$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa File: KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa (raw, json) Hash identifier: 3pK6DJH52ElfMG4lGqQjvdI7XRtpTAsZ5KYEKVKMX1A= Subject key identifier: 28:1D:4A:FD:C4:4C:FD:92:B7:25:68:A0:74:C0:39:0B:E3:F1:5D:FE Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 044F Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa Signing time: Wed 18 Dec 2024 02:24:05 +0000 ROA not before: Wed 18 Dec 2024 02:24:05 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 220.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:05 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=281D4AFDC44CFD92B72568A074C0390BE3F15DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:d3:e3:e0:9a:d0:a9:1d:75:ba:86:a1:0f: ba:63:90:99:52:21:e2:d0:87:17:dd:ff:51:49:1b: 86:f4:ef:cc:cc:39:c8:c7:5c:d4:10:13:0e:80:9b: ef:ce:01:b6:d6:96:5d:0a:2f:f9:05:19:06:e0:46: 76:cb:1d:37:9c:78:ee:d1:42:b4:f6:76:77:e0:53: 92:72:de:7d:a0:ea:b7:7d:1e:03:3c:e6:ae:54:32: 80:53:41:04:34:83:5d:52:f8:6b:b2:fa:bd:44:d7: 2a:a2:56:cc:75:97:54:a1:d1:c3:53:8f:21:82:57: 97:8a:d2:48:bd:a9:f8:e6:a6:d0:89:73:0a:04:7f: 01:12:4f:60:8d:a8:04:6d:ee:66:8e:c3:b1:14:f6: 6d:2b:83:e0:59:fd:e8:aa:7b:f7:42:aa:df:0e:92: da:88:5b:50:1f:1c:fb:a6:fc:61:39:54:74:55:25: 0a:42:b1:6c:50:d7:85:74:53:9e:b1:91:49:e1:e2: 98:a1:83:29:e4:4b:67:4a:ab:0e:e6:b0:77:db:24: 94:98:82:15:52:e8:3a:33:a5:99:7c:bc:30:40:26: 7b:0f:f9:de:29:02:d9:70:f5:31:04:af:e2:fa:19: 28:8e:78:37:c2:22:3b:a9:d4:b2:94:23:5e:06:5c: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1D:4A:FD:C4:4C:FD:92:B7:25:68:A0:74:C0:39:0B:E3:F1:5D:FE X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.217.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9e:84:c0:60:be:e9:59:c2:89:0d:87:3b:6d:d2:df:cc:61:2e: 11:ef:0f:a6:48:25:7a:c3:df:4d:03:1a:83:e2:77:3d:91:e3: db:43:76:2b:f4:be:55:ef:57:96:28:14:cc:c9:36:6e:f7:b6: 9a:f1:6e:4b:c4:57:97:79:41:10:e4:8a:99:c2:18:91:54:cd: 98:46:4d:1a:7f:0a:65:6a:94:56:7d:aa:1d:be:d7:0a:74:dd: cf:d7:a0:b2:6d:ed:04:8e:96:3c:bc:60:30:15:58:25:20:6e: ba:6b:77:4a:80:57:32:26:98:31:eb:04:28:56:a4:f5:f3:8c: 2c:e2:5b:b3:14:93:97:85:50:52:57:ff:45:41:fc:88:ff:b4: 84:8f:a8:2b:4f:2c:45:f1:df:c1:2c:ae:5b:63:f5:13:85:f9: ba:2d:97:e6:a4:5b:66:52:2e:61:6f:9a:71:f8:2b:16:bf:c8: e7:07:00:0c:86:cd:f5:df:15:0b:22:fc:97:63:83:8e:fb:f1: c8:8a:b2:5c:68:72:0d:9a:5e:bc:7b:6d:03:a0:6c:e7:d3:d2: 4b:24:77:09:41:ab:9d:16:1d:92:e1:fb:54:ee:10:80:05:65: c6:ea:75:42:48:b1:80:68:9f:fe:ff:72:4f:e2:14:8d:97:fe: 2a:6f:03:3a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MDVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI4MUQ0QUZEQzQ0Q0ZE OTJCNzI1NjhBMDc0QzAzOTBCRTNGMTVERkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCZtPj4JrQqR11uoahD7pjkJlSIeLQhxfd/1FJG4b078zMOcjH XNQQEw6Am+/OAbbWll0KL/kFGQbgRnbLHTeceO7RQrT2dnfgU5Jy3n2g6rd9HgM8 5q5UMoBTQQQ0g11S+Guy+r1E1yqiVsx1l1Sh0cNTjyGCV5eK0ki9qfjmptCJcwoE fwEST2CNqARt7maOw7EU9m0rg+BZ/eiqe/dCqt8OktqIW1AfHPum/GE5VHRVJQpC sWxQ14V0U56xkUnh4pihgynkS2dKqw7msHfbJJSYghVS6DozpZl8vDBAJnsP+d4p Atlw9TEEr+L6GSiOeDfCIjup1LKUI14GXIbLAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUKB1K/cRM/ZK3JWigdMA5C+PxXf4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0tCMUtfY1JNX1pLM0pXaWdkTUE1Qy1QeFhmNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDc2TANBgkqhkiG9w0BAQsFAAOCAQEAnoTAYL7pWcKJDYc7bdLfzGEuEe8P pkglesPfTQMag+J3PZHj20N2K/S+Ve9XligUzMk2bve2mvFuS8RXl3lBEOSKmcIY kVTNmEZNGn8KZWqUVn2qHb7XCnTdz9egsm3tBI6WPLxgMBVYJSBuumt3SoBXMiaY MesEKFak9fOMLOJbsxSTl4VQUlf/RUH8iP+0hI+oK08sRfHfwSyuW2P1E4X5ui2X 5qRbZlIuYW+acfgrFr/I5wcADIbN9d8VCyL8l2ODjvvxyIqyXGhyDZpevHttA6Bs 59PSSyR3CUGrnRYdkuH7VO4QgAVlxup1QkixgGif/v9yT+IUjZf+Km8DOg== -----END CERTIFICATE-----Generated at Sat Apr 5 19:17:46 2025 by rpki-client