$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rBMwhwNcrGKAFS-V9lGrtgK0ax0.roa File: rBMwhwNcrGKAFS-V9lGrtgK0ax0.roa (raw, json) Hash identifier: oS3HgqYA8uOQWFxHG2/2/ufKnyVpHs53peyonVP8S/8= Subject key identifier: AC:13:30:87:03:5C:AC:62:80:15:2F:95:F6:51:AB:B6:02:B4:6B:1D Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04EB Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rBMwhwNcrGKAFS-V9lGrtgK0ax0.roa Signing time: Wed 18 Dec 2024 02:37:09 +0000 ROA not before: Wed 18 Dec 2024 02:37:09 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.254.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:09 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=AC133087035CAC6280152F95F651ABB602B46B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:51:24:00:c7:63:6b:b1:3e:73:8b:40:54: 7b:d2:ba:96:e5:29:d4:e7:92:83:ff:c4:e3:79:2f: 90:75:67:25:68:4d:38:5c:54:2e:44:8d:bc:0e:a1: 9d:0b:9c:50:6f:ff:ca:1d:5a:ac:5f:06:06:39:03: d3:71:3c:07:fa:70:d4:4a:dd:1d:bf:cf:17:b9:0d: d2:e9:1c:05:b4:24:c0:c2:86:29:5d:bc:a5:60:b5: 15:6c:15:4a:32:a5:d4:f0:27:9d:93:37:26:7c:da: 08:f7:5a:53:0d:ca:a5:f3:eb:c4:7f:10:c8:0a:eb: fe:f7:b0:79:2d:5e:4d:36:ac:7a:b2:ee:72:3f:3d: 71:5e:b0:71:a6:1f:a9:23:9f:2c:97:7d:56:0c:5f: c2:76:b4:ef:33:ed:6d:35:98:63:16:ba:19:d3:c8: d1:c8:00:27:74:47:15:a4:ac:89:e8:71:97:ee:9c: 47:a4:02:b1:86:3a:7c:6b:b0:88:1b:39:50:fc:e7: 32:a4:f6:74:cd:09:75:bf:d2:61:c1:e5:71:94:d3: c9:8b:a0:da:fc:b1:bc:fa:af:fd:84:61:e6:bf:20: 2d:e2:8f:cb:e8:41:04:ac:0d:84:f5:bd:85:3a:04: 7c:2e:0f:94:d9:35:6b:30:bd:26:65:db:7e:63:37: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:13:30:87:03:5C:AC:62:80:15:2F:95:F6:51:AB:B6:02:B4:6B:1D X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rBMwhwNcrGKAFS-V9lGrtgK0ax0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.254.72.0/23 Signature Algorithm: sha256WithRSAEncryption a8:95:48:09:1c:10:78:e2:42:8b:61:67:f1:a7:2e:5d:ca:53: 58:cb:e2:69:eb:6f:5d:e9:9e:a2:46:8b:b3:b8:e0:ed:78:81: b7:c1:7a:b9:ae:01:f4:a5:19:9c:76:4f:d3:26:d0:a8:dd:24: 1d:66:07:f4:48:69:77:5f:00:03:19:3f:18:bf:d0:d6:4f:c0: 76:4c:fd:4f:8d:31:ae:35:46:4f:a1:22:e7:4d:e0:27:11:40: d1:b9:ac:41:c5:8e:e0:73:93:d4:d6:9f:36:c5:e7:13:6f:1b: 71:15:fa:f7:73:9a:23:00:10:c0:c2:31:f6:50:98:55:5a:1d: cc:8c:3a:15:46:7f:fa:7d:0e:d8:b7:4b:c3:40:39:e3:c0:e7: a7:79:0e:9d:11:d8:08:ff:4f:6d:33:d1:22:59:31:6f:89:68: 7a:73:25:aa:ef:03:c4:51:59:a8:14:bf:93:e6:82:fd:91:0a: 1d:3c:89:d1:4a:30:2f:54:30:71:4b:23:d5:d8:71:da:ee:da: 6d:3b:b9:98:4e:e0:3a:ae:27:4b:18:66:76:32:b2:d3:cb:e1: 61:bc:31:c6:bc:65:e0:82:6d:43:f2:62:b5:dd:e6:05:33:db: 4e:fc:b0:59:cd:7e:f6:b1:b7:69:9d:4d:d0:65:34:68:17:5f: 1e:62:f9:d7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFDMTMzMDg3MDM1Q0FD NjI4MDE1MkY5NUY2NTFBQkI2MDJCNDZCMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClIlEkAMdja7E+c4tAVHvSupblKdTnkoP/xON5L5B1ZyVoTThc VC5EjbwOoZ0LnFBv/8odWqxfBgY5A9NxPAf6cNRK3R2/zxe5DdLpHAW0JMDChild vKVgtRVsFUoypdTwJ52TNyZ82gj3WlMNyqXz68R/EMgK6/73sHktXk02rHqy7nI/ PXFesHGmH6kjnyyXfVYMX8J2tO8z7W01mGMWuhnTyNHIACd0RxWkrInocZfunEek ArGGOnxrsIgbOVD85zKk9nTNCXW/0mHB5XGU08mLoNr8sbz6r/2EYea/IC3ij8vo QQSsDYT1vYU6BHwuD5TZNWswvSZl235jN6s9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrBMwhwNcrGKAFS+V9lGrtgK0ax0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3JCTXdod05jckdLQUZTLVY5bEdydGdLMGF4MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHS/kgwDQYJKoZIhvcNAQELBQADggEBAKiVSAkcEHjiQothZ/GnLl3KU1jL 4mnrb13pnqJGi7O44O14gbfBermuAfSlGZx2T9Mm0KjdJB1mB/RIaXdfAAMZPxi/ 0NZPwHZM/U+NMa41Rk+hIudN4CcRQNG5rEHFjuBzk9TWnzbF5xNvG3EV+vdzmiMA EMDCMfZQmFVaHcyMOhVGf/p9Dti3S8NAOePA56d5Dp0R2Aj/T20z0SJZMW+JaHpz JarvA8RRWagUv5Pmgv2RCh08idFKMC9UMHFLI9XYcdru2m07uZhO4DquJ0sYZnYy stPL4WG8Mca8ZeCCbUPyYrXd5gUz2078sFnNfvaxt2mdTdBlNGgXXx5i+dc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:48 2025 by rpki-client