$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa File: VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa (raw, json) Hash identifier: j9r9Q+E0VbU/7fY+jZJrFzb72yrAKDmyzznC8eHc8QQ= Subject key identifier: 54:C6:97:2B:F4:39:89:B4:96:15:A6:99:9C:50:CA:79:7E:10:45:7D Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0517 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa Signing time: Wed 18 Dec 2024 02:42:18 +0000 ROA not before: Wed 18 Dec 2024 02:42:18 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.250.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:42:18 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=54C6972BF43989B49615A6999C50CA797E10457D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:18:91:3e:3e:32:19:35:48:ab:8b:27:4c: 41:38:d0:d7:f8:1d:07:23:3a:1c:a1:68:57:f1:00: 09:4b:04:2b:b5:38:a6:14:df:09:52:9f:71:d5:d1: 8b:72:53:0f:6f:6b:08:cc:5c:db:a2:aa:52:75:62: 95:77:45:78:08:26:d6:d6:6d:c8:93:9f:4a:5e:12: 84:00:43:c1:35:02:24:fe:34:a6:e0:4b:e3:c8:b6: fe:d9:02:b6:c6:9c:c8:05:d1:e7:31:12:5a:a1:1e: 5d:05:47:bc:e2:96:02:27:2f:24:f3:36:58:0f:d3: da:42:4d:e6:02:0b:94:b3:d0:97:d4:9f:cd:5d:3f: 4b:64:97:c4:15:c4:6d:8f:89:da:76:16:d7:43:2c: 64:5e:0a:c5:d5:77:5f:1c:a9:2a:da:83:9d:9f:f5: d9:92:58:e6:83:56:a5:fb:9e:b8:26:c9:b8:dd:73: 95:da:b6:ec:5b:87:3f:b5:3b:6e:57:bd:a9:a5:5b: d9:ae:0b:f3:52:3b:7d:b9:3c:ef:6e:e7:c6:fc:fc: e7:99:20:66:e4:71:f7:07:e9:c1:39:0c:0e:6e:2f: 37:bd:e1:5c:32:f8:3b:48:5e:29:7b:11:ca:79:e7: d2:48:f8:19:d4:83:75:d0:ab:78:6e:88:7a:27:89: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:97:2B:F4:39:89:B4:96:15:A6:99:9C:50:CA:79:7E:10:45:7D X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VMaXK_Q5ibSWFaaZnFDKeX4QRX0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.250.128.0/19 Signature Algorithm: sha256WithRSAEncryption 0f:6d:03:d4:17:5e:06:21:30:e8:e7:42:1c:8b:b2:e9:b4:7f: 51:e5:ac:35:6c:b8:20:a4:7f:ca:02:f6:84:bb:cb:a3:c4:bd: ce:68:7c:e5:82:b9:39:45:dd:c8:fe:52:f5:07:90:18:a3:f2: 0d:cb:b9:1e:e2:2d:9f:e0:6e:c6:b3:2f:d9:d2:99:5f:fd:de: 0f:a0:0d:e9:ab:49:de:9a:af:87:ad:8d:24:33:83:69:0a:4b: 19:96:3f:27:27:d2:dd:09:25:fb:8e:2d:bf:d8:86:32:02:af: b1:d6:9b:bc:f0:86:bb:d1:c8:0d:6f:9a:f9:51:a1:cb:dd:00: d5:92:1c:a9:e2:59:0b:74:a5:b2:b3:62:fa:f8:de:35:25:b8: 77:8a:3e:d5:94:06:0b:07:a3:0e:67:04:4a:d4:3d:ee:e0:a1: d1:3c:ba:92:b9:97:d0:df:33:05:bb:1d:cf:5a:05:f9:c1:16: aa:23:e1:8a:83:00:7d:b8:7a:a1:d0:74:a8:c2:ec:83:37:70: 34:64:ab:54:3d:e5:24:ad:0b:aa:1a:6a:86:4e:38:90:73:7c: c7:82:00:8f:9c:af:30:8b:bf:f0:5a:af:69:7c:05:9b:de:8c: 72:25:50:eb:cb:96:20:41:d4:39:7a:0b:e1:71:f6:4e:0a:8c: 88:50:57:44 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQyMThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU0QzY5NzJCRjQzOTg5 QjQ5NjE1QTY5OTlDNTBDQTc5N0UxMDQ1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkaRiRPj4yGTVIq4snTEE40Nf4HQcjOhyhaFfxAAlLBCu1OKYU 3wlSn3HV0YtyUw9vawjMXNuiqlJ1YpV3RXgIJtbWbciTn0peEoQAQ8E1AiT+NKbg S+PItv7ZArbGnMgF0ecxElqhHl0FR7zilgInLyTzNlgP09pCTeYCC5Sz0JfUn81d P0tkl8QVxG2Pidp2FtdDLGReCsXVd18cqSrag52f9dmSWOaDVqX7nrgmybjdc5Xa tuxbhz+1O25XvamlW9muC/NSO325PO9u58b8/OeZIGbkcfcH6cE5DA5uLze94Vwy +DtIXil7Ecp559JI+BnUg3XQq3huiHonibBVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVMaXK/Q5ibSWFaaZnFDKeX4QRX0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1ZNYVhLX1E1aWJTV0ZhYVpuRkRLZVg0UVJYMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXS+oAwDQYJKoZIhvcNAQELBQADggEBAA9tA9QXXgYhMOjnQhyLsum0f1Hl rDVsuCCkf8oC9oS7y6PEvc5ofOWCuTlF3cj+UvUHkBij8g3LuR7iLZ/gbsazL9nS mV/93g+gDemrSd6ar4etjSQzg2kKSxmWPycn0t0JJfuOLb/YhjICr7HWm7zwhrvR yA1vmvlRocvdANWSHKniWQt0pbKzYvr43jUluHeKPtWUBgsHow5nBErUPe7godE8 upK5l9DfMwW7Hc9aBfnBFqoj4YqDAH24eqHQdKjC7IM3cDRkq1Q95SStC6oaaoZO OJBzfMeCAI+crzCLv/Bar2l8BZvejHIlUOvLliBB1Dl6C+Fx9k4KjIhQV0Q= -----END CERTIFICATE-----Generated at Sun Apr 27 05:15:23 2025 by rpki-client