$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pWauo7GrZ0rG_FhGhB8_Drfb6N0.roa File: pWauo7GrZ0rG_FhGhB8_Drfb6N0.roa (raw, json) Hash identifier: /42q+7lC9Frp078bQb9owwtC4O7RNB4lJrbGtFSfprs= Subject key identifier: A5:66:AE:A3:B1:AB:67:4A:C6:FC:58:46:84:1F:3F:0E:B7:DB:E8:DD Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04E3 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pWauo7GrZ0rG_FhGhB8_Drfb6N0.roa Signing time: Wed 18 Dec 2024 02:37:06 +0000 ROA not before: Wed 18 Dec 2024 02:37:06 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.1.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:06 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=A566AEA3B1AB674AC6FC5846841F3F0EB7DBE8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:56:24:30:ee:c3:ad:32:6c:da:4e:b0:f4: ee:dc:b4:28:20:ce:5d:f4:1c:e2:51:a9:b2:83:c2: e3:84:9d:8e:6c:13:d7:5a:17:ca:c2:a2:d5:42:c9: 4c:05:bb:4b:a8:4f:32:50:5c:aa:61:e7:68:15:77: 15:e1:72:ca:85:46:54:00:00:63:54:58:93:46:b4: 7c:2b:56:88:0a:77:0e:8f:83:a8:8a:a8:85:b6:aa: 28:9e:82:f0:be:11:bd:c4:1e:4f:37:19:99:5e:f5: b9:10:21:4c:1b:8b:55:c4:5f:33:6c:28:1b:64:37: e8:61:6c:57:7f:e0:b9:a3:d4:56:af:c8:f3:84:32: bb:b3:6b:b8:cd:22:22:e2:97:c7:fe:07:44:a1:d4: 33:db:12:8b:83:b3:ac:1b:1e:b8:81:0b:dc:b8:5f: c3:be:33:73:11:01:3f:30:1f:dd:a6:6a:c3:86:2d: 27:24:49:aa:fa:63:6c:db:20:6c:dc:97:27:2c:b1: c5:1b:06:a3:b0:99:a3:3f:89:f4:b7:38:c9:73:df: 3b:82:5c:4f:b9:4b:43:88:e2:ee:76:1a:bd:06:51: 78:6c:c2:d3:59:6a:2d:67:c9:d3:a9:7e:a4:36:0d: c6:f8:76:55:83:72:85:1b:6e:2c:f5:ec:d0:83:63: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:66:AE:A3:B1:AB:67:4A:C6:FC:58:46:84:1F:3F:0E:B7:DB:E8:DD X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pWauo7GrZ0rG_FhGhB8_Drfb6N0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.1.118.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:a9:73:63:a2:1e:8d:85:b4:f5:d3:33:37:07:15:35:6a:c3: b7:7f:77:b5:19:fd:6a:e6:72:25:a8:f3:59:3c:ed:95:87:af: 78:d8:80:08:02:5c:2d:2f:c2:82:21:a1:2d:3f:5d:fd:7d:a1: 00:51:44:d8:1b:76:9a:db:08:1e:e8:5b:d9:19:bf:ab:75:bd: 79:dd:1c:2b:39:7a:75:81:6d:cf:0e:ef:07:26:61:b5:ed:c1: 08:bd:0b:57:d7:07:9a:7d:ad:b0:f2:60:7d:84:56:44:c3:32: 09:de:96:97:81:48:8e:ad:93:49:80:1f:47:b9:ff:10:3d:08: d2:df:e3:ec:a7:b6:df:c9:68:d4:e6:6b:c6:89:43:4a:28:ab: 88:ac:23:15:40:bc:70:16:2b:dc:ac:7a:e8:d6:9f:ef:a6:bd: 61:01:f3:c2:7f:22:a8:a4:f6:1a:1c:e2:2c:aa:c6:59:df:4a: c6:de:28:90:32:08:2b:a6:07:4a:6e:05:57:0c:71:79:b2:b2: 14:8f:d0:23:7f:3c:3c:57:84:2b:53:00:ae:78:2e:1d:02:39: 4a:54:38:3d:52:75:ce:97:20:1c:ee:74:7d:94:e2:f7:d4:1c: d4:08:a2:77:53:2c:a9:fa:d2:d7:aa:d6:1c:e6:f6:42:95:aa: a5:a7:f3:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE1NjZBRUEzQjFBQjY3 NEFDNkZDNTg0Njg0MUYzRjBFQjdEQkU4REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyv1YkMO7DrTJs2k6w9O7ctCggzl30HOJRqbKDwuOEnY5sE9da F8rCotVCyUwFu0uoTzJQXKph52gVdxXhcsqFRlQAAGNUWJNGtHwrVogKdw6Pg6iK qIW2qiiegvC+Eb3EHk83GZle9bkQIUwbi1XEXzNsKBtkN+hhbFd/4Lmj1FavyPOE Mruza7jNIiLil8f+B0Sh1DPbEouDs6wbHriBC9y4X8O+M3MRAT8wH92masOGLSck Sar6Y2zbIGzclycsscUbBqOwmaM/ifS3OMlz3zuCXE+5S0OI4u52Gr0GUXhswtNZ ai1nydOpfqQ2Dcb4dlWDcoUbbiz17NCDY/45AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpWauo7GrZ0rG/FhGhB8/Drfb6N0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3BXYXVvN0dyWjByR19GaEdoQjhfRHJmYjZOMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTAXYwDQYJKoZIhvcNAQELBQADggEBAGqpc2OiHo2FtPXTMzcHFTVqw7d/ d7UZ/WrmciWo81k87ZWHr3jYgAgCXC0vwoIhoS0/Xf19oQBRRNgbdprbCB7oW9kZ v6t1vXndHCs5enWBbc8O7wcmYbXtwQi9C1fXB5p9rbDyYH2EVkTDMgnelpeBSI6t k0mAH0e5/xA9CNLf4+yntt/JaNTma8aJQ0ooq4isIxVAvHAWK9yseujWn++mvWEB 88J/Iqik9hoc4iyqxlnfSsbeKJAyCCumB0puBVcMcXmyshSP0CN/PDxXhCtTAK54 Lh0COUpUOD1Sdc6XIBzudH2U4vfUHNQIondTLKn60teq1hzm9kKVqqWn80c= -----END CERTIFICATE-----Generated at Sun Apr 6 12:25:14 2025 by rpki-client