$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Kzgnq1yg94txpAmuwjW1hG4LUqE.roa File: Kzgnq1yg94txpAmuwjW1hG4LUqE.roa (raw, json) Hash identifier: T4zkzgOPsDM2D7F5unqM+skTOwdjD9jAkjSQqttDPgw= Subject key identifier: 2B:38:27:AB:5C:A0:F7:8B:71:A4:09:AE:C2:35:B5:84:6E:0B:52:A1 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 045B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Kzgnq1yg94txpAmuwjW1hG4LUqE.roa Signing time: Wed 18 Dec 2024 02:24:11 +0000 ROA not before: Wed 18 Dec 2024 02:24:11 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 61.198.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:11 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=2B3827AB5CA0F78B71A409AEC235B5846E0B52A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:83:0e:c9:62:3f:a1:8a:1c:7f:af:0e:36: 42:39:c0:76:84:48:ce:d6:ca:e9:9e:0d:30:7c:fa: 2c:fb:cb:14:e4:c0:2b:32:5f:bb:6f:d4:c5:c1:ed: 4e:ae:41:09:2f:dd:44:da:67:32:19:46:68:85:a8: ae:cf:1d:47:2e:af:7a:9f:d3:e9:ce:00:d1:89:72: a1:a9:64:5e:d1:6c:89:b9:72:00:df:97:48:41:73: 10:07:b0:26:50:2f:ad:1e:6b:3c:e3:aa:ee:80:a1: 8b:e5:34:05:fe:08:6f:f0:df:70:c2:c6:97:4f:d9: dc:a6:1e:ed:a5:8c:80:19:a8:7e:a9:17:f2:8a:ed: 36:a5:e0:fd:1d:c4:96:3b:99:16:2e:81:e9:2e:fd: 68:2b:02:52:c8:75:73:99:85:e3:f1:7d:3c:0a:7f: d9:8b:fd:c8:76:0b:b7:de:fc:49:d0:b6:96:00:69: 9d:e0:fe:20:24:42:3e:16:14:30:6b:fd:fc:60:f1: d8:b7:84:e8:fd:06:81:04:ee:32:33:5d:19:3d:b3: e8:7d:8c:73:9c:2c:91:c1:07:40:e2:9e:f8:83:be: 05:0d:e6:e2:7d:81:62:c8:38:df:76:c2:0f:7e:03: 25:31:36:48:5a:0a:c8:2b:8f:a2:ee:59:80:42:af: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:38:27:AB:5C:A0:F7:8B:71:A4:09:AE:C2:35:B5:84:6E:0B:52:A1 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Kzgnq1yg94txpAmuwjW1hG4LUqE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.198.128.0/17 Signature Algorithm: sha256WithRSAEncryption b7:37:df:8b:18:63:d4:d5:60:a1:a9:e0:99:a1:f5:75:bc:b3: 48:68:01:1c:d4:66:d5:ad:d5:6e:8b:41:2d:82:4d:5a:2c:9e: d0:4e:e1:d2:4f:be:9f:d4:7f:da:c2:3c:28:3a:d5:43:6a:61: 6d:95:6c:62:c1:d7:1a:f6:1d:6a:5f:52:34:2e:d3:f3:ef:07: 90:fe:95:62:ca:30:68:3f:0a:21:8c:6b:39:82:ba:31:03:64: 54:dc:ba:c7:52:14:a1:56:4c:11:d3:a2:48:10:7c:45:d6:a5: ad:7f:49:ec:eb:6f:43:4a:9b:34:54:0b:6a:cc:87:36:a4:14: 9b:c4:b6:52:40:8b:3d:93:e7:2e:fd:25:63:50:6b:ae:d8:f1: 25:6c:35:82:94:16:cf:ea:c1:9d:32:9e:e1:5c:2c:3f:29:5e: 42:6b:f7:59:30:f7:78:2c:76:18:ef:a7:99:7f:35:78:ee:6c: 0e:f6:75:d7:c8:5a:60:19:88:d7:bd:fb:30:1a:07:3c:64:9b: ad:6c:a8:6e:f6:11:5f:d6:d2:b8:9a:cd:59:0c:7b:f3:d7:29: 4e:dc:29:35:37:e6:fc:39:61:d9:c0:cb:89:90:42:61:8a:1d: 26:32:a2:b1:a9:b6:a1:48:b8:b6:e0:28:87:3f:1e:c4:1a:5e: da:54:4b:ff -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MTFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJCMzgyN0FCNUNBMEY3 OEI3MUE0MDlBRUMyMzVCNTg0NkUwQjUyQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx3oMOyWI/oYocf68ONkI5wHaESM7WyumeDTB8+iz7yxTkwCsy X7tv1MXB7U6uQQkv3UTaZzIZRmiFqK7PHUcur3qf0+nOANGJcqGpZF7RbIm5cgDf l0hBcxAHsCZQL60eazzjqu6AoYvlNAX+CG/w33DCxpdP2dymHu2ljIAZqH6pF/KK 7Tal4P0dxJY7mRYugeku/WgrAlLIdXOZhePxfTwKf9mL/ch2C7fe/EnQtpYAaZ3g /iAkQj4WFDBr/fxg8di3hOj9BoEE7jIzXRk9s+h9jHOcLJHBB0DinviDvgUN5uJ9 gWLION92wg9+AyUxNkhaCsgrj6LuWYBCr4CJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKzgnq1yg94txpAmuwjW1hG4LUqEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0t6Z25xMXlnOTR0eHBBbXV3alcxaEc0TFVxRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9xoAwDQYJKoZIhvcNAQELBQADggEBALc334sYY9TVYKGp4Jmh9XW8s0ho ARzUZtWt1W6LQS2CTVosntBO4dJPvp/Uf9rCPCg61UNqYW2VbGLB1xr2HWpfUjQu 0/PvB5D+lWLKMGg/CiGMazmCujEDZFTcusdSFKFWTBHTokgQfEXWpa1/Sezrb0NK mzRUC2rMhzakFJvEtlJAiz2T5y79JWNQa67Y8SVsNYKUFs/qwZ0ynuFcLD8pXkJr 91kw93gsdhjvp5l/NXjubA72ddfIWmAZiNe9+zAaBzxkm61sqG72EV/W0riazVkM e/PXKU7cKTU35vw5YdnAy4mQQmGKHSYyorGptqFIuLbgKIc/HsQaXtpUS/8= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:48 2025 by rpki-client