$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa File: yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa (raw, json) Hash identifier: dqgBGcocvOyOTNNW9lIFweVjRQ6Hkdc06vV4G+m9c7Q= Subject key identifier: CB:18:96:0E:0D:84:C3:0E:18:F8:4F:02:63:D4:AF:4D:03:6D:AF:B7 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0505 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa Signing time: Wed 18 Dec 2024 02:40:13 +0000 ROA not before: Wed 18 Dec 2024 02:40:13 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.1.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:40:13 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=CB18960E0D84C30E18F84F0263D4AF4D036DAFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:04:79:62:31:f6:d5:b3:1b:88:40:e4:00: 8e:f4:8d:25:62:27:39:d9:5f:a1:b0:42:f8:73:8e: d3:17:d6:5b:cf:4b:c4:a3:44:f5:84:49:01:33:83: f2:92:a4:ea:51:f2:78:0f:43:e1:4d:b8:5b:52:fd: e8:31:00:76:b8:d5:27:67:3b:d8:1e:a7:7b:c0:ea: b6:fb:aa:7f:3e:ce:69:7d:5d:64:24:77:4d:49:ac: 9e:ec:67:92:cd:e5:ee:f8:98:de:b6:b9:bf:2c:79: d0:ae:09:a9:26:96:c5:f2:b7:57:bb:2e:54:e6:fe: 0d:7a:21:c3:1d:63:c2:5d:49:92:31:01:6d:f9:d5: af:a8:f2:fb:7f:fc:74:1e:a5:ef:a0:43:c2:d7:ff: 0b:9e:00:e6:a8:34:c9:ab:3b:8b:b9:9a:22:52:79: d6:60:a5:75:86:69:c4:82:e7:ca:da:49:6c:a7:ac: 53:54:1b:58:6e:7a:08:f5:e3:5a:a5:79:e1:cc:93: d1:d6:4d:e6:19:38:49:93:da:7c:26:ce:42:9e:72: d8:94:23:3a:74:14:62:e5:df:a1:2a:e5:4e:93:89: 2d:27:4c:7a:2c:6b:ea:fe:54:a9:62:f1:e2:76:85: d4:b2:ac:eb:47:06:21:fa:74:1b:06:ac:e0:b8:ab: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:18:96:0E:0D:84:C3:0E:18:F8:4F:02:63:D4:AF:4D:03:6D:AF:B7 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.1.76.0/23 Signature Algorithm: sha256WithRSAEncryption 31:03:25:17:ae:78:08:c2:e8:d1:1d:78:dc:7c:b2:e0:3c:b4: d7:60:65:a2:d9:20:29:f4:77:ff:49:6e:1d:ae:38:e3:68:ec: 26:e5:1d:8a:ac:c9:e8:d8:b8:7f:b1:89:1b:a6:c6:3d:db:09: 82:62:a6:d5:5c:ed:70:22:22:ed:b6:1d:2e:37:7e:71:80:1e: cc:08:47:59:a8:59:db:07:57:5f:85:04:81:2a:d5:f5:43:c2: 26:fe:7f:f1:45:55:9d:64:0d:48:38:61:b3:94:bd:9f:37:0a: 13:a4:5b:65:a2:b6:84:d3:ac:64:76:ef:8b:6b:73:b7:59:ac: 4a:26:62:f3:86:3b:f0:ed:eb:70:20:ba:7b:73:1e:a6:28:51: 08:ae:c3:63:2b:f6:e2:b9:86:9c:bf:c9:9f:d4:4c:87:6c:33: d5:70:7e:b0:f0:b0:4a:2a:77:62:37:a7:54:ae:e3:8e:6d:95: 1a:c0:58:ac:f7:9a:de:17:e8:8b:d7:d9:e2:b7:e3:b3:0c:96: c9:09:22:bc:a5:95:96:a2:1c:a1:88:73:69:27:76:ca:a1:4d: 07:fa:9f:af:81:73:d0:34:21:ee:fe:12:cc:30:42:e8:b0:ae: 19:f0:88:27:8f:3e:f1:51:3c:87:40:46:d0:c4:b4:bf:83:26: 9b:15:1f:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQwMTNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENCMTg5NjBFMEQ4NEMz MEUxOEY4NEYwMjYzRDRBRjREMDM2REFGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxtwR5YjH21bMbiEDkAI70jSViJznZX6GwQvhzjtMX1lvPS8Sj RPWESQEzg/KSpOpR8ngPQ+FNuFtS/egxAHa41SdnO9gep3vA6rb7qn8+zml9XWQk d01JrJ7sZ5LN5e74mN62ub8sedCuCakmlsXyt1e7LlTm/g16IcMdY8JdSZIxAW35 1a+o8vt//HQepe+gQ8LX/wueAOaoNMmrO4u5miJSedZgpXWGacSC58raSWynrFNU G1huegj141qleeHMk9HWTeYZOEmT2nwmzkKectiUIzp0FGLl36Eq5U6TiS0nTHos a+r+VKli8eJ2hdSyrOtHBiH6dBsGrOC4q2o7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyxiWDg2Eww4Y+E8CY9SvTQNtr7cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3l4aVdEZzJFd3c0WS1FOENZOVN2VFFOdHI3Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTAUwwDQYJKoZIhvcNAQELBQADggEBADEDJReueAjC6NEdeNx8suA8tNdg ZaLZICn0d/9Jbh2uOONo7CblHYqsyejYuH+xiRumxj3bCYJiptVc7XAiIu22HS43 fnGAHswIR1moWdsHV1+FBIEq1fVDwib+f/FFVZ1kDUg4YbOUvZ83ChOkW2WitoTT rGR274trc7dZrEomYvOGO/Dt63AguntzHqYoUQiuw2Mr9uK5hpy/yZ/UTIdsM9Vw frDwsEoqd2I3p1Su445tlRrAWKz3mt4X6IvX2eK347MMlskJIryllZaiHKGIc2kn dsqhTQf6n6+Bc9A0Ie7+EswwQuiwrhnwiCePPvFRPIdARtDEtL+DJpsVH+k= -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:43 2025 by rpki-client