$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yHgqqwyYXtQ_5OG7H2rIowIJ1ME.roa File: yHgqqwyYXtQ_5OG7H2rIowIJ1ME.roa (raw, json) Hash identifier: z3UGuxvh2NGViwhVCR20YFAMeah6QOzdABG9eMh1YPw= Subject key identifier: C8:78:2A:AB:0C:98:5E:D4:3F:E4:E1:BB:1F:6A:C8:A3:02:09:D4:C1 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03AE Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yHgqqwyYXtQ_5OG7H2rIowIJ1ME.roa Signing time: Wed 18 Dec 2024 02:12:57 +0000 ROA not before: Wed 18 Dec 2024 02:12:57 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 121.111.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:12:57 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C8782AAB0C985ED43FE4E1BB1F6AC8A30209D4C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c0:78:37:53:5b:d1:f6:a0:99:fe:6d:b2:8f: 92:cc:a2:22:4d:94:89:2f:69:80:24:c4:f8:32:ed: af:56:38:dd:74:89:d9:25:43:32:df:58:ca:02:ce: cc:36:92:a1:5a:13:19:80:96:91:c0:d1:a3:a7:b0: d1:12:a7:8e:4f:15:7b:28:9f:9c:da:51:6e:99:f8: 0e:44:48:7d:ac:18:e8:ef:0a:7b:69:66:2e:57:e7: b7:36:ec:0f:76:be:fb:ee:42:5b:e0:96:d3:4a:b3: cf:0c:c6:20:a6:70:2d:14:97:cf:e5:d6:9f:03:d0: a2:c4:c7:06:63:2c:ad:42:aa:97:75:da:33:40:5b: 14:f4:15:de:15:5b:c2:59:d5:17:13:ac:0e:ea:fd: a7:36:d5:f1:cd:93:ec:27:3b:d2:b0:53:73:90:db: 82:99:94:02:77:34:d0:eb:3e:c2:d3:7a:48:e9:a4: 2f:41:9c:08:06:70:7d:ab:5e:93:1b:cb:4e:28:d1: 66:69:fc:44:c9:d9:55:15:0f:c1:9f:97:71:99:6a: 6b:0e:17:67:6d:af:35:52:4d:7b:24:ad:89:e6:28: 31:81:31:90:98:11:ed:f0:6f:8a:71:fc:2c:ba:73: 97:1d:53:07:d5:a5:b7:a0:aa:10:76:c6:33:e8:f1: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:2A:AB:0C:98:5E:D4:3F:E4:E1:BB:1F:6A:C8:A3:02:09:D4:C1 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yHgqqwyYXtQ_5OG7H2rIowIJ1ME.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.111.128.0/18 Signature Algorithm: sha256WithRSAEncryption 02:6c:a2:58:00:af:72:a9:7f:76:7c:fd:98:69:4f:97:90:3a: a5:a7:04:13:87:75:05:60:eb:5d:d0:f8:7f:f6:9f:96:3b:b8: d5:d0:67:25:fc:a3:47:fb:2d:2e:7d:2d:73:3c:0e:a6:64:19: 81:ab:eb:91:5e:84:d1:cc:78:53:cf:f8:fb:c7:65:f5:06:74: 36:c8:87:9d:03:a7:1a:50:a0:e1:a1:79:30:e5:92:ce:b7:d9: a0:56:8f:3f:2f:10:6f:b1:61:06:2f:72:d2:cd:ac:51:2e:ac: 48:e6:60:e0:eb:09:6b:8c:11:5e:6f:25:92:92:73:98:31:c7: ab:76:08:3d:54:2f:15:6b:6a:ed:f5:3e:54:ea:7d:f2:11:f4: 9c:69:47:5c:9f:7a:54:73:88:a4:a8:1d:f3:bc:62:d7:5e:be: f1:d7:d2:8a:69:fe:b8:09:3f:56:44:f4:f5:d7:0c:db:8b:7b: b9:24:bc:92:21:ed:4a:34:d3:0e:89:a4:99:27:6d:45:af:dd: c8:05:76:37:35:b3:81:cf:25:0e:fc:78:45:31:9e:e0:3a:dc: d0:9c:36:42:c1:18:d1:6f:70:54:06:7d:0f:99:38:30:36:d0: 6a:47:6f:68:a6:45:a3:93:62:2b:21:d5:fb:60:04:d6:0a:95: 30:6d:e2:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEyNTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM4NzgyQUFCMEM5ODVF RDQzRkU0RTFCQjFGNkFDOEEzMDIwOUQ0QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrwHg3U1vR9qCZ/m2yj5LMoiJNlIkvaYAkxPgy7a9WON10idkl QzLfWMoCzsw2kqFaExmAlpHA0aOnsNESp45PFXson5zaUW6Z+A5ESH2sGOjvCntp Zi5X57c27A92vvvuQlvgltNKs88MxiCmcC0Ul8/l1p8D0KLExwZjLK1Cqpd12jNA WxT0Fd4VW8JZ1RcTrA7q/ac21fHNk+wnO9KwU3OQ24KZlAJ3NNDrPsLTekjppC9B nAgGcH2rXpMby04o0WZp/ETJ2VUVD8Gfl3GZamsOF2dtrzVSTXskrYnmKDGBMZCY Ee3wb4px/Cy6c5cdUwfVpbegqhB2xjPo8aflAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyHgqqwyYXtQ/5OG7H2rIowIJ1MEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3lIZ3Fxd3lZWHRRXzVPRzdIMnJJb3dJSjFNRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ5b4AwDQYJKoZIhvcNAQELBQADggEBAAJsolgAr3Kpf3Z8/ZhpT5eQOqWn BBOHdQVg613Q+H/2n5Y7uNXQZyX8o0f7LS59LXM8DqZkGYGr65FehNHMeFPP+PvH ZfUGdDbIh50DpxpQoOGheTDlks632aBWjz8vEG+xYQYvctLNrFEurEjmYODrCWuM EV5vJZKSc5gxx6t2CD1ULxVrau31PlTqffIR9JxpR1yfelRziKSoHfO8YtdevvHX 0opp/rgJP1ZE9PXXDNuLe7kkvJIh7Uo00w6JpJknbUWv3cgFdjc1s4HPJQ78eEUx nuA63NCcNkLBGNFvcFQGfQ+ZODA20GpHb2imRaOTYish1ftgBNYKlTBt4jY= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:37 2025 by rpki-client