$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa File: LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa (raw, json) Hash identifier: pvwRTDrgmVZ3yQDNxVtyb6zKG2hdsRZBPGuyhydT/K8= Subject key identifier: 2D:B9:14:75:62:E4:19:75:50:34:51:61:A8:3D:37:67:0D:3F:C9:1E Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03B0 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa Signing time: Wed 18 Dec 2024 02:12:57 +0000 ROA not before: Wed 18 Dec 2024 02:12:57 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.128.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:12:57 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=2DB9147562E4197550345161A83D37670D3FC91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b1:d1:9c:0a:e8:6e:9e:a0:1b:8b:2a:ce:94: fa:f3:dd:d7:8e:98:b9:78:39:65:db:e5:79:66:c9: 3f:e5:3a:3c:e5:4f:42:47:10:17:88:e7:82:d5:38: 7b:7e:cd:dd:82:f7:c7:16:40:3d:37:33:e1:48:6b: 45:7c:5c:c0:d8:e4:4e:95:23:df:72:8f:8c:60:00: 29:97:81:f5:cb:79:bc:56:b9:db:33:45:bd:e4:79: 82:6c:d1:99:38:dc:0f:db:48:7f:ea:44:c8:36:64: c4:9e:8a:fc:db:28:91:24:2c:bd:a3:d7:ed:38:8c: fa:5a:bf:e2:aa:35:26:a2:f1:2c:a7:87:5d:5f:7c: 73:3f:db:e0:2d:1d:1f:d0:01:a6:11:59:01:3b:1f: f7:e9:06:fd:a4:9a:71:41:c6:8d:8a:cc:f7:66:0a: dc:60:82:fd:65:a0:b8:ce:85:da:92:66:de:b2:d3: e0:2e:7d:b9:5e:a7:a6:fa:85:12:f7:ab:bf:ed:ae: 5a:cf:21:01:f4:af:f2:9e:3a:6b:55:9d:3c:f4:96: c1:31:ed:6c:d4:47:e9:a4:02:59:73:97:4f:ec:b3: ac:a3:89:7f:82:25:31:2d:aa:71:08:f1:53:b3:f8: b4:ae:f5:f3:a6:75:7b:89:18:44:68:c9:d9:fe:db: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B9:14:75:62:E4:19:75:50:34:51:61:A8:3D:37:67:0D:3F:C9:1E X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.128.64.0/19 Signature Algorithm: sha256WithRSAEncryption a1:6a:7c:d1:34:a1:d3:bd:05:49:48:e1:0c:06:bc:66:59:24: 30:68:6d:ed:a9:6b:7c:4e:97:82:e1:63:7f:ae:32:23:23:3e: 10:72:71:63:17:92:b9:f6:0d:48:de:5a:f6:52:71:ac:2c:ad: e4:7b:a0:06:77:00:31:05:63:47:bb:a3:32:1a:25:08:ac:14: c1:42:47:09:d5:bd:98:fa:1b:91:f1:4a:d7:1e:5b:fe:d6:6a: f9:4f:72:4f:11:83:82:2b:26:d3:e8:31:db:d9:b6:a6:1b:e6: f8:68:83:3d:96:31:41:e9:f6:b2:64:2d:9a:7c:2e:c3:61:71: 7e:df:89:e7:22:fe:b2:dc:5c:47:a6:e8:25:3d:ab:b5:8a:b0: 75:92:eb:7f:a3:d1:e4:44:db:1f:a0:cf:1d:82:da:0a:16:59: 85:35:71:11:ee:68:c5:9b:33:b8:02:a3:54:aa:cb:26:2e:ba: 69:8f:d6:ac:48:60:09:e2:a0:b7:28:b0:b5:ff:f8:3b:18:e6: b3:72:5a:4f:ac:f1:e6:61:25:6b:f9:27:5c:85:6d:ab:d3:c5: e7:44:f9:9a:00:f9:f9:43:d6:55:dd:73:86:75:44:2b:1c:b7: 80:e0:66:10:d2:6b:ef:de:4f:da:79:ef:c4:51:0b:7b:f8:70: 8d:d3:6f:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEyNTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJEQjkxNDc1NjJFNDE5 NzU1MDM0NTE2MUE4M0QzNzY3MEQzRkM5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZsdGcCuhunqAbiyrOlPrz3deOmLl4OWXb5XlmyT/lOjzlT0JH EBeI54LVOHt+zd2C98cWQD03M+FIa0V8XMDY5E6VI99yj4xgACmXgfXLebxWudsz Rb3keYJs0Zk43A/bSH/qRMg2ZMSeivzbKJEkLL2j1+04jPpav+KqNSai8Synh11f fHM/2+AtHR/QAaYRWQE7H/fpBv2kmnFBxo2KzPdmCtxggv1loLjOhdqSZt6y0+Au fblep6b6hRL3q7/trlrPIQH0r/KeOmtVnTz0lsEx7WzUR+mkAllzl0/ss6yjiX+C JTEtqnEI8VOz+LSu9fOmdXuJGERoydn+2+2TAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQULbkUdWLkGXVQNFFhqD03Zw0/yR4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0xia1VkV0xrR1hWUU5GRmhxRDAzWncwX3lSNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU7gEAwDQYJKoZIhvcNAQELBQADggEBAKFqfNE0odO9BUlI4QwGvGZZJDBo be2pa3xOl4LhY3+uMiMjPhBycWMXkrn2DUjeWvZScawsreR7oAZ3ADEFY0e7ozIa JQisFMFCRwnVvZj6G5HxStceW/7WavlPck8Rg4IrJtPoMdvZtqYb5vhogz2WMUHp 9rJkLZp8LsNhcX7fieci/rLcXEem6CU9q7WKsHWS63+j0eRE2x+gzx2C2goWWYU1 cRHuaMWbM7gCo1SqyyYuummP1qxIYAnioLcosLX/+DsY5rNyWk+s8eZhJWv5J1yF bavTxedE+ZoA+flD1lXdc4Z1RCsct4DgZhDSa+/eT9p578RRC3v4cI3Tb7E= -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:27 2025 by rpki-client