$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa File: HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa (raw, json) Hash identifier: QxRcob9CQhAo8QKDVuxmOAe6TaLLencp1LWvFnGWSiw= Subject key identifier: 1D:A6:49:18:56:00:92:D2:3E:DA:F5:9A:D9:71:C9:F8:31:B2:D0:A2 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 040D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa Signing time: Wed 18 Dec 2024 02:18:55 +0000 ROA not before: Wed 18 Dec 2024 02:18:55 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 118.159.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:55 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=1DA64918560092D23EDAF59AD971C9F831B2D0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:69:99:a5:50:20:90:48:df:95:6d:ff:5a: 42:02:d3:f0:5c:5a:a6:c4:04:47:6f:3e:80:10:2a: 2b:bb:54:36:b4:9a:be:4a:12:11:d7:64:22:c7:db: 19:37:75:df:68:d3:31:8d:20:59:a4:1f:80:9a:2b: df:b6:5b:1d:bd:b2:d0:ee:75:d4:81:95:c4:d8:7d: 8d:b5:76:92:5e:bc:9a:40:b7:4a:cd:f8:8a:23:b9: ee:c3:3e:0d:ab:87:10:1f:b8:b7:67:0e:42:15:10: d7:f9:1e:ed:be:33:71:0c:78:10:81:6e:23:35:d3: 9e:0a:53:76:8f:28:1e:76:c0:20:23:f8:3b:85:45: 83:3b:ad:d8:8d:f1:89:f3:0b:17:32:b1:1f:62:33: f9:34:fe:9f:09:ed:d1:f0:44:0f:f2:33:60:08:02: 7f:8f:b4:2b:4a:b2:9b:4c:6c:28:6e:9c:8b:0e:9f: d9:cf:a5:d9:18:d0:a0:83:9d:1b:f3:7f:1b:f4:e0: da:cd:2e:2a:92:65:19:99:89:c1:b8:44:b0:05:54: 76:d0:1d:6b:8c:d2:2a:f3:7b:07:e5:4a:da:20:10: ba:89:30:a9:8a:53:5a:79:87:d1:5e:ce:e5:3b:cb: 93:a3:42:30:30:d7:f8:6d:aa:4f:9d:a6:80:1a:a8: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A6:49:18:56:00:92:D2:3E:DA:F5:9A:D9:71:C9:F8:31:B2:D0:A2 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.159.0.0/17 Signature Algorithm: sha256WithRSAEncryption 13:b5:9f:47:df:50:09:ab:ad:75:0d:47:ed:96:a9:07:4c:79: 88:94:f0:e4:1b:21:b1:ca:98:93:fb:4a:6f:26:89:3d:0a:02: dd:5c:80:ab:a8:49:eb:ef:d5:cf:c9:c2:01:13:99:f0:17:ef: 37:1f:0c:57:1a:37:2c:a9:99:ec:e1:a4:a1:53:2f:70:4a:59: a6:92:85:f0:31:78:27:90:5a:55:d2:57:50:c7:4e:85:7e:e5: 01:1a:9b:d5:c4:a7:4a:64:c0:4e:93:74:76:52:a7:12:14:d3: be:75:cb:aa:7a:ce:d5:c4:b6:26:e5:df:15:f7:b8:88:f6:17: 6e:2d:89:69:3f:76:ef:77:6d:f6:af:08:1d:63:40:42:95:78: 74:fe:c2:15:3a:cb:c2:19:4e:01:eb:f4:9d:fe:58:07:f1:47: c6:69:b3:76:43:f2:da:9b:04:68:a7:2d:cf:87:4e:d8:f2:d3: b5:26:c6:23:97:04:03:cb:c1:57:1c:5d:13:4f:6d:f1:2a:9e: c1:52:c8:14:d1:bf:fb:50:b8:f6:f9:f5:99:27:35:3e:26:66: 88:dd:cc:65:f1:da:74:77:2f:7c:bb:54:10:15:4d:4d:51:46: 4a:a6:7b:7a:81:e2:14:0e:89:cc:e4:7d:7f:0d:e7:27:00:5a: 01:cb:bb:91 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NTVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFEQTY0OTE4NTYwMDky RDIzRURBRjU5QUQ5NzFDOUY4MzFCMkQwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV92mZpVAgkEjflW3/WkIC0/BcWqbEBEdvPoAQKiu7VDa0mr5K EhHXZCLH2xk3dd9o0zGNIFmkH4CaK9+2Wx29stDuddSBlcTYfY21dpJevJpAt0rN +Iojue7DPg2rhxAfuLdnDkIVENf5Hu2+M3EMeBCBbiM1054KU3aPKB52wCAj+DuF RYM7rdiN8YnzCxcysR9iM/k0/p8J7dHwRA/yM2AIAn+PtCtKsptMbChunIsOn9nP pdkY0KCDnRvzfxv04NrNLiqSZRmZicG4RLAFVHbQHWuM0irzewflStogELqJMKmK U1p5h9FezuU7y5OjQjAw1/htqk+dpoAaqBVfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUHaZJGFYAktI+2vWa2XHJ+DGy0KIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0hhWkpHRllBa3RJLTJ2V2EyWEhKLURHeTBLSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd2nwAwDQYJKoZIhvcNAQELBQADggEBABO1n0ffUAmrrXUNR+2WqQdMeYiU 8OQbIbHKmJP7Sm8miT0KAt1cgKuoSevv1c/JwgETmfAX7zcfDFcaNyypmezhpKFT L3BKWaaShfAxeCeQWlXSV1DHToV+5QEam9XEp0pkwE6TdHZSpxIU0751y6p6ztXE tibl3xX3uIj2F24tiWk/du93bfavCB1jQEKVeHT+whU6y8IZTgHr9J3+WAfxR8Zp s3ZD8tqbBGinLc+HTtjy07UmxiOXBAPLwVccXRNPbfEqnsFSyBTRv/tQuPb59Zkn NT4mZojdzGXx2nR3L3y7VBAVTU1RRkqme3qB4hQOiczkfX8N5ycAWgHLu5E= -----END CERTIFICATE-----Generated at Sun Apr 6 15:23:10 2025 by rpki-client