$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9JllG3zYRcRXHUk6zq4gW_IJcPg.roa File: 9JllG3zYRcRXHUk6zq4gW_IJcPg.roa (raw, json) Hash identifier: 5gT4QIpFvm2LwfjSALwsGuJS5sEdnMKlPSvhaUhsZPI= Subject key identifier: F4:99:65:1B:7C:D8:45:C4:57:1D:49:3A:CE:AE:20:5B:F2:09:70:F8 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03CD Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9JllG3zYRcRXHUk6zq4gW_IJcPg.roa Signing time: Wed 18 Dec 2024 02:13:08 +0000 ROA not before: Wed 18 Dec 2024 02:13:08 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 61.204.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:13:08 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=F499651B7CD845C4571D493ACEAE205BF20970F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:08:a8:0c:3d:75:14:5b:96:46:cc:81:f5: 8f:48:35:fd:40:72:af:b0:3a:48:c4:8e:c6:d5:0e: 59:7e:f1:dd:b8:fb:f1:2f:29:6f:6c:c6:f6:b8:d5: 23:75:ba:7d:84:80:b4:2a:b6:fd:23:0f:05:fb:d2: 24:13:51:e9:c0:3b:b8:53:fd:82:47:10:07:90:66: 1e:50:93:22:dd:ec:ed:56:a8:13:86:27:3b:9f:c5: 46:6d:23:c1:b7:cb:c5:0e:1f:4e:f2:78:a5:bd:b8: a4:00:92:2a:d1:de:03:3b:f6:0e:2c:ec:4c:6c:17: 68:96:90:73:f5:df:8e:f7:7d:0b:f6:e2:9d:02:7f: 94:7f:f2:a8:b4:44:77:f5:0f:9b:60:20:5b:0c:19: e2:aa:a6:a4:33:f6:0d:e8:de:b5:ed:87:10:7f:0e: 15:c4:44:95:78:d8:28:c3:21:6a:9e:b7:a0:6f:86: fe:75:00:3c:d1:8e:ac:f5:11:4d:47:3c:38:f0:1b: f8:51:b0:b1:19:87:ea:c9:62:52:f2:2a:d2:3f:49: 46:1f:e4:dc:23:72:df:11:e7:1c:0f:38:07:b8:54: 28:8b:f1:b2:35:d1:b5:25:30:78:47:5f:d6:9a:87: 30:f3:12:c9:c6:59:ce:ca:5e:cf:91:6d:a2:bf:97: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:99:65:1B:7C:D8:45:C4:57:1D:49:3A:CE:AE:20:5B:F2:09:70:F8 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9JllG3zYRcRXHUk6zq4gW_IJcPg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.204.0.0/17 Signature Algorithm: sha256WithRSAEncryption 66:ef:32:e1:61:d4:4b:b4:c7:de:8a:91:e0:71:e0:7f:3e:1a: ab:a3:dc:ff:86:0e:18:d4:26:1d:d8:92:ca:b4:75:d8:49:08: 42:48:2d:3e:69:aa:0d:cf:80:c2:ff:2e:c9:32:f0:a9:83:24: 63:68:ca:40:8b:f1:8d:07:0d:81:0d:b2:8f:38:4f:c6:ef:35: 1d:61:9a:6d:e3:40:06:be:9f:b4:c5:d4:38:90:42:d2:8c:ba: 12:aa:54:09:4a:d4:bb:61:9a:c3:36:41:46:e0:28:3f:4c:26: 49:ca:95:89:9b:b7:87:50:16:46:6f:85:0f:24:12:46:de:08: d6:63:d1:e1:9e:3b:49:83:19:9e:1b:66:17:5f:1c:49:ac:13: 11:a6:bf:d7:2e:05:6f:0e:a4:51:c6:21:b8:cd:8e:76:1b:6e: 0d:f9:5b:d3:d9:26:75:0d:b2:26:a5:9a:06:bc:9e:8a:ad:83: 81:6e:d0:bb:50:40:69:d1:42:34:54:80:86:01:33:96:b9:22: 14:b8:78:7b:e1:cb:e0:03:84:1c:34:53:04:f4:79:cc:d6:99: e8:2a:f4:d6:8b:6a:46:80:40:dc:22:2a:42:c6:b0:55:33:32: d8:32:da:e2:ab:0a:9c:7c:c8:65:0d:a8:fc:85:6e:bb:7e:1f: d7:ae:44:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEzMDhaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY0OTk2NTFCN0NEODQ1 QzQ1NzFENDkzQUNFQUUyMDVCRjIwOTcwRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5owioDD11FFuWRsyB9Y9INf1Acq+wOkjEjsbVDll+8d24+/Ev KW9sxva41SN1un2EgLQqtv0jDwX70iQTUenAO7hT/YJHEAeQZh5QkyLd7O1WqBOG JzufxUZtI8G3y8UOH07yeKW9uKQAkirR3gM79g4s7ExsF2iWkHP13473fQv24p0C f5R/8qi0RHf1D5tgIFsMGeKqpqQz9g3o3rXthxB/DhXERJV42CjDIWqet6Bvhv51 ADzRjqz1EU1HPDjwG/hRsLEZh+rJYlLyKtI/SUYf5Nwjct8R5xwPOAe4VCiL8bI1 0bUlMHhHX9aahzDzEsnGWc7KXs+RbaK/lyTdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9JllG3zYRcRXHUk6zq4gW/IJcPgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzlKbGxHM3pZUmNSWEhVazZ6cTRnV19JSmNQZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9zAAwDQYJKoZIhvcNAQELBQADggEBAGbvMuFh1Eu0x96KkeBx4H8+Gquj 3P+GDhjUJh3Yksq0ddhJCEJILT5pqg3PgML/Lsky8KmDJGNoykCL8Y0HDYENso84 T8bvNR1hmm3jQAa+n7TF1DiQQtKMuhKqVAlK1LthmsM2QUbgKD9MJknKlYmbt4dQ FkZvhQ8kEkbeCNZj0eGeO0mDGZ4bZhdfHEmsExGmv9cuBW8OpFHGIbjNjnYbbg35 W9PZJnUNsialmga8noqtg4Fu0LtQQGnRQjRUgIYBM5a5IhS4eHvhy+ADhBw0UwT0 eczWmegq9NaLakaAQNwiKkLGsFUzMtgy2uKrCpx8yGUNqPyFbrt+H9euRIg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:31 2025 by rpki-client