$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa File: NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa (raw, json) Hash identifier: BlNWV/kxBABVbDc5VtMtdhjGKbB73ciwxNqzLUINirY= Subject key identifier: 36:B2:B2:23:6A:0F:D9:7A:AD:A8:27:59:23:6C:B1:7D:0A:70:F7:66 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 041A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa Signing time: Wed 18 Dec 2024 02:18:59 +0000 ROA not before: Wed 18 Dec 2024 02:18:59 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 222.3.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:59 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=36B2B2236A0FD97AADA82759236CB17D0A70F766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:10:3f:5e:71:61:64:8b:a5:ad:7f:36:be: 87:4a:c8:4b:56:fc:53:23:80:11:4a:36:d0:bc:a5: f0:98:39:15:c9:24:c0:f5:0f:4e:b6:9b:84:68:a2: 5f:e3:d1:89:ef:ef:26:20:7f:95:1a:dc:23:ea:c2: c3:32:f5:43:99:e5:58:38:5e:1a:9a:28:6e:bb:84: 02:33:ba:3e:d5:16:e3:4f:cb:6e:c9:db:28:03:a8: c1:87:52:d9:74:d8:d6:75:f1:c8:4a:b4:93:75:10: 29:48:d7:b3:8d:4d:f3:32:0c:c8:62:2b:fe:1d:95: 68:19:5a:9f:0e:9e:33:99:f9:71:8c:d5:6d:85:58: 88:ea:eb:9a:91:cc:b4:fa:ae:79:04:20:49:20:b2: 6e:92:7b:67:69:34:cf:5d:bd:1a:ad:bf:99:04:7a: 1e:b3:03:3d:b0:62:fe:6f:91:b1:d6:f3:ca:4e:95: be:7b:af:02:78:9b:95:dc:ac:46:ee:22:c9:c5:33: 8d:c1:b8:56:b3:36:d7:57:ec:34:4c:52:88:ab:90: 31:7e:5b:ee:2f:79:5f:6d:36:09:95:28:cf:51:33: 32:e2:f5:2f:db:5d:1d:5a:64:5a:da:31:8f:1b:32: 2c:c7:00:0d:be:67:2b:33:4f:6c:bb:f0:18:4c:2b: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:B2:23:6A:0F:D9:7A:AD:A8:27:59:23:6C:B1:7D:0A:70:F7:66 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NrKyI2oP2XqtqCdZI2yxfQpw92Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 222.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:c0:8d:79:61:f4:89:88:02:ce:24:a9:aa:4c:3d:bc:bb:86: 5c:87:7b:1b:53:69:ae:79:5d:8c:24:ca:56:9b:f9:30:54:75: d3:fd:bc:70:5d:56:7f:11:be:de:cb:43:ae:f1:0c:54:00:ee: b6:56:28:a9:67:ac:55:96:0a:38:f4:ce:a3:49:f0:b5:8a:d7: cb:50:42:cb:0e:3c:3a:49:ae:20:23:75:79:24:72:5c:84:52: a6:93:23:b9:06:59:c8:c0:b1:a3:7f:47:65:27:04:b4:c7:72: 0a:10:d5:32:33:79:b4:a6:6e:2a:21:52:a4:61:7a:6c:db:35: 57:d3:55:8c:c3:56:ce:1d:ee:a3:0f:12:f7:96:bb:da:24:cb: 37:ef:77:5e:cb:40:ad:6f:7e:4f:69:b4:76:70:88:97:92:a0: 85:cf:71:e3:6e:6b:c1:f3:9f:f5:7e:67:f1:d0:ce:c7:60:93: 4f:70:1a:8d:03:80:72:c8:bb:97:58:1b:86:35:c8:1c:a0:f7: bd:f3:5a:91:81:24:be:b8:dd:09:cb:fb:a0:99:49:93:e1:6f: 12:43:4c:46:42:b1:06:46:39:69:f5:e9:9d:8e:33:15:9c:a8: f9:87:07:92:ba:50:58:b9:d3:7b:89:75:34:9b:ac:61:c2:8a: 3e:1f:db:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM2QjJCMjIzNkEwRkQ5 N0FBREE4Mjc1OTIzNkNCMTdEMEE3MEY3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDbRA/XnFhZIulrX82vodKyEtW/FMjgBFKNtC8pfCYORXJJMD1 D062m4Rool/j0Ynv7yYgf5Ua3CPqwsMy9UOZ5Vg4XhqaKG67hAIzuj7VFuNPy27J 2ygDqMGHUtl02NZ18chKtJN1EClI17ONTfMyDMhiK/4dlWgZWp8OnjOZ+XGM1W2F WIjq65qRzLT6rnkEIEkgsm6Se2dpNM9dvRqtv5kEeh6zAz2wYv5vkbHW88pOlb57 rwJ4m5XcrEbuIsnFM43BuFazNtdX7DRMUoirkDF+W+4veV9tNgmVKM9RMzLi9S/b XR1aZFraMY8bMizHAA2+ZyszT2y78BhMK6kJAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUNrKyI2oP2XqtqCdZI2yxfQpw92YwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL05yS3lJMm9QMlhxdHFDZFpJMnl4ZlFwdzkyWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDeAzANBgkqhkiG9w0BAQsFAAOCAQEAK8CNeWH0iYgCziSpqkw9vLuGXId7 G1NprnldjCTKVpv5MFR10/28cF1WfxG+3stDrvEMVADutlYoqWesVZYKOPTOo0nw tYrXy1BCyw48OkmuICN1eSRyXIRSppMjuQZZyMCxo39HZScEtMdyChDVMjN5tKZu KiFSpGF6bNs1V9NVjMNWzh3uow8S95a72iTLN+93XstArW9+T2m0dnCIl5Kghc9x 425rwfOf9X5n8dDOx2CTT3AajQOAcsi7l1gbhjXIHKD3vfNakYEkvrjdCcv7oJlJ k+FvEkNMRkKxBkY5afXpnY4zFZyo+YcHkrpQWLnTe4l1NJusYcKKPh/bXQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:21 2025 by rpki-client