$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sY_GIqoZvTvEI-0PxdqffbTlZ1s.roa File: sY_GIqoZvTvEI-0PxdqffbTlZ1s.roa (raw, json) Hash identifier: oRD3TLo8KDipwYFOSQeqc0+gyaG4anFybndirUhMkQo= Subject key identifier: B1:8F:C6:22:AA:19:BD:3B:C4:23:ED:0F:C5:DA:9F:7D:B4:E5:67:5B Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0539 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sY_GIqoZvTvEI-0PxdqffbTlZ1s.roa Signing time: Wed 18 Dec 2024 02:44:16 +0000 ROA not before: Wed 18 Dec 2024 02:44:16 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.7.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:44:16 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=B18FC622AA19BD3BC423ED0FC5DA9F7DB4E5675B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:14:83:5f:db:46:e0:c4:f7:82:8f:f5:33: c7:a1:3f:82:79:89:a3:e0:b1:e6:6c:47:36:02:94: 35:b0:1d:ce:5a:7b:04:b5:3e:18:78:cc:0a:a0:9d: 38:49:1d:94:d8:22:0e:17:98:1a:ea:bf:5e:a5:fa: 85:35:ff:3e:b7:4f:f8:33:9e:cb:f3:eb:e1:89:e1: 98:4f:c1:06:87:99:91:70:56:81:9d:4a:1b:64:f9: fe:6c:a2:7b:7d:f2:d4:45:52:d0:ef:b5:d1:29:d4: 5f:f6:42:1a:a9:b9:d2:74:4a:17:ac:34:e0:0e:b8: 85:1c:38:96:a4:74:d8:14:4c:28:68:44:0f:9d:60: 25:9f:fa:ff:a9:0e:bf:a0:02:24:d6:3d:ae:07:d9: 86:4c:be:1e:ab:1a:d9:ff:93:43:77:30:ad:a6:a0: 2e:33:ba:09:46:b8:60:40:f4:78:4f:22:26:52:ca: 41:be:71:f4:62:c9:cb:db:cc:4e:04:46:c4:95:55: 13:0c:ce:f6:3d:25:f7:8b:79:54:6c:1c:80:28:63: 31:14:7e:a7:54:88:08:cb:eb:6b:a6:14:97:8a:6e: 61:60:f1:6b:f3:21:ea:2e:d2:4a:ff:5f:3d:15:a9: 4d:59:22:ff:43:71:ea:05:35:77:72:f8:fb:fb:cc: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:C6:22:AA:19:BD:3B:C4:23:ED:0F:C5:DA:9F:7D:B4:E5:67:5B X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sY_GIqoZvTvEI-0PxdqffbTlZ1s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.7.132.0/23 Signature Algorithm: sha256WithRSAEncryption 84:8c:bc:89:d3:ab:df:62:74:4b:c5:f5:28:91:3a:17:03:a8: 75:7a:02:2b:e8:1b:97:e2:02:fb:ea:e4:4e:1b:15:c7:d2:58: 47:98:3a:90:27:ac:53:e9:f3:a1:29:90:b7:08:b2:65:f5:8e: 50:3d:89:82:a1:10:ee:5c:fa:24:a3:f1:a8:d0:3e:ee:97:ed: fd:f2:f9:67:21:52:2f:1f:20:b0:d3:eb:a6:44:a3:26:16:98: 9b:bb:5e:ab:fc:14:3a:e8:27:6e:53:0b:4d:0d:bc:2f:6e:3a: 86:9e:7b:94:98:a7:29:63:cd:e3:5b:af:23:9a:73:a2:43:99: c8:f4:4d:b8:d6:8f:13:77:84:dd:80:fd:47:78:72:bf:da:ac: b4:13:b8:a1:29:0e:5c:b0:49:e3:c2:f2:a6:13:d9:dc:fc:a2: d0:5a:aa:c2:35:11:18:79:d6:2e:70:1f:5a:44:25:bf:0e:75: 9b:28:69:f7:75:27:6b:4a:85:2b:c4:f4:b7:57:da:b1:93:cd: f5:6e:41:3c:3d:c8:cb:96:06:0e:84:a1:84:83:18:b2:44:24: 29:52:86:1d:1e:40:cd:de:ea:8a:1b:e3:90:f5:48:09:77:1f: 49:0f:0e:e3:d5:8d:2e:71:aa:6e:91:df:99:69:a1:15:ce:19: 70:de:d5:a7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQ0MTZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIxOEZDNjIyQUExOUJE M0JDNDIzRUQwRkM1REE5RjdEQjRFNTY3NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXHhSDX9tG4MT3go/1M8ehP4J5iaPgseZsRzYClDWwHc5aewS1 Phh4zAqgnThJHZTYIg4XmBrqv16l+oU1/z63T/gznsvz6+GJ4ZhPwQaHmZFwVoGd Shtk+f5sont98tRFUtDvtdEp1F/2QhqpudJ0ShesNOAOuIUcOJakdNgUTChoRA+d YCWf+v+pDr+gAiTWPa4H2YZMvh6rGtn/k0N3MK2moC4zuglGuGBA9HhPIiZSykG+ cfRiycvbzE4ERsSVVRMMzvY9JfeLeVRsHIAoYzEUfqdUiAjL62umFJeKbmFg8Wvz Ieou0kr/Xz0VqU1ZIv9DceoFNXdy+Pv7zMy5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUsY/GIqoZvTvEI+0PxdqffbTlZ1swHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3NZX0dJcW9adlR2RUktMFB4ZHFmZmJUbFoxcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTB4QwDQYJKoZIhvcNAQELBQADggEBAISMvInTq99idEvF9SiROhcDqHV6 AivoG5fiAvvq5E4bFcfSWEeYOpAnrFPp86EpkLcIsmX1jlA9iYKhEO5c+iSj8ajQ Pu6X7f3y+WchUi8fILDT66ZEoyYWmJu7Xqv8FDroJ25TC00NvC9uOoaee5SYpylj zeNbryOac6JDmcj0TbjWjxN3hN2A/Ud4cr/arLQTuKEpDlywSePC8qYT2dz8otBa qsI1ERh51i5wH1pEJb8OdZsoafd1J2tKhSvE9LdX2rGTzfVuQTw9yMuWBg6EoYSD GLJEJClShh0eQM3e6oob45D1SAl3H0kPDuPVjS5xqm6R35lpoRXOGXDe1ac= -----END CERTIFICATE-----Generated at Sat Apr 5 17:41:40 2025 by rpki-client