$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rkwHOCbET6vzEncxbKO0K0UUf4k.roa File: rkwHOCbET6vzEncxbKO0K0UUf4k.roa (raw, json) Hash identifier: 0EVa1QjGOrW6IjkbW65swqLG5ACMm6fUobviF5kLXfc= Subject key identifier: AE:4C:07:38:26:C4:4F:AB:F3:12:77:31:6C:A3:B4:2B:45:14:7F:89 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0406 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rkwHOCbET6vzEncxbKO0K0UUf4k.roa Signing time: Wed 18 Dec 2024 02:18:53 +0000 ROA not before: Wed 18 Dec 2024 02:18:53 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 106.187.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:53 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=AE4C073826C44FABF31277316CA3B42B45147F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:d0:6b:57:bf:76:af:9c:a8:82:df:b5:8e: 78:1a:d1:d2:2d:4f:69:08:41:76:a3:6c:70:23:0e: 51:37:7b:db:f6:ab:d8:46:28:6f:84:7d:8a:b5:bf: c1:ad:03:81:3c:c3:42:f6:d7:c8:a8:92:7c:48:bc: d6:5b:f9:71:14:f3:69:2c:a5:df:35:8d:dd:07:ce: aa:7c:64:d3:6d:03:ef:45:81:e7:55:47:df:11:09: 82:9a:58:52:53:63:86:db:41:85:e0:6a:bf:ad:31: 24:0f:47:5c:40:ab:0e:ce:0d:8e:c6:51:dc:a0:7c: 02:4c:1e:87:cd:6d:e1:d3:94:be:3c:0a:aa:8d:8f: 8d:65:13:7f:b9:7d:73:a8:2a:c1:2d:76:6e:e3:73: 0d:a0:f3:0a:23:7d:29:b3:54:8f:d7:86:14:c0:39: d0:d2:10:db:bc:4c:07:f8:81:19:c6:0b:67:35:25: 3f:5e:b3:2d:7b:5f:0d:05:06:bb:05:9d:73:e2:7f: c5:c2:f5:a5:7a:de:04:b2:9e:31:1b:b0:6c:d6:92: f4:5f:3a:16:72:40:76:27:db:44:0e:3a:55:fa:2c: f0:aa:5e:25:f8:51:7e:5f:4a:a6:31:3c:67:5d:4f: 62:09:2b:cb:b5:ce:24:02:a3:e3:c4:8e:76:19:3a: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4C:07:38:26:C4:4F:AB:F3:12:77:31:6C:A3:B4:2B:45:14:7F:89 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rkwHOCbET6vzEncxbKO0K0UUf4k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.187.0.0/18 Signature Algorithm: sha256WithRSAEncryption 5f:80:e1:bd:b2:94:1e:8c:17:09:32:ec:8a:c0:86:16:43:36: cb:30:ea:d1:4c:61:ab:4e:16:6e:05:15:57:97:e8:77:00:7e: b2:cc:c5:44:5c:a5:13:5b:b5:77:d2:05:38:75:3b:fc:f2:1d: bb:6c:94:d2:f2:59:bb:fc:bf:f4:6d:56:73:df:d1:a6:96:ae: cb:55:49:23:f0:c7:36:84:84:c9:97:cc:ba:90:b2:2e:54:ad: eb:c5:db:b9:cf:40:29:4f:c6:c6:73:96:b2:af:27:74:ae:6e: a6:0f:e5:55:ad:93:54:68:d7:9f:56:e4:96:b3:d8:97:8e:30: 3d:82:57:bd:4f:3f:03:5f:f6:6c:38:de:27:3c:92:8b:b6:e4: e9:90:61:ee:16:77:dc:df:2e:5e:9c:ff:88:f4:b2:75:14:28: ba:6c:35:cc:f5:28:21:01:a9:c6:3e:e4:2d:16:83:97:b6:23: e5:d2:9c:95:1f:da:b4:06:f4:7e:c9:8f:c8:7f:76:5b:8f:0d: 72:0d:e9:1c:66:65:4f:a9:6a:b6:86:56:3b:f8:da:86:a2:2e: 27:11:d0:75:9f:57:65:97:bb:48:bf:f6:f9:1c:98:b6:04:c7: 69:1b:2e:77:9c:56:c8:af:29:db:d2:30:93:9d:80:92:66:50: 27:db:5d:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NTNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEFFNEMwNzM4MjZDNDRG QUJGMzEyNzczMTZDQTNCNDJCNDUxNDdGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjZ9BrV792r5yogt+1jnga0dItT2kIQXajbHAjDlE3e9v2q9hG KG+EfYq1v8GtA4E8w0L218ioknxIvNZb+XEU82kspd81jd0Hzqp8ZNNtA+9FgedV R98RCYKaWFJTY4bbQYXgar+tMSQPR1xAqw7ODY7GUdygfAJMHofNbeHTlL48CqqN j41lE3+5fXOoKsEtdm7jcw2g8wojfSmzVI/XhhTAOdDSENu8TAf4gRnGC2c1JT9e sy17Xw0FBrsFnXPif8XC9aV63gSynjEbsGzWkvRfOhZyQHYn20QOOlX6LPCqXiX4 UX5fSqYxPGddT2IJK8u1ziQCo+PEjnYZOoXjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrkwHOCbET6vzEncxbKO0K0UUf4kwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3Jrd0hPQ2JFVDZ2ekVuY3hiS08wSzBVVWY0ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZquwAwDQYJKoZIhvcNAQELBQADggEBAF+A4b2ylB6MFwky7IrAhhZDNssw 6tFMYatOFm4FFVeX6HcAfrLMxURcpRNbtXfSBTh1O/zyHbtslNLyWbv8v/RtVnPf 0aaWrstVSSPwxzaEhMmXzLqQsi5UrevF27nPQClPxsZzlrKvJ3SubqYP5VWtk1Ro 159W5Jaz2JeOMD2CV71PPwNf9mw43ic8kou25OmQYe4Wd9zfLl6c/4j0snUUKLps Ncz1KCEBqcY+5C0Wg5e2I+XSnJUf2rQG9H7Jj8h/dluPDXIN6RxmZU+paraGVjv4 2oaiLicR0HWfV2WXu0i/9vkcmLYEx2kbLnecVsivKdvSMJOdgJJmUCfbXRc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:38 2025 by rpki-client