$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MenPIToXewOaLIWfYAN3gYR2w5Y.roa File: MenPIToXewOaLIWfYAN3gYR2w5Y.roa (raw, json) Hash identifier: p/oP3QbTB8L+bg19267vY44RPXg0f96ALyMHBB3Yoys= Subject key identifier: 31:E9:CF:21:3A:17:7B:03:9A:2C:85:9F:60:03:77:81:84:76:C3:96 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04CE Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MenPIToXewOaLIWfYAN3gYR2w5Y.roa Signing time: Wed 18 Dec 2024 02:36:57 +0000 ROA not before: Wed 18 Dec 2024 02:36:57 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.249.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:36:57 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=31E9CF213A177B039A2C859F600377818476C396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:78:9b:de:58:b4:ca:88:32:89:04:50:d0: b4:1e:c8:8e:0e:e3:a4:ca:c8:f7:70:6e:a2:f8:43: 02:10:d6:e2:b2:22:e1:06:8e:4a:67:d6:3d:d3:5f: b5:db:83:51:9a:01:ca:91:fc:58:86:96:f2:ea:99: 09:3e:65:bc:b2:4a:f1:9c:f3:19:5d:b7:18:af:02: 4b:ec:61:34:11:ef:48:b2:0f:84:c6:5a:e0:fa:c9: 86:70:10:2f:a9:d5:17:fa:64:e7:cd:fa:23:da:dd: 47:f0:28:92:70:f6:d6:0b:d6:7f:df:e8:14:1c:c5: 39:9d:09:14:d1:00:cc:28:e9:fb:fd:db:6b:0e:94: c3:39:21:ca:f4:6d:c1:36:20:bc:63:7f:fc:5e:a5: cb:63:75:3a:26:f7:ad:15:e0:5b:53:e0:b5:1f:1e: d4:f0:74:f9:a7:3f:e7:6f:b7:ea:5e:c3:7f:45:56: 2f:42:10:27:c7:dd:4c:76:4a:88:1f:cb:5e:0d:2f: f1:6b:fb:b8:ad:63:0a:09:2d:a7:2a:4d:2c:2d:36: d6:9f:75:0d:b3:bf:7d:0e:00:49:4f:16:32:0d:b7: b1:8f:aa:62:b0:2f:3d:9f:f8:a7:16:ff:34:88:3a: ee:e0:50:f4:5c:b9:67:22:6d:5f:62:01:64:75:0d: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E9:CF:21:3A:17:7B:03:9A:2C:85:9F:60:03:77:81:84:76:C3:96 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MenPIToXewOaLIWfYAN3gYR2w5Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.249.149.0/24 Signature Algorithm: sha256WithRSAEncryption 13:4e:7f:92:3c:13:b6:33:9d:52:c3:b2:24:08:97:1a:5a:01: 6e:c7:84:48:eb:60:10:92:8f:b8:d2:04:4a:96:54:06:b7:49: 12:69:5f:58:39:8b:98:4c:21:72:7f:83:3e:45:e1:8f:36:0f: 19:3a:ff:f0:1b:13:c9:5b:c1:66:d8:43:93:5f:9d:f9:a0:cc: c0:63:d0:ba:73:5b:ce:29:ec:43:d2:25:88:5f:92:6d:17:86: d9:4c:5e:77:43:59:7c:42:3d:f9:15:7a:5e:2d:8e:5f:0b:ab: ad:3a:89:67:fd:28:6a:9e:c9:94:75:d8:9e:c0:14:84:ee:a2: 69:24:05:47:c5:5b:22:53:f1:ff:38:f4:75:d6:40:4c:5d:c6: 8c:4a:f9:1b:4f:30:8f:49:f4:a7:cb:49:e7:59:af:da:11:d2: 8a:e5:b8:37:79:4b:f3:18:cb:f7:5c:78:07:c4:d9:fd:e0:de: e6:5d:b1:5c:a6:d0:c0:8e:a6:3f:72:74:b4:87:e4:9b:0d:6a: 64:e8:e8:97:6b:90:c2:c0:ff:7c:73:a6:77:cf:b0:49:8d:e5: ee:4a:a0:7c:4b:f0:e3:69:20:e8:e4:3a:27:44:1e:97:a3:21: 89:dc:78:43:0c:68:92:5c:18:84:28:47:94:ea:9b:d1:67:f3: 11:5e:40:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM2NTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxRTlDRjIxM0ExNzdC MDM5QTJDODU5RjYwMDM3NzgxODQ3NkMzOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIlHib3li0yogyiQRQ0LQeyI4O46TKyPdwbqL4QwIQ1uKyIuEG jkpn1j3TX7Xbg1GaAcqR/FiGlvLqmQk+ZbyySvGc8xldtxivAkvsYTQR70iyD4TG WuD6yYZwEC+p1Rf6ZOfN+iPa3UfwKJJw9tYL1n/f6BQcxTmdCRTRAMwo6fv922sO lMM5Icr0bcE2ILxjf/xepctjdTom960V4FtT4LUfHtTwdPmnP+dvt+pew39FVi9C ECfH3Ux2Sogfy14NL/Fr+7itYwoJLacqTSwtNtafdQ2zv30OAElPFjINt7GPqmKw Lz2f+KcW/zSIOu7gUPRcuWcibV9iAWR1DTsFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMenPIToXewOaLIWfYAN3gYR2w5YwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL01lblBJVG9YZXdPYUxJV2ZZQU4zZ1lSMnc1WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADS+ZUwDQYJKoZIhvcNAQELBQADggEBABNOf5I8E7YznVLDsiQIlxpaAW7H hEjrYBCSj7jSBEqWVAa3SRJpX1g5i5hMIXJ/gz5F4Y82Dxk6//AbE8lbwWbYQ5Nf nfmgzMBj0LpzW84p7EPSJYhfkm0XhtlMXndDWXxCPfkVel4tjl8Lq606iWf9KGqe yZR12J7AFITuomkkBUfFWyJT8f849HXWQExdxoxK+RtPMI9J9KfLSedZr9oR0orl uDd5S/MYy/dceAfE2f3g3uZdsVym0MCOpj9ydLSH5JsNamTo6JdrkMLA/3xzpnfP sEmN5e5KoHxL8ONpIOjkOidEHpejIYnceEMMaJJcGIQoR5Tqm9Fn8xFeQJg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:40 2025 by rpki-client