b9: 59:8e:97:97:fa:42:48:66:1e:28:3a:45:fd:17:ab: 35:92:98:69:83:72:fd:2c:a9:56:8d:e1:f9:b5:aa: 7d:8e:3b:1b:6d:98:ed:46:95:f3:9a:0a:0e:44:e9: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C9:93:C0:17:96:D0:BF:69:3A:92:2A:19:B8:66:0D:8F:E8:22:06 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4MmTwBeW0L9pOpIqGbhmDY_oIgY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption 71:d8:46:72:e1:ca:46:eb:d6:7a:d5:bd:38:13:ba:06:36:d4: de:7b:f9:d6:52:1c:84:c0:c1:a5:16:72:39:35:fd:f9:34:60: 22:d7:fb:c4:b9:d9:c3:57:c9:b9:c8:18:54:89:6f:41:3d:8a: 9a:0d:c4:d1:2c:3e:66:18:8b:54:a7:97:df:8e:2b:57:d6:d3: 12:37:cd:c1:96:ab:6a:ed:13:75:7c:61:27:dd:53:aa:7c:c7: 1e:fc:1e:96:79:c5:86:f3:42:d4:6a:69:55:83:dc:bf:d9:6e: 94:e3:7f:da:cb:8c:c7:65:31:56:c1:8c:d1:31:6d:b2:42:c8: fd:21:fb:99:c6:9d:d2:98:84:74:70:c2:61:63:2f:e6:2c:75: 3e:de:68:22:b5:80:f7:80:0f:f3:8e:92:bb:1a:17:7f:05:59: ca:9c:cf:90:c4:21:de:cc:e2:ae:cd:57:4d:c4:cc:05:81:7e: b1:9c:4c:6a:eb:59:52:71:f2:73:a1:87:76:4f:91:0e:7f:d7: d2:15:7d:e9:89:86:9d:6f:b5:e6:50:44:71:43:d0:56:91:a5: 02:67:45:69:e6:47:ac:13:92:04:ca:60:5e:c4:ef:52:9a:67: 07:07:56:5c:7e:31:7f:c0:db:3b:e2:3e:95:09:92:02:03:40: ab:ca:83:1b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBGswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MTZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUwQzk5M0MwMTc5NkQw QkY2OTNBOTIyQTE5Qjg2NjBEOEZFODIyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEHL7XKTYwRA7JdM5+HrLdo0DJfZfbOUtBTxpCO4LryFtUh0wJ mKD2hi8oH2opdgycCCq2Ovf8rhzhELZJsyUImYG0Yalh18svSwsw7nIMCpEI0MCP gAy+GwWq9FBH19lD2ctfxkh4PQzGkF7L6hyliWcGK2WV8NExydIkwtt97BB3cy/s vqJzvY2/6IH3uIKGJwcmeMPc5loQKiMvFxEJ0VIbSLG9HNZsLJCNEz43WY5c/3Yk ZdMNTvTrn97aqII6UHv3fN+19jKmJ2bfDGDtuVmOl5f6QkhmHig6Rf0XqzWSmGmD cv0sqVaN4fm1qn2OOxttmO1GlfOaCg5E6bcBAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU4MmTwBeW0L9pOpIqGbhmDY/oIgYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzRNbVR3QmVXMEw5cE9wSXFHYmhtRFlfb0lnWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB2nDANBgkqhkiG9w0BAQsFAAOCAQEAcdhGcuHKRuvWetW9OBO6BjbU3nv5 1lIchMDBpRZyOTX9+TRgItf7xLnZw1fJucgYVIlvQT2Kmg3E0Sw+ZhiLVKeX344r V9bTEjfNwZarau0TdXxhJ91TqnzHHvwelnnFhvNC1GppVYPcv9lulON/2suMx2Ux VsGM0TFtskLI/SH7mcad0piEdHDCYWMv5ix1Pt5oIrWA94AP846SuxoXfwVZypzP kMQh3szirs1XTcTMBYF+sZxMautZUnHyc6GHdk+RDn/X0hV96YmGnW+15lBEcUPQ VpGlAmdFaeZHrBOSBMpgXsTvUppnBwdWXH4xf8DbO+I+lQmSAgNAq8qDGw== -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:18 2025 by rpki-client