$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/T2PbiVNCXiR1Su-JRt9tZmxfOk0.roa File: T2PbiVNCXiR1Su-JRt9tZmxfOk0.roa (raw, json) Hash identifier: rs0Y7GFdo+l6oJdzlGO2Ya/9NS09sCUSte6NqN8suKg= Subject key identifier: 4F:63:DB:89:53:42:5E:24:75:4A:EF:89:46:DF:6D:66:6C:5F:3A:4D Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0450 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/T2PbiVNCXiR1Su-JRt9tZmxfOk0.roa Signing time: Wed 18 Dec 2024 02:24:06 +0000 ROA not before: Wed 18 Dec 2024 02:24:06 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 27.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:06 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=4F63DB8953425E24754AEF8946DF6D666C5F3A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5d:03:7b:56:28:1a:79:fd:9a:57:17:f2:55: f4:c2:e7:bf:4d:72:ce:96:d0:5a:04:6b:77:9e:af: 91:2c:6b:9b:37:bb:61:f9:fe:b6:53:17:18:5b:83: 21:e6:d9:f6:0b:16:c8:c7:67:9a:5d:fb:82:7a:7c: 71:15:6f:e1:9b:b7:2f:f5:f6:76:00:28:c4:b9:b2: 6d:dd:48:b6:ed:c2:9f:1f:d4:0b:30:3a:72:7f:6e: f3:ae:c7:17:1a:4a:25:69:7e:ba:2f:17:31:91:21: df:57:ce:3b:73:b8:12:1d:10:54:4c:9d:7a:68:58: 60:a1:7c:8d:69:5d:e6:ee:9e:c5:98:76:18:09:09: fb:43:c0:0b:61:00:78:f2:03:03:2f:2e:01:be:41: ce:c0:d8:a3:19:73:bd:02:69:f6:be:76:2b:bb:c1: 26:06:9d:4f:cc:44:72:d2:92:5d:9d:11:24:f1:05: e4:26:b2:ae:ae:54:3e:e3:ee:1f:29:3c:f6:b8:5b: 7d:fb:0e:9e:35:b6:fd:55:6e:15:24:d4:0a:3c:fb: 5b:62:45:55:f2:b1:58:e5:55:47:66:a1:8d:75:3b: 0a:62:d6:e1:17:06:32:9f:d8:8b:cb:d1:3e:39:b6: 96:30:9e:8e:b9:f2:c3:45:bf:00:25:b9:66:e3:af: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:63:DB:89:53:42:5E:24:75:4A:EF:89:46:DF:6D:66:6C:5F:3A:4D X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/T2PbiVNCXiR1Su-JRt9tZmxfOk0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:26:d8:16:b9:d1:35:c2:f0:1f:bb:d5:2f:d5:8b:12:64:50: fc:26:81:6f:7f:97:72:21:c3:8b:42:7c:41:07:cd:1f:e5:f7: 01:a4:f3:6a:ec:e9:af:4b:52:32:fd:db:17:23:77:5b:27:6c: 6e:c3:fa:36:9d:3a:b2:e0:60:71:4b:89:71:31:a7:6c:f3:88: db:0f:98:35:c2:ff:d9:5c:37:7d:6a:e3:6f:50:60:43:b6:e8: 4c:5a:db:ba:cd:93:1d:2f:ad:2f:e6:ed:0e:dc:f4:80:fc:ea: 26:2b:0f:76:ac:15:c4:7c:49:5e:b9:e7:b9:1f:6c:f9:bf:37: b3:72:fd:c8:28:dd:0b:26:ce:99:0f:0c:89:f9:21:2d:ea:34: 72:ca:d6:04:40:dd:40:03:c4:7d:b0:80:4a:0b:9d:3d:74:75: 9a:b6:70:33:ef:3e:71:32:c2:b5:18:71:3d:76:ed:b5:a2:a2: 74:7d:7f:5f:7e:95:3e:5f:d1:19:2f:80:30:2f:bd:c8:b1:6a: 85:0f:16:f6:dd:68:98:80:a8:36:66:69:d7:61:4f:b3:3b:54: f0:c0:50:a1:30:0d:e1:21:cb:0a:87:3b:f5:9f:82:b0:15:bc: b7:f1:c0:13:c4:f3:7a:fa:8e:a2:f0:83:c5:f8:af:11:71:7f: 8f:18:6e:93 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MDZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGNjNEQjg5NTM0MjVF MjQ3NTRBRUY4OTQ2REY2RDY2NkM1RjNBNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCRXQN7Vigaef2aVxfyVfTC579Ncs6W0FoEa3eer5Esa5s3u2H5 /rZTFxhbgyHm2fYLFsjHZ5pd+4J6fHEVb+Gbty/19nYAKMS5sm3dSLbtwp8f1Asw OnJ/bvOuxxcaSiVpfrovFzGRId9XzjtzuBIdEFRMnXpoWGChfI1pXebunsWYdhgJ CftDwAthAHjyAwMvLgG+Qc7A2KMZc70Cafa+diu7wSYGnU/MRHLSkl2dESTxBeQm sq6uVD7j7h8pPPa4W337Dp41tv1VbhUk1Ao8+1tiRVXysVjlVUdmoY11Owpi1uEX BjKf2IvL0T45tpYwno658sNFvwAluWbjr6gdAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUT2PbiVNCXiR1Su+JRt9tZmxfOk0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1QyUGJpVk5DWGlSMVN1LUpSdDl0Wm14Zk9rMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbVjANBgkqhkiG9w0BAQsFAAOCAQEAEibYFrnRNcLwH7vVL9WLEmRQ/CaB b3+XciHDi0J8QQfNH+X3AaTzauzpr0tSMv3bFyN3WydsbsP6Np06suBgcUuJcTGn bPOI2w+YNcL/2Vw3fWrjb1BgQ7boTFrbus2THS+tL+btDtz0gPzqJisPdqwVxHxJ XrnnuR9s+b83s3L9yCjdCybOmQ8MifkhLeo0csrWBEDdQAPEfbCASgudPXR1mrZw M+8+cTLCtRhxPXbttaKidH1/X36VPl/RGS+AMC+9yLFqhQ8W9t1omICoNmZp12FP sztU8MBQoTAN4SHLCoc79Z+CsBW8t/HAE8TzevqOovCDxfivEXF/jxhukw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:44:04 2025 by rpki-client