$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/G8bd3UestA8nsREs5OlN3h1w-1g.roa File: G8bd3UestA8nsREs5OlN3h1w-1g.roa (raw, json) Hash identifier: fMtsIP5hOdQuEkSL9Wu3xO9yhEqIt9023QIeExFzJ2g= Subject key identifier: 1B:C6:DD:DD:47:AC:B4:0F:27:B1:11:2C:E4:E9:4D:DE:1D:70:FB:58 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04AA Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/G8bd3UestA8nsREs5OlN3h1w-1g.roa Signing time: Wed 18 Dec 2024 02:29:00 +0000 ROA not before: Wed 18 Dec 2024 02:29:00 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 27.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:29:00 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=1BC6DDDD47ACB40F27B1112CE4E94DDE1D70FB58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c7:7a:ce:c5:65:ed:b2:63:ac:5c:4f:6c:e1: 5e:79:70:f1:88:9f:24:e1:2c:51:33:b6:29:d1:e0: c9:09:03:cd:df:51:e1:da:04:29:cb:a4:19:33:64: 1c:ce:5f:3b:c5:6c:13:28:84:a0:c0:d7:d6:8c:31: 64:0a:f4:f2:72:5e:ae:b3:8e:d7:b1:6e:37:41:36: 98:e8:84:ee:f3:64:5f:1c:1a:b2:7c:f7:a3:14:27: 02:8d:d9:dd:9e:20:f7:9d:fb:12:14:55:c1:02:a4: b3:2b:29:5a:62:bd:5b:69:ba:91:ad:8e:05:47:8a: 33:36:51:db:b1:18:25:f1:7d:8c:47:65:0a:bb:73: 1c:89:54:0b:ad:1e:bf:9f:6c:5e:22:87:9b:99:43: 88:57:ed:04:7a:92:b8:81:30:6c:65:33:a4:67:73: 0b:88:c3:c9:0e:ae:4b:60:b3:e4:ec:55:7c:8a:fa: 99:b8:fc:00:47:d1:50:c4:bf:11:2b:84:16:c6:bc: 9b:2c:d1:d6:db:a8:6e:85:8b:5f:72:e9:91:26:92: d0:44:d1:1a:cc:bb:31:78:f1:33:14:cf:f4:b9:18: d4:e2:46:92:ad:59:f5:8d:0f:3c:e3:71:15:5a:1d: d6:7e:0f:b6:d6:0f:51:63:b9:90:71:f3:75:ab:f3: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C6:DD:DD:47:AC:B4:0F:27:B1:11:2C:E4:E9:4D:DE:1D:70:FB:58 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/G8bd3UestA8nsREs5OlN3h1w-1g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:02:a1:c2:d2:90:03:ef:eb:a7:18:5d:d5:77:c1:23:cb:3a: cc:2d:59:a1:30:94:d8:14:5e:c0:99:2a:89:3e:79:41:7c:e3: e3:e6:ce:0f:53:40:42:43:7f:b6:0a:a8:20:23:9b:70:9a:35: 4b:9c:b4:72:69:33:92:16:f4:50:e2:e5:f5:aa:83:c4:aa:5a: dc:fb:86:a8:2b:3b:bc:dd:50:79:6e:7c:2f:64:f9:a3:ae:69: ea:23:d9:f6:d0:f2:f4:94:e2:62:77:92:1d:d1:82:df:4b:0b: 9b:83:15:d8:94:b8:bf:0e:0d:3b:23:83:b6:7f:f0:71:56:7b: 1e:12:e1:f1:1c:7a:b4:ed:82:ea:0c:60:2c:dc:d8:51:71:17: fe:f5:58:1f:ff:f9:db:69:ab:2f:0d:76:46:07:de:ee:65:26: c2:a3:7d:24:d9:f7:9b:6c:da:05:0a:1a:17:5e:a4:0f:5f:03: 35:00:b3:20:58:4d:ea:53:2b:ab:99:8f:1c:8c:d1:95:f5:b6: 4f:17:f5:6f:6f:4a:cf:6c:c0:38:90:91:d3:fc:a4:d3:8b:e8: ec:dc:8e:77:65:ed:ef:32:5d:36:70:1c:03:e8:e7:76:47:48: 42:90:99:05:72:c7:04:7f:a2:da:22:aa:5a:fc:5d:ff:f4:9e: d6:53:41:c2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI5MDBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFCQzZERERENDdBQ0I0 MEYyN0IxMTEyQ0U0RTk0RERFMUQ3MEZCNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrx3rOxWXtsmOsXE9s4V55cPGInyThLFEztinR4MkJA83fUeHa BCnLpBkzZBzOXzvFbBMohKDA19aMMWQK9PJyXq6zjtexbjdBNpjohO7zZF8cGrJ8 96MUJwKN2d2eIPed+xIUVcECpLMrKVpivVtpupGtjgVHijM2UduxGCXxfYxHZQq7 cxyJVAutHr+fbF4ih5uZQ4hX7QR6kriBMGxlM6RncwuIw8kOrktgs+TsVXyK+pm4 /ABH0VDEvxErhBbGvJss0dbbqG6Fi19y6ZEmktBE0RrMuzF48TMUz/S5GNTiRpKt WfWNDzzjcRVaHdZ+D7bWD1FjuZBx83Wr81OvAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUG8bd3UestA8nsREs5OlN3h1w+1gwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0c4YmQzVWVzdEE4bnNSRXM1T2xOM2gxdy0xZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbVTANBgkqhkiG9w0BAQsFAAOCAQEAIAKhwtKQA+/rpxhd1XfBI8s6zC1Z oTCU2BRewJkqiT55QXzj4+bOD1NAQkN/tgqoICObcJo1S5y0cmkzkhb0UOLl9aqD xKpa3PuGqCs7vN1QeW58L2T5o65p6iPZ9tDy9JTiYneSHdGC30sLm4MV2JS4vw4N OyODtn/wcVZ7HhLh8Rx6tO2C6gxgLNzYUXEX/vVYH//522mrLw12Rgfe7mUmwqN9 JNn3m2zaBQoaF16kD18DNQCzIFhN6lMrq5mPHIzRlfW2Txf1b29Kz2zAOJCR0/yk 04vo7NyOd2Xt7zJdNnAcA+jndkdIQpCZBXLHBH+i2iKqWvxd//Se1lNBwg== -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:00 2025 by rpki-client on console.sobornost.net