$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8q3g1F-bJd5jy0e9R-JakIyA90w.roa File: 8q3g1F-bJd5jy0e9R-JakIyA90w.roa (raw, json) Hash identifier: q6gToYiUyhK6ErPZoPTVA6sLCMX2X7pYVexQMRJ8Wms= Subject key identifier: F2:AD:E0:D4:5F:9B:25:DE:63:CB:47:BD:47:E2:5A:90:8C:80:F7:4C Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 056E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8q3g1F-bJd5jy0e9R-JakIyA90w.roa Signing time: Wed 18 Dec 2024 03:00:55 +0000 ROA not before: Wed 18 Dec 2024 03:00:55 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 111.87.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 03:00:55 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=F2ADE0D45F9B25DE63CB47BD47E25A908C80F74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:8c:64:75:57:16:59:fc:d4:d1:28:22:c1: 04:ce:5b:bd:56:9b:33:24:4b:41:13:0a:0e:71:37: 5d:9b:64:43:9d:e6:c3:d2:f4:18:98:25:ac:52:f2: 5b:58:46:ad:64:bf:da:cb:8d:73:41:10:6c:0f:b2: 02:17:d0:eb:a1:9e:99:81:6c:7b:0d:5e:1c:c1:b9: df:8c:13:c5:4f:9d:97:c3:9d:ed:82:67:52:a0:43: 62:62:4d:b4:3d:0a:da:fd:90:e9:85:16:ea:55:6e: b5:4b:d3:e8:fb:f3:98:5b:ef:d2:c3:6f:85:8e:06: 4c:cc:e5:51:e2:7a:d4:a3:8f:d8:61:72:ae:0a:8b: 93:28:67:d1:6f:b6:f7:f9:19:54:52:08:c9:71:47: 36:02:bd:8d:52:1c:3b:f0:45:0f:38:d0:b2:93:d7: 85:2f:b6:cf:94:3f:6f:05:53:cb:9d:d6:08:18:7e: df:cc:d9:20:e0:59:1a:66:58:7e:6c:11:f1:9d:06: d4:eb:47:4d:b5:36:42:d8:fe:86:d5:4d:07:2a:31: d6:05:8d:1e:4f:89:22:8e:fa:21:1d:70:a0:4c:ff: 47:16:b8:4e:64:d1:5f:39:14:1e:86:ba:18:e9:84: 4c:d0:06:9a:ad:2c:2a:59:0b:28:a7:11:71:8d:c2: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AD:E0:D4:5F:9B:25:DE:63:CB:47:BD:47:E2:5A:90:8C:80:F7:4C X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8q3g1F-bJd5jy0e9R-JakIyA90w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.87.0.0/17 Signature Algorithm: sha256WithRSAEncryption 67:29:8b:fa:1a:a0:cc:91:43:cc:68:07:56:07:55:51:6d:08: ae:13:db:c9:b9:1e:9a:04:9c:52:47:a1:7e:09:45:03:f1:4b: ef:bd:1b:87:57:d7:54:21:b2:df:0a:de:ad:8f:be:80:2c:c3: e3:93:f0:3e:19:c7:35:79:aa:5a:6d:26:85:53:ca:62:0a:63: 30:b0:65:d4:38:e0:79:d4:53:f9:2f:3b:62:f7:d4:26:c4:b8: dc:d0:5c:6c:79:23:ef:1c:c4:4f:25:73:f1:c9:49:90:86:0d: 60:3b:84:a0:90:93:7a:11:ea:8d:9d:7b:4c:c8:49:14:48:8d: 2d:d4:7f:b3:0b:47:27:07:91:b2:dd:ac:0c:0b:ce:8c:a5:83: 3d:d7:3d:41:c5:81:51:43:a6:df:81:b4:ee:1d:b8:fe:7f:7e: d9:fc:23:13:ed:83:a9:c6:84:ad:77:65:81:d8:70:50:8f:d7: 1d:09:12:41:3c:85:f0:d1:c7:c1:04:8e:ea:3e:fe:67:f7:db: 9a:56:33:4d:53:ea:03:a2:92:07:b6:e1:5e:69:de:32:8a:b0: 6e:17:52:3e:33:f8:a6:ec:22:f1:36:9b:50:61:43:ed:74:d4: e6:1c:bb:7e:27:71:2d:cb:82:b2:29:c9:c3:64:c4:0e:cb:9d: 8c:4e:58:4d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MzAwNTVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYyQURFMEQ0NUY5QjI1 REU2M0NCNDdCRDQ3RTI1QTkwOEM4MEY3NEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyYYxkdVcWWfzU0SgiwQTOW71WmzMkS0ETCg5xN12bZEOd5sPS 9BiYJaxS8ltYRq1kv9rLjXNBEGwPsgIX0OuhnpmBbHsNXhzBud+ME8VPnZfDne2C Z1KgQ2JiTbQ9Ctr9kOmFFupVbrVL0+j785hb79LDb4WOBkzM5VHietSjj9hhcq4K i5MoZ9Fvtvf5GVRSCMlxRzYCvY1SHDvwRQ840LKT14Uvts+UP28FU8ud1ggYft/M 2SDgWRpmWH5sEfGdBtTrR021NkLY/obVTQcqMdYFjR5PiSKO+iEdcKBM/0cWuE5k 0V85FB6GuhjphEzQBpqtLCpZCyinEXGNwtebAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8q3g1F+bJd5jy0e9R+JakIyA90wwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzhxM2cxRi1iSmQ1ankwZTlSLUpha0l5QTkwdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdvVwAwDQYJKoZIhvcNAQELBQADggEBAGcpi/oaoMyRQ8xoB1YHVVFtCK4T 28m5HpoEnFJHoX4JRQPxS++9G4dX11Qhst8K3q2PvoAsw+OT8D4ZxzV5qlptJoVT ymIKYzCwZdQ44HnUU/kvO2L31CbEuNzQXGx5I+8cxE8lc/HJSZCGDWA7hKCQk3oR 6o2de0zISRRIjS3Uf7MLRycHkbLdrAwLzoylgz3XPUHFgVFDpt+BtO4duP5/ftn8 IxPtg6nGhK13ZYHYcFCP1x0JEkE8hfDRx8EEjuo+/mf325pWM01T6gOikge24V5p 3jKKsG4XUj4z+KbsIvE2m1BhQ+101OYcu34ncS3LgrIpycNkxA7LnYxOWE0= -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:08 2025 by rpki-client