$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FMCuWfNvAYwsGFvF8LvP_nZdOZI.roa File: FMCuWfNvAYwsGFvF8LvP_nZdOZI.roa (raw, json) Hash identifier: yFXbiU8tjD7hVQ3JbWAFtw3w071i9HEf9fxRWwPcYr8= Subject key identifier: 14:C0:AE:59:F3:6F:01:8C:2C:18:5B:C5:F0:BB:CF:FE:76:5D:39:92 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04D6 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FMCuWfNvAYwsGFvF8LvP_nZdOZI.roa Signing time: Wed 18 Dec 2024 02:37:00 +0000 ROA not before: Wed 18 Dec 2024 02:37:00 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.198.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:00 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=14C0AE59F36F018C2C185BC5F0BBCFFE765D3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:9c:60:6b:4f:63:f3:ed:75:00:cb:7d:ae: 36:ac:54:af:78:84:df:ad:54:93:ce:83:2d:f9:c4: 9b:a5:21:f6:d5:1a:d3:cd:9a:70:bb:4b:05:50:9a: c3:17:32:37:4d:78:73:33:f3:ef:6a:49:9c:60:42: ec:b7:3e:8c:27:e6:7d:d3:11:d1:46:15:a4:f1:f7: de:3b:a1:e5:52:40:71:84:39:bd:df:c8:9b:25:cc: 6f:b1:26:ef:c1:e7:f6:4e:d0:a3:48:2e:87:a8:c6: dc:32:f5:ea:dd:2e:e8:75:3f:2c:91:56:ae:8c:0d: 6b:02:4d:10:75:85:44:e8:89:bb:29:c0:5a:63:4e: 7a:fb:23:dd:f9:7f:6a:65:e7:e4:a7:07:57:75:15: 6d:60:82:41:75:8a:6d:af:67:6d:38:9d:09:a6:8e: e4:90:96:d1:1b:2c:75:52:67:a5:38:1a:2a:b0:d3: de:21:5d:86:53:f4:cd:7a:c4:6d:2e:70:41:c9:51: 67:a3:c4:bf:a4:c8:22:1f:35:29:75:61:fc:12:cd: b1:d7:d8:66:64:70:eb:ad:e1:7e:e6:0e:67:4c:15: 58:bf:73:17:f1:52:ed:fd:c7:eb:1b:f4:da:70:8b: 08:24:67:da:c2:f9:05:b1:76:b8:9b:2e:08:e9:7f: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:AE:59:F3:6F:01:8C:2C:18:5B:C5:F0:BB:CF:FE:76:5D:39:92 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FMCuWfNvAYwsGFvF8LvP_nZdOZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.198.70.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:66:f7:24:47:28:2e:08:88:76:6d:50:28:7f:26:be:59:6c: 07:48:92:51:bf:b7:73:b6:34:b9:b4:78:46:7d:7f:c1:0a:dd: 96:cf:51:f0:eb:1f:ba:5a:0b:69:96:d4:56:61:d1:a7:24:37: b7:f2:ce:4b:c3:de:61:78:65:7d:c4:8c:1a:33:9d:9f:8a:fa: 6a:34:98:f8:08:3a:03:11:07:71:de:d6:f0:9b:db:ba:a7:8f: a4:4f:5e:36:1a:d9:f5:68:3f:24:b8:2c:92:2c:a6:74:a2:0b: 59:8e:1d:2c:83:bc:e8:ab:08:58:d9:ad:0c:a9:e9:fb:ee:e9: 6a:49:f1:6e:b1:e5:a0:56:fd:27:c5:68:c3:5f:de:a4:26:22: b1:d2:92:67:51:bc:81:d6:96:3b:45:0e:7c:5a:f6:cc:76:ec: 4b:7b:05:03:42:c2:89:bf:8a:f5:33:40:14:0e:60:33:41:65: b1:74:ae:ed:ca:71:0f:b5:d5:16:ee:be:ac:d0:de:b2:15:ab: 2b:20:8e:5c:71:0a:34:e2:ea:0a:06:8c:d2:59:94:f8:06:68: 31:5d:1a:d5:f5:83:75:47:02:37:a9:d6:a7:de:8f:89:14:54: 34:76:df:8e:e9:d2:16:8f:d4:13:b4:d4:fb:99:1c:49:c5:69: 2f:01:c2:54 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE0QzBBRTU5RjM2RjAx OEMyQzE4NUJDNUYwQkJDRkZFNzY1RDM5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsLZxga09j8+11AMt9rjasVK94hN+tVJPOgy35xJulIfbVGtPN mnC7SwVQmsMXMjdNeHMz8+9qSZxgQuy3Pown5n3TEdFGFaTx9947oeVSQHGEOb3f yJslzG+xJu/B5/ZO0KNILoeoxtwy9erdLuh1PyyRVq6MDWsCTRB1hUToibspwFpj Tnr7I935f2pl5+SnB1d1FW1ggkF1im2vZ204nQmmjuSQltEbLHVSZ6U4Giqw094h XYZT9M16xG0ucEHJUWejxL+kyCIfNSl1YfwSzbHX2GZkcOut4X7mDmdMFVi/cxfx Uu39x+sb9NpwiwgkZ9rC+QWxdribLgjpf5CLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFMCuWfNvAYwsGFvF8LvP/nZdOZIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0ZNQ3VXZk52QVl3c0dGdkY4THZQX25aZE9aSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSxkYwDQYJKoZIhvcNAQELBQADggEBAIpm9yRHKC4IiHZtUCh/Jr5ZbAdI klG/t3O2NLm0eEZ9f8EK3ZbPUfDrH7paC2mW1FZh0ackN7fyzkvD3mF4ZX3EjBoz nZ+K+mo0mPgIOgMRB3He1vCb27qnj6RPXjYa2fVoPyS4LJIspnSiC1mOHSyDvOir CFjZrQyp6fvu6WpJ8W6x5aBW/SfFaMNf3qQmIrHSkmdRvIHWljtFDnxa9sx27Et7 BQNCwom/ivUzQBQOYDNBZbF0ru3KcQ+11RbuvqzQ3rIVqysgjlxxCjTi6goGjNJZ lPgGaDFdGtX1g3VHAjep1qfej4kUVDR2347p0haP1BO01PuZHEnFaS8BwlQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:02 2025 by rpki-client