$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MtTEinP9uvT-8XMHYDTK_yOM-qo.roa File: MtTEinP9uvT-8XMHYDTK_yOM-qo.roa (raw, json) Hash identifier: m+9XNIkz7i+30t3lpFZwzaGIT5Phk74vKQgRUTKM4PU= Subject key identifier: 32:D4:C4:8A:73:FD:BA:F4:FE:F1:73:07:60:34:CA:FF:23:8C:FA:AA Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03F9 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MtTEinP9uvT-8XMHYDTK_yOM-qo.roa Signing time: Wed 18 Dec 2024 02:18:49 +0000 ROA not before: Wed 18 Dec 2024 02:18:49 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 27.90.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:49 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=32D4C48A73FDBAF4FEF173076034CAFF238CFAAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:5c:5f:ec:db:f4:27:f8:cf:bf:d5:80:e9: 7a:2a:0d:44:b8:d7:fb:6c:24:21:2a:15:24:15:aa: d3:32:04:d6:aa:7f:6b:14:5d:2e:e5:97:71:b0:dc: 65:0b:ee:d9:a9:34:eb:29:ef:e4:8c:30:fb:32:f2: 2e:13:24:d8:2b:7e:40:d3:67:73:f5:10:1c:ee:e5: 5a:f3:5c:f7:26:36:37:09:ef:93:d2:9a:84:f8:95: f4:91:c0:85:a7:54:b8:4c:92:cb:2e:f2:83:9b:89: 30:87:09:75:1b:39:c6:31:55:06:c4:b5:60:af:24: 2b:65:1f:cc:5f:73:4a:56:41:32:55:48:00:3c:03: 24:c4:9c:a9:13:5b:44:b3:d4:25:44:d2:88:93:db: f3:99:8d:80:04:d8:74:ea:2b:38:99:54:18:22:37: ba:a7:47:7c:72:96:8c:74:2e:07:25:31:d7:05:5a: bc:2c:c9:0f:7e:0e:6a:99:1a:27:93:6b:ff:bd:f5: 0f:e5:48:b1:a5:06:b1:71:e3:db:43:f8:b2:eb:8f: d0:12:a0:cf:69:66:63:1d:41:7d:f0:a5:76:51:82: 44:45:58:5c:4d:cc:0a:b1:c7:98:d1:19:49:43:2d: 3c:71:40:80:b9:1d:b4:c0:5d:d0:89:98:ac:85:9d: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D4:C4:8A:73:FD:BA:F4:FE:F1:73:07:60:34:CA:FF:23:8C:FA:AA X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MtTEinP9uvT-8XMHYDTK_yOM-qo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.90.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:9f:71:1e:1e:43:f5:21:db:fe:15:08:cc:98:33:52:05:9f: 38:8c:75:24:18:96:9f:0d:96:18:97:cc:d7:98:62:5c:b3:a7: ea:a7:ae:7d:97:8d:0b:ef:3c:ac:11:d0:14:d8:b7:40:04:7e: d3:ae:64:fa:e1:68:cd:e4:7c:23:00:db:88:d2:ab:b3:28:45: 64:74:00:9c:ed:85:86:d6:a8:28:02:c3:19:31:8c:fb:4f:cc: de:00:85:b0:94:11:67:29:e0:f7:2f:7e:bf:f6:65:12:c0:1e: 69:fe:22:5d:ab:79:f6:da:59:e2:69:a5:7c:c4:30:86:88:aa: 27:90:11:a3:0e:d2:7d:ca:bd:df:5c:f0:67:a7:c5:36:25:16: f8:b8:3c:d7:de:a6:12:d5:56:46:04:e8:78:3c:89:b3:f2:6a: 37:60:4a:57:e9:b3:68:89:65:d0:e2:a4:57:d5:2c:1d:20:1d: fa:6e:fa:e9:1e:02:48:f0:73:5d:8b:5c:33:e3:22:9d:e9:09: d8:c7:9d:a7:3d:3b:18:23:dd:b2:61:80:66:87:09:34:9e:cd: c1:ec:51:69:9b:6a:e2:18:ae:31:58:e2:de:bf:11:44:7a:81: 97:a3:c1:a9:b7:bb:ff:c8:4f:1b:f4:c3:32:d7:2c:36:81:2f: af:6b:84:bd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NDlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMyRDRDNDhBNzNGREJB RjRGRUYxNzMwNzYwMzRDQUZGMjM4Q0ZBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDHlxf7Nv0J/jPv9WA6XoqDUS41/tsJCEqFSQVqtMyBNaqf2sU XS7ll3Gw3GUL7tmpNOsp7+SMMPsy8i4TJNgrfkDTZ3P1EBzu5VrzXPcmNjcJ75PS moT4lfSRwIWnVLhMkssu8oObiTCHCXUbOcYxVQbEtWCvJCtlH8xfc0pWQTJVSAA8 AyTEnKkTW0Sz1CVE0oiT2/OZjYAE2HTqKziZVBgiN7qnR3xylox0LgclMdcFWrws yQ9+DmqZGieTa/+99Q/lSLGlBrFx49tD+LLrj9ASoM9pZmMdQX3wpXZRgkRFWFxN zAqxx5jRGUlDLTxxQIC5HbTAXdCJmKyFnSuPAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUMtTEinP9uvT+8XMHYDTK/yOM+qowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL010VEVpblA5dXZULThYTUhZRFRLX3lPTS1xby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbWjANBgkqhkiG9w0BAQsFAAOCAQEARp9xHh5D9SHb/hUIzJgzUgWfOIx1 JBiWnw2WGJfM15hiXLOn6qeufZeNC+88rBHQFNi3QAR+065k+uFozeR8IwDbiNKr syhFZHQAnO2FhtaoKALDGTGM+0/M3gCFsJQRZyng9y9+v/ZlEsAeaf4iXat59tpZ 4mmlfMQwhoiqJ5ARow7Sfcq931zwZ6fFNiUW+Lg8196mEtVWRgToeDyJs/JqN2BK V+mzaIll0OKkV9UsHSAd+m766R4CSPBzXYtcM+MinekJ2Medpz07GCPdsmGAZocJ NJ7NwexRaZtq4hiuMVji3r8RRHqBl6PBqbe7/8hPG/TDMtcsNoEvr2uEvQ== -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:14 2025 by rpki-client