$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/piNtOaFJU5aoBfP8yO64iEMpfyc.roa File: piNtOaFJU5aoBfP8yO64iEMpfyc.roa (raw, json) Hash identifier: G2JnY5Scr9nqjznZP6pbFBOIwXQEI0Z+4AI5m6BlEFM= Subject key identifier: A6:23:6D:39:A1:49:53:96:A8:05:F3:FC:C8:EE:B8:88:43:29:7F:27 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 055A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/piNtOaFJU5aoBfP8yO64iEMpfyc.roa Signing time: Wed 18 Dec 2024 02:46:18 +0000 ROA not before: Wed 18 Dec 2024 02:46:18 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.10.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:46:18 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=A6236D39A1495396A805F3FCC8EEB88843297F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:32:07:aa:4d:fa:22:0a:ff:70:b4:7b:60: bb:a5:22:15:9f:d6:89:8d:14:97:fd:52:cb:42:bd: fb:91:b3:d9:1b:29:02:c3:16:33:fd:21:7c:fb:09: 97:88:c4:81:d7:07:e0:42:c6:a7:1c:66:09:12:a5: 72:dd:6e:05:d3:1b:dd:e2:14:50:9f:21:cc:36:26: 62:c8:d7:39:5a:be:1f:e6:1f:7b:ed:d5:5b:b4:9e: e0:ad:4b:a8:10:23:60:c7:ff:fe:04:e1:87:d9:77: a3:8a:b9:30:23:c1:fd:28:aa:6b:e4:ed:b4:6d:a0: 76:e9:c2:bd:9a:04:d6:d8:d1:f6:6e:24:c8:ee:6c: 84:69:cd:c5:b6:e4:9b:ac:44:db:7a:93:73:2b:93: b4:89:f6:db:b9:59:c4:d9:fc:67:6a:df:74:4e:57: 1c:bb:4f:c6:10:f8:e0:6a:3d:8c:29:f4:55:fc:1d: 63:5a:ca:88:d9:b8:e8:f7:ea:ee:54:1f:35:e5:be: c3:fa:0e:98:99:ba:ca:27:ab:84:5c:fa:f6:03:00: 3c:e5:7e:c7:d7:34:5c:67:44:b5:64:c5:c8:0a:fd: 16:c8:cb:51:a4:a3:05:51:d5:e9:2b:44:be:5b:2e: 62:cb:82:59:93:9b:7f:8a:89:c8:22:71:ee:b3:51: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:23:6D:39:A1:49:53:96:A8:05:F3:FC:C8:EE:B8:88:43:29:7F:27 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/piNtOaFJU5aoBfP8yO64iEMpfyc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.10.153.0/24 Signature Algorithm: sha256WithRSAEncryption a2:cf:8d:0f:38:9a:d2:d7:5f:63:27:95:ee:23:34:f7:c5:85: 74:28:e0:db:d4:a9:13:37:b2:a1:8a:32:f3:8f:fa:92:25:d9: a4:33:2b:c6:42:a8:bf:49:a0:64:d0:8b:e8:7f:6e:aa:0d:ee: 78:5d:d6:5f:69:3c:60:02:6f:bd:e6:7e:fb:22:6f:5b:82:3b: 3c:c1:27:7b:b6:86:af:f8:67:11:44:3f:d1:1c:0c:a0:c6:8c: 44:81:03:cd:ea:4d:d1:8e:01:77:0e:ae:9a:92:01:5e:e4:29: 96:56:d6:ba:bc:b8:c8:13:42:2b:2e:ba:ee:b4:6d:1c:f4:2e: ae:8c:70:1c:ab:72:e7:03:32:b6:f2:22:eb:2c:c7:23:08:c9: bc:96:72:98:e1:7f:65:dd:30:e6:3b:fb:a4:95:ec:62:44:2a: 39:d6:99:5a:ce:62:7c:db:77:5c:23:3a:58:eb:b1:cb:58:8e: 5f:f7:5e:6b:5a:95:a8:de:81:7c:52:ef:fc:ce:7a:12:24:5e: 4a:3c:db:46:e4:1b:ff:66:81:8c:e7:e9:2e:aa:2b:4f:7e:4e: e0:e5:45:ff:bb:86:32:ee:37:5c:14:d8:a3:a1:f4:d9:6f:23: fe:3a:1d:7d:8c:28:5c:d6:e4:9f:90:69:e0:13:50:f7:dd:9a: 28:86:19:23 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQ2MThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEE2MjM2RDM5QTE0OTUz OTZBODA1RjNGQ0M4RUVCODg4NDMyOTdGMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsyzIHqk36Igr/cLR7YLulIhWf1omNFJf9UstCvfuRs9kbKQLD FjP9IXz7CZeIxIHXB+BCxqccZgkSpXLdbgXTG93iFFCfIcw2JmLI1zlavh/mH3vt 1Vu0nuCtS6gQI2DH//4E4YfZd6OKuTAjwf0oqmvk7bRtoHbpwr2aBNbY0fZuJMju bIRpzcW25JusRNt6k3Mrk7SJ9tu5WcTZ/Gdq33ROVxy7T8YQ+OBqPYwp9FX8HWNa yojZuOj36u5UHzXlvsP6DpiZusonq4Rc+vYDADzlfsfXNFxnRLVkxcgK/RbIy1Gk owVR1ekrRL5bLmLLglmTm3+Kicgice6zUaElAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUpiNtOaFJU5aoBfP8yO64iEMpfycwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3BpTnRPYUZKVTVhb0JmUDh5TzY0aUVNcGZ5Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADTCpkwDQYJKoZIhvcNAQELBQADggEBAKLPjQ84mtLXX2Mnle4jNPfFhXQo 4NvUqRM3sqGKMvOP+pIl2aQzK8ZCqL9JoGTQi+h/bqoN7nhd1l9pPGACb73mfvsi b1uCOzzBJ3u2hq/4ZxFEP9EcDKDGjESBA83qTdGOAXcOrpqSAV7kKZZW1rq8uMgT Qisuuu60bRz0Lq6McByrcucDMrbyIussxyMIybyWcpjhf2XdMOY7+6SV7GJEKjnW mVrOYnzbd1wjOljrsctYjl/3XmtalajegXxS7/zOehIkXko820bkG/9mgYzn6S6q K09+TuDlRf+7hjLuN1wU2KOh9NlvI/46HX2MKFzW5J+QaeATUPfdmiiGGSM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:09:26 2025 by rpki-client