$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fGvIlHh5g-_p4CzI_hG-JMJzyKI.roa File: fGvIlHh5g-_p4CzI_hG-JMJzyKI.roa (raw, json) Hash identifier: /4aAMLzN8fa+M0lT3p5Ho+ROAShWrzquxZgL6tCwhHY= Subject key identifier: 7C:6B:C8:94:78:79:83:EF:E9:E0:2C:C8:FE:11:BE:24:C2:73:C8:A2 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0463 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fGvIlHh5g-_p4CzI_hG-JMJzyKI.roa Signing time: Wed 18 Dec 2024 02:24:14 +0000 ROA not before: Wed 18 Dec 2024 02:24:14 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 118.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:14 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=7C6BC894787983EFE9E02CC8FE11BE24C273C8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:d7:76:b8:99:b3:65:55:81:e0:2b:ed:b5: ca:19:5c:8d:1b:9d:68:f4:7c:df:f7:72:07:36:1b: 97:5d:2c:58:06:b6:03:79:af:3b:53:4e:39:42:c6: 46:08:aa:00:6a:e5:41:c2:2b:90:71:1f:2b:af:68: 7a:3a:f4:a5:fb:dc:78:99:66:07:ec:22:8e:55:1b: 83:bb:0b:92:a3:ab:db:3d:e7:22:db:2e:a3:4b:63: 5f:d6:d2:55:d1:3e:0b:46:95:a9:d8:2d:cb:b0:44: fa:7f:fc:64:39:cb:25:be:aa:6e:b3:b6:27:86:e0: 69:fe:47:f4:f6:66:b0:8c:8b:90:09:d8:5d:d9:55: 3e:f9:38:63:60:32:dc:02:d6:67:bf:c0:ee:02:79: 9d:2c:e4:2c:89:ad:8a:3a:0e:33:32:54:5e:77:81: d5:c1:61:68:dd:15:79:bb:73:1e:09:32:56:87:45: 6f:fb:10:c6:66:e4:4f:78:d7:9f:ed:9d:96:6a:8a: ec:d8:ec:32:4b:08:83:69:b2:47:f3:2a:d4:da:ed: 47:16:e3:72:23:a0:f6:3e:52:2a:7f:9a:1b:d7:e7: dd:b9:00:3b:a2:15:2e:d8:a2:c8:c5:93:b4:46:17: 45:db:3a:1b:b8:40:34:df:26:b7:af:10:06:9d:84: bf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6B:C8:94:78:79:83:EF:E9:E0:2C:C8:FE:11:BE:24:C2:73:C8:A2 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fGvIlHh5g-_p4CzI_hG-JMJzyKI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1c:9f:a3:58:bb:4d:91:30:3b:f1:86:0c:3e:7c:93:60:9d:29: d8:73:cc:50:fe:32:de:47:c4:16:c1:6c:a9:c5:d5:ab:ef:20: 00:ad:57:74:09:a4:89:93:c8:74:fc:2a:9c:59:05:83:d0:bf: 14:d8:56:85:48:1b:e9:82:a8:41:02:c5:36:12:8f:e0:f6:a5: 07:57:b0:86:55:fa:4c:66:f9:1a:a2:15:07:d0:2f:61:ac:5d: 2e:c6:97:41:0e:e9:06:8e:ff:d1:19:93:32:77:d2:92:a5:fc: 74:78:61:6f:70:44:cf:0e:43:c0:d2:79:d6:7f:c2:74:00:ae: 2a:4f:86:4d:b2:4d:9e:56:10:35:c9:23:41:be:16:03:fc:69: 72:a6:66:46:fe:f1:e4:ba:61:12:67:2b:4c:b6:54:7a:19:63: 82:12:7e:65:f0:db:ed:22:52:5a:d2:bf:1f:b6:bf:5e:56:a5: 72:0f:28:23:68:4f:99:b1:b3:98:b9:57:4c:ae:c4:ea:9c:27: cd:b4:7e:34:a2:ce:4e:8a:06:44:2f:ae:5c:ff:05:77:db:22: 91:78:87:c0:d5:9d:66:fe:3a:49:c5:e9:e5:2c:4b:d2:92:5e: 4a:25:be:94:d4:fb:bb:b2:d0:2a:8f:1c:2d:38:7c:5a:41:ac: 8e:18:04:d8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MTRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdDNkJDODk0Nzg3OTgz RUZFOUUwMkNDOEZFMTFCRTI0QzI3M0M4QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcq9d2uJmzZVWB4CvttcoZXI0bnWj0fN/3cgc2G5ddLFgGtgN5 rztTTjlCxkYIqgBq5UHCK5BxHyuvaHo69KX73HiZZgfsIo5VG4O7C5Kjq9s95yLb LqNLY1/W0lXRPgtGlanYLcuwRPp//GQ5yyW+qm6ztieG4Gn+R/T2ZrCMi5AJ2F3Z VT75OGNgMtwC1me/wO4CeZ0s5CyJrYo6DjMyVF53gdXBYWjdFXm7cx4JMlaHRW/7 EMZm5E9415/tnZZqiuzY7DJLCINpskfzKtTa7UcW43IjoPY+Uip/mhvX5925ADui FS7YosjFk7RGF0XbOhu4QDTfJrevEAadhL9DAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUfGvIlHh5g+/p4CzI/hG+JMJzyKIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2ZHdklsSGg1Zy1fcDRDeklfaEctSk1KenlLSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB2mTANBgkqhkiG9w0BAQsFAAOCAQEAHJ+jWLtNkTA78YYMPnyTYJ0p2HPM UP4y3kfEFsFsqcXVq+8gAK1XdAmkiZPIdPwqnFkFg9C/FNhWhUgb6YKoQQLFNhKP 4PalB1ewhlX6TGb5GqIVB9AvYaxdLsaXQQ7pBo7/0RmTMnfSkqX8dHhhb3BEzw5D wNJ51n/CdACuKk+GTbJNnlYQNckjQb4WA/xpcqZmRv7x5LphEmcrTLZUehljghJ+ ZfDb7SJSWtK/H7a/Xlalcg8oI2hPmbGzmLlXTK7E6pwnzbR+NKLOTooGRC+uXP8F d9sikXiHwNWdZv46ScXp5SxL0pJeSiW+lNT7u7LQKo8cLTh8WkGsjhgE2A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:28:06 2025 by rpki-client