$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/el4b18VOEnGiBbRPoZAwbkM1IhQ.roa File: el4b18VOEnGiBbRPoZAwbkM1IhQ.roa (raw, json) Hash identifier: I1cIvK8HSGEpGDZ+cqhAPMEWgp4+6NODwX7TYlXHj6w= Subject key identifier: 7A:5E:1B:D7:C5:4E:12:71:A2:05:B4:4F:A1:90:30:6E:43:35:22:14 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0523 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/el4b18VOEnGiBbRPoZAwbkM1IhQ.roa Signing time: Wed 18 Dec 2024 02:42:23 +0000 ROA not before: Wed 18 Dec 2024 02:42:23 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.249.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:42:23 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=7A5E1BD7C54E1271A205B44FA190306E43352214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:64:a1:1d:e8:3f:fd:65:c6:16:20:5a:63: 19:99:ad:35:e9:d1:cf:44:35:5c:7e:8a:df:e5:59: 3c:2e:df:99:3d:47:da:55:b1:a4:74:bb:14:c3:7f: 7c:66:9b:f9:5f:88:17:c7:41:28:83:8e:b1:3f:76: 2d:89:4f:6f:32:65:ae:5b:22:90:06:37:c9:84:6c: 52:ad:6e:2e:1d:4f:c0:7c:df:e4:9a:5a:44:05:4e: bf:ab:ed:a5:29:da:ed:24:12:9e:a1:61:11:e3:23: ea:b4:7f:1f:ad:5c:9b:f2:ee:a0:1a:4b:4d:e6:80: 68:58:43:e2:0f:05:c4:fd:ef:ec:b5:e5:a4:22:d2: cd:fc:1f:8e:b6:7a:5d:e9:78:4c:71:23:9f:00:92: d5:58:70:eb:25:c9:56:d7:c6:41:11:f1:0d:3e:87: a4:35:38:2d:83:1a:4b:b4:ac:81:69:06:eb:80:be: 59:4e:2f:75:66:de:31:28:9f:4e:f1:cc:6c:1e:67: 02:7f:f6:df:c7:4c:f0:b8:a1:7a:0f:da:fd:6e:80: ac:d3:5c:44:96:ed:2e:9b:73:53:b7:4f:fb:c8:37: eb:e1:a6:e5:05:3b:c4:b2:4d:b5:f9:48:da:5b:a4: 7f:bc:91:ac:10:eb:42:de:7b:76:4f:56:e5:52:cd: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5E:1B:D7:C5:4E:12:71:A2:05:B4:4F:A1:90:30:6E:43:35:22:14 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/el4b18VOEnGiBbRPoZAwbkM1IhQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.249.169.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:9c:aa:95:6d:ca:64:83:0c:3d:46:1c:c1:a4:d4:1c:ee:da: 95:43:a3:c9:80:35:35:fb:5d:cd:87:23:68:ec:bb:93:0f:a3: a2:91:c7:bc:76:55:37:9f:c5:c5:46:5f:56:a6:5d:27:d5:20: 6d:08:52:24:af:40:cf:14:99:12:54:1b:16:03:1c:48:d6:d7: f4:f9:74:67:9d:03:c0:a8:6b:b7:79:69:b2:16:71:1a:6c:f1: e7:03:83:2f:89:04:13:b7:92:89:e2:49:59:d1:b7:2b:55:bb: 49:70:be:67:05:19:26:a2:54:2e:7a:3e:81:fb:10:94:d1:d3: 1f:61:04:b8:29:5c:78:62:b2:d2:f3:38:13:cc:84:2a:70:dd: 53:95:7c:06:75:e9:3a:e5:9a:74:97:f3:f3:12:96:15:e3:f6: 6c:bf:d4:41:5f:ae:d5:bd:ad:84:c0:a8:f1:a4:03:49:d0:52: 31:5a:8c:0d:4a:d5:f0:84:a9:c9:bb:4e:59:bb:aa:ba:5a:96: 22:a6:63:31:41:03:2b:68:3d:34:2e:92:6c:46:27:0b:7b:a8: c1:67:d7:d2:2e:c5:bc:db:2a:3a:c0:c1:46:8c:d3:eb:cd:d2: ec:86:df:bf:14:36:17:6c:27:cc:9b:e5:06:7b:4f:ff:ad:0f: b0:cf:54:ac -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQyMjNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdBNUUxQkQ3QzU0RTEy NzFBMjA1QjQ0RkExOTAzMDZFNDMzNTIyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXbGShHeg//WXGFiBaYxmZrTXp0c9ENVx+it/lWTwu35k9R9pV saR0uxTDf3xmm/lfiBfHQSiDjrE/di2JT28yZa5bIpAGN8mEbFKtbi4dT8B83+Sa WkQFTr+r7aUp2u0kEp6hYRHjI+q0fx+tXJvy7qAaS03mgGhYQ+IPBcT97+y15aQi 0s38H462el3peExxI58AktVYcOslyVbXxkER8Q0+h6Q1OC2DGku0rIFpBuuAvllO L3Vm3jEon07xzGweZwJ/9t/HTPC4oXoP2v1ugKzTXESW7S6bc1O3T/vIN+vhpuUF O8SyTbX5SNpbpH+8kawQ60Lee3ZPVuVSzS/rAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUel4b18VOEnGiBbRPoZAwbkM1IhQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2VsNGIxOFZPRW5HaUJiUlBvWkF3YmtNMUloUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADS+akwDQYJKoZIhvcNAQELBQADggEBAGqcqpVtymSDDD1GHMGk1Bzu2pVD o8mANTX7Xc2HI2jsu5MPo6KRx7x2VTefxcVGX1amXSfVIG0IUiSvQM8UmRJUGxYD HEjW1/T5dGedA8Coa7d5abIWcRps8ecDgy+JBBO3koniSVnRtytVu0lwvmcFGSai VC56PoH7EJTR0x9hBLgpXHhistLzOBPMhCpw3VOVfAZ16TrlmnSX8/MSlhXj9my/ 1EFfrtW9rYTAqPGkA0nQUjFajA1K1fCEqcm7Tlm7qrpaliKmYzFBAytoPTQukmxG Jwt7qMFn19IuxbzbKjrAwUaM0+vN0uyG378UNhdsJ8yb5QZ7T/+tD7DPVKw= -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:12 2025 by rpki-client