$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FtadCxITYvXdxtaUurVCX-HAvac.roa File: FtadCxITYvXdxtaUurVCX-HAvac.roa (raw, json) Hash identifier: bITgbW9XjyF3Z4Vx8Dlqv2GSbqRq9k5M2WlcxQZOZfE= Subject key identifier: 16:D6:9D:0B:12:13:62:F5:DD:C6:D6:94:BA:B5:42:5F:E1:C0:BD:A7 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04C2 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FtadCxITYvXdxtaUurVCX-HAvac.roa Signing time: Wed 18 Dec 2024 02:32:24 +0000 ROA not before: Wed 18 Dec 2024 02:32:24 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 106.189.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:32:24 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=16D69D0B121362F5DDC6D694BAB5425FE1C0BDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0d:05:72:fa:3e:14:62:19:70:ed:73:e5:0a: 0c:13:ce:12:c3:29:d2:f0:11:51:c7:a0:55:e1:c7: 19:3d:cb:4c:f2:d3:d2:14:22:a3:8e:f4:03:2a:9e: 53:0d:b5:b1:29:96:21:fb:85:ff:fe:03:4a:59:ca: 16:ab:0c:50:ef:22:e2:55:f5:ad:66:e9:c2:58:b4: 91:86:bc:de:6d:2e:fd:42:7e:85:3e:26:f9:19:fd: cf:86:d6:37:74:6b:3d:b4:36:e9:8a:9d:28:0f:99: 30:00:b1:ad:a8:5f:75:e4:59:74:63:99:5f:e2:9d: 21:ec:fc:76:2b:8a:ce:73:69:e9:e7:23:49:b0:f5: 03:bf:6e:71:34:e5:cc:e6:0b:80:d3:7e:98:7a:6a: 15:19:48:d4:b2:fc:53:fc:2c:8f:ee:30:fb:c6:93: 3d:dd:25:f8:cf:f6:39:e1:8a:ad:1f:d6:0f:8c:26: 2e:5b:4f:79:e8:ae:f8:67:99:49:d0:e3:70:86:1c: 7a:5a:d1:09:27:a9:73:7c:e1:e9:c4:fb:1f:bb:19: 43:c4:5d:b2:64:4e:ac:97:74:b1:92:e1:ae:d4:96: a4:9b:38:05:71:3a:fb:ad:88:20:9c:af:93:5e:b5: 14:87:28:94:9e:a6:6f:5f:1e:b2:a0:d1:04:58:85: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D6:9D:0B:12:13:62:F5:DD:C6:D6:94:BA:B5:42:5F:E1:C0:BD:A7 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FtadCxITYvXdxtaUurVCX-HAvac.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 38:97:17:d3:3a:ac:4a:cf:13:1c:4a:64:d9:6c:e1:68:a9:3b: 66:6d:81:f0:02:ca:4e:f8:82:e0:f3:93:30:2c:95:ce:2b:9d: 24:21:1c:8c:f1:22:b1:65:85:93:42:d3:9d:67:8f:00:d5:55: fd:14:f0:ee:37:e1:8d:67:35:78:f4:8e:ec:ed:fd:f5:5d:9d: 40:10:3f:24:3d:85:48:06:f7:7f:2c:6e:7b:df:00:c8:6e:85: e7:cb:5d:60:c3:83:eb:e1:e8:c9:f5:ae:e3:2a:1d:a5:6f:fe: 00:31:70:91:db:1b:e8:fd:fe:d5:7c:d1:30:63:df:92:da:88: fd:8f:c8:64:de:c2:92:57:a7:22:ca:a2:e8:bd:95:82:cb:b2: e4:36:45:81:98:f5:d0:c9:80:43:5a:04:e6:14:9f:7d:fe:c8: e6:4f:c9:a4:9d:1a:62:55:c7:b7:71:e3:8e:f4:9d:1a:4b:95: 58:ad:89:7b:f4:4e:68:a3:c6:9c:00:50:66:0c:fb:79:57:4e: a1:2a:ca:e7:2f:d9:27:f7:bc:28:55:a0:8c:58:35:0c:9d:5a: 00:2b:d8:3b:dd:e9:af:9d:ff:a9:a5:b7:93:57:c0:58:2b:27: 05:63:05:b2:47:c2:8c:3e:39:f3:eb:b0:37:15:10:99:fb:00: 4b:aa:85:4e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjMyMjRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE2RDY5RDBCMTIxMzYy RjVEREM2RDY5NEJBQjU0MjVGRTFDMEJEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoDQVy+j4UYhlw7XPlCgwTzhLDKdLwEVHHoFXhxxk9y0zy09IU IqOO9AMqnlMNtbEpliH7hf/+A0pZyharDFDvIuJV9a1m6cJYtJGGvN5tLv1CfoU+ JvkZ/c+G1jd0az20NumKnSgPmTAAsa2oX3XkWXRjmV/inSHs/HYris5zaennI0mw 9QO/bnE05czmC4DTfph6ahUZSNSy/FP8LI/uMPvGkz3dJfjP9jnhiq0f1g+MJi5b T3norvhnmUnQ43CGHHpa0QknqXN84enE+x+7GUPEXbJkTqyXdLGS4a7UlqSbOAVx OvutiCCcr5NetRSHKJSepm9fHrKg0QRYhakvAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUFtadCxITYvXdxtaUurVCX+HAvacwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0Z0YWRDeElUWXZYZHh0YVV1clZDWC1IQXZhYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBqvTANBgkqhkiG9w0BAQsFAAOCAQEAOJcX0zqsSs8THEpk2WzhaKk7Zm2B 8ALKTviC4POTMCyVziudJCEcjPEisWWFk0LTnWePANVV/RTw7jfhjWc1ePSO7O39 9V2dQBA/JD2FSAb3fyxue98AyG6F58tdYMOD6+HoyfWu4yodpW/+ADFwkdsb6P3+ 1XzRMGPfktqI/Y/IZN7CklenIsqi6L2Vgsuy5DZFgZj10MmAQ1oE5hSfff7I5k/J pJ0aYlXHt3HjjvSdGkuVWK2Je/ROaKPGnABQZgz7eVdOoSrK5y/ZJ/e8KFWgjFg1 DJ1aACvYO93pr53/qaW3k1fAWCsnBWMFskfCjD458+uwNxUQmfsAS6qFTg== -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:00 2025 by rpki-client on console.sobornost.net