$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4dtp0-uBQT1w4qIFJjmH2rv3KAI.roa File: 4dtp0-uBQT1w4qIFJjmH2rv3KAI.roa (raw, json) Hash identifier: 0PPykRmU+qx/e7o27jR3tEEZzDGlEj/mnKfJhNJHiHU= Subject key identifier: E1:DB:69:D3:EB:81:41:3D:70:E2:A2:05:26:39:87:DA:BB:F7:28:02 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 057F Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4dtp0-uBQT1w4qIFJjmH2rv3KAI.roa Signing time: Wed 26 Feb 2025 09:19:04 +0000 ROA not before: Wed 26 Feb 2025 09:19:04 +0000 ROA not after: Sun 15 Feb 2026 01:30:03 +0000 asID: 2516 IP address blocks: 14.10.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 26 09:19:04 2025 GMT Not After : Feb 15 01:30:03 2026 GMT Subject: CN=E1DB69D3EB81413D70E2A205263987DABBF72802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:67:38:be:67:b2:1f:05:e7:76:53:8f:22: 27:f7:1e:73:76:4f:1c:a2:0e:df:cd:3a:dd:7a:67: 37:ec:4e:30:cc:eb:8b:20:ce:3f:94:e1:a7:30:75: 5c:07:bc:e0:cf:49:93:a0:cd:c4:b4:ae:97:ed:69: a2:34:82:7c:6d:5b:92:34:cd:b5:63:4a:e1:6b:c2: 74:86:64:55:ce:ed:e6:b0:b8:1b:2f:10:2d:5f:09: 84:94:11:66:b9:19:5c:87:59:da:26:88:89:a3:90: 67:f5:ed:b0:d4:5d:3f:31:49:7d:fd:22:ac:6d:17: a5:1e:4a:4a:10:b0:7a:d8:02:4d:ed:67:82:e0:8a: e7:44:b6:3f:93:ac:72:f1:3e:8e:04:81:88:3c:8b: 50:9e:14:a5:be:7a:13:85:2e:3c:d1:ce:0f:e6:be: 46:39:b4:16:52:39:9a:be:68:6b:aa:46:29:c0:6a: 72:95:8f:8d:30:ff:13:11:6c:df:e5:9d:c4:41:3a: 5f:c7:ca:bb:48:6d:16:f1:43:6a:26:fe:13:75:c3: 6c:1f:a4:70:0a:6b:11:45:4b:90:fe:fc:5b:06:38: 5e:0a:9d:41:42:94:b1:df:bd:0e:1b:aa:04:59:72: c6:9c:90:2c:d7:5a:f6:2c:29:e8:a7:4b:f3:64:66: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:69:D3:EB:81:41:3D:70:E2:A2:05:26:39:87:DA:BB:F7:28:02 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4dtp0-uBQT1w4qIFJjmH2rv3KAI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.10.0.0/15 Signature Algorithm: sha256WithRSAEncryption 59:0c:79:6d:91:e2:2d:89:11:30:9e:d1:65:80:d4:25:b7:34: ba:5b:34:80:88:07:f0:67:b6:5b:4f:42:d3:8d:f8:0d:76:56: ef:48:a6:da:73:cf:af:66:f2:d4:0a:49:8d:4c:65:c8:83:12: cc:5d:ad:e6:90:3f:55:b2:e8:2c:a9:ea:30:d1:8d:89:16:c3: e6:89:b7:fc:c2:f7:6e:ee:45:59:42:0e:40:f8:a9:57:40:e8: ca:13:60:86:08:d3:d8:74:c3:dc:63:9d:01:80:d4:ee:7d:76: 5d:e0:ce:61:80:1e:65:51:6b:04:24:83:2e:b2:99:00:4a:6f: 02:44:d7:db:13:77:89:09:03:ce:9e:a3:6c:86:7e:75:79:c5: 1d:e9:08:76:26:65:8b:22:66:40:78:7e:c9:bd:af:ea:38:c7: 84:ba:da:6d:78:1d:58:1c:e5:03:37:07:28:f4:a5:75:4a:1c: 05:27:47:06:db:36:21:24:8a:e6:8b:d7:d2:f2:a3:c9:2f:20: fe:e5:08:88:c4:56:7e:17:70:f1:7c:00:a3:ed:bd:b4:db:cc: 79:e6:7c:5b:8e:7c:df:6e:5b:5d:ca:73:58:24:3c:e9:fa:c8: 42:3e:ad:b9:65:53:56:a3:72:10:a6:64:34:6e:b8:90:e8:a8: 88:9c:1c:6b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTAyMjYw OTE5MDRaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUxREI2OUQzRUI4MTQx M0Q3MEUyQTIwNTI2Mzk4N0RBQkJGNzI4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkqmc4vmeyHwXndlOPIif3HnN2TxyiDt/NOt16ZzfsTjDM64sg zj+U4acwdVwHvODPSZOgzcS0rpftaaI0gnxtW5I0zbVjSuFrwnSGZFXO7eawuBsv EC1fCYSUEWa5GVyHWdomiImjkGf17bDUXT8xSX39IqxtF6UeSkoQsHrYAk3tZ4Lg iudEtj+TrHLxPo4EgYg8i1CeFKW+ehOFLjzRzg/mvkY5tBZSOZq+aGuqRinAanKV j40w/xMRbN/lncRBOl/HyrtIbRbxQ2om/hN1w2wfpHAKaxFFS5D+/FsGOF4KnUFC lLHfvQ4bqgRZcsackCzXWvYsKeinS/NkZig1AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU4dtp0+uBQT1w4qIFJjmH2rv3KAIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzRkdHAwLXVCUVQxdzRxSUZKam1IMnJ2M0tBSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEOCjANBgkqhkiG9w0BAQsFAAOCAQEAWQx5bZHiLYkRMJ7RZYDUJbc0uls0 gIgH8Ge2W09C0434DXZW70im2nPPr2by1ApJjUxlyIMSzF2t5pA/VbLoLKnqMNGN iRbD5om3/ML3bu5FWUIOQPipV0DoyhNghgjT2HTD3GOdAYDU7n12XeDOYYAeZVFr BCSDLrKZAEpvAkTX2xN3iQkDzp6jbIZ+dXnFHekIdiZliyJmQHh+yb2v6jjHhLra bXgdWBzlAzcHKPSldUocBSdHBts2ISSK5ovX0vKjyS8g/uUIiMRWfhdw8XwAo+29 tNvMeeZ8W458325bXcpzWCQ86frIQj6tuWVTVqNyEKZkNG64kOioiJwcaw== -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:58 2025 by rpki-client on console.sobornost.net