$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BxMD1AWMNLkxh7mwls-98KnEJaI.roa File: BxMD1AWMNLkxh7mwls-98KnEJaI.roa (raw, json) Hash identifier: D5ueogi0wkVZcKdU4cOYRIv6I0/ppHn+9jnJS70RPHE= Subject key identifier: 07:13:03:D4:05:8C:34:B9:31:87:B9:B0:96:CF:BD:F0:A9:C4:25:A2 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0495 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BxMD1AWMNLkxh7mwls-98KnEJaI.roa Signing time: Wed 18 Dec 2024 02:28:53 +0000 ROA not before: Wed 18 Dec 2024 02:28:53 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 118.157.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:28:53 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=071303D4058C34B93187B9B096CFBDF0A9C425A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:ac:76:39:a8:35:6f:a4:f5:78:87:49:dd: 6b:eb:7c:b2:15:e7:35:12:e7:99:37:f6:8e:23:57: 98:14:11:e6:20:6a:d4:70:a0:1b:57:6e:a3:13:dd: 16:13:52:63:1f:79:9d:17:77:35:46:34:0d:6b:f8: 52:70:9d:de:2b:2d:d9:3d:fa:b1:f7:06:1b:80:54: b8:d3:d2:2c:ec:18:78:b6:c2:df:e4:73:60:f6:e5: 43:0d:b8:90:91:10:b6:8b:04:99:f1:1e:eb:b5:45: b2:9e:94:62:f5:6c:7b:71:a1:c2:4d:57:c1:21:71: 80:77:91:29:8f:b7:f1:81:d3:58:be:58:a9:ca:aa: e7:cf:b0:78:8b:7c:8c:ab:0b:d0:96:66:7c:7d:39: fe:41:5f:1c:dc:37:60:82:08:13:5d:0a:1b:c4:c4: 37:58:df:43:a9:52:20:e9:56:a3:89:c6:ef:f0:c6: 13:5f:40:b8:c8:c9:93:97:0b:60:06:34:4a:84:66: fe:c2:be:90:fb:8c:14:1f:76:c2:8c:79:fb:9c:20: 85:49:68:f9:fe:2a:29:91:2d:e9:fb:ba:c3:97:73: eb:d5:ab:50:57:d8:a4:7a:16:e4:4f:90:42:ef:cc: 58:fc:f3:0e:93:7e:2e:04:2d:d2:b8:24:30:3a:11: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:13:03:D4:05:8C:34:B9:31:87:B9:B0:96:CF:BD:F0:A9:C4:25:A2 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BxMD1AWMNLkxh7mwls-98KnEJaI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:aa:27:83:8c:62:ef:2f:1f:47:26:02:67:d1:e1:c6:94:6b: 9d:8f:3f:a7:fc:85:b6:fe:7c:ca:05:17:9d:d1:ec:7a:48:7b: 7f:7a:d2:91:00:9f:b5:66:65:9f:62:9c:77:6f:34:93:99:1f: 18:fe:11:25:82:02:e8:b1:42:eb:c7:8a:89:82:73:b6:43:46: 7d:a1:e8:f4:8f:bd:12:3c:a8:36:ed:70:53:8d:e3:bd:c5:d3: f7:34:fc:db:b4:bf:a6:05:8d:3a:c5:1a:60:1f:32:f8:fe:b2: 8a:76:66:7b:59:2f:05:5b:2d:a1:fd:1e:35:13:6e:0c:c4:a1: 87:07:f7:3f:dd:9e:78:18:25:17:5c:48:37:56:0a:43:27:0c: 12:3c:78:35:9b:8c:a7:0f:a2:78:ff:73:c4:00:a3:53:69:7a: 3b:9e:19:03:2f:ca:d4:4d:b8:b4:c9:a0:e4:7c:41:bf:98:3f: 40:5a:25:26:88:9b:fe:38:00:a8:d3:e9:2b:d1:76:ac:c8:11: c6:0c:d9:d0:06:34:81:56:96:fc:71:c7:9e:f8:dd:ac:9f:98: ab:37:dc:08:d2:aa:0d:81:ee:74:ba:bd:dd:6c:05:8c:72:ce: c3:02:3d:4e:9a:9f:2f:e5:db:e8:56:d6:b0:64:a1:52:03:a7: 3a:62:ef:55 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI4NTNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA3MTMwM0Q0MDU4QzM0 QjkzMTg3QjlCMDk2Q0ZCREYwQTlDNDI1QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrXqx2Oag1b6T1eIdJ3WvrfLIV5zUS55k39o4jV5gUEeYgatRw oBtXbqMT3RYTUmMfeZ0XdzVGNA1r+FJwnd4rLdk9+rH3BhuAVLjT0izsGHi2wt/k c2D25UMNuJCRELaLBJnxHuu1RbKelGL1bHtxocJNV8EhcYB3kSmPt/GB01i+WKnK qufPsHiLfIyrC9CWZnx9Of5BXxzcN2CCCBNdChvExDdY30OpUiDpVqOJxu/wxhNf QLjIyZOXC2AGNEqEZv7CvpD7jBQfdsKMefucIIVJaPn+KimRLen7usOXc+vVq1BX 2KR6FuRPkELvzFj88w6Tfi4ELdK4JDA6ETpnAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUBxMD1AWMNLkxh7mwls+98KnEJaIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0J4TUQxQVdNTkxreGg3bXdscy05OEtuRUphSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB2nTANBgkqhkiG9w0BAQsFAAOCAQEAMqong4xi7y8fRyYCZ9HhxpRrnY8/ p/yFtv58ygUXndHsekh7f3rSkQCftWZln2Kcd280k5kfGP4RJYIC6LFC68eKiYJz tkNGfaHo9I+9EjyoNu1wU43jvcXT9zT827S/pgWNOsUaYB8y+P6yinZme1kvBVst of0eNRNuDMShhwf3P92eeBglF1xIN1YKQycMEjx4NZuMpw+ieP9zxACjU2l6O54Z Ay/K1E24tMmg5HxBv5g/QFolJoib/jgAqNPpK9F2rMgRxgzZ0AY0gVaW/HHHnvjd rJ+YqzfcCNKqDYHudLq93WwFjHLOwwI9TpqfL+Xb6FbWsGShUgOnOmLvVQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:46:21 2025 by rpki-client