$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bFxdCIEm6HYj0KVCHrwNAdvJ1N8.roa File: bFxdCIEm6HYj0KVCHrwNAdvJ1N8.roa (raw, json) Hash identifier: 4AlCo4J4cBvRngXbity8oHpzM5xavk5XgR8oAZz0DxM= Subject key identifier: 6C:5C:5D:08:81:26:E8:76:23:D0:A5:42:1E:BC:0D:01:DB:C9:D4:DF Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 041E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bFxdCIEm6HYj0KVCHrwNAdvJ1N8.roa Signing time: Wed 18 Dec 2024 02:19:00 +0000 ROA not before: Wed 18 Dec 2024 02:19:00 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 27.84.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1054 (0x41e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:19:00 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=6C5C5D088126E87623D0A5421EBC0D01DBC9D4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:8e:e5:24:0c:12:af:83:61:f7:37:47:99: d2:62:89:99:9f:a5:b7:b7:b6:b6:80:0b:85:8b:23: 93:43:29:e5:43:36:95:a9:ba:cc:62:8b:3c:ca:28: cf:a6:45:60:f9:54:bd:71:e8:f6:fd:5a:60:a6:ad: 7f:92:5e:e5:38:25:35:2d:53:d8:52:a9:fb:7b:df: e6:d8:83:a9:2a:bc:ac:d0:32:de:f3:dd:3b:4f:a3: fd:dd:7f:7c:b5:6b:2a:d9:c7:57:59:69:a6:d4:c5: 73:89:e0:32:bb:e8:3e:f5:5e:fd:d6:db:d3:62:83: 01:94:ac:49:f2:9b:ab:05:7e:98:64:57:c3:a0:a8: 74:eb:07:07:3d:94:28:df:bb:fe:d8:73:1e:d5:06: 24:3f:7c:43:e8:71:fe:bb:e5:64:7e:a3:71:3e:09: ad:86:79:78:ad:05:a4:5a:8c:f7:22:70:48:d6:84: 66:cd:12:3e:2b:a9:e6:2c:6a:c2:96:da:2c:fd:62: 8c:e6:e3:dd:2b:7b:5b:97:5a:18:c5:f2:0f:33:4f: e4:09:df:1d:90:45:b1:03:24:2f:30:82:61:3c:e3: 71:d5:21:ef:c1:5e:b9:77:46:79:78:43:93:34:d1: 0f:d5:26:2c:d9:a1:8c:ad:b9:8e:46:8d:0a:b6:dc: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:5D:08:81:26:E8:76:23:D0:A5:42:1E:BC:0D:01:DB:C9:D4:DF X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bFxdCIEm6HYj0KVCHrwNAdvJ1N8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.84.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:2c:e0:3f:ea:13:6a:f9:75:83:1a:ad:35:98:fb:01:ad:6e: 1f:27:c2:01:d8:16:34:bd:57:37:e5:4e:36:82:ce:e3:a0:c3: 0a:7e:bb:6f:7c:70:89:42:df:d9:ab:09:67:2f:d0:64:b2:a4: ae:12:a5:6a:8c:4e:24:fc:78:b8:44:cb:cf:2b:94:30:ef:ca: 62:5b:f9:a8:c9:ca:4c:cf:4b:8e:b6:d8:f0:a3:b3:9f:a8:ef: 9e:17:a1:43:c0:a6:7d:6f:33:0b:46:36:20:d0:ae:02:32:e8: b1:9d:bb:8b:87:e6:ba:9f:12:da:55:31:69:3c:ef:24:ad:5b: 39:36:a9:53:df:c6:e2:40:05:43:21:46:5b:a3:63:fe:bc:83: 23:7f:61:65:21:39:e3:8e:e0:1b:ae:7f:5d:63:78:b9:c2:23: 81:82:8c:33:f0:67:66:26:b5:7d:ac:d9:b0:27:f0:ca:c7:57: 7d:4c:c9:c1:a6:f9:15:2d:4a:d8:0d:99:40:83:20:93:9e:5d: 35:61:b8:55:8f:cd:10:5f:9f:8b:a7:9b:cb:2c:c5:4c:26:20: a8:2b:5d:8f:21:99:57:db:ed:32:94:57:2e:cf:36:5b:3d:54: 35:7f:97:81:e7:68:9a:82:5f:60:db:f7:66:42:cf:7f:76:94: 28:a9:9a:26 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE5MDBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDNUM1RDA4ODEyNkU4 NzYyM0QwQTU0MjFFQkMwRDAxREJDOUQ0REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8HI7lJAwSr4Nh9zdHmdJiiZmfpbe3traAC4WLI5NDKeVDNpWp usxiizzKKM+mRWD5VL1x6Pb9WmCmrX+SXuU4JTUtU9hSqft73+bYg6kqvKzQMt7z 3TtPo/3df3y1ayrZx1dZaabUxXOJ4DK76D71Xv3W29NigwGUrEnym6sFfphkV8Og qHTrBwc9lCjfu/7Ycx7VBiQ/fEPocf675WR+o3E+Ca2GeXitBaRajPcicEjWhGbN Ej4rqeYsasKW2iz9Yozm490re1uXWhjF8g8zT+QJ3x2QRbEDJC8wgmE843HVIe/B Xrl3Rnl4Q5M00Q/VJizZoYytuY5GjQq23BKVAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUbFxdCIEm6HYj0KVCHrwNAdvJ1N8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2JGeGRDSUVtNkhZajBLVkNIcndOQWR2SjFOOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbVDANBgkqhkiG9w0BAQsFAAOCAQEAlizgP+oTavl1gxqtNZj7Aa1uHyfC AdgWNL1XN+VONoLO46DDCn67b3xwiULf2asJZy/QZLKkrhKlaoxOJPx4uETLzyuU MO/KYlv5qMnKTM9LjrbY8KOzn6jvnhehQ8CmfW8zC0Y2INCuAjLosZ27i4fmup8S 2lUxaTzvJK1bOTapU9/G4kAFQyFGW6Nj/ryDI39hZSE5447gG65/XWN4ucIjgYKM M/BnZia1fazZsCfwysdXfUzJwab5FS1K2A2ZQIMgk55dNWG4VY/NEF+fi6ebyyzF TCYgqCtdjyGZV9vtMpRXLs82Wz1UNX+XgedomoJfYNv3ZkLPf3aUKKmaJg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:40 2025 by rpki-client