$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lk4JwD0WREdNhYxGYEb4Fdppq7o.roa File: lk4JwD0WREdNhYxGYEb4Fdppq7o.roa (raw, json) Hash identifier: Y3a3YpjZIbU/5oftvbh+21gj8xFp3ZIY68Na209Ee+k= Subject key identifier: 96:4E:09:C0:3D:16:44:47:4D:85:8C:46:60:46:F8:15:DA:69:AB:BA Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0546 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lk4JwD0WREdNhYxGYEb4Fdppq7o.roa Signing time: Wed 18 Dec 2024 02:44:22 +0000 ROA not before: Wed 18 Dec 2024 02:44:22 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.198.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:44:22 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=964E09C03D1644474D858C466046F815DA69ABBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:df:aa:41:2d:0d:84:bb:55:75:51:88:01: bc:9a:eb:6b:6b:6f:1d:6c:d7:08:37:1c:7c:85:1a: 4e:a6:86:4e:bb:e9:2a:8f:11:43:7d:e7:b7:1f:ec: f0:c4:73:e4:6c:ed:ef:93:3f:d2:0a:e2:28:9b:4a: 1c:59:a1:13:2b:c8:6f:7b:f0:c7:cb:44:a8:d9:55: 71:cf:dc:62:56:55:77:63:40:b0:e0:8e:86:8f:b2: 45:89:0f:e0:30:7a:53:09:7f:a6:13:90:2b:58:5c: 86:36:fb:82:fb:ca:aa:d0:ee:0d:64:af:b8:b3:83: 57:2f:b9:85:e2:67:7a:f7:3a:59:0e:7e:2c:22:63: e4:03:0c:b9:db:1e:f2:6f:29:f3:77:72:c5:49:7d: 89:cc:6c:fb:4e:99:65:f8:a8:9a:3f:21:cd:ed:48: 97:71:a0:c9:f6:31:0a:8b:b5:4d:b6:0e:da:97:09: 4b:8f:70:9d:43:d7:4d:50:fd:00:4d:64:4b:c7:17: e1:b9:a2:6d:43:29:32:fb:d3:a3:66:e5:ac:79:65: 6d:28:bc:85:7c:06:71:a6:09:fa:d5:f4:e3:73:5c: c4:cc:a1:45:02:e7:3c:0d:ec:2e:c3:48:02:39:55: 14:a0:58:f3:d7:04:7c:4b:ae:17:d4:32:be:50:32: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4E:09:C0:3D:16:44:47:4D:85:8C:46:60:46:F8:15:DA:69:AB:BA X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lk4JwD0WREdNhYxGYEb4Fdppq7o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.198.90.0/23 Signature Algorithm: sha256WithRSAEncryption b0:05:ac:4d:fb:ac:79:ca:46:d8:de:65:3d:db:ec:2b:66:ee: bd:7d:90:01:90:82:9a:79:4d:b0:20:5e:e9:4d:c0:e5:90:10: fa:fb:9c:7e:9a:4f:64:6b:ea:8e:2b:06:ce:cb:93:bd:11:f9: 81:b9:cd:71:c7:9f:8d:34:be:09:71:16:8c:24:16:a8:b2:23: fa:49:e4:ef:a9:a1:a3:97:1d:d6:97:33:6f:27:79:f1:72:c3: 7f:ce:be:47:42:ba:99:31:29:1c:a7:57:66:0a:d5:ed:84:a0: e6:08:ee:de:28:3e:f0:77:19:1f:d0:21:71:0f:ee:f1:c8:7c: 91:61:e9:9e:23:22:2f:b4:9c:df:73:dd:80:0b:74:b7:cf:dd: 0c:3c:19:7d:66:57:51:63:a5:ae:c8:86:08:92:5b:60:68:f6: b5:2f:3e:b0:af:6f:35:c9:24:f7:1a:7f:a3:cb:62:d2:c1:80: 20:99:6c:e9:7e:58:32:d0:fd:7a:2b:a5:c7:63:71:f5:03:23: d4:d6:0c:7f:ef:33:95:54:ba:28:80:35:ca:64:04:12:3a:c1: a9:d6:4e:6c:53:1d:1e:87:30:3f:bb:d1:76:8a:3b:a6:66:88: 6a:5a:2e:52:2e:3d:c2:77:76:5c:f6:fe:b9:c7:17:26:34:51: 03:41:c7:a9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQ0MjJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk2NEUwOUMwM0QxNjQ0 NDc0RDg1OEM0NjYwNDZGODE1REE2OUFCQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrSt+qQS0NhLtVdVGIAbya62trbx1s1wg3HHyFGk6mhk676SqP EUN957cf7PDEc+Rs7e+TP9IK4iibShxZoRMryG978MfLRKjZVXHP3GJWVXdjQLDg joaPskWJD+AwelMJf6YTkCtYXIY2+4L7yqrQ7g1kr7izg1cvuYXiZ3r3OlkOfiwi Y+QDDLnbHvJvKfN3csVJfYnMbPtOmWX4qJo/Ic3tSJdxoMn2MQqLtU22DtqXCUuP cJ1D101Q/QBNZEvHF+G5om1DKTL706Nm5ax5ZW0ovIV8BnGmCfrV9ONzXMTMoUUC 5zwN7C7DSAI5VRSgWPPXBHxLrhfUMr5QMpDtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlk4JwD0WREdNhYxGYEb4Fdppq7owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2xrNEp3RDBXUkVkTmhZeEdZRWI0RmRwcHE3by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHSxlowDQYJKoZIhvcNAQELBQADggEBALAFrE37rHnKRtjeZT3b7Ctm7r19 kAGQgpp5TbAgXulNwOWQEPr7nH6aT2Rr6o4rBs7Lk70R+YG5zXHHn400vglxFowk FqiyI/pJ5O+poaOXHdaXM28nefFyw3/OvkdCupkxKRynV2YK1e2EoOYI7t4oPvB3 GR/QIXEP7vHIfJFh6Z4jIi+0nN9z3YALdLfP3Qw8GX1mV1Fjpa7IhgiSW2Bo9rUv PrCvbzXJJPcaf6PLYtLBgCCZbOl+WDLQ/XorpcdjcfUDI9TWDH/vM5VUuiiANcpk BBI6wanWTmxTHR6HMD+70XaKO6ZmiGpaLlIuPcJ3dlz2/rnHFyY0UQNBx6k= -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:46 2025 by rpki-client