$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/AiAkVfOxxVVb_v2l598soBaSPco.roa File: AiAkVfOxxVVb_v2l598soBaSPco.roa (raw, json) Hash identifier: PKm0SoE6rVD9UB3i2QdKyiXxsFCBd1tiZi7vU4jjT8I= Subject key identifier: 02:20:24:55:F3:B1:C5:55:5B:FE:FD:A5:E7:DF:2C:A0:16:92:3D:CA Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03B8 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AiAkVfOxxVVb_v2l598soBaSPco.roa Signing time: Wed 18 Dec 2024 02:13:00 +0000 ROA not before: Wed 18 Dec 2024 02:13:00 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 106.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:13:00 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=02202455F3B1C5555BFEFDA5E7DF2CA016923DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:24:c1:cc:55:78:13:6e:03:e8:bf:19:dd: ed:86:f5:20:8c:df:9f:6e:ad:bd:e5:03:2c:a8:4b: ec:c1:43:f5:95:4b:95:d0:c0:5a:13:64:51:9d:69: fb:b8:5e:e9:88:21:9d:cf:4c:2e:a4:6e:2e:ad:e2: e4:ef:1d:b7:b5:5b:c4:59:67:35:52:c4:f5:6c:0e: 0c:1f:9e:87:d3:6a:d1:5e:b6:a2:70:10:0b:fd:bb: 4c:47:aa:4e:2f:41:37:eb:ad:3d:1b:a5:96:bd:51: cd:9d:2f:2b:01:d4:51:fe:d5:58:54:d7:2b:8f:f4: 30:2f:00:5d:ee:e8:08:3d:19:0a:64:f6:14:6e:81: 0b:b2:64:d2:01:f2:7f:e8:2b:62:5c:40:db:6c:57: 70:49:0f:96:f5:45:19:d2:1f:32:e6:38:f5:33:11: d3:6b:b2:38:eb:32:20:36:23:a6:e2:04:58:f2:70: f8:92:bb:68:02:3c:f2:55:cc:74:f8:85:e0:0e:e8: 3f:52:a9:de:63:86:20:ed:6f:4b:d7:30:44:1e:bf: 57:b6:3c:db:a5:ae:98:7d:12:e4:f0:5e:32:3e:bd: e4:b1:2c:82:29:c7:cd:fe:f6:1f:74:c5:35:38:2f: b9:b7:99:ec:c5:eb:14:d2:8f:59:fd:0c:2a:61:b0: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:24:55:F3:B1:C5:55:5B:FE:FD:A5:E7:DF:2C:A0:16:92:3D:CA X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/AiAkVfOxxVVb_v2l598soBaSPco.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.163.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:7e:28:82:db:e3:e4:6b:af:66:e6:d0:ff:df:ba:09:db:5d: ca:42:4f:d4:25:c8:75:69:9a:64:70:22:6e:a4:99:12:7b:d1: 58:1c:bc:4f:42:e6:12:34:0e:87:6d:58:0b:4e:ac:72:fb:12: 43:83:0e:f7:34:84:f8:08:29:00:6e:ff:28:0d:30:bc:3b:e9: 5a:84:1c:23:90:38:c2:8d:b5:86:9f:61:5f:ed:f1:0d:f1:ce: 48:ae:b7:0b:68:ea:94:3d:87:c3:df:29:2d:54:60:67:99:6b: e6:91:ce:d5:3b:3a:88:25:1d:ee:71:5d:f9:87:39:9c:67:cc: 11:f4:50:ee:c8:f1:4c:63:c4:d4:7c:d8:29:2e:f7:77:9a:cb: b2:44:2a:42:51:fa:f6:5e:7c:2c:ef:fc:72:79:55:23:79:2c: 5a:82:d9:95:b6:87:99:a1:6c:43:5d:40:bd:aa:58:c3:0a:f1: 13:b5:e2:e6:a7:93:ae:0c:49:5a:a8:5f:1e:1c:fb:a2:04:d3: 64:4d:4a:e3:58:ca:4b:12:da:28:de:4d:bf:9c:b5:c4:42:b7: 83:e8:19:4f:f1:24:02:08:59:59:44:32:f5:cf:ea:09:da:da: a0:7e:5d:d5:6d:5a:60:87:a3:45:03:ad:2e:45:72:18:3c:1c: 01:d0:d6:b1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEzMDBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAyMjAyNDU1RjNCMUM1 NTU1QkZFRkRBNUU3REYyQ0EwMTY5MjNEQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXjyTBzFV4E24D6L8Z3e2G9SCM359urb3lAyyoS+zBQ/WVS5XQ wFoTZFGdafu4XumIIZ3PTC6kbi6t4uTvHbe1W8RZZzVSxPVsDgwfnofTatFetqJw EAv9u0xHqk4vQTfrrT0bpZa9Uc2dLysB1FH+1VhU1yuP9DAvAF3u6Ag9GQpk9hRu gQuyZNIB8n/oK2JcQNtsV3BJD5b1RRnSHzLmOPUzEdNrsjjrMiA2I6biBFjycPiS u2gCPPJVzHT4heAO6D9Sqd5jhiDtb0vXMEQev1e2PNulrph9EuTwXjI+veSxLIIp x83+9h90xTU4L7m3mezF6xTSj1n9DCphsKFFAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUAiAkVfOxxVVb/v2l598soBaSPcowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0FpQWtWZk94eFZWYl92Mmw1OThzb0JhU1Bjby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBqozANBgkqhkiG9w0BAQsFAAOCAQEAs34ogtvj5GuvZubQ/9+6CdtdykJP 1CXIdWmaZHAibqSZEnvRWBy8T0LmEjQOh21YC06scvsSQ4MO9zSE+AgpAG7/KA0w vDvpWoQcI5A4wo21hp9hX+3xDfHOSK63C2jqlD2Hw98pLVRgZ5lr5pHO1Ts6iCUd 7nFd+Yc5nGfMEfRQ7sjxTGPE1HzYKS73d5rLskQqQlH69l58LO/8cnlVI3ksWoLZ lbaHmaFsQ11AvapYwwrxE7Xi5qeTrgxJWqhfHhz7ogTTZE1K41jKSxLaKN5Nv5y1 xEK3g+gZT/EkAghZWUQy9c/qCdraoH5d1W1aYIejRQOtLkVyGDwcAdDWsQ== -----END CERTIFICATE-----Generated at Sun Apr 6 21:11:59 2025 by rpki-client