$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NVwh7QKynC1055UkgzvDdPLFlBM.roa File: NVwh7QKynC1055UkgzvDdPLFlBM.roa (raw, json) Hash identifier: AywXngBLKOVnSB2ih0b0ID470BeEOuedD57FmA2ZQUw= Subject key identifier: 35:5C:21:ED:02:B2:9C:2D:74:E7:95:24:83:3B:C3:74:F2:C5:94:13 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 050B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NVwh7QKynC1055UkgzvDdPLFlBM.roa Signing time: Wed 18 Dec 2024 02:40:15 +0000 ROA not before: Wed 18 Dec 2024 02:40:15 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 61.204.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:40:15 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=355C21ED02B29C2D74E79524833BC374F2C59413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:95:1e:cb:0e:91:7e:b7:51:d2:84:6a:d1: 68:b8:b0:dc:fc:12:8e:bf:98:fe:a4:78:a0:55:e2: fa:ab:98:de:99:64:b9:5d:ed:4e:8b:52:79:24:10: a1:b6:9d:cc:b7:35:db:29:ca:13:fc:74:0c:06:b4: f3:fe:4f:9e:83:7b:15:9c:b7:05:e9:3d:00:fc:a1: a3:71:b6:21:c3:d3:2f:34:6b:80:00:ed:77:41:39: 11:80:6b:df:53:b9:cf:56:a7:98:54:eb:d6:0a:fc: b7:df:0f:b9:0f:e0:3a:a3:99:7c:a0:42:b1:64:c8: 51:1b:4c:ec:8e:b3:43:55:e4:f4:b8:c1:4f:fa:9b: 3d:5a:4b:46:84:83:62:5b:cc:cf:a1:7f:e3:cc:e2: f6:6f:30:3d:12:c1:0e:75:a0:ae:62:27:e7:44:15: e5:2f:bd:fa:d2:41:33:ad:3b:bc:ff:ec:33:5a:89: 4e:6c:ff:67:28:0a:52:f0:10:39:9c:2a:c0:19:4e: 06:76:ee:5d:c9:0b:b7:a8:bb:78:9a:ac:b9:fd:d6: f7:71:a2:f7:fe:ac:fb:c1:19:d6:34:1d:d3:55:c2: 08:b9:cb:5a:c1:bf:e9:4e:95:7d:9a:43:9e:de:15: c3:a2:25:8f:eb:17:11:8f:5f:b5:c0:b9:0b:eb:ec: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:21:ED:02:B2:9C:2D:74:E7:95:24:83:3B:C3:74:F2:C5:94:13 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NVwh7QKynC1055UkgzvDdPLFlBM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.204.128.0/17 Signature Algorithm: sha256WithRSAEncryption 18:e1:3a:12:90:46:21:b8:43:a7:65:12:7b:a6:9a:6e:38:1e: ae:98:1b:f9:a1:f4:6b:a7:72:57:d0:55:8f:64:a2:45:ab:e2: 90:6e:ca:67:f3:4e:c4:a6:eb:95:a0:c1:7a:fc:ed:82:fa:4e: 5d:d4:86:de:42:3c:18:a4:e7:2e:57:a5:f4:cb:cb:57:00:8d: c1:4e:c2:f7:32:ea:ac:81:be:2b:f4:a4:89:f4:b6:37:b7:e5: 2f:33:54:5a:ba:73:8d:fc:2b:d6:2b:35:80:3a:05:fe:ff:5f: bd:49:f9:69:e5:42:60:b3:1b:69:04:ad:d8:5a:ce:79:71:75: ee:6d:a0:20:2d:e6:f1:5d:7e:52:0f:de:0f:8e:63:79:d8:08: c0:8d:11:75:3b:b1:bf:b2:0a:8d:9c:bd:10:98:fd:8b:9c:93: 08:bc:16:c4:ae:af:08:23:34:8e:5e:99:4d:a8:fd:7c:41:5d: f6:a4:78:5b:88:b6:2e:a8:8f:d5:a8:4f:fb:93:17:de:58:ed: 4c:4b:43:61:2b:f1:0c:1e:60:1b:1e:64:68:b3:c6:ed:b6:36: 7a:42:78:94:ff:bd:45:18:74:a0:ee:65:24:9d:96:d0:09:4b: 62:dc:1b:15:e2:b4:c4:55:03:62:97:d7:58:09:e6:dc:40:d7: a8:67:22:1d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQwMTVaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM1NUMyMUVEMDJCMjlD MkQ3NEU3OTUyNDgzM0JDMzc0RjJDNTk0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBgpUeyw6RfrdR0oRq0Wi4sNz8Eo6/mP6keKBV4vqrmN6ZZLld 7U6LUnkkEKG2ncy3NdspyhP8dAwGtPP+T56DexWctwXpPQD8oaNxtiHD0y80a4AA 7XdBORGAa99Tuc9Wp5hU69YK/LffD7kP4DqjmXygQrFkyFEbTOyOs0NV5PS4wU/6 mz1aS0aEg2JbzM+hf+PM4vZvMD0SwQ51oK5iJ+dEFeUvvfrSQTOtO7z/7DNaiU5s /2coClLwEDmcKsAZTgZ27l3JC7eou3iarLn91vdxovf+rPvBGdY0HdNVwgi5y1rB v+lOlX2aQ57eFcOiJY/rFxGPX7XAuQvr7IBzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNVwh7QKynC1055UkgzvDdPLFlBMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL05Wd2g3UUt5bkMxMDU1VWtnenZEZFBMRmxCTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9zIAwDQYJKoZIhvcNAQELBQADggEBABjhOhKQRiG4Q6dlEnummm44Hq6Y G/mh9GunclfQVY9kokWr4pBuymfzTsSm65WgwXr87YL6Tl3Uht5CPBik5y5XpfTL y1cAjcFOwvcy6qyBviv0pIn0tje35S8zVFq6c438K9YrNYA6Bf7/X71J+WnlQmCz G2kErdhaznlxde5toCAt5vFdflIP3g+OY3nYCMCNEXU7sb+yCo2cvRCY/Yuckwi8 FsSurwgjNI5emU2o/XxBXfakeFuIti6oj9WoT/uTF95Y7UxLQ2Er8QweYBseZGiz xu22NnpCeJT/vUUYdKDuZSSdltAJS2LcGxXitMRVA2KX11gJ5txA16hnIh0= -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:02 2025 by rpki-client