$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hm8U99CJZ__TemCUNp4T4TzdaLA.roa File: Hm8U99CJZ__TemCUNp4T4TzdaLA.roa (raw, json) Hash identifier: 5fxfX8Rmr7YBKfFnFbY2v6yMtiIvl5jwP9s8zlHui6w= Subject key identifier: 1E:6F:14:F7:D0:89:67:FF:D3:7A:60:94:36:9E:13:E1:3C:DD:68:B0 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0481 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hm8U99CJZ__TemCUNp4T4TzdaLA.roa Signing time: Wed 18 Dec 2024 02:26:28 +0000 ROA not before: Wed 18 Dec 2024 02:26:28 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 222.15.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:26:28 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=1E6F14F7D08967FFD37A6094369E13E13CDD68B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:28:af:e5:87:31:dd:3e:63:7b:29:cf:63: 20:10:c0:cb:a4:f3:57:76:d9:0f:dc:4b:2f:f2:73: 2b:17:b0:69:32:8c:11:e2:32:02:4e:08:0a:fa:39: db:89:19:c2:a4:20:9f:f1:71:f1:68:27:66:73:01: 2d:29:88:e3:85:4c:91:44:c2:86:4b:ef:a6:04:03: e9:96:e9:2a:8c:35:d3:81:90:af:1e:18:50:27:ca: a5:01:3a:36:ec:0a:e8:73:1e:58:f4:47:20:29:6f: 50:0e:16:f2:5b:cd:67:f5:3f:84:f1:26:76:3d:b0: db:b8:f4:58:4d:21:8c:8f:c5:8d:ba:d1:b4:fe:b8: 4b:b0:c4:87:2f:86:68:e7:3f:d1:8e:f5:54:ad:c7: e8:10:15:a6:d4:78:81:71:5f:a9:1e:f3:37:35:f5: df:51:a4:b1:f5:6a:e2:2f:52:45:eb:7c:aa:3f:82: 69:d7:cd:8d:0b:bf:13:dc:ef:f7:de:dd:a0:e0:aa: 88:ae:3a:e1:03:20:54:58:e7:81:14:48:53:ec:93: d1:68:86:d2:23:28:d8:df:77:07:3b:93:e0:c3:28: c3:0b:a8:5c:c2:d0:cc:fe:e9:61:f7:87:09:c2:2c: 6e:45:29:fa:75:c2:d8:9a:f9:6c:70:9d:a1:82:3f: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:14:F7:D0:89:67:FF:D3:7A:60:94:36:9E:13:E1:3C:DD:68:B0 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hm8U99CJZ__TemCUNp4T4TzdaLA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 222.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7c:d2:c8:d3:11:be:35:08:36:17:e7:33:b2:05:b2:d5:d1:c7: e3:9d:a2:10:4a:5c:a6:86:73:86:a6:35:88:da:6e:e5:2c:98: bc:a2:c5:7f:13:c7:09:66:0d:f9:be:1c:26:83:2f:27:68:d0: 5f:d2:fb:5b:95:86:85:06:75:a6:9c:7e:22:c8:76:bc:a8:8d: b5:e7:13:66:97:0e:cc:f7:27:fa:f9:d7:d4:84:f6:af:d1:aa: 01:76:78:5d:5a:ab:54:10:4f:fd:71:5c:17:05:93:96:68:60: 25:4d:73:bd:fe:f2:c6:0f:36:0c:67:8d:15:6d:3a:75:76:c8: 58:f9:ce:cc:2e:5f:b7:43:a3:fc:34:d0:95:5c:2c:1e:26:52: 58:ec:0f:36:82:ac:f9:67:bd:c4:20:66:e0:da:23:df:d2:b8: b9:87:6f:f1:7e:05:20:d0:b7:76:f9:2e:73:c4:6c:52:e6:c9: fd:2f:c1:bf:ec:8e:a8:49:ff:c8:5f:7e:35:c0:cf:f0:17:9e: 8a:1f:16:28:2a:dd:bd:0d:08:89:d0:eb:90:41:a9:58:f7:55: 9c:4c:c9:f5:d4:f4:6e:67:a7:ec:83:7e:e9:b1:24:43:c6:f4: 70:2c:17:64:30:7e:19:6f:ca:c4:2c:6e:fb:a5:22:eb:41:17: 86:04:49:ed -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI2MjhaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFFNkYxNEY3RDA4OTY3 RkZEMzdBNjA5NDM2OUUxM0UxM0NERDY4QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHmiiv5Ycx3T5jeynPYyAQwMuk81d22Q/cSy/ycysXsGkyjBHi MgJOCAr6OduJGcKkIJ/xcfFoJ2ZzAS0piOOFTJFEwoZL76YEA+mW6SqMNdOBkK8e GFAnyqUBOjbsCuhzHlj0RyApb1AOFvJbzWf1P4TxJnY9sNu49FhNIYyPxY260bT+ uEuwxIcvhmjnP9GO9VStx+gQFabUeIFxX6ke8zc19d9RpLH1auIvUkXrfKo/gmnX zY0LvxPc7/fe3aDgqoiuOuEDIFRY54EUSFPsk9FohtIjKNjfdwc7k+DDKMMLqFzC 0Mz+6WH3hwnCLG5FKfp1wtia+WxwnaGCP3Q7AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUHm8U99CJZ//TemCUNp4T4TzdaLAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0htOFU5OUNKWl9fVGVtQ1VOcDRUNFR6ZGFMQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDeDzANBgkqhkiG9w0BAQsFAAOCAQEAfNLI0xG+NQg2F+czsgWy1dHH452i EEpcpoZzhqY1iNpu5SyYvKLFfxPHCWYN+b4cJoMvJ2jQX9L7W5WGhQZ1ppx+Ish2 vKiNtecTZpcOzPcn+vnX1IT2r9GqAXZ4XVqrVBBP/XFcFwWTlmhgJU1zvf7yxg82 DGeNFW06dXbIWPnOzC5ft0Oj/DTQlVwsHiZSWOwPNoKs+We9xCBm4Noj39K4uYdv 8X4FINC3dvkuc8RsUubJ/S/Bv+yOqEn/yF9+NcDP8Beeih8WKCrdvQ0IidDrkEGp WPdVnEzJ9dT0bmen7IN+6bEkQ8b0cCwXZDB+GW/KxCxu+6Ui60EXhgRJ7Q== -----END CERTIFICATE-----Generated at Sat Apr 5 20:01:58 2025 by rpki-client