$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bB3zTFmpiAd6WFAWFs9Amv1Nk8g.roa File: bB3zTFmpiAd6WFAWFs9Amv1Nk8g.roa (raw, json) Hash identifier: HloPDSM9DoLJWzvVGKWZ36WkfyGHE9xZIuyYde6QQbs= Subject key identifier: 6C:1D:F3:4C:59:A9:88:07:7A:58:50:16:16:CF:40:9A:FD:4D:93:C8 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0411 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bB3zTFmpiAd6WFAWFs9Amv1Nk8g.roa Signing time: Wed 18 Dec 2024 02:18:57 +0000 ROA not before: Wed 18 Dec 2024 02:18:57 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.234.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 14:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:57 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=6C1DF34C59A988077A58501616CF409AFD4D93C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:f6:29:ff:f0:15:a6:26:90:e9:8e:36:7a: d8:63:e2:08:4e:a6:9a:aa:21:92:cc:e5:d6:7d:0b: 3e:de:4a:29:83:13:e4:e9:f6:5a:c4:73:ed:77:77: 09:89:e8:95:ff:77:6a:9c:82:49:d8:9a:d3:65:55: d4:32:7b:e8:5c:cf:7a:cc:57:0d:af:f9:4a:75:09: a4:49:f6:d7:2c:49:e6:ff:80:42:14:e4:95:bb:d7: 0d:35:c6:db:ec:a4:82:71:93:98:3a:77:c0:12:80: 06:cd:85:d2:fa:16:b7:2f:47:4a:41:c3:22:61:ac: a2:4d:eb:bb:48:d3:eb:0d:57:a8:87:c7:88:70:9f: 03:17:40:b8:96:b3:2a:ad:93:85:ef:46:5f:b0:f6: 3d:ca:50:c7:91:1f:96:25:9e:e5:d4:e6:6d:24:e7: 5f:2e:f1:7c:2f:10:3b:ca:01:16:6d:8a:2d:2f:50: f6:73:27:a6:fd:46:22:4d:21:a2:45:5f:06:95:70: 56:a6:45:c1:f0:fb:41:ac:1f:b1:83:a5:46:e6:3d: 45:94:58:fd:8e:0f:78:6d:d6:b1:b8:e8:57:1b:0d: 5b:06:0d:34:e8:86:bd:e2:fb:3a:a2:1a:fe:ed:8d: f0:6b:6e:1a:11:99:5b:70:ab:a2:5d:0e:5c:a7:57: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1D:F3:4C:59:A9:88:07:7A:58:50:16:16:CF:40:9A:FD:4D:93:C8 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bB3zTFmpiAd6WFAWFs9Amv1Nk8g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.234.224.0/19 Signature Algorithm: sha256WithRSAEncryption 58:8c:f5:bf:0a:6c:17:6b:a7:f0:fe:0f:ad:63:97:12:9e:30: 45:17:f3:37:84:04:d9:d5:72:94:fe:5e:f5:db:c5:b9:05:fa: cc:ee:86:ae:11:9b:c2:bd:c4:ec:fc:a9:ff:24:64:55:07:d6: a5:8d:54:24:bb:1d:07:be:4e:04:ea:14:3d:2c:19:bf:00:65: 61:65:d2:64:8c:8a:47:98:bf:84:6a:a8:57:77:4e:01:ea:d9: 20:a7:7f:21:61:f4:af:f7:b4:4a:03:f2:c0:ca:f4:ab:20:3c: df:15:e1:59:ec:57:cb:ef:ee:f0:9a:fb:68:91:3a:4e:bb:09: 15:d7:f2:a3:9a:cd:e8:87:d3:ae:a6:16:1b:75:56:9b:e7:2d: 65:e6:89:81:77:99:0e:0c:17:26:ce:d9:7e:f0:ab:4b:80:cf: b3:db:06:44:ec:bc:37:70:fe:c0:16:54:67:10:93:ea:95:96: 25:32:c1:61:3c:8a:91:e2:b8:38:79:83:32:17:11:8b:fc:65: 51:ce:e8:dd:41:6b:8f:2d:aa:a1:e8:ac:5e:d8:28:f4:b9:4b: 2c:8c:ff:19:d8:58:03:ca:45:11:c4:94:11:83:38:0c:c1:c0: 5c:49:95:3f:2e:1d:b8:59:95:e6:41:5e:bd:51:c4:91:b4:d5: e5:d8:2a:f3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDMURGMzRDNTlBOTg4 MDc3QTU4NTAxNjE2Q0Y0MDlBRkQ0RDkzQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXj/Yp//AVpiaQ6Y42ethj4ghOppqqIZLM5dZ9Cz7eSimDE+Tp 9lrEc+13dwmJ6JX/d2qcgknYmtNlVdQye+hcz3rMVw2v+Up1CaRJ9tcsSeb/gEIU 5JW71w01xtvspIJxk5g6d8ASgAbNhdL6FrcvR0pBwyJhrKJN67tI0+sNV6iHx4hw nwMXQLiWsyqtk4XvRl+w9j3KUMeRH5YlnuXU5m0k518u8XwvEDvKARZtii0vUPZz J6b9RiJNIaJFXwaVcFamRcHw+0GsH7GDpUbmPUWUWP2OD3ht1rG46FcbDVsGDTTo hr3i+zqiGv7tjfBrbhoRmVtwq6JdDlynV08JAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbB3zTFmpiAd6WFAWFs9Amv1Nk8gwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2JCM3pURm1waUFkNldGQVdGczlBbXYxTms4Zy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXS6uAwDQYJKoZIhvcNAQELBQADggEBAFiM9b8KbBdrp/D+D61jlxKeMEUX 8zeEBNnVcpT+XvXbxbkF+szuhq4Rm8K9xOz8qf8kZFUH1qWNVCS7HQe+TgTqFD0s Gb8AZWFl0mSMikeYv4RqqFd3TgHq2SCnfyFh9K/3tEoD8sDK9KsgPN8V4VnsV8vv 7vCa+2iROk67CRXX8qOazeiH066mFht1VpvnLWXmiYF3mQ4MFybO2X7wq0uAz7Pb BkTsvDdw/sAWVGcQk+qVliUywWE8ipHiuDh5gzIXEYv8ZVHO6N1Ba48tqqHorF7Y KPS5SyyM/xnYWAPKRRHElBGDOAzBwFxJlT8uHbhZleZBXr1RxJG01eXYKvM= -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:35 2025 by rpki-client