$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gSq6z7yqd9ShOdUvc0EXT2o4ZP0.roa File: gSq6z7yqd9ShOdUvc0EXT2o4ZP0.roa (raw, json) Hash identifier: gglBWFdW2hid+h2FL8jG5gTDYFQjXst2XyAd4VQ10Ek= Subject key identifier: 81:2A:BA:CF:BC:AA:77:D4:A1:39:D5:2F:73:41:17:4F:6A:38:64:FD Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04E7 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gSq6z7yqd9ShOdUvc0EXT2o4ZP0.roa Signing time: Wed 18 Dec 2024 02:37:07 +0000 ROA not before: Wed 18 Dec 2024 02:37:07 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.166.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:07 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=812ABACFBCAA77D4A139D52F7341174F6A3864FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:c1:e5:3d:7e:5f:7c:5c:14:41:1c:7c:84: 8b:be:68:2d:b4:f9:e4:77:e3:e3:8e:f0:d5:f6:56: 43:22:2d:1e:a7:df:06:79:cb:c5:bf:3b:c7:29:39: 14:0f:d4:62:9d:63:41:1d:c9:d6:2d:ce:b3:da:72: f4:de:44:11:50:4e:7e:fd:6e:b4:d9:b5:f7:99:df: b2:3d:06:10:b1:d1:48:2b:f4:43:01:1a:f6:86:1c: 08:02:72:0d:dd:62:8c:bd:71:0a:91:58:4b:03:c7: b7:4d:55:31:bf:a5:2a:24:44:50:c6:55:27:71:49: 2d:36:83:a6:a0:c5:18:a1:ce:ba:ea:a8:d5:37:ce: d0:86:65:62:30:85:88:7c:04:fe:c4:26:2a:f2:67: 43:4f:e0:72:ec:14:15:47:0d:f0:ab:bf:cb:2b:07: 56:eb:e0:2d:ee:ee:c3:d8:f3:9b:6d:42:ea:12:16: 93:3d:d6:4c:43:07:eb:16:6f:23:c2:85:fc:c7:0c: 99:83:3b:b7:fd:05:f0:bb:46:0b:24:60:8f:b7:ef: a0:89:6f:b9:73:33:fb:15:17:00:fa:68:7e:dc:3e: d4:14:4f:ab:11:fc:0a:1f:bd:36:13:6d:01:f3:09: fe:a9:72:05:7b:ad:78:28:c9:38:bd:45:eb:f0:7a: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2A:BA:CF:BC:AA:77:D4:A1:39:D5:2F:73:41:17:4F:6A:38:64:FD X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gSq6z7yqd9ShOdUvc0EXT2o4ZP0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.166.128.0/18 Signature Algorithm: sha256WithRSAEncryption 22:d3:bb:24:15:91:8e:2b:d9:a2:12:8d:ba:0e:a6:f3:4d:a9: 8f:66:a4:9c:2b:ce:07:2c:28:e0:0d:be:ac:ea:15:69:fb:32: 46:ef:01:a3:75:1d:c4:1a:f4:ba:bd:be:82:f8:5d:4f:d7:44: 96:c4:d9:3b:12:bf:3d:72:62:46:25:83:cf:7c:33:3b:96:de: 49:50:a5:c3:d9:b8:56:f8:fd:6a:e0:bc:12:5c:28:9c:87:37: 70:e1:a4:8f:64:b3:b4:b1:a6:19:c9:4e:b5:5d:03:cf:66:c6: 13:3c:6d:e8:87:9f:1d:40:a8:2f:04:d3:92:12:97:29:1e:85: 05:46:83:c1:c7:e8:e1:b2:4f:fb:1f:ae:b5:9e:91:e7:bc:dd: 1c:10:6d:b2:23:d2:50:2d:d0:e1:ed:c5:77:34:21:93:58:2d: ee:b7:20:2c:28:e8:fc:5b:aa:21:35:a0:d9:b2:7f:66:c9:0e: 2b:ec:6c:b7:d2:87:55:07:57:28:3c:92:2e:75:1e:49:da:56: 58:de:52:8e:21:3b:20:04:c3:21:03:6a:6b:7e:f8:d1:0a:b1: a3:25:b0:41:40:03:0f:b0:f7:51:e3:b8:fe:42:8a:e1:73:2f: 73:e7:ea:05:f2:4e:45:6c:e4:fb:bf:4e:e0:6c:6b:e3:01:70: 68:4b:ae:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgxMkFCQUNGQkNBQTc3 RDRBMTM5RDUyRjczNDExNzRGNkEzODY0RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9IcHlPX5ffFwUQRx8hIu+aC20+eR34+OO8NX2VkMiLR6n3wZ5 y8W/O8cpORQP1GKdY0EdydYtzrPacvTeRBFQTn79brTZtfeZ37I9BhCx0Ugr9EMB GvaGHAgCcg3dYoy9cQqRWEsDx7dNVTG/pSokRFDGVSdxSS02g6agxRihzrrqqNU3 ztCGZWIwhYh8BP7EJiryZ0NP4HLsFBVHDfCrv8srB1br4C3u7sPY85ttQuoSFpM9 1kxDB+sWbyPChfzHDJmDO7f9BfC7RgskYI+376CJb7lzM/sVFwD6aH7cPtQUT6sR /AofvTYTbQHzCf6pcgV7rXgoyTi9RevwekOPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgSq6z7yqd9ShOdUvc0EXT2o4ZP0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2dTcTZ6N3lxZDlTaE9kVXZjMEVYVDJvNFpQMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbSpoAwDQYJKoZIhvcNAQELBQADggEBACLTuyQVkY4r2aISjboOpvNNqY9m pJwrzgcsKOANvqzqFWn7MkbvAaN1HcQa9Lq9voL4XU/XRJbE2TsSvz1yYkYlg898 MzuW3klQpcPZuFb4/WrgvBJcKJyHN3DhpI9ks7SxphnJTrVdA89mxhM8beiHnx1A qC8E05ISlykehQVGg8HH6OGyT/sfrrWekee83RwQbbIj0lAt0OHtxXc0IZNYLe63 ICwo6PxbqiE1oNmyf2bJDivsbLfSh1UHVyg8ki51HknaVljeUo4hOyAEwyEDamt+ +NEKsaMlsEFAAw+w91HjuP5CiuFzL3Pn6gXyTkVs5Pu/TuBsa+MBcGhLrjw= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:21 2025 by rpki-client