$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/821aQkOMIORRQRx277W7LlmLj80.roa File: 821aQkOMIORRQRx277W7LlmLj80.roa (raw, json) Hash identifier: x4KyE+8mkjD41nlarpcXRLClkgcT0qs1PDlcEw4YrYU= Subject key identifier: F3:6D:5A:42:43:8C:20:E4:51:41:1C:76:EF:B5:BB:2E:59:8B:8F:CD Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03BD Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/821aQkOMIORRQRx277W7LlmLj80.roa Signing time: Wed 18 Dec 2024 02:13:02 +0000 ROA not before: Wed 18 Dec 2024 02:13:02 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.137.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:13:02 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=F36D5A42438C20E451411C76EFB5BB2E598B8FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:23:b3:8b:81:28:28:59:a5:ea:13:0f:c3: 35:ff:ba:a1:58:8d:72:03:d1:71:85:3d:0f:38:a9: 58:4a:57:ef:06:cc:8c:5d:32:50:6a:f2:af:92:65: 7f:ba:13:67:a4:c9:ff:a8:5e:68:b2:88:54:ce:b8: ef:5e:88:e3:39:d1:a9:62:d7:af:f7:4b:a4:6e:29: d7:56:f4:e6:10:29:bc:98:97:db:87:1d:a8:7a:ba: 02:c4:8f:94:95:e4:b7:39:58:cb:c3:46:76:ba:54: 00:7c:36:39:96:a2:39:10:98:fe:91:1e:f0:2c:e8: 8b:59:02:63:c2:03:72:20:fb:ff:8e:2e:b6:3a:6f: 01:d0:ff:ab:2c:ce:ec:09:60:03:42:d2:1e:4e:9c: fc:fc:60:2d:e6:ae:70:40:6c:4e:ce:7f:e0:bf:e8: 13:71:55:2f:d7:d4:21:a4:a7:a0:e6:8a:9a:bc:a1: 04:31:27:a9:57:fd:c2:6e:f1:f3:f5:75:36:60:b5: 13:52:d8:e2:1c:0f:11:24:e5:80:2e:d4:51:a6:92: 05:3f:91:8e:b3:a5:c6:bf:48:b5:86:30:0d:54:7b: cf:2e:11:1d:de:ad:de:ed:a6:e8:dd:96:9c:11:12: 82:54:97:06:7a:34:b8:09:41:b5:f3:64:d0:7c:f2: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6D:5A:42:43:8C:20:E4:51:41:1C:76:EF:B5:BB:2E:59:8B:8F:CD X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/821aQkOMIORRQRx277W7LlmLj80.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.137.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2f:b4:b2:b4:88:a0:d8:43:37:95:63:8f:ae:de:98:9b:45:b1: 8c:d3:34:ec:23:b6:1d:1d:bb:f6:75:c4:f0:7d:9d:77:92:f7: e1:60:8e:2e:5c:2c:60:bc:97:4e:67:f9:7b:16:f4:db:e5:47: 35:da:6f:17:e4:43:17:2b:64:3b:82:d0:01:06:6f:01:ce:79: a5:6f:7b:af:c1:ec:3c:15:5e:02:5f:ab:85:1f:e2:a2:b3:35: 6a:e5:1f:57:7c:f5:ba:6d:e3:76:2f:1c:93:6d:56:4e:6b:85: a0:1c:82:5b:81:df:13:8a:67:f4:bf:a4:85:d6:e7:1b:9c:89: ee:3a:c6:3d:ae:17:ed:27:84:6a:56:90:a4:0e:56:fa:22:9a: 92:28:20:03:8b:6a:5e:8d:3c:6f:f3:82:00:ac:fc:1f:bf:57: ee:2f:8e:30:16:ef:97:81:1a:c3:79:56:ec:e0:24:5c:04:a0: c7:b0:03:89:e4:dc:6b:b9:f6:45:56:5f:dd:76:f9:bc:80:e1: 18:62:33:79:7b:20:1f:64:e3:c6:43:28:65:92:ea:c3:87:90: 54:2d:df:32:b7:01:1a:ea:85:ee:bc:e2:63:7a:04:d3:9b:9d: 44:b6:3b:db:11:f3:e2:ed:c4:fb:2a:38:dc:68:b5:69:59:86: 6d:48:1e:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjEzMDJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYzNkQ1QTQyNDM4QzIw RTQ1MTQxMUM3NkVGQjVCQjJFNTk4QjhGQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNYiOzi4EoKFml6hMPwzX/uqFYjXID0XGFPQ84qVhKV+8GzIxd MlBq8q+SZX+6E2ekyf+oXmiyiFTOuO9eiOM50ali16/3S6RuKddW9OYQKbyYl9uH Hah6ugLEj5SV5Lc5WMvDRna6VAB8NjmWojkQmP6RHvAs6ItZAmPCA3Ig+/+OLrY6 bwHQ/6sszuwJYANC0h5OnPz8YC3mrnBAbE7Of+C/6BNxVS/X1CGkp6Dmipq8oQQx J6lX/cJu8fP1dTZgtRNS2OIcDxEk5YAu1FGmkgU/kY6zpca/SLWGMA1Ue88uER3e rd7tpujdlpwREoJUlwZ6NLgJQbXzZNB88qKdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU821aQkOMIORRQRx277W7LlmLj80wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzgyMWFRa09NSU9SUlFSeDI3N1c3TGxtTGo4MC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc7iQAwDQYJKoZIhvcNAQELBQADggEBAC+0srSIoNhDN5Vjj67emJtFsYzT NOwjth0du/Z1xPB9nXeS9+Fgji5cLGC8l05n+XsW9NvlRzXabxfkQxcrZDuC0AEG bwHOeaVve6/B7DwVXgJfq4Uf4qKzNWrlH1d89bpt43YvHJNtVk5rhaAcgluB3xOK Z/S/pIXW5xucie46xj2uF+0nhGpWkKQOVvoimpIoIAOLal6NPG/zggCs/B+/V+4v jjAW75eBGsN5VuzgJFwEoMewA4nk3Gu59kVWX912+byA4RhiM3l7IB9k48ZDKGWS 6sOHkFQt3zK3ARrqhe684mN6BNObnUS2O9sR8+LtxPsqONxotWlZhm1IHlI= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:59 2025 by rpki-client on console.sobornost.net