$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NXYXCkygBx2uQKadlVV1Ii3mNHI.roa File: NXYXCkygBx2uQKadlVV1Ii3mNHI.roa (raw, json) Hash identifier: x3hzPoxjEmNMQTBiFIHB5Na96CoLnQbz6g1zq00Dh7g= Subject key identifier: 35:76:17:0A:4C:A0:07:1D:AE:40:A6:9D:95:55:75:22:2D:E6:34:72 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04EA Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NXYXCkygBx2uQKadlVV1Ii3mNHI.roa Signing time: Wed 18 Dec 2024 02:37:09 +0000 ROA not before: Wed 18 Dec 2024 02:37:09 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.250.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1258 (0x4ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:09 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=3576170A4CA0071DAE40A69D955575222DE63472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:de:d5:44:4e:68:db:42:1b:b5:0e:f8:5f: 91:a4:a7:50:94:14:7b:6b:70:cc:7b:7d:4e:dc:bc: f5:0f:b8:e8:08:aa:1e:e2:71:7f:23:d7:a9:d0:05: 9b:45:40:1d:0a:21:33:cc:b9:bf:a5:0e:5c:6b:c0: a5:77:f0:98:49:68:e6:68:73:30:40:9e:f9:e5:3e: 28:43:ec:4a:07:49:17:86:bb:82:5f:ee:5e:2f:08: e3:fa:ce:e9:a7:80:41:cb:d5:70:0f:51:6d:72:9a: 39:16:e2:f0:ef:50:8c:c1:7b:af:2d:52:aa:51:e0: e0:e4:0a:b8:61:02:09:e3:89:eb:f3:35:cd:af:90: d9:a1:03:73:b6:5f:6a:43:91:5d:5f:ea:79:58:bf: 45:fb:f3:05:00:ce:34:b2:76:93:e3:cf:54:aa:38: 63:68:87:e8:13:b6:66:17:d0:a6:d2:4e:40:30:4d: cc:1d:80:63:9e:42:2c:67:ea:1a:f2:17:f2:c0:17: b5:4a:07:e3:89:6a:92:ac:24:98:ae:54:a2:54:99: bf:b7:54:39:a6:16:50:3b:f3:17:0b:8e:32:10:56: bd:6e:5e:9a:e3:53:c7:e7:15:d9:08:89:f9:47:97: 48:21:b4:02:fc:27:76:7e:f2:30:3b:57:50:5c:53: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:76:17:0A:4C:A0:07:1D:AE:40:A6:9D:95:55:75:22:2D:E6:34:72 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NXYXCkygBx2uQKadlVV1Ii3mNHI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.250.38.0/24 Signature Algorithm: sha256WithRSAEncryption 64:46:64:39:10:d3:2c:18:c9:7f:1d:c2:95:7a:f3:e0:73:da: 42:d8:0e:1d:c4:9d:ec:1b:01:a8:47:94:1e:8d:35:00:c5:37: 34:3e:c6:cc:06:5f:f1:00:5b:aa:44:ff:5b:04:95:b3:ef:b8: 55:a3:67:7b:80:4d:81:7a:eb:de:e7:da:4f:32:f8:2e:57:7a: 4f:82:e0:6e:c1:bb:96:20:dc:89:48:1f:96:03:5f:3e:90:09: ff:9d:69:42:76:9d:2f:a1:ae:23:b4:31:e8:43:de:53:7a:e2: 0b:6e:0f:fc:2d:7d:ea:9d:fa:2e:b2:18:88:d7:04:15:23:69: 4c:f9:b5:ec:82:64:2e:85:79:ef:82:c9:d8:ee:0a:ba:12:6c: 54:cb:22:b9:c1:0c:9e:0d:99:e3:e8:8a:6f:96:2c:14:ff:45: 8d:e1:88:5c:ec:10:f5:04:ea:ad:4b:13:35:52:6c:4a:3e:75: 52:11:a0:c1:c1:9f:4c:5c:a2:08:ec:ee:d4:9a:a1:2b:e0:37: 77:bb:e0:f4:c7:67:a3:a7:10:b5:ce:d2:50:f4:a5:e8:a0:0e: 06:da:89:6a:cb:36:19:94:9b:64:32:56:e2:5f:04:6d:b9:14: 0c:4d:58:59:78:d1:28:9d:4b:4f:a4:ba:fa:a5:e2:21:c1:4e: a8:88:22:46 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM1NzYxNzBBNENBMDA3 MURBRTQwQTY5RDk1NTU3NTIyMkRFNjM0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDtd7VRE5o20IbtQ74X5Gkp1CUFHtrcMx7fU7cvPUPuOgIqh7i cX8j16nQBZtFQB0KITPMub+lDlxrwKV38JhJaOZoczBAnvnlPihD7EoHSReGu4Jf 7l4vCOP6zumngEHL1XAPUW1ymjkW4vDvUIzBe68tUqpR4ODkCrhhAgnjievzNc2v kNmhA3O2X2pDkV1f6nlYv0X78wUAzjSydpPjz1SqOGNoh+gTtmYX0KbSTkAwTcwd gGOeQixn6hryF/LAF7VKB+OJapKsJJiuVKJUmb+3VDmmFlA78xcLjjIQVr1uXprj U8fnFdkIiflHl0ghtAL8J3Z+8jA7V1BcU6/fAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNXYXCkygBx2uQKadlVV1Ii3mNHIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL05YWVhDa3lnQngydVFLYWRsVlYxSWkzbU5ISS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADS+iYwDQYJKoZIhvcNAQELBQADggEBAGRGZDkQ0ywYyX8dwpV68+Bz2kLY Dh3EnewbAahHlB6NNQDFNzQ+xswGX/EAW6pE/1sElbPvuFWjZ3uATYF6697n2k8y +C5Xek+C4G7Bu5Yg3IlIH5YDXz6QCf+daUJ2nS+hriO0MehD3lN64gtuD/wtfeqd +i6yGIjXBBUjaUz5teyCZC6Fee+CydjuCroSbFTLIrnBDJ4NmePoim+WLBT/RY3h iFzsEPUE6q1LEzVSbEo+dVIRoMHBn0xcogjs7tSaoSvgN3e74PTHZ6OnELXO0lD0 peigDgbaiWrLNhmUm2QyVuJfBG25FAxNWFl40SidS0+kuvql4iHBTqiIIkY= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:30 2025 by rpki-client