$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4e97r3GaINGxpHlgZkHaNoRkQBo.roa File: 4e97r3GaINGxpHlgZkHaNoRkQBo.roa (raw, json) Hash identifier: mFIzXVy/G3Y3eCeacOF9yk+bbNR5XFJyPHOWTd+y1BQ= Subject key identifier: E1:EF:7B:AF:71:9A:20:D1:B1:A4:79:60:66:41:DA:36:84:64:40:1A Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 050D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4e97r3GaINGxpHlgZkHaNoRkQBo.roa Signing time: Wed 18 Dec 2024 02:40:16 +0000 ROA not before: Wed 18 Dec 2024 02:40:16 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 124.109.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:40:16 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=E1EF7BAF719A20D1B1A479606641DA368464401A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:64:d4:46:92:61:37:39:be:8f:9b:b8:6c: 26:61:c2:66:ec:74:46:ed:1a:ba:16:d0:f9:b1:72: b4:81:f6:c5:41:46:61:1d:89:77:7a:ea:15:21:67: ca:f9:d7:46:e6:fd:aa:ba:40:7a:4f:ba:de:4c:4c: de:c9:59:46:3f:fc:42:2a:f8:31:4c:42:89:9f:45: 1a:52:3f:23:5c:59:82:86:13:dc:e9:25:82:a4:be: be:5b:24:09:5b:62:29:c7:de:5b:ab:79:5f:6f:07: 5e:5e:24:55:e3:53:c0:ef:5b:9d:18:71:77:bf:44: d0:54:0d:b4:4f:84:67:3a:98:33:79:db:69:26:5a: 84:8a:5e:1c:06:95:a5:80:64:67:60:e2:2c:2e:5d: d2:be:2e:51:83:f7:84:ad:ed:86:5e:a1:54:85:6f: 9f:c9:a4:0e:79:a6:91:90:df:80:f1:b8:0f:3d:a3: 27:62:b9:95:2e:02:05:4f:5a:0a:5c:f1:7a:47:da: 4b:49:2d:3b:11:0c:d2:6b:d3:09:7e:e6:2b:3f:aa: 54:da:e2:f2:b4:a1:cd:98:c2:0e:7c:7b:92:f6:1b: 61:3f:76:8f:eb:3f:6c:53:3e:ae:18:66:40:96:1a: f9:dd:40:f5:32:d2:78:47:ec:e6:60:04:95:a5:cf: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:7B:AF:71:9A:20:D1:B1:A4:79:60:66:41:DA:36:84:64:40:1A X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4e97r3GaINGxpHlgZkHaNoRkQBo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.109.180.0/24 Signature Algorithm: sha256WithRSAEncryption 50:58:b1:fa:ac:78:e4:f4:b2:04:19:08:90:4c:b5:67:0e:25: 03:37:81:26:34:1d:27:20:d3:8f:04:4e:6f:d1:fb:d4:db:c7: 22:b7:48:d3:18:0f:d4:92:fa:a9:67:2c:58:cf:0f:05:57:69: 11:69:fd:74:10:83:a6:04:27:22:57:9c:a4:36:6d:a2:85:6f: 99:c4:f6:26:f2:32:bd:29:49:05:8c:4d:df:6d:1e:f2:7d:36: e1:48:57:6c:6b:6c:cf:6a:39:b4:c4:3e:62:aa:2c:2c:e7:69: 43:7f:72:99:ba:32:b2:9e:1f:51:ee:6b:da:e7:02:95:71:78: 23:23:2d:1f:b1:6b:dd:fa:50:e4:11:82:87:e3:8a:f1:0b:76: 20:1b:c8:ed:6a:52:03:fb:a5:a6:68:28:9e:1e:2e:2c:81:87: 60:ee:91:3a:43:4c:bd:54:53:35:83:ae:17:3c:36:28:c4:31: d6:e9:21:34:34:4c:f1:7f:74:0d:38:22:5d:a9:92:4e:16:8f: e0:1d:4c:33:f4:bc:b8:2d:fa:b5:61:2f:81:1f:52:0f:6c:c9: c8:6d:55:af:91:ad:0d:d6:c3:ae:e5:18:31:57:d5:1b:70:0d: 68:c1:a3:67:59:69:5e:9b:45:13:10:b8:48:88:c8:15:0f:a2: 07:4a:14:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQwMTZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUxRUY3QkFGNzE5QTIw RDFCMUE0Nzk2MDY2NDFEQTM2ODQ2NDQwMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7AWTURpJhNzm+j5u4bCZhwmbsdEbtGroW0PmxcrSB9sVBRmEd iXd66hUhZ8r510bm/aq6QHpPut5MTN7JWUY//EIq+DFMQomfRRpSPyNcWYKGE9zp JYKkvr5bJAlbYinH3lureV9vB15eJFXjU8DvW50YcXe/RNBUDbRPhGc6mDN522km WoSKXhwGlaWAZGdg4iwuXdK+LlGD94St7YZeoVSFb5/JpA55ppGQ34DxuA89oydi uZUuAgVPWgpc8XpH2ktJLTsRDNJr0wl+5is/qlTa4vK0oc2Ywg58e5L2G2E/do/r P2xTPq4YZkCWGvndQPUy0nhH7OZgBJWlzzgVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4e97r3GaINGxpHlgZkHaNoRkQBowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzRlOTdyM0dhSU5HeHBIbGdaa0hhTm9Sa1FCby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB8bbQwDQYJKoZIhvcNAQELBQADggEBAFBYsfqseOT0sgQZCJBMtWcOJQM3 gSY0HScg048ETm/R+9TbxyK3SNMYD9SS+qlnLFjPDwVXaRFp/XQQg6YEJyJXnKQ2 baKFb5nE9ibyMr0pSQWMTd9tHvJ9NuFIV2xrbM9qObTEPmKqLCznaUN/cpm6MrKe H1Hua9rnApVxeCMjLR+xa936UOQRgofjivELdiAbyO1qUgP7paZoKJ4eLiyBh2Du kTpDTL1UUzWDrhc8NijEMdbpITQ0TPF/dA04Il2pkk4Wj+AdTDP0vLgt+rVhL4Ef Ug9sychtVa+RrQ3Ww67lGDFX1RtwDWjBo2dZaV6bRRMQuEiIyBUPogdKFOk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:57 2025 by rpki-client