$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Sjs6EG46GsOEW5QELluMXTv8NMI.roa File: Sjs6EG46GsOEW5QELluMXTv8NMI.roa (raw, json) Hash identifier: XRdD2D4bOTjbWFXo3SzjU8n5yEol5YywOHAIG2EOZVc= Subject key identifier: 4A:3B:3A:10:6E:3A:1A:C3:84:5B:94:04:2E:5B:8C:5D:3B:FC:34:C2 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0433 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Sjs6EG46GsOEW5QELluMXTv8NMI.roa Signing time: Wed 18 Dec 2024 02:22:18 +0000 ROA not before: Wed 18 Dec 2024 02:22:18 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.128.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:22:18 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=4A3B3A106E3A1AC3845B94042E5B8C5D3BFC34C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:7b:62:4a:8e:e3:8e:29:b3:a9:06:9d:47: a8:81:2f:ec:ea:fd:2c:04:19:9c:f2:77:41:0a:ca: 99:2f:3b:3a:29:ac:07:8d:28:89:ea:cb:cc:83:6f: af:55:c7:cf:2c:91:e0:d7:b6:4e:70:c6:0d:ae:1f: c3:c2:87:b1:bc:0e:16:08:1c:8e:10:41:96:6c:49: 28:3c:82:fd:84:fa:b8:5a:ad:9b:b2:41:31:61:3c: 69:b0:4e:81:32:75:5d:4c:08:be:33:4e:86:77:11: e3:a2:fe:5b:a7:40:0d:f9:0f:85:65:ee:26:72:0b: 51:51:31:02:4e:07:c3:a2:17:50:03:51:7d:db:2c: 92:70:4a:32:e6:2f:c2:f5:21:f6:2b:e3:9d:c4:28: b3:06:a8:9d:7e:85:a1:c7:81:5b:7f:79:14:07:88: 13:99:44:6d:75:fa:43:da:39:7b:a4:ac:19:bc:b5: 8d:34:86:fc:4b:c7:3f:4f:62:79:cc:4b:23:af:5b: 2f:e7:7f:c3:eb:b0:ef:c7:db:51:12:b9:3f:ed:f8: df:22:6f:86:d6:85:29:7b:2c:60:48:de:58:e2:d0: 4d:38:2a:79:b6:80:50:e6:40:35:a3:ab:f0:be:46: 8a:27:f9:2e:79:f5:52:ee:20:05:c0:c1:0b:1a:25: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3B:3A:10:6E:3A:1A:C3:84:5B:94:04:2E:5B:8C:5D:3B:FC:34:C2 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Sjs6EG46GsOEW5QELluMXTv8NMI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.128.0.0/18 Signature Algorithm: sha256WithRSAEncryption 65:2a:62:44:37:2d:de:40:20:88:8f:ce:0c:32:9d:02:0b:c5: 76:17:b9:f2:8d:ec:93:30:4d:c8:c4:64:84:8b:50:57:d3:f7: a0:a5:1e:b6:a4:f3:8d:1e:94:38:0f:e5:62:53:76:b8:11:0b: 83:89:96:56:c5:53:57:9b:73:68:83:59:2b:b9:95:90:75:b2: 9d:22:9a:81:bf:95:d2:38:e5:62:9e:8d:cc:14:f4:7b:e8:e4: 26:10:ef:99:bd:b7:c6:43:2e:ae:be:b0:46:73:01:ad:4c:c0: fd:20:48:54:b1:39:7b:dc:f5:b0:3b:72:7c:00:d8:b8:27:49: f6:8f:ef:25:4a:79:42:9b:55:2e:71:d3:cf:d9:db:6d:6e:a1: d9:a4:94:62:ef:81:1c:61:27:d5:a9:53:f7:45:dc:0e:76:3f: 6f:7d:d7:a4:8a:84:49:db:84:ab:fa:0b:4e:0d:1d:28:c6:94: 99:63:d4:d8:10:4f:de:88:5c:f3:c6:2d:f4:3a:15:7b:35:a5: 12:91:30:07:c3:ce:de:96:69:e7:e8:bd:65:c0:f5:b5:3c:fa: b5:6f:af:4e:71:45:fc:3c:3a:3c:44:13:6d:7a:6a:db:a6:59: f0:e6:e3:67:fb:43:36:7f:16:bc:16:02:60:b8:b8:fd:bf:ca: b8:28:5b:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjIyMThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRBM0IzQTEwNkUzQTFB QzM4NDVCOTQwNDJFNUI4QzVEM0JGQzM0QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuwXtiSo7jjimzqQadR6iBL+zq/SwEGZzyd0EKypkvOzoprAeN KInqy8yDb69Vx88skeDXtk5wxg2uH8PCh7G8DhYIHI4QQZZsSSg8gv2E+rharZuy QTFhPGmwToEydV1MCL4zToZ3EeOi/lunQA35D4Vl7iZyC1FRMQJOB8OiF1ADUX3b LJJwSjLmL8L1IfYr453EKLMGqJ1+haHHgVt/eRQHiBOZRG11+kPaOXukrBm8tY00 hvxLxz9PYnnMSyOvWy/nf8PrsO/H21ESuT/t+N8ib4bWhSl7LGBI3lji0E04Knm2 gFDmQDWjq/C+Roon+S559VLuIAXAwQsaJfjnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSjs6EG46GsOEW5QELluMXTv8NMIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1NqczZFRzQ2R3NPRVc1UUVMbHVNWFR2OE5NSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY7gAAwDQYJKoZIhvcNAQELBQADggEBAGUqYkQ3Ld5AIIiPzgwynQILxXYX ufKN7JMwTcjEZISLUFfT96ClHrak840elDgP5WJTdrgRC4OJllbFU1ebc2iDWSu5 lZB1sp0imoG/ldI45WKejcwU9Hvo5CYQ75m9t8ZDLq6+sEZzAa1MwP0gSFSxOXvc 9bA7cnwA2LgnSfaP7yVKeUKbVS5x08/Z221uodmklGLvgRxhJ9WpU/dF3A52P299 16SKhEnbhKv6C04NHSjGlJlj1NgQT96IXPPGLfQ6FXs1pRKRMAfDzt6WaefovWXA 9bU8+rVvr05xRfw8OjxEE216atumWfDm42f7QzZ/FrwWAmC4uP2/yrgoW9Y= -----END CERTIFICATE-----Generated at Sun Apr 6 01:40:36 2025 by rpki-client