$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LMPSeXxfRHSYG812mAnaK5it06U.roa File: LMPSeXxfRHSYG812mAnaK5it06U.roa (raw, json) Hash identifier: LjVI3GEE4Pug7iNU49W6pPzGTvPxrc3d+teudAA7fLM= Subject key identifier: 2C:C3:D2:79:7C:5F:44:74:98:1B:CD:76:98:09:DA:2B:98:AD:D3:A5 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0540 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LMPSeXxfRHSYG812mAnaK5it06U.roa Signing time: Wed 18 Dec 2024 02:44:19 +0000 ROA not before: Wed 18 Dec 2024 02:44:19 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.188.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:44:19 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=2CC3D2797C5F4474981BCD769809DA2B98ADD3A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:a2:b8:ec:a0:4a:e2:e5:50:2b:90:92:b8: 98:7f:05:2a:0d:c8:55:b5:25:40:13:3e:9b:4d:1f: 6d:81:c4:cb:e0:67:ed:e5:39:33:cd:0a:a0:a4:89: 34:62:10:02:5b:c6:19:79:f2:2e:26:2d:41:62:63: 58:f1:3c:28:55:ae:18:62:6f:e5:1c:9d:e9:a2:05: 70:5d:43:b8:67:04:5b:a1:21:99:20:e9:c0:93:98: 30:41:a1:f7:60:bc:57:b1:3d:0b:73:d7:ad:00:5a: e7:c0:14:49:5f:29:e8:15:83:c2:1e:8e:f5:32:e0: c3:65:cf:30:4f:ca:c6:36:b3:33:a2:9c:8c:8e:22: 23:ee:5e:b4:fa:04:b5:2e:8a:f3:89:a6:ca:ef:f3: 55:af:c9:f5:c3:fc:2a:82:d0:c6:7f:dc:ff:a9:a0: 47:5e:61:4d:e5:d3:67:9b:26:9f:38:87:51:d6:e1: 97:98:52:7f:de:3c:2f:cf:22:c4:c7:67:f5:37:72: b2:90:40:b3:cf:fa:dc:45:8a:aa:2a:a3:b4:3f:16: 28:95:25:3e:b5:1b:02:6a:64:bb:a9:7d:88:33:c9: cc:58:67:85:d2:92:b0:c7:28:37:73:e7:5c:dc:06: 2d:96:15:c3:b5:ae:0b:84:31:d3:60:9f:94:cb:a5: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:D2:79:7C:5F:44:74:98:1B:CD:76:98:09:DA:2B:98:AD:D3:A5 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LMPSeXxfRHSYG812mAnaK5it06U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.188.187.0/24 Signature Algorithm: sha256WithRSAEncryption b7:56:6b:e2:3a:51:79:2c:fa:93:a3:dd:c7:4d:a6:c4:ec:24: 95:82:cf:e4:8f:e8:9a:a7:0a:b5:87:7a:f0:53:9a:f0:aa:74: b8:9a:02:03:97:00:fa:51:7c:7b:d9:94:20:b9:13:e5:ab:db: c4:93:51:52:57:a3:19:2b:51:c8:c7:91:78:86:19:bb:81:d9: a6:7f:51:d7:4d:ef:01:0a:b0:7f:c4:7a:cf:5e:c7:fc:d1:59: 99:6d:ca:78:e1:c7:b2:b9:c2:a2:86:6b:5c:d4:fd:c4:33:31: a4:6e:33:06:14:02:22:cd:da:d9:87:f0:1f:5f:ff:5b:d9:09: c7:a9:c8:38:02:a7:77:78:e5:20:fb:04:af:35:be:25:48:b5: fd:0a:28:e2:da:37:9c:2b:79:c3:f7:a5:c4:d0:ac:cd:5d:b7: df:a7:e6:a3:ab:3f:5a:5d:c1:bb:77:e6:c6:23:f4:4c:b8:ee: 49:41:ee:58:30:d4:c4:6a:1f:b8:1b:18:b7:07:4b:a1:82:eb: 23:a0:74:31:94:42:fc:b4:a6:4e:16:18:15:40:07:40:60:89: 23:0d:e4:3a:aa:f5:3a:63:b8:9d:22:05:f8:11:1e:74:5b:f0: 8b:d0:a9:fe:98:2f:74:c2:fa:22:71:66:91:64:0f:33:f7:58: 5e:20:db:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQ0MTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDQzNEMjc5N0M1RjQ0 NzQ5ODFCQ0Q3Njk4MDlEQTJCOThBREQzQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTGqK47KBK4uVQK5CSuJh/BSoNyFW1JUATPptNH22BxMvgZ+3l OTPNCqCkiTRiEAJbxhl58i4mLUFiY1jxPChVrhhib+UcnemiBXBdQ7hnBFuhIZkg 6cCTmDBBofdgvFexPQtz160AWufAFElfKegVg8IejvUy4MNlzzBPysY2szOinIyO IiPuXrT6BLUuivOJpsrv81WvyfXD/CqC0MZ/3P+poEdeYU3l02ebJp84h1HW4ZeY Un/ePC/PIsTHZ/U3crKQQLPP+txFiqoqo7Q/FiiVJT61GwJqZLupfYgzycxYZ4XS krDHKDdz51zcBi2WFcO1rguEMdNgn5TLpeW7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULMPSeXxfRHSYG812mAnaK5it06UwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0xNUFNlWHhmUkhTWUc4MTJtQW5hSzVpdDA2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSvLswDQYJKoZIhvcNAQELBQADggEBALdWa+I6UXks+pOj3cdNpsTsJJWC z+SP6JqnCrWHevBTmvCqdLiaAgOXAPpRfHvZlCC5E+Wr28STUVJXoxkrUcjHkXiG GbuB2aZ/UddN7wEKsH/Ees9ex/zRWZltynjhx7K5wqKGa1zU/cQzMaRuMwYUAiLN 2tmH8B9f/1vZCcepyDgCp3d45SD7BK81viVItf0KKOLaN5wrecP3pcTQrM1dt9+n 5qOrP1pdwbt35sYj9Ey47klB7lgw1MRqH7gbGLcHS6GC6yOgdDGUQvy0pk4WGBVA B0BgiSMN5Dqq9TpjuJ0iBfgRHnRb8IvQqf6YL3TC+iJxZpFkDzP3WF4g22A= -----END CERTIFICATE-----Generated at Sat Apr 5 23:10:56 2025 by rpki-client