$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BQG9-Fsah2BDYtk2nrPKR6i8uJs.roa File: BQG9-Fsah2BDYtk2nrPKR6i8uJs.roa (raw, json) Hash identifier: o4E8kvPvMkul9mgwd83mOsuZ2Zak4fSl9vTM7MR2jBk= Subject key identifier: 05:01:BD:F8:5B:1A:87:60:43:62:D9:36:9E:B3:CA:47:A8:BC:B8:9B Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04AB Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BQG9-Fsah2BDYtk2nrPKR6i8uJs.roa Signing time: Wed 18 Dec 2024 02:29:01 +0000 ROA not before: Wed 18 Dec 2024 02:29:01 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.168.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:29:01 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=0501BDF85B1A87604362D9369EB3CA47A8BCB89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:07:54:8f:16:99:89:7b:c4:8b:47:1a:0d: 2c:c0:42:22:5e:14:76:99:c3:df:1e:19:5f:71:9d: 02:29:07:1e:51:58:e5:d2:94:86:2b:15:eb:a5:08: ae:ec:7a:bc:68:48:a1:14:78:c6:68:68:bb:aa:2f: 47:b6:40:a2:a5:c1:1d:76:a1:af:db:62:23:f4:bd: dd:e2:55:d3:dd:72:44:f4:2a:ce:01:30:99:f8:8b: 82:20:17:73:16:fe:23:b1:11:20:98:ce:6f:e9:56: 8d:34:7f:2f:ec:70:b9:4d:4e:25:15:1b:9e:83:1f: a6:b0:ad:5e:b4:d1:09:d7:e5:4f:ef:74:9e:28:9f: 2b:af:05:57:01:f3:0d:a3:cd:e4:5c:34:e1:c0:81: 27:6a:9d:b7:1c:d8:7c:79:db:7b:2d:f0:db:1f:7a: fb:b9:55:c3:a2:64:4a:17:14:99:5a:dc:42:93:d3: ed:28:cc:4d:34:ac:ec:b8:9a:71:f5:9e:93:89:93: cf:6e:9f:ac:24:07:59:5a:37:29:9a:b3:2e:c2:39: 93:91:3b:84:7e:92:4d:1c:2b:df:8c:f8:da:c0:9d: 3e:59:3b:4e:a9:35:96:c0:1d:02:dd:e7:f6:3b:53: 36:c9:7f:a4:d2:cc:e2:9b:d4:02:81:bd:ec:90:36: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:01:BD:F8:5B:1A:87:60:43:62:D9:36:9E:B3:CA:47:A8:BC:B8:9B X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BQG9-Fsah2BDYtk2nrPKR6i8uJs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.168.192.0/18 Signature Algorithm: sha256WithRSAEncryption 20:70:b3:7a:9a:e7:67:42:56:63:7b:c2:1c:f3:08:88:c9:e9: 5e:8a:8d:8a:23:11:c0:84:a6:91:84:f8:86:bc:f9:35:87:a3: c7:ae:c9:d3:7d:1a:ee:71:2e:4e:79:26:a3:3b:c2:47:61:3e: c3:80:7a:66:1c:e5:9a:4b:24:1b:fc:7c:f1:4d:cc:ee:b0:9c: 0b:39:9a:ff:0b:7f:1b:bc:25:63:5b:51:42:ac:6e:e5:98:3c: 2a:cc:b6:78:00:dd:76:ab:9f:14:04:f0:a4:4b:82:1a:82:b5: c8:55:1b:5c:90:5e:2f:b9:4a:85:63:94:8b:9f:16:95:e8:85: 9f:49:af:c7:91:68:ee:73:85:a1:ca:dd:05:91:1c:d7:74:a0: 43:a9:96:a1:29:fb:98:c5:11:fe:52:a4:7d:68:13:c3:83:c3: e4:01:98:af:17:ec:c8:3c:46:af:99:54:bb:ab:24:99:aa:33: c7:9c:49:01:47:ad:c6:e6:bf:4d:a0:b6:bd:ef:32:be:4f:26: e5:b1:9b:7e:f7:72:d7:0f:26:72:53:df:5d:73:3e:aa:98:10: e4:0c:0f:94:52:65:d5:a1:cf:a4:2b:c9:21:08:7d:36:ba:25: c3:a9:59:ff:96:40:3d:85:e3:11:57:51:fe:a9:17:0b:7f:d4: a3:03:23:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI5MDFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA1MDFCREY4NUIxQTg3 NjA0MzYyRDkzNjlFQjNDQTQ3QThCQ0I4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEKQdUjxaZiXvEi0caDSzAQiJeFHaZw98eGV9xnQIpBx5RWOXS lIYrFeulCK7serxoSKEUeMZoaLuqL0e2QKKlwR12oa/bYiP0vd3iVdPdckT0Ks4B MJn4i4IgF3MW/iOxESCYzm/pVo00fy/scLlNTiUVG56DH6awrV600QnX5U/vdJ4o nyuvBVcB8w2jzeRcNOHAgSdqnbcc2Hx523st8Nsfevu5VcOiZEoXFJla3EKT0+0o zE00rOy4mnH1npOJk89un6wkB1laNymasy7COZORO4R+kk0cK9+M+NrAnT5ZO06p NZbAHQLd5/Y7UzbJf6TSzOKb1AKBveyQNrepAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUBQG9+Fsah2BDYtk2nrPKR6i8uJswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0JRRzktRnNhaDJCRFl0azJuclBLUjZpOHVKcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbSqMAwDQYJKoZIhvcNAQELBQADggEBACBws3qa52dCVmN7whzzCIjJ6V6K jYojEcCEppGE+Ia8+TWHo8euydN9Gu5xLk55JqM7wkdhPsOAemYc5ZpLJBv8fPFN zO6wnAs5mv8Lfxu8JWNbUUKsbuWYPCrMtngA3XarnxQE8KRLghqCtchVG1yQXi+5 SoVjlIufFpXohZ9Jr8eRaO5zhaHK3QWRHNd0oEOplqEp+5jFEf5SpH1oE8ODw+QB mK8X7Mg8Rq+ZVLurJJmqM8ecSQFHrcbmv02gtr3vMr5PJuWxm373ctcPJnJT311z PqqYEOQMD5RSZdWhz6QrySEIfTa6JcOpWf+WQD2F4xFXUf6pFwt/1KMDI1c= -----END CERTIFICATE-----Generated at Mon May 5 00:12:59 2025 by rpki-client