$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gHlEDHepT5Pqi-GF9ZhNWI-tEvI.roa File: gHlEDHepT5Pqi-GF9ZhNWI-tEvI.roa (raw, json) Hash identifier: QfA5a26Lv1ioksv5KC80takgefDm1qv8t0zl7yuU+eo= Subject key identifier: 80:79:44:0C:77:A9:4F:93:EA:8B:E1:85:F5:98:4D:58:8F:AD:12:F2 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 054D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gHlEDHepT5Pqi-GF9ZhNWI-tEvI.roa Signing time: Wed 18 Dec 2024 02:44:24 +0000 ROA not before: Wed 18 Dec 2024 02:44:24 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.229.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:44:24 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=8079440C77A94F93EA8BE185F5984D588FAD12F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:f7:9d:36:df:dc:91:6b:5e:84:3b:94:12: d8:14:2e:27:c7:8e:d0:08:a2:09:57:3f:82:01:14: 0f:25:c9:b9:a0:6a:fe:74:00:3b:98:10:14:8f:2f: a4:83:d6:a3:5c:28:76:24:04:55:7d:05:23:dd:20: 53:7a:8c:fb:8a:96:d7:f3:d0:e5:53:03:4c:63:bd: ee:bd:ee:ce:84:c5:a9:9e:3f:bd:0d:b0:0a:aa:3a: a2:88:c0:34:ba:33:7c:6f:39:d6:78:34:77:e9:8e: da:1f:fd:f1:8d:47:7f:b7:88:92:7a:c4:f6:fa:ec: f6:7d:03:0e:47:b4:f4:ec:32:27:59:c6:84:2a:ad: b2:85:c7:05:35:69:25:69:21:95:05:e7:a7:8a:24: 9d:d2:28:0a:74:9b:cf:60:6c:f6:23:ed:21:6a:2b: 0a:3e:57:3e:61:5d:fd:f3:45:95:f5:82:3a:fa:4c: 52:26:fe:58:69:e0:87:e7:47:50:4f:92:4b:f3:19: 61:69:99:47:c4:d2:5c:45:d1:f9:48:d2:30:dd:c9: 0e:e4:10:7e:bb:79:70:76:ff:1b:ce:4e:53:3c:a2: 7a:30:b5:10:72:37:7b:6f:62:76:ee:fd:04:6b:c9: fe:de:14:81:38:01:de:35:4b:e9:12:a2:a7:b1:f2: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:44:0C:77:A9:4F:93:EA:8B:E1:85:F5:98:4D:58:8F:AD:12:F2 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gHlEDHepT5Pqi-GF9ZhNWI-tEvI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.229.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:4a:79:0b:d4:43:6c:61:44:a8:48:89:38:8a:67:07:3d:1c: 82:c0:94:bb:76:99:86:00:87:62:69:90:cf:cd:ac:e4:44:1f: 95:77:68:98:b1:dd:da:14:21:03:d3:9d:7e:74:91:10:e8:dc: f7:2b:ed:c0:07:b6:ee:79:c6:fb:b9:de:8e:65:72:19:db:f9: fe:6d:49:58:b1:ba:2e:e2:bd:fb:4a:91:31:96:89:26:b8:52: 99:8e:74:2e:f8:77:37:e3:a6:02:da:8b:e8:d0:af:eb:72:ac: 6c:aa:73:29:5c:62:02:98:f4:09:4a:6d:3f:2d:0f:f7:1e:bb: 59:35:76:0a:9e:50:62:87:f7:0f:5c:14:ae:a5:05:43:db:26: 59:1b:66:d4:a2:d7:5d:1c:05:fe:fd:7e:72:3e:e9:f7:aa:03: 1c:95:f7:2a:47:a0:aa:56:1d:fe:cf:c4:f0:24:1b:f1:80:39: fc:0e:e4:ba:01:7e:b9:67:ef:fb:68:cb:e0:d5:15:da:d8:75: 42:c2:a2:d2:e7:56:33:fb:b5:a2:ad:58:bb:23:0f:6d:88:fb: 06:40:04:13:9b:1f:07:d5:42:ea:0b:05:c2:f0:45:a5:3f:2e: cf:91:f0:f6:3b:49:62:ac:4c:3e:26:85:a8:d7:01:41:9a:21: 91:0a:8a:62 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQ0MjRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwNzk0NDBDNzdBOTRG OTNFQThCRTE4NUY1OTg0RDU4OEZBRDEyRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOufedNt/ckWtehDuUEtgULifHjtAIoglXP4IBFA8lybmgav50 ADuYEBSPL6SD1qNcKHYkBFV9BSPdIFN6jPuKltfz0OVTA0xjve697s6ExameP70N sAqqOqKIwDS6M3xvOdZ4NHfpjtof/fGNR3+3iJJ6xPb67PZ9Aw5HtPTsMidZxoQq rbKFxwU1aSVpIZUF56eKJJ3SKAp0m89gbPYj7SFqKwo+Vz5hXf3zRZX1gjr6TFIm /lhp4IfnR1BPkkvzGWFpmUfE0lxF0flI0jDdyQ7kEH67eXB2/xvOTlM8onowtRBy N3tvYnbu/QRryf7eFIE4Ad41S+kSoqex8ogRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgHlEDHepT5Pqi+GF9ZhNWI+tEvIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2dIbEVESGVwVDVQcWktR0Y5WmhOV0ktdEV2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXS5cAwDQYJKoZIhvcNAQELBQADggEBAG5KeQvUQ2xhRKhIiTiKZwc9HILA lLt2mYYAh2JpkM/NrOREH5V3aJix3doUIQPTnX50kRDo3Pcr7cAHtu55xvu53o5l chnb+f5tSVixui7ivftKkTGWiSa4UpmOdC74dzfjpgLai+jQr+tyrGyqcylcYgKY 9AlKbT8tD/ceu1k1dgqeUGKH9w9cFK6lBUPbJlkbZtSi110cBf79fnI+6feqAxyV 9ypHoKpWHf7PxPAkG/GAOfwO5LoBfrln7/toy+DVFdrYdULCotLnVjP7taKtWLsj D22I+wZABBObHwfVQuoLBcLwRaU/Ls+R8PY7SWKsTD4mhajXAUGaIZEKimI= -----END CERTIFICATE-----Generated at Sat Apr 5 17:31:08 2025 by rpki-client