$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/A3B66-OP4N0JoNXwO5l-wER44hA.roa File: A3B66-OP4N0JoNXwO5l-wER44hA.roa (raw, json) Hash identifier: wKRIkj8jfooT8ex8O2g4b7kSVDwKj6IxhneVg714oJQ= Subject key identifier: 03:70:7A:EB:E3:8F:E0:DD:09:A0:D5:F0:3B:99:7E:C0:44:78:E2:10 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0407 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A3B66-OP4N0JoNXwO5l-wER44hA.roa Signing time: Wed 18 Dec 2024 02:18:53 +0000 ROA not before: Wed 18 Dec 2024 02:18:53 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:53 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=03707AEBE38FE0DD09A0D5F03B997EC04478E210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:e7:1b:aa:a9:31:fb:c5:5a:72:27:9f:15: 48:e6:eb:90:5f:2b:8f:e3:1f:2d:e3:98:94:85:35: 90:18:6f:6d:36:46:d1:db:63:00:f7:39:ec:3a:a6: d0:80:8d:87:21:f6:39:84:73:f8:8f:8a:ad:d3:c2: 55:41:94:85:f0:ab:1e:fe:82:ee:2f:0f:96:82:88: a1:a1:32:19:72:5d:f6:32:a3:d7:63:fc:6e:a5:3c: 35:77:67:57:53:6b:6c:10:80:d5:d1:18:87:ae:16: bd:46:97:18:e6:9f:28:f1:e3:ce:17:1c:ef:b8:c8: fb:af:95:b4:83:9e:4c:87:dd:10:03:7d:90:a2:79: e3:54:70:60:87:b8:5e:81:de:ed:70:63:58:be:9a: cf:b9:5a:74:53:12:7d:d5:01:16:9e:61:c6:09:01: e7:8d:26:14:89:0b:cc:fc:aa:d5:5c:f5:34:df:ef: 9a:61:8f:a6:72:c8:26:87:d5:d2:b3:f4:ec:9a:ed: 8a:5b:09:96:89:de:98:0d:44:7a:71:87:04:75:0b: e0:84:26:e9:eb:dd:df:fb:83:25:2c:70:1e:93:5f: a2:7f:7b:d9:24:27:fe:44:a7:26:9c:cf:08:2b:62: a6:58:06:8b:31:1b:ab:ef:41:db:1d:2c:e5:3d:84: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:70:7A:EB:E3:8F:E0:DD:09:A0:D5:F0:3B:99:7E:C0:44:78:E2:10 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A3B66-OP4N0JoNXwO5l-wER44hA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.128.96.0/19 Signature Algorithm: sha256WithRSAEncryption 3f:cd:96:47:68:27:aa:1c:30:27:68:66:44:61:4c:6d:a0:6e: fb:ec:aa:84:14:4a:2a:80:53:43:e9:c1:7f:8e:df:9a:76:74: 31:6f:6b:d0:c8:ee:3d:6a:d9:5c:e2:0a:15:b4:d7:58:6a:bc: b0:8a:2a:df:c3:3d:a2:09:c1:41:8c:46:a4:6f:14:0c:5b:52: 99:fd:47:62:28:d6:99:7c:08:a4:70:71:0f:9d:f5:6a:7d:b3: 79:cb:64:3d:d8:a4:08:58:17:b7:eb:43:0a:7c:33:2d:66:6b: c6:7b:32:35:41:03:9a:13:e3:19:27:d4:a0:dd:cc:07:21:d2: ac:d4:2f:5e:40:5c:61:e1:c7:5b:da:42:1d:0b:b3:f2:90:0d: 8d:80:70:e1:b1:82:04:5a:45:25:69:b2:18:ed:8c:73:bc:8a: f6:df:0c:af:ce:66:ca:1d:d0:44:2a:f7:1c:91:23:a8:d4:dc: 3f:05:56:8d:e0:99:24:d9:c7:13:02:be:cf:5d:6d:9f:05:c2: fe:7f:64:3b:8f:37:e1:39:e8:d9:ac:ec:6a:91:22:87:8f:19: ae:74:5c:19:bd:ed:29:8e:25:31:fd:3a:49:e0:92:04:ac:a1: 02:08:bf:08:56:43:77:b2:9b:a8:44:04:eb:f6:7e:11:b7:ee: e3:64:38:0d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NTNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAzNzA3QUVCRTM4RkUw REQwOUEwRDVGMDNCOTk3RUMwNDQ3OEUyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0hucbqqkx+8VaciefFUjm65BfK4/jHy3jmJSFNZAYb202RtHb YwD3Oew6ptCAjYch9jmEc/iPiq3TwlVBlIXwqx7+gu4vD5aCiKGhMhlyXfYyo9dj /G6lPDV3Z1dTa2wQgNXRGIeuFr1Glxjmnyjx484XHO+4yPuvlbSDnkyH3RADfZCi eeNUcGCHuF6B3u1wY1i+ms+5WnRTEn3VARaeYcYJAeeNJhSJC8z8qtVc9TTf75ph j6ZyyCaH1dKz9Oya7YpbCZaJ3pgNRHpxhwR1C+CEJunr3d/7gyUscB6TX6J/e9kk J/5EpyaczwgrYqZYBosxG6vvQdsdLOU9hM/5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUA3B66+OP4N0JoNXwO5l+wER44hAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0EzQjY2LU9QNE4wSm9OWHdPNWwtd0VSNDRoQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU7gGAwDQYJKoZIhvcNAQELBQADggEBAD/NlkdoJ6ocMCdoZkRhTG2gbvvs qoQUSiqAU0PpwX+O35p2dDFva9DI7j1q2VziChW011hqvLCKKt/DPaIJwUGMRqRv FAxbUpn9R2Io1pl8CKRwcQ+d9Wp9s3nLZD3YpAhYF7frQwp8My1ma8Z7MjVBA5oT 4xkn1KDdzAch0qzUL15AXGHhx1vaQh0Ls/KQDY2AcOGxggRaRSVpshjtjHO8ivbf DK/OZsod0EQq9xyRI6jU3D8FVo3gmSTZxxMCvs9dbZ8Fwv5/ZDuPN+E56Nms7GqR IoePGa50XBm97SmOJTH9OkngkgSsoQIIvwhWQ3eym6hEBOv2fhG37uNkOA0= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:41 2025 by rpki-client