$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xCtNx6FAqu5gz78LwbvqzDPGI5U.roa File: xCtNx6FAqu5gz78LwbvqzDPGI5U.roa (raw, json) Hash identifier: I2omKwjdK7uxF5rO/klG1qW1kUIrBvwMLEI3b9tjXm8= Subject key identifier: C4:2B:4D:C7:A1:40:AA:EE:60:CF:BF:0B:C1:BB:EA:CC:33:C6:23:95 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0427 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xCtNx6FAqu5gz78LwbvqzDPGI5U.roa Signing time: Wed 18 Dec 2024 02:22:12 +0000 ROA not before: Wed 18 Dec 2024 02:22:12 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 222.2.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:22:12 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C42B4DC7A140AAEE60CFBF0BC1BBEACC33C62395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:c3:c5:04:0d:5b:82:c0:99:cb:23:67:19: 47:3b:45:62:f3:75:16:a0:c8:91:8b:97:60:c7:92: 98:1c:e7:72:1b:46:ca:fe:06:7c:fd:94:db:c2:85: 26:86:39:60:af:74:03:69:68:81:94:5e:9c:8c:37: 89:b7:02:72:36:28:1b:49:da:b6:52:dd:83:13:6c: 64:e9:30:75:4a:b2:69:f3:ff:f6:e0:3f:d7:ab:83: 0b:e4:78:5e:23:fc:18:21:a5:35:76:1e:53:44:cc: 5f:73:b5:96:6e:7b:dc:d1:de:c6:bb:70:ae:b4:12: 14:d8:35:d7:ef:9a:9f:3e:aa:62:79:07:bd:d3:1c: 1e:34:bf:b0:7f:1a:cd:93:40:e4:ed:f4:a0:ed:f4: 1f:c5:ab:25:29:76:04:fa:f8:17:d1:8e:d2:ac:6e: 7f:8f:b2:43:47:41:1d:6a:0d:d8:13:c1:8c:75:b3: 63:21:07:44:46:8e:74:58:96:18:af:48:51:58:79: 88:1d:9d:1a:90:6b:2c:e3:2b:b9:a4:18:64:ff:49: 92:bb:10:0e:99:b4:36:6c:87:a5:f9:2e:d7:90:bd: 9d:b9:11:8c:c6:bf:cd:f2:e8:c4:ab:7f:27:74:47: 47:c7:73:df:88:2d:e2:30:07:8f:0f:cf:8a:b4:8e: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:4D:C7:A1:40:AA:EE:60:CF:BF:0B:C1:BB:EA:CC:33:C6:23:95 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xCtNx6FAqu5gz78LwbvqzDPGI5U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 222.2.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:50:28:13:e2:62:40:f1:2e:25:e6:a5:c5:ee:4d:b5:eb:ee: 96:43:66:85:24:5b:7d:0d:3a:b2:c9:f6:fe:77:f1:e3:2d:d4: 7d:50:c9:08:bb:c0:39:c2:77:2f:43:43:e5:dd:2e:db:79:a7: 24:45:ad:08:e1:19:e1:58:d5:01:52:46:bd:28:00:c3:c6:db: 23:20:0e:4f:05:c7:28:f9:8c:61:6a:23:1e:26:25:95:f8:7c: 23:f3:92:26:36:14:4e:21:4f:73:10:a3:0e:a4:a3:01:43:48: 7d:cd:d6:52:75:01:db:b2:81:7c:85:34:15:dd:e5:48:ff:37: d3:79:2c:89:fe:fd:c2:1d:15:e0:5d:fc:bc:ed:b0:ae:1e:33: 22:3b:f3:e6:11:1e:2b:2f:8b:fe:ca:94:31:f3:ed:37:93:d9: fb:8e:ff:af:4c:a4:83:b5:b1:31:fb:2b:b1:6c:6b:e6:3a:57: 58:ff:da:86:a0:aa:62:30:51:ad:0f:47:27:a7:e9:a8:74:19: 04:83:b4:f7:b9:f4:eb:a5:72:d6:0e:ff:7e:91:b0:13:af:b1: 2c:a8:0e:c6:bd:04:67:16:08:e0:7d:21:d8:a8:83:33:fc:9f: c9:3f:42:bb:73:dc:b0:53:b5:f9:22:d5:55:fd:b2:59:22:b0: 97:7e:7c:ed -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjIyMTJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM0MkI0REM3QTE0MEFB RUU2MENGQkYwQkMxQkJFQUNDMzNDNjIzOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCd8PFBA1bgsCZyyNnGUc7RWLzdRagyJGLl2DHkpgc53IbRsr+ Bnz9lNvChSaGOWCvdANpaIGUXpyMN4m3AnI2KBtJ2rZS3YMTbGTpMHVKsmnz//bg P9ergwvkeF4j/BghpTV2HlNEzF9ztZZue9zR3sa7cK60EhTYNdfvmp8+qmJ5B73T HB40v7B/Gs2TQOTt9KDt9B/FqyUpdgT6+BfRjtKsbn+PskNHQR1qDdgTwYx1s2Mh B0RGjnRYlhivSFFYeYgdnRqQayzjK7mkGGT/SZK7EA6ZtDZsh6X5LteQvZ25EYzG v83y6MSrfyd0R0fHc9+ILeIwB48Pz4q0jvjdAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUxCtNx6FAqu5gz78LwbvqzDPGI5UwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3hDdE54NkZBcXU1Z3o3OEx3YnZxekRQR0k1VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDeAjANBgkqhkiG9w0BAQsFAAOCAQEAEVAoE+JiQPEuJealxe5NtevulkNm hSRbfQ06ssn2/nfx4y3UfVDJCLvAOcJ3L0ND5d0u23mnJEWtCOEZ4VjVAVJGvSgA w8bbIyAOTwXHKPmMYWojHiYllfh8I/OSJjYUTiFPcxCjDqSjAUNIfc3WUnUB27KB fIU0Fd3lSP8303ksif79wh0V4F38vO2wrh4zIjvz5hEeKy+L/sqUMfPtN5PZ+47/ r0ykg7WxMfsrsWxr5jpXWP/ahqCqYjBRrQ9HJ6fpqHQZBIO097n066Vy1g7/fpGw E6+xLKgOxr0EZxYI4H0h2KiDM/yfyT9Cu3PcsFO1+SLVVf2yWSKwl3587Q== -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:30 2025 by rpki-client