$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MCAiKd1ZKsFfqI-4l24WHFEid1I.roa File: MCAiKd1ZKsFfqI-4l24WHFEid1I.roa (raw, json) Hash identifier: gYGjFNbiFiV1qpYWGqt5jFuWkdkAQH6lbHtouTmgeak= Subject key identifier: 30:20:22:29:DD:59:2A:C1:5F:A8:8F:B8:97:6E:16:1C:51:22:77:52 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03E6 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MCAiKd1ZKsFfqI-4l24WHFEid1I.roa Signing time: Wed 18 Dec 2024 02:16:33 +0000 ROA not before: Wed 18 Dec 2024 02:16:33 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 27.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:16:33 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=30202229DD592AC15FA88FB8976E161C51227752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:05:8f:cb:ef:2b:fc:74:50:71:cd:7d:b4:d6: 13:c8:47:8b:ac:c7:70:fa:8e:04:f4:e0:c4:6a:6d: 7d:d1:a8:37:7b:57:54:41:5a:d0:d6:3b:9e:3f:fb: 64:22:c8:b6:04:e0:43:ef:3f:72:d8:a3:86:48:0d: 78:c6:1a:cc:3e:d5:b0:f3:f4:73:98:e7:4b:07:4d: c3:67:48:20:1f:5c:32:30:a7:4b:ff:13:bd:0b:0d: 41:7b:25:87:35:d6:c2:6f:8c:ec:a1:a8:76:4b:fa: 56:c0:84:b0:2a:94:f9:94:3d:4b:f1:ff:12:d4:82: 83:6a:e5:bb:ca:e0:18:96:d6:34:84:07:cd:03:e6: 61:d9:8b:22:46:f5:98:fe:12:29:fd:a4:c4:6f:af: df:bc:a5:2b:8c:96:b8:84:e2:4c:77:b1:b4:2d:b2: f2:45:f1:95:39:e8:c1:48:93:ec:e5:55:29:36:b7: 4c:09:f4:d3:26:75:4e:52:30:07:0d:1f:d2:b9:44: 44:1c:84:fe:98:37:94:64:21:58:59:5d:27:f7:c3: df:0d:8e:27:e2:0a:fe:18:29:c9:83:d7:1f:06:0b: 41:9b:c7:48:8e:f4:88:0e:e4:32:05:ec:35:6a:0f: d4:bf:06:61:c6:fc:15:c4:22:be:27:f5:82:21:a0: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:20:22:29:DD:59:2A:C1:5F:A8:8F:B8:97:6E:16:1C:51:22:77:52 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MCAiKd1ZKsFfqI-4l24WHFEid1I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6d:7b:36:e2:86:e8:c6:ce:f1:d4:b9:c4:07:01:8e:a6:e9:8e: fd:c8:40:7a:3b:ef:5f:31:b9:9d:8f:f6:29:b8:45:f2:17:c7: c5:e6:0c:a2:ee:8c:8d:b3:ff:0c:9c:7b:cb:7c:2b:bb:1b:d5: c3:80:73:73:c7:26:4e:84:cb:b1:af:c0:b6:6e:ed:46:35:83: 1b:76:57:9f:23:fe:14:eb:71:ce:5a:ea:74:6c:18:c4:8e:71: f8:29:43:3c:8d:2d:88:30:ad:77:45:b2:0e:16:de:ce:1e:ac: 4c:ce:fc:6a:c7:7e:8d:50:07:6e:81:54:99:ce:9b:3c:b1:35: ef:cb:c1:4b:27:48:72:ec:74:4d:c7:0e:05:33:fd:77:76:30: 26:d5:16:a8:9f:e5:46:e9:5d:6f:d2:52:e4:4e:ba:f7:5a:36: 74:5c:be:68:85:09:d0:d5:ea:67:b3:ee:8d:ae:ad:06:24:d5: 36:39:be:b6:bd:4f:1c:b2:a3:d2:97:bf:73:2d:67:a2:e8:d0: c1:eb:ce:5c:42:f7:78:c2:44:03:8e:73:36:0e:fb:0c:82:d5: 77:98:73:68:b1:e0:25:d2:a3:f0:56:d9:b6:a4:2d:af:50:a8: 80:bc:4a:76:a2:37:18:df:7f:6c:64:b2:79:52:f9:c1:56:b1: c9:68:3d:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE2MzNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMwMjAyMjI5REQ1OTJB QzE1RkE4OEZCODk3NkUxNjFDNTEyMjc3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmBY/L7yv8dFBxzX201hPIR4usx3D6jgT04MRqbX3RqDd7V1RB WtDWO54/+2QiyLYE4EPvP3LYo4ZIDXjGGsw+1bDz9HOY50sHTcNnSCAfXDIwp0v/ E70LDUF7JYc11sJvjOyhqHZL+lbAhLAqlPmUPUvx/xLUgoNq5bvK4BiW1jSEB80D 5mHZiyJG9Zj+Ein9pMRvr9+8pSuMlriE4kx3sbQtsvJF8ZU56MFIk+zlVSk2t0wJ 9NMmdU5SMAcNH9K5REQchP6YN5RkIVhZXSf3w98NjifiCv4YKcmD1x8GC0Gbx0iO 9IgO5DIF7DVqD9S/BmHG/BXEIr4n9YIhoIiTAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUMCAiKd1ZKsFfqI+4l24WHFEid1IwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL01DQWlLZDFaS3NGZnFJLTRsMjRXSEZFaWQxSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbWDANBgkqhkiG9w0BAQsFAAOCAQEAbXs24oboxs7x1LnEBwGOpumO/chA ejvvXzG5nY/2KbhF8hfHxeYMou6MjbP/DJx7y3wruxvVw4Bzc8cmToTLsa/Atm7t RjWDG3ZXnyP+FOtxzlrqdGwYxI5x+ClDPI0tiDCtd0WyDhbezh6sTM78asd+jVAH boFUmc6bPLE178vBSydIcux0TccOBTP9d3YwJtUWqJ/lRuldb9JS5E6691o2dFy+ aIUJ0NXqZ7Puja6tBiTVNjm+tr1PHLKj0pe/cy1noujQwevOXEL3eMJEA45zNg77 DILVd5hzaLHgJdKj8FbZtqQtr1CogLxKdqI3GN9/bGSyeVL5wVaxyWg9JQ== -----END CERTIFICATE-----Generated at Sat May 3 06:11:04 2025 by rpki-client