$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa File: v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa (raw, json) Hash identifier: P0iL25b2ih2yUmDpPBMALE8bi/ijjgVhCDmLyYEyLlM= Subject key identifier: BF:84:F1:4C:70:FD:8B:45:30:D4:7C:05:99:C2:A2:2D:C3:5C:8E:5C Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 040A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa Signing time: Wed 18 Dec 2024 02:18:54 +0000 ROA not before: Wed 18 Dec 2024 02:18:54 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 118.152.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:54 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=BF84F14C70FD8B4530D47C0599C2A22DC35C8E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:11:eb:a6:34:34:a6:2c:c2:13:32:6c:9c: 23:71:8a:ca:12:11:8e:1d:23:c0:d9:56:6b:71:37: 38:a1:b6:60:6d:2f:33:cb:85:42:83:52:39:31:a2: d7:b9:b9:00:03:be:a4:9f:c1:16:3b:b3:dc:4c:96: a0:ab:3c:a1:a1:32:02:cf:c6:d9:9f:87:af:b1:8a: c4:68:66:06:4a:b0:fd:d0:fe:87:76:a8:c0:59:53: 5f:c4:b1:14:b1:dd:6f:05:be:86:34:19:95:2a:71: 2e:73:e2:1c:65:95:90:3d:35:b7:1b:05:07:5a:35: 0d:18:e1:dd:9a:51:ac:b4:54:bf:aa:20:16:e6:8e: a1:cd:04:b5:2b:85:c0:e2:c5:9f:a6:f6:a1:ac:ad: a0:3a:f3:c4:67:ce:b9:2a:26:66:9a:92:0c:20:52: ce:aa:b8:f0:0f:a1:12:37:e6:62:f6:5e:20:ba:99: b6:e6:42:37:28:05:24:58:64:53:9d:10:24:2a:1f: 37:61:70:4d:f8:5c:97:91:e7:bf:50:f0:99:d1:c5: 6d:69:c3:c6:0e:ed:4e:21:7f:0b:dd:e9:88:e8:69: 90:11:9b:79:a7:67:aa:e2:f6:7b:18:9f:3d:7b:4d: a7:4c:70:e2:1f:eb:91:fc:04:7e:f7:bd:73:81:5f: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:F1:4C:70:FD:8B:45:30:D4:7C:05:99:C2:A2:2D:C3:5C:8E:5C X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.152.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:b2:38:b2:ba:b2:0f:e2:d1:de:40:82:dd:09:21:70:0b:a8: c1:6f:2c:8a:f5:34:0a:54:7d:f6:ec:6e:be:55:09:a6:84:e1: 55:5b:d5:46:42:4a:c0:ac:d2:eb:20:87:79:24:af:37:8b:04: c4:1d:8a:08:40:31:d9:4f:dd:f1:b1:a8:f1:3b:bb:86:c5:32: 24:b4:54:f8:81:3b:7e:f3:36:aa:6d:ec:3d:e5:67:1f:3c:c4: a4:0d:be:fc:4a:ac:43:6d:53:9c:fb:ee:4c:9c:d1:e7:e8:df: 2c:16:27:4d:f9:60:91:72:cd:31:da:e5:d2:ec:b2:23:ec:86: f7:67:32:bf:21:69:0e:df:17:3e:42:fc:47:90:73:78:87:28: be:36:91:a2:3e:d4:dd:dc:da:ce:79:c0:aa:39:45:be:ac:27: 2f:a6:e8:c0:bc:fa:ff:e3:09:02:90:c0:6f:e1:02:7a:3d:e0: dc:d2:24:db:b9:3f:18:3d:1c:7f:f3:ea:8b:8b:a0:b7:3a:8f: 39:36:c5:10:89:d9:70:b5:d9:e0:84:49:94:e3:e8:08:83:6c: 8c:be:ac:d8:8e:00:39:c1:8f:78:cb:c9:15:c8:18:c7:50:e6: 67:96:eb:45:e9:61:30:42:06:62:11:7b:a9:78:95:d3:bd:ef: 8d:4f:e0:6e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NTRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJGODRGMTRDNzBGRDhC NDUzMEQ0N0MwNTk5QzJBMjJEQzM1QzhFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVsRHrpjQ0pizCEzJsnCNxisoSEY4dI8DZVmtxNzihtmBtLzPL hUKDUjkxote5uQADvqSfwRY7s9xMlqCrPKGhMgLPxtmfh6+xisRoZgZKsP3Q/od2 qMBZU1/EsRSx3W8FvoY0GZUqcS5z4hxllZA9NbcbBQdaNQ0Y4d2aUay0VL+qIBbm jqHNBLUrhcDixZ+m9qGsraA688RnzrkqJmaakgwgUs6quPAPoRI35mL2XiC6mbbm QjcoBSRYZFOdECQqHzdhcE34XJeR579Q8JnRxW1pw8YO7U4hfwvd6YjoaZARm3mn Z6ri9nsYnz17TadMcOIf65H8BH73vXOBXxKxAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUv4TxTHD9i0Uw1HwFmcKiLcNcjlwwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3Y0VHhUSEQ5aTBVdzFId0ZtY0tpTGNOY2psdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB2mDANBgkqhkiG9w0BAQsFAAOCAQEAcrI4srqyD+LR3kCC3QkhcAuowW8s ivU0ClR99uxuvlUJpoThVVvVRkJKwKzS6yCHeSSvN4sExB2KCEAx2U/d8bGo8Tu7 hsUyJLRU+IE7fvM2qm3sPeVnHzzEpA2+/EqsQ21TnPvuTJzR5+jfLBYnTflgkXLN Mdrl0uyyI+yG92cyvyFpDt8XPkL8R5BzeIcovjaRoj7U3dzaznnAqjlFvqwnL6bo wLz6/+MJApDAb+ECej3g3NIk27k/GD0cf/Pqi4ugtzqPOTbFEInZcLXZ4IRJlOPo CINsjL6s2I4AOcGPeMvJFcgYx1DmZ5brRelhMEIGYhF7qXiV073vjU/gbg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:22:53 2025 by rpki-client