$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qy4jev-BefO7XQzCrtfhtPPlMhU.roa File: qy4jev-BefO7XQzCrtfhtPPlMhU.roa (raw, json) Hash identifier: Ky1gJnq6QuIUc1F88zQ5hIhsNbq283LdZ5w6GrlWgU8= Subject key identifier: AB:2E:23:7A:FF:81:79:F3:BB:5D:0C:C2:AE:D7:E1:B4:F3:E5:32:15 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0474 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qy4jev-BefO7XQzCrtfhtPPlMhU.roa Signing time: Wed 18 Dec 2024 02:26:22 +0000 ROA not before: Wed 18 Dec 2024 02:26:22 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 218.222.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:26:22 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=AB2E237AFF8179F3BB5D0CC2AED7E1B4F3E53215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:59:bb:4a:23:81:44:09:7b:ed:7d:57:d5: fd:69:7a:13:b6:cf:83:fb:2d:4e:c3:7f:2f:b4:31: 14:6b:0f:33:fb:1d:7a:30:bd:93:df:d6:03:d9:8f: 02:8a:96:3c:eb:94:00:23:dc:ec:6f:f0:14:b6:27: 22:95:46:40:2a:4f:b4:89:c4:fb:6d:06:94:16:f2: 5e:f4:9f:d8:3d:70:ea:2a:cf:c5:7f:54:b9:74:da: 0b:40:50:e4:4e:91:f8:d3:dc:ca:10:ce:29:18:d0: 8f:75:9e:05:bc:a2:28:a9:eb:f4:9a:64:6e:b0:a4: b4:8a:ab:be:09:cf:7d:a4:e6:c1:57:b4:e8:8e:1a: d2:6f:b5:01:19:2f:69:9c:24:30:7a:e9:b9:d6:9a: 2a:88:fd:ac:5f:1c:15:f1:5a:63:a6:b8:e0:b7:12: d7:6a:99:f4:bd:74:4b:56:8f:ef:f8:5d:71:70:23: a6:e4:2b:b2:70:20:76:fc:d3:3d:64:b9:02:1a:0c: a1:5d:7f:56:f4:24:72:90:03:90:15:26:23:03:05: 17:33:ec:df:2e:90:89:5e:5d:77:47:a7:28:15:52: e5:f9:30:77:f2:5d:8d:67:7f:4a:72:d3:f4:32:34: ed:f3:86:42:af:99:c8:16:7d:67:eb:f7:d4:6a:4b: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:23:7A:FF:81:79:F3:BB:5D:0C:C2:AE:D7:E1:B4:F3:E5:32:15 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qy4jev-BefO7XQzCrtfhtPPlMhU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.222.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:fb:21:dc:41:46:b5:9d:05:1f:fe:e1:e8:13:aa:29:f4:16: be:bb:17:7a:f6:18:d0:1b:10:88:15:88:ad:30:d6:a0:93:b4: e7:85:de:55:2e:11:8d:b9:97:51:85:0d:a9:f6:d3:65:8c:91: 11:d7:9d:2b:6f:42:3b:c9:75:72:45:76:df:fc:a6:b0:49:ff: 0a:90:d9:72:f0:e3:de:f2:91:82:af:63:a1:4b:3c:f7:13:7d: 25:77:dc:e8:ac:01:83:bb:e1:90:2c:12:30:5f:a7:3c:c4:50: fd:60:cf:d4:8d:de:4b:89:2b:e7:86:9e:24:48:2c:b3:58:41: bc:16:12:34:8f:15:e4:89:52:a1:4a:49:64:77:66:ab:ed:da: 34:9f:18:3c:59:76:1c:0b:a4:44:1f:da:ae:48:e9:c5:f0:6b: 76:bc:1c:30:73:97:dd:34:5b:49:7d:45:4e:8d:24:4f:7f:31: e9:85:8b:10:53:df:8f:6a:34:3f:df:ba:11:85:91:01:35:37: 98:5c:65:e4:9d:90:db:cc:21:4e:03:66:d7:7f:4c:02:3b:68: 37:2d:8c:9c:1f:e7:10:e2:a6:83:91:c0:56:67:6d:ff:30:a3: 33:7b:53:0a:f7:2d:2f:c7:33:fd:03:93:64:ca:d9:4c:3d:ea: b9:40:53:05 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI2MjJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFCMkUyMzdBRkY4MTc5 RjNCQjVEMENDMkFFRDdFMUI0RjNFNTMyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCselm7SiOBRAl77X1X1f1pehO2z4P7LU7Dfy+0MRRrDzP7HXow vZPf1gPZjwKKljzrlAAj3Oxv8BS2JyKVRkAqT7SJxPttBpQW8l70n9g9cOoqz8V/ VLl02gtAUOROkfjT3MoQzikY0I91ngW8oiip6/SaZG6wpLSKq74Jz32k5sFXtOiO GtJvtQEZL2mcJDB66bnWmiqI/axfHBXxWmOmuOC3EtdqmfS9dEtWj+/4XXFwI6bk K7JwIHb80z1kuQIaDKFdf1b0JHKQA5AVJiMDBRcz7N8ukIleXXdHpygVUuX5MHfy XY1nf0py0/QyNO3zhkKvmcgWfWfr99RqSz8DAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUqy4jev+BefO7XQzCrtfhtPPlMhUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3F5NGpldi1CZWZPN1hRekNydGZodFBQbE1oVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDa3jANBgkqhkiG9w0BAQsFAAOCAQEAgvsh3EFGtZ0FH/7h6BOqKfQWvrsX evYY0BsQiBWIrTDWoJO054XeVS4RjbmXUYUNqfbTZYyREdedK29CO8l1ckV23/ym sEn/CpDZcvDj3vKRgq9joUs89xN9JXfc6KwBg7vhkCwSMF+nPMRQ/WDP1I3eS4kr 54aeJEgss1hBvBYSNI8V5IlSoUpJZHdmq+3aNJ8YPFl2HAukRB/arkjpxfBrdrwc MHOX3TRbSX1FTo0kT38x6YWLEFPfj2o0P9+6EYWRATU3mFxl5J2Q28whTgNm139M AjtoNy2MnB/nEOKmg5HAVmdt/zCjM3tTCvctL8cz/QOTZMrZTD3quUBTBQ== -----END CERTIFICATE-----Generated at Sat Apr 5 20:01:20 2025 by rpki-client