$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pLQN3yYTDVdtFjbUa3eSc7IakLQ.roa File: pLQN3yYTDVdtFjbUa3eSc7IakLQ.roa (raw, json) Hash identifier: 77PP6Vne5DGZ0RhvizlCZJBYSQwlaDdKpKn3KySOGWQ= Subject key identifier: A4:B4:0D:DF:26:13:0D:57:6D:16:36:D4:6B:77:92:73:B2:1A:90:B4 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0526 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pLQN3yYTDVdtFjbUa3eSc7IakLQ.roa Signing time: Wed 18 Dec 2024 02:42:24 +0000 ROA not before: Wed 18 Dec 2024 02:42:24 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.238.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:42:24 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=A4B40DDF26130D576D1636D46B779273B21A90B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:ef:97:65:fb:94:98:42:86:6c:2d:c5:06: 66:c2:76:dc:b2:10:8e:05:31:44:d4:15:b8:36:93: 45:37:cb:1f:a0:43:b9:b3:6e:ef:e6:17:d3:ec:6a: 0f:57:27:22:01:22:81:43:0a:38:1b:84:fb:fb:45: f1:7e:81:b7:19:a3:0e:07:58:ef:4c:bd:55:91:eb: c7:fe:d4:53:d0:bb:06:47:84:00:19:47:14:9f:21: 94:c3:d7:47:01:aa:b1:78:f5:3e:83:5b:e8:a4:20: 91:8e:40:fd:94:64:7c:8b:e9:12:84:90:41:f0:05: 79:17:9f:0a:ee:88:77:46:0b:d5:47:2d:6a:7b:42: e6:1d:4b:f6:23:ce:c2:5e:32:6c:94:bb:0f:91:9c: 8f:74:91:0f:24:cb:28:e2:f1:6b:04:6e:44:8e:4c: bf:23:73:0e:52:c5:d2:db:58:bf:09:9c:40:89:90: 28:92:ab:58:15:6c:78:49:4e:b0:66:62:14:4d:0b: 59:3c:a3:d5:bd:83:6d:b8:59:2e:fe:15:e4:ce:03: 7c:d5:63:ae:73:84:e0:81:b1:b1:dd:63:55:d9:f8: b2:d1:5f:12:12:3a:80:f2:3f:d1:52:28:61:77:26: 5f:df:76:8b:a9:a8:5a:04:ea:40:9f:5f:92:cd:15: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B4:0D:DF:26:13:0D:57:6D:16:36:D4:6B:77:92:73:B2:1A:90:B4 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pLQN3yYTDVdtFjbUa3eSc7IakLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.238.0.0/23 Signature Algorithm: sha256WithRSAEncryption 83:3a:6c:74:11:69:85:58:bb:f5:dd:ee:12:14:87:3f:aa:1a: 47:2a:80:e3:9f:f4:1f:88:98:32:d1:13:12:b5:16:d0:99:7b: a4:74:10:f7:de:27:a0:e5:de:ee:03:2b:f3:65:28:e3:cf:82: e2:ed:2f:9d:96:f3:7b:4f:77:a5:7e:92:8b:c6:e9:84:33:ce: 6c:2d:4b:c8:cf:1f:fd:7c:57:49:72:21:8c:14:8e:37:6f:6d: ec:fe:51:ba:ce:ab:d6:7f:eb:ad:c4:4b:dc:06:5d:09:ab:e3: 9d:e7:7e:f6:a9:4e:8b:3e:9b:41:45:e5:09:42:68:58:91:22: 53:cf:5a:89:25:84:9d:9e:5a:3c:e7:17:80:5d:d1:47:a6:3b: 1d:7c:32:63:aa:e8:27:2f:89:a0:c6:70:0e:e9:47:23:36:01: 1c:03:b6:e1:e7:ba:03:10:8e:b2:f5:f7:11:76:4b:e8:98:3a: 41:93:a9:f3:1a:de:84:35:fb:3b:d0:bb:d9:89:65:16:a3:28: e4:8d:6f:de:be:9e:8a:df:d5:0a:3b:3a:22:8c:5f:04:a3:75: 99:f3:77:30:0b:0f:72:a5:d9:91:6a:7e:bc:d6:75:be:cd:d1: c4:b6:2f:51:30:c4:a2:be:bc:7b:2e:95:fd:ec:ab:f0:d3:f1: 22:c6:47:8a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQyMjRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE0QjQwRERGMjYxMzBE NTc2RDE2MzZENDZCNzc5MjczQjIxQTkwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9I++XZfuUmEKGbC3FBmbCdtyyEI4FMUTUFbg2k0U3yx+gQ7mz bu/mF9Psag9XJyIBIoFDCjgbhPv7RfF+gbcZow4HWO9MvVWR68f+1FPQuwZHhAAZ RxSfIZTD10cBqrF49T6DW+ikIJGOQP2UZHyL6RKEkEHwBXkXnwruiHdGC9VHLWp7 QuYdS/YjzsJeMmyUuw+RnI90kQ8kyyji8WsEbkSOTL8jcw5SxdLbWL8JnECJkCiS q1gVbHhJTrBmYhRNC1k8o9W9g224WS7+FeTOA3zVY65zhOCBsbHdY1XZ+LLRXxIS OoDyP9FSKGF3Jl/fdoupqFoE6kCfX5LNFeoXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpLQN3yYTDVdtFjbUa3eSc7IakLQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3BMUU4zeVlURFZkdEZqYlVhM2VTYzdJYWtMUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHS7gAwDQYJKoZIhvcNAQELBQADggEBAIM6bHQRaYVYu/Xd7hIUhz+qGkcq gOOf9B+ImDLRExK1FtCZe6R0EPfeJ6Dl3u4DK/NlKOPPguLtL52W83tPd6V+kovG 6YQzzmwtS8jPH/18V0lyIYwUjjdvbez+UbrOq9Z/663ES9wGXQmr453nfvapTos+ m0FF5QlCaFiRIlPPWoklhJ2eWjznF4Bd0UemOx18MmOq6CcviaDGcA7pRyM2ARwD tuHnugMQjrL19xF2S+iYOkGTqfMa3oQ1+zvQu9mJZRajKOSNb96+norf1Qo7OiKM XwSjdZnzdzALD3Kl2ZFqfrzWdb7N0cS2L1EwxKK+vHsulf3sq/DT8SLGR4o= -----END CERTIFICATE-----Generated at Sat Apr 5 23:11:12 2025 by rpki-client