$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jXoFe0vXo3rlZF3ynS6LqcxhZ-I.roa File: jXoFe0vXo3rlZF3ynS6LqcxhZ-I.roa (raw, json) Hash identifier: MDdHWdQnZxIHGk9H9t2gpTdIBqK4jsqbBTQhVP7XUug= Subject key identifier: 8D:7A:05:7B:4B:D7:A3:7A:E5:64:5D:F2:9D:2E:8B:A9:CC:61:67:E2 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 050A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jXoFe0vXo3rlZF3ynS6LqcxhZ-I.roa Signing time: Wed 18 Dec 2024 02:40:14 +0000 ROA not before: Wed 18 Dec 2024 02:40:14 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.188.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:40:14 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=8D7A057B4BD7A37AE5645DF29D2E8BA9CC6167E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:49:b1:66:75:44:35:1c:1b:c5:95:46:99: e6:b2:9a:df:1a:c0:70:0b:76:36:3e:87:8b:5b:8f: 70:4c:44:b5:17:b0:8c:4e:0a:c7:32:c8:61:42:89: d7:2f:57:68:10:ac:2a:e8:83:4d:1f:f5:8f:1d:d4: ac:7f:11:dd:13:a3:e2:81:d6:43:6d:66:2e:59:b6: f2:2a:1a:2b:f5:89:11:99:96:25:91:05:bf:38:f1: 3c:7c:03:2f:4d:07:c2:2e:ba:08:e4:59:54:7f:75: 3f:55:51:4f:f8:13:ef:05:31:4c:b9:e5:90:de:f2: 31:29:b4:fb:7d:ed:16:dd:b8:08:6f:60:20:0f:4f: 42:4f:08:19:bc:f2:77:a5:35:a4:c6:20:4d:15:46: 58:27:73:d9:02:48:67:32:b4:b7:de:11:90:6d:a5: 80:3d:e7:01:4d:76:49:9c:51:9f:62:0c:b0:4e:51: 8c:4a:ff:ea:83:25:a8:5b:e8:6b:77:04:e1:b0:e1: d4:8f:69:34:0e:32:47:f7:56:83:88:41:f2:9e:fd: 13:a6:c8:4c:da:06:54:c8:4e:64:ac:c6:c8:b8:b6: fd:03:63:51:2b:4b:04:de:79:d3:9a:2d:21:09:4f: 8c:97:ae:eb:29:1b:ed:dd:2a:e9:a7:8d:c7:cc:4e: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7A:05:7B:4B:D7:A3:7A:E5:64:5D:F2:9D:2E:8B:A9:CC:61:67:E2 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jXoFe0vXo3rlZF3ynS6LqcxhZ-I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.188.182.0/23 Signature Algorithm: sha256WithRSAEncryption b2:92:d6:8d:c0:1b:16:d8:2e:b0:7e:9c:5d:f3:76:9e:d4:14: 3e:40:ae:33:a3:dd:f3:0c:93:59:91:fd:dc:4b:c6:b5:43:2c: 35:7d:72:90:85:a9:75:49:09:09:15:9a:f0:ab:a0:52:bb:37: a4:0c:ab:70:35:97:8e:82:a7:c7:fa:be:f5:57:4a:1e:0c:0a: 97:bc:5e:87:26:84:5c:a7:32:75:c3:79:13:b4:06:de:4f:6d: a6:0b:54:b9:a0:65:c4:e0:a1:e9:20:84:ce:36:f4:ad:10:d8: d3:78:00:c9:c5:85:2b:17:a7:e6:2e:78:c0:61:26:9d:06:62: 50:0e:4d:63:44:75:f3:63:df:8a:6a:2c:38:69:13:20:13:86: 32:a7:7d:b6:48:9d:3d:51:d2:a7:2f:05:ed:62:a2:a4:fc:41: c7:12:4f:73:c7:8a:a8:a3:1f:5b:bf:9a:43:fb:48:e7:14:b4: 69:40:0b:a4:82:d1:6a:d7:21:8e:e5:b7:e9:d0:06:49:7e:1c: e0:e3:e1:a3:8a:dc:da:e7:c9:7f:13:36:7f:12:1b:c0:18:cd: 76:f0:dc:67:9e:35:91:2b:fb:57:ad:48:59:d6:0b:f6:30:70: fa:9e:46:3e:42:43:db:bd:4d:c5:e7:ab:6b:a6:c8:df:76:d5: cf:38:16:f5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQwMTRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhEN0EwNTdCNEJEN0Ez N0FFNTY0NURGMjlEMkU4QkE5Q0M2MTY3RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCssEmxZnVENRwbxZVGmeaymt8awHALdjY+h4tbj3BMRLUXsIxO CscyyGFCidcvV2gQrCrog00f9Y8d1Kx/Ed0To+KB1kNtZi5ZtvIqGiv1iRGZliWR Bb848Tx8Ay9NB8IuugjkWVR/dT9VUU/4E+8FMUy55ZDe8jEptPt97RbduAhvYCAP T0JPCBm88nelNaTGIE0VRlgnc9kCSGcytLfeEZBtpYA95wFNdkmcUZ9iDLBOUYxK /+qDJahb6Gt3BOGw4dSPaTQOMkf3VoOIQfKe/ROmyEzaBlTITmSsxsi4tv0DY1Er SwTeedOaLSEJT4yXruspG+3dKumnjcfMTtdPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjXoFe0vXo3rlZF3ynS6LqcxhZ+IwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2pYb0ZlMHZYbzNybFpGM3luUzZMcWN4aFotSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHSvLYwDQYJKoZIhvcNAQELBQADggEBALKS1o3AGxbYLrB+nF3zdp7UFD5A rjOj3fMMk1mR/dxLxrVDLDV9cpCFqXVJCQkVmvCroFK7N6QMq3A1l46Cp8f6vvVX Sh4MCpe8XocmhFynMnXDeRO0Bt5PbaYLVLmgZcTgoekghM429K0Q2NN4AMnFhSsX p+YueMBhJp0GYlAOTWNEdfNj34pqLDhpEyAThjKnfbZInT1R0qcvBe1ioqT8QccS T3PHiqijH1u/mkP7SOcUtGlAC6SC0WrXIY7lt+nQBkl+HODj4aOK3NrnyX8TNn8S G8AYzXbw3GeeNZEr+1etSFnWC/YwcPqeRj5CQ9u9TcXnq2umyN921c84FvU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:21 2025 by rpki-client