$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yZJxvah6VS9IgPGVuRE9bOfvrpA.roa File: yZJxvah6VS9IgPGVuRE9bOfvrpA.roa (raw, json) Hash identifier: KHIiLfvH35+IBn6/ztu+dO7l+YRzi9w5fOVfoOVTkLg= Subject key identifier: C9:92:71:BD:A8:7A:55:2F:48:80:F1:95:B9:11:3D:6C:E7:EF:AE:90 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03CB Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yZJxvah6VS9IgPGVuRE9bOfvrpA.roa Signing time: Wed 18 Dec 2024 02:13:07 +0000 ROA not before: Wed 18 Dec 2024 02:13:07 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 36.8.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:13:07 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C99271BDA87A552F4880F195B9113D6CE7EFAE90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ca:b3:30:98:72:9b:45:c9:43:67:d2:b2:bc: 7e:7e:2b:ee:5f:62:fb:21:fd:16:be:c8:52:13:37: 39:6b:9a:eb:ec:a6:3e:70:a6:9e:4c:49:bd:ab:1f: 6f:8e:08:7c:ba:c2:90:4a:16:0d:31:a0:2e:6e:f2: a6:17:50:e0:76:fe:02:b5:fa:5b:2e:b7:ba:9e:8a: d2:9d:61:2a:8f:f7:f6:b9:19:34:ca:c8:77:53:ba: f2:17:96:28:a7:90:8b:fa:ff:77:07:6e:5c:ee:06: 2c:00:7e:45:cf:e8:73:64:5a:e0:5b:b4:c0:26:62: 56:3c:59:24:9b:aa:79:00:03:c7:2b:52:5f:c8:b7: 62:20:3f:de:aa:ad:78:f3:9a:62:24:a4:ec:6c:95: ab:88:80:74:64:f5:7b:f0:11:01:5a:87:6f:ff:a1: 59:e0:25:f6:f5:c1:be:53:03:bc:83:66:f7:37:82: 61:75:ef:ee:a6:2b:0b:fa:63:a3:f6:f7:05:40:99: 35:9a:69:69:7a:65:3c:12:32:a9:a0:b0:c7:21:ad: 11:b9:da:16:d1:01:84:09:41:c2:9d:09:54:20:3d: 9c:38:e5:bb:da:53:96:d3:33:68:5f:99:78:30:c7: 2a:8e:f8:46:89:ef:d8:b2:c0:bc:e1:57:ea:bd:81: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:92:71:BD:A8:7A:55:2F:48:80:F1:95:B9:11:3D:6C:E7:EF:AE:90 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yZJxvah6VS9IgPGVuRE9bOfvrpA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.8.0.0/13 Signature Algorithm: sha256WithRSAEncryption 28:6f:eb:49:ed:d2:d1:1b:8f:32:c5:ae:c0:f4:61:f0:22:da: 33:de:40:07:ee:cc:9c:39:c6:a5:e3:72:28:46:f1:87:85:b3: 13:6c:35:0b:19:e8:e5:dd:16:7a:7d:b0:ba:a3:9a:0a:5e:a9: e8:fb:0e:85:17:78:27:e4:ba:92:57:26:d4:92:40:df:f6:d2: 52:16:30:c5:28:ab:59:47:88:69:53:d5:56:b6:49:3c:42:0e: 57:36:e2:c9:4e:15:36:7f:56:6f:33:7c:cc:2d:fa:d6:41:61: 2e:8b:ab:03:1b:c5:3f:a5:c4:d2:c2:62:6b:fe:a0:b1:8e:77: f3:b5:33:57:84:83:90:bf:92:b8:ab:e6:59:71:cd:12:3d:69: 49:4a:b6:7d:7a:f0:ef:9a:64:57:82:2b:f2:55:94:7b:87:5a: 8b:8b:f8:d1:f8:47:44:76:0a:c3:eb:ba:79:5b:80:cf:c0:02: 16:a2:85:be:87:e7:4e:a5:73:65:86:8d:88:41:d2:70:39:29: 9a:63:7a:7a:de:7d:ef:eb:1e:a9:25:5a:40:7c:3a:e4:20:c0: 20:6b:a9:5b:4e:9d:4e:31:94:7a:b9:9b:f8:3b:14:40:8d:f5: f5:59:18:27:ed:c7:30:64:e8:39:f9:bb:f4:1c:4a:f1:49:f6: c2:cb:17:0c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEzMDdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM5OTI3MUJEQTg3QTU1 MkY0ODgwRjE5NUI5MTEzRDZDRTdFRkFFOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3yrMwmHKbRclDZ9KyvH5+K+5fYvsh/Ra+yFITNzlrmuvspj5w pp5MSb2rH2+OCHy6wpBKFg0xoC5u8qYXUOB2/gK1+lsut7qeitKdYSqP9/a5GTTK yHdTuvIXliinkIv6/3cHblzuBiwAfkXP6HNkWuBbtMAmYlY8WSSbqnkAA8crUl/I t2IgP96qrXjzmmIkpOxslauIgHRk9XvwEQFah2//oVngJfb1wb5TA7yDZvc3gmF1 7+6mKwv6Y6P29wVAmTWaaWl6ZTwSMqmgsMchrRG52hbRAYQJQcKdCVQgPZw45bva U5bTM2hfmXgwxyqO+EaJ79iywLzhV+q9gRnXAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUyZJxvah6VS9IgPGVuRE9bOfvrpAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3laSnh2YWg2VlM5SWdQR1Z1UkU5Yk9mdnJwQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMkCDANBgkqhkiG9w0BAQsFAAOCAQEAKG/rSe3S0RuPMsWuwPRh8CLaM95A B+7MnDnGpeNyKEbxh4WzE2w1Cxno5d0Wen2wuqOaCl6p6PsOhRd4J+S6klcm1JJA 3/bSUhYwxSirWUeIaVPVVrZJPEIOVzbiyU4VNn9WbzN8zC361kFhLourAxvFP6XE 0sJia/6gsY5387UzV4SDkL+SuKvmWXHNEj1pSUq2fXrw75pkV4Ir8lWUe4dai4v4 0fhHRHYKw+u6eVuAz8ACFqKFvofnTqVzZYaNiEHScDkpmmN6et597+seqSVaQHw6 5CDAIGupW06dTjGUermb+DsUQI319VkYJ+3HMGToOfm79BxK8Un2wssXDA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:28:03 2025 by rpki-client