$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fPNJt3FBPpOrUsQT82uHhn_OyfY.roa File: fPNJt3FBPpOrUsQT82uHhn_OyfY.roa (raw, json) Hash identifier: /KjP95TH071ol50wZMDUHbCaH1I6Yz1TORctgsEZLSU= Subject key identifier: 7C:F3:49:B7:71:41:3E:93:AB:52:C4:13:F3:6B:87:86:7F:CE:C9:F6 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03C3 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fPNJt3FBPpOrUsQT82uHhn_OyfY.roa Signing time: Wed 18 Dec 2024 02:13:04 +0000 ROA not before: Wed 18 Dec 2024 02:13:04 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 182.248.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:13:04 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=7CF349B771413E93AB52C413F36B87867FCEC9F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:95:af:44:ba:45:ce:1b:7e:6f:6e:54:e0: a8:23:e2:49:57:83:88:17:c6:e4:f8:33:28:f2:d9: d7:e3:4c:a5:33:8f:d9:8a:d2:d2:27:49:57:c1:74: 7d:b5:e6:d1:35:64:41:fc:38:d8:34:0e:86:26:ea: 18:03:1d:bc:cf:8f:8d:de:51:fe:01:60:ca:e8:cd: ed:e5:d0:41:ce:0b:04:ba:5c:8e:59:0f:66:6c:47: 1e:43:8e:3e:f3:8b:b5:d2:69:a5:bb:92:b2:f5:f3: 6b:b0:cc:cd:21:bc:c9:98:0a:50:2c:cd:60:c5:67: 6a:8d:2b:a3:38:77:8a:58:36:e4:70:54:56:37:b2: 35:9b:e9:90:60:80:c3:55:db:61:d9:16:11:d2:a2: 8b:1a:c9:7d:43:0d:db:8b:38:c1:0a:c3:c7:d0:db: 87:b1:7e:59:a3:40:ef:79:7c:a6:d2:13:72:b8:29: 84:fe:da:64:8a:bb:b9:23:1c:f1:d0:c9:4b:c7:f7: 2e:9e:c2:2f:a5:11:c0:f8:02:88:76:2c:b4:ba:90: 47:ba:92:58:71:85:4c:a3:7c:de:e1:4a:18:77:ea: ae:7c:bf:42:39:34:6f:6c:49:59:95:6d:9d:b4:6b: eb:3e:dc:a4:18:4e:47:35:b3:5f:ba:68:30:62:72: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F3:49:B7:71:41:3E:93:AB:52:C4:13:F3:6B:87:86:7F:CE:C9:F6 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fPNJt3FBPpOrUsQT82uHhn_OyfY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.248.0.0/18 Signature Algorithm: sha256WithRSAEncryption 44:48:4a:f2:da:0f:b6:37:03:a9:c3:06:c0:9c:e2:2a:fc:e3: 0b:2e:24:53:11:4f:2d:2f:74:67:12:5a:b9:b0:ff:3d:6c:36: 54:29:9d:08:49:96:6d:03:9e:88:f2:c1:0a:dd:83:4a:f1:3f: 86:9a:5a:a9:75:8c:ac:9c:f4:86:e0:a9:e0:06:2c:27:6e:a6: ca:46:07:46:d1:30:5c:13:74:fa:f9:ee:6e:2b:ae:4c:47:73: fc:fd:43:9d:84:ee:7c:ab:b2:16:0d:ae:70:68:f0:44:d4:64: 37:3a:73:9f:1b:f3:df:2c:f8:86:08:52:dd:36:ff:2d:f4:bd: 55:d1:85:a8:26:c0:cd:06:55:e1:46:24:1d:6d:1d:55:80:3e: 48:d6:79:7c:78:29:62:c3:da:db:87:5f:ef:15:62:54:49:98: d5:a8:1b:16:a7:ac:46:3a:ce:a4:00:59:36:23:59:8c:d9:c8: b1:12:15:6d:76:ae:f1:32:ff:22:ca:e8:b0:77:4a:76:fc:6d: 2f:8e:7e:58:f4:91:c3:74:b7:19:14:bf:54:4a:ad:d1:1b:0c: 49:c0:74:bf:be:aa:e0:17:61:62:f4:04:e2:8b:e8:8d:54:62: b9:d4:ab:ed:72:5b:d7:b4:ff:98:40:9b:eb:52:c6:dd:4f:c1: 53:fa:77:16 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEzMDRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdDRjM0OUI3NzE0MTNF OTNBQjUyQzQxM0YzNkI4Nzg2N0ZDRUM5RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe8ZWvRLpFzht+b25U4Kgj4klXg4gXxuT4Myjy2dfjTKUzj9mK 0tInSVfBdH215tE1ZEH8ONg0DoYm6hgDHbzPj43eUf4BYMroze3l0EHOCwS6XI5Z D2ZsRx5Djj7zi7XSaaW7krL182uwzM0hvMmYClAszWDFZ2qNK6M4d4pYNuRwVFY3 sjWb6ZBggMNV22HZFhHSoosayX1DDduLOMEKw8fQ24exflmjQO95fKbSE3K4KYT+ 2mSKu7kjHPHQyUvH9y6ewi+lEcD4Aoh2LLS6kEe6klhxhUyjfN7hShh36q58v0I5 NG9sSVmVbZ20a+s+3KQYTkc1s1+6aDBicqYRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUfPNJt3FBPpOrUsQT82uHhn/OyfYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2ZQTkp0M0ZCUHBPclVzUVQ4MnVIaG5fT3lmWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAa2+AAwDQYJKoZIhvcNAQELBQADggEBAERISvLaD7Y3A6nDBsCc4ir84wsu JFMRTy0vdGcSWrmw/z1sNlQpnQhJlm0DnojywQrdg0rxP4aaWql1jKyc9IbgqeAG LCdupspGB0bRMFwTdPr57m4rrkxHc/z9Q52E7nyrshYNrnBo8ETUZDc6c58b898s +IYIUt02/y30vVXRhagmwM0GVeFGJB1tHVWAPkjWeXx4KWLD2tuHX+8VYlRJmNWo GxanrEY6zqQAWTYjWYzZyLESFW12rvEy/yLK6LB3Snb8bS+Oflj0kcN0txkUv1RK rdEbDEnAdL++quAXYWL0BOKL6I1UYrnUq+1yW9e0/5hAm+tSxt1PwVP6dxY= -----END CERTIFICATE-----Generated at Sat Apr 5 17:45:48 2025 by rpki-client