$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o2eecWL0_9ddrg8tD1kaLfxOHK8.roa File: o2eecWL0_9ddrg8tD1kaLfxOHK8.roa (raw, json) Hash identifier: 2h7dTxvwDDeI78QxekVWpoyNw4QazxC0eBq89P4gvsA= Subject key identifier: A3:67:9E:71:62:F4:FF:D7:5D:AE:0F:2D:0F:59:1A:2D:FC:4E:1C:AF Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0470 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o2eecWL0_9ddrg8tD1kaLfxOHK8.roa Signing time: Wed 18 Dec 2024 02:26:21 +0000 ROA not before: Wed 18 Dec 2024 02:26:21 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.143.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:26:21 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=A3679E7162F4FFD75DAE0F2D0F591A2DFC4E1CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:01:73:a0:19:ed:61:f7:7e:75:c4:33:9c: dc:7a:ad:e6:94:e5:77:a9:c5:1b:62:7b:cf:5c:f6: 28:84:e6:5e:b5:f3:f6:c8:ad:70:95:8a:da:0f:2d: b1:d6:74:9b:d2:9a:47:e7:5a:e5:64:19:9f:7f:a5: 88:50:bc:9a:66:fa:ba:90:c3:f8:a0:98:d3:29:83: 8c:18:e6:93:5a:75:0b:1a:1e:d5:57:5a:5d:19:78: 97:9e:05:6b:ff:51:61:30:c4:9a:19:87:9b:ef:f0: 4b:4a:79:31:c2:0e:de:53:61:91:20:7d:ff:1c:fb: b1:6b:ed:aa:31:59:98:f6:82:43:75:55:06:cb:2b: 23:65:28:cc:3a:9e:ea:af:6e:b1:a6:9a:17:18:b3: 14:c4:b5:f9:02:f6:5f:5a:06:28:08:de:c8:99:76: 5f:a7:8f:62:20:15:cd:ca:3d:77:44:c9:a0:24:ab: 67:04:9b:b9:0e:0f:91:a5:26:dc:57:f4:d3:b0:0f: ec:f4:ea:c8:6e:c5:49:4f:18:ec:cd:01:c9:05:56: 22:2f:79:09:00:e0:d5:f9:d9:55:57:ea:57:65:23: a0:3d:57:5a:19:96:47:ac:7e:ac:2c:bf:9c:92:ab: 52:ef:b6:9d:25:36:31:7d:34:e7:ee:42:7d:59:3b: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:9E:71:62:F4:FF:D7:5D:AE:0F:2D:0F:59:1A:2D:FC:4E:1C:AF X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o2eecWL0_9ddrg8tD1kaLfxOHK8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption b3:96:32:44:ac:35:15:3e:71:40:c6:82:b1:a6:95:b2:c0:40: 40:a2:07:60:5e:4a:d4:eb:75:ca:5f:5b:5b:0b:3a:65:e1:28: 1e:c6:14:26:e3:bf:1c:3a:40:24:db:29:49:01:7d:96:d2:d6: 66:38:b7:f6:94:3e:c4:d4:1e:10:10:99:a8:2c:0a:52:90:e7: ff:0c:3b:fd:ad:27:49:01:32:bb:33:0f:98:2e:ec:a1:7f:5a: 97:1c:23:ff:5a:28:2a:6d:60:f3:99:0d:5f:a4:ea:5e:0a:ce: a1:d3:39:80:1f:44:47:08:6b:e4:42:d1:c9:50:b2:48:0a:0d: 4c:5c:5e:eb:44:a0:02:88:23:81:67:b8:73:8b:28:36:3c:2c: eb:27:3d:b7:f6:20:10:aa:2e:4e:10:cb:0e:07:43:10:25:59: cf:47:50:78:66:17:01:70:37:c1:b2:94:1d:88:b9:47:c2:73: 6f:05:fe:39:ca:61:5a:3d:e5:0d:ca:e8:82:0f:72:01:76:cf: c1:ae:c4:28:6d:9f:82:5f:bf:ba:bc:76:e5:ec:73:19:8e:79: 4f:80:ab:c9:ad:a8:81:5c:61:ee:ba:e1:73:3e:db:8c:b3:c8: dd:58:98:28:1b:ae:37:b7:c5:1f:b5:34:9c:fa:53:29:05:f8: da:ff:7d:4f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI2MjFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEzNjc5RTcxNjJGNEZG RDc1REFFMEYyRDBGNTkxQTJERkM0RTFDQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUlQFzoBntYfd+dcQznNx6reaU5XepxRtie89c9iiE5l618/bI rXCVitoPLbHWdJvSmkfnWuVkGZ9/pYhQvJpm+rqQw/igmNMpg4wY5pNadQsaHtVX Wl0ZeJeeBWv/UWEwxJoZh5vv8EtKeTHCDt5TYZEgff8c+7Fr7aoxWZj2gkN1VQbL KyNlKMw6nuqvbrGmmhcYsxTEtfkC9l9aBigI3siZdl+nj2IgFc3KPXdEyaAkq2cE m7kOD5GlJtxX9NOwD+z06shuxUlPGOzNAckFViIveQkA4NX52VVX6ldlI6A9V1oZ lkesfqwsv5ySq1Lvtp0lNjF9NOfuQn1ZO9t3AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUo2eecWL0/9ddrg8tD1kaLfxOHK8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL28yZWVjV0wwXzlkZHJnOHREMWthTGZ4T0hLOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7jzANBgkqhkiG9w0BAQsFAAOCAQEAs5YyRKw1FT5xQMaCsaaVssBAQKIH YF5K1Ot1yl9bWws6ZeEoHsYUJuO/HDpAJNspSQF9ltLWZji39pQ+xNQeEBCZqCwK UpDn/ww7/a0nSQEyuzMPmC7soX9alxwj/1ooKm1g85kNX6TqXgrOodM5gB9ERwhr 5ELRyVCySAoNTFxe60SgAogjgWe4c4soNjws6yc9t/YgEKouThDLDgdDECVZz0dQ eGYXAXA3wbKUHYi5R8JzbwX+OcphWj3lDcrogg9yAXbPwa7EKG2fgl+/urx25exz GY55T4Crya2ogVxh7rrhcz7bjLPI3ViYKBuuN7fFH7U0nPpTKQX42v99Tw== -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:37 2025 by rpki-client