$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FCMmWyuDtCKx9L27LaizMHd9H3o.roa File: FCMmWyuDtCKx9L27LaizMHd9H3o.roa (raw, json) Hash identifier: /XiBnbMcqCMn+xu7THIowZANtAu4bUIin20rF69Oesk= Subject key identifier: 14:23:26:5B:2B:83:B4:22:B1:F4:BD:BB:2D:A8:B3:30:77:7D:1F:7A Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04A0 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FCMmWyuDtCKx9L27LaizMHd9H3o.roa Signing time: Wed 18 Dec 2024 02:28:57 +0000 ROA not before: Wed 18 Dec 2024 02:28:57 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 222.5.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:28:57 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=1423265B2B83B422B1F4BDBB2DA8B330777D1F7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:9e:a0:5d:78:f4:51:06:1f:4f:0c:ae:08: 77:d3:41:4e:f0:68:bc:96:40:5f:d2:c2:9c:27:aa: 0f:3c:5f:07:12:5d:9c:96:fe:8c:6b:9d:d1:a8:21: 64:20:75:d8:c9:64:bb:ee:2a:1b:a9:fa:01:95:e9: 72:1e:34:0c:c5:45:4a:52:ae:ee:d3:f4:d7:77:5a: 6c:bd:8a:cd:e9:15:5c:1f:08:0f:a4:ff:84:3b:24: 35:78:f2:1a:4b:f4:ca:d0:67:1c:d7:ee:1e:69:e9: 64:c5:1c:2d:49:29:e1:b7:6d:73:b0:65:bd:cb:38: 95:3f:29:ce:e3:e7:f1:a1:72:63:e4:c8:da:69:12: 00:f4:49:49:db:05:48:3b:16:93:5b:c6:a7:f8:fb: 54:df:ec:c0:9e:6c:cf:c2:45:88:d1:8b:2c:aa:c7: 03:1c:14:c3:7c:5b:42:10:c6:14:18:ab:34:b1:de: bc:87:ab:54:5d:83:2a:98:a0:53:1f:6e:ef:27:65: a1:9a:d8:ee:07:c8:f2:0c:fb:d3:0c:f6:ff:8d:4b: 33:f1:e7:e2:cf:00:52:24:6b:63:9a:66:2d:88:2b: e1:b3:1d:58:63:24:df:1e:80:ec:4c:44:7e:58:f1: 76:3a:eb:8b:4c:38:8e:ee:39:42:8d:01:ce:0f:02: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:26:5B:2B:83:B4:22:B1:F4:BD:BB:2D:A8:B3:30:77:7D:1F:7A X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FCMmWyuDtCKx9L27LaizMHd9H3o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 222.5.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:8c:27:80:27:7b:ec:94:54:a5:2a:07:16:ef:15:87:15:ee: 9b:4b:d6:d2:14:92:d7:11:46:33:1e:54:34:4e:35:b2:3b:6c: 42:f9:66:5d:b5:7b:5a:ef:4a:07:2b:de:ef:8f:98:8f:cd:ed: b9:ce:8e:c0:0f:3c:99:1c:77:4f:97:ab:30:2c:50:db:c1:0a: ca:ce:78:33:80:2e:c7:ed:e9:56:51:d1:4a:ae:f7:e0:23:7c: 43:da:ff:8d:b7:0c:d7:6c:ab:50:04:0d:b8:c1:0a:70:9e:7a: 6e:a9:f1:ca:48:d3:12:37:5a:e6:ca:81:78:55:30:6a:eb:98: 7a:90:79:b5:94:71:6d:9e:75:67:9b:5f:b7:7a:2c:8f:52:32: 35:52:cc:a1:f9:f9:3f:af:33:20:c4:b5:c3:f7:31:08:4e:25: 1f:8f:b6:56:e8:fa:4c:ca:5f:2e:25:2f:96:53:94:01:93:ae: f6:99:6a:d8:9b:bb:3a:a7:2d:8a:e5:0e:d5:7f:25:ea:ce:53: ef:44:2a:1e:d5:3e:95:2c:84:36:ef:b4:7b:9e:3f:56:2e:b2: b3:83:c3:13:2d:61:f6:44:20:96:2f:3a:1c:82:46:57:fb:d1: 1e:96:41:07:06:e7:45:85:94:22:99:f4:e4:b5:91:d9:45:fe: cc:1b:99:7e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI4NTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE0MjMyNjVCMkI4M0I0 MjJCMUY0QkRCQjJEQThCMzMwNzc3RDFGN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDkp6gXXj0UQYfTwyuCHfTQU7waLyWQF/Swpwnqg88XwcSXZyW /oxrndGoIWQgddjJZLvuKhup+gGV6XIeNAzFRUpSru7T9Nd3Wmy9is3pFVwfCA+k /4Q7JDV48hpL9MrQZxzX7h5p6WTFHC1JKeG3bXOwZb3LOJU/Kc7j5/GhcmPkyNpp EgD0SUnbBUg7FpNbxqf4+1Tf7MCebM/CRYjRiyyqxwMcFMN8W0IQxhQYqzSx3ryH q1RdgyqYoFMfbu8nZaGa2O4HyPIM+9MM9v+NSzPx5+LPAFIka2OaZi2IK+GzHVhj JN8egOxMRH5Y8XY664tMOI7uOUKNAc4PAtvbAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUFCMmWyuDtCKx9L27LaizMHd9H3owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0ZDTW1XeXVEdENLeDlMMjdMYWl6TUhkOUgzby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDeBTANBgkqhkiG9w0BAQsFAAOCAQEAQYwngCd77JRUpSoHFu8VhxXum0vW 0hSS1xFGMx5UNE41sjtsQvlmXbV7Wu9KByve74+Yj83tuc6OwA88mRx3T5erMCxQ 28EKys54M4Aux+3pVlHRSq734CN8Q9r/jbcM12yrUAQNuMEKcJ56bqnxykjTEjda 5sqBeFUwauuYepB5tZRxbZ51Z5tft3osj1IyNVLMofn5P68zIMS1w/cxCE4lH4+2 Vuj6TMpfLiUvllOUAZOu9plq2Ju7OqctiuUO1X8l6s5T70QqHtU+lSyENu+0e54/ Vi6ys4PDEy1h9kQgli86HIJGV/vRHpZBBwbnRYWUIpn05LWR2UX+zBuZfg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:20:09 2025 by rpki-client