$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa File: GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa (raw, json) Hash identifier: FhRM4qec6tbXH8Aj2HM64H1lBuGR2UfPS7aZ/KJgpHc= Subject key identifier: 19:74:1A:F7:22:11:86:03:42:74:E5:8C:F8:95:3F:3A:2E:13:BC:BA Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 043C Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa Signing time: Wed 18 Dec 2024 02:22:21 +0000 ROA not before: Wed 18 Dec 2024 02:22:21 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 124.211.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:22:21 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=19741AF7221186034274E58CF8953F3A2E13BCBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:b5:15:b0:32:c6:89:eb:72:6b:ef:d5:b1: 74:d4:80:61:78:af:bd:47:1a:ff:27:e2:b4:ae:85: f7:6c:34:51:2c:09:11:18:7f:59:d9:a1:3b:84:13: 1e:0b:b7:99:05:13:95:72:cc:4e:aa:55:02:52:b4: 24:5a:05:9e:42:ec:0a:76:fe:f1:b1:0f:00:04:18: e7:9c:25:12:56:d8:56:0a:b9:4a:59:c8:03:04:b0: bf:d5:e4:74:8e:59:76:c2:23:72:2f:d7:3b:99:5b: 25:ab:e1:19:34:4f:9a:cb:a2:c9:7c:f4:9b:7b:cd: ee:22:c2:ff:ed:53:cb:ec:89:c1:32:ca:ac:2b:b1: 61:3f:55:a2:73:9c:7a:40:e5:6b:14:3f:5e:0a:f7: f6:50:dc:cd:a0:e6:e5:8d:f0:c1:db:ed:76:47:60: 46:5e:06:6b:d7:c5:1d:79:b2:c7:e1:9e:24:b7:bd: e8:56:dd:5e:35:ea:84:e5:e2:1f:87:3d:dd:5f:45: 88:bb:89:9a:ac:4f:71:4e:e0:ce:26:4b:a3:39:de: fd:4f:ff:d7:73:41:af:ee:c7:12:1a:a9:aa:75:f4: 2f:ec:c6:cb:b7:b6:04:20:a8:7e:2a:48:0b:da:91: b9:2a:5e:66:7b:41:22:3d:96:73:79:7a:39:05:0f: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:1A:F7:22:11:86:03:42:74:E5:8C:F8:95:3F:3A:2E:13:BC:BA X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GXQa9yIRhgNCdOWM-JU_Oi4TvLo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.211.128.0/17 Signature Algorithm: sha256WithRSAEncryption 50:6a:d5:ef:d4:9d:f2:b9:38:da:c0:24:29:e1:2c:b2:df:ea: 9c:99:6b:d2:48:8f:7f:79:46:24:3a:06:ec:ea:f8:d9:9f:36: 4c:17:3b:17:be:21:24:7c:f0:0f:e8:67:ab:fd:e3:1e:3e:b4: 3f:b5:a6:cf:56:03:dc:f1:af:4d:85:c3:1a:f2:d7:a8:a4:17: 19:28:37:5e:b8:0d:58:bc:ab:64:5c:a9:3b:ce:20:dc:c9:a9: 66:0b:bb:3f:c7:f3:28:ef:38:d5:81:e9:16:c9:01:f6:1b:e2: 0e:1a:79:a0:b3:bb:a4:06:93:6f:bf:e3:2a:70:7c:42:00:28: 6c:93:0a:10:8b:fa:eb:18:19:e7:17:2b:dd:94:68:63:15:e3: 8a:dc:c5:cd:a4:35:93:aa:65:a8:5d:d3:80:da:62:a2:d3:7e: 35:75:f9:4c:00:ba:f0:96:fd:b8:0f:1b:66:b4:78:8a:22:67: 62:28:62:24:2f:58:fd:71:99:c6:d1:5b:68:50:11:6c:75:d0: b5:06:4c:89:79:b7:e9:b4:48:31:34:e1:26:e5:cf:56:37:72: 58:7e:fc:4e:91:a3:52:1b:7f:24:4d:f0:e5:03:7b:ab:d5:cd: e2:79:3f:8d:b8:a0:39:dc:3f:8b:26:10:c4:97:8f:ef:6c:db: f1:56:af:76 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjIyMjFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDE5NzQxQUY3MjIxMTg2 MDM0Mjc0RTU4Q0Y4OTUzRjNBMkUxM0JDQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7FrUVsDLGietya+/VsXTUgGF4r71HGv8n4rSuhfdsNFEsCREY f1nZoTuEEx4Lt5kFE5VyzE6qVQJStCRaBZ5C7Ap2/vGxDwAEGOecJRJW2FYKuUpZ yAMEsL/V5HSOWXbCI3Iv1zuZWyWr4Rk0T5rLosl89Jt7ze4iwv/tU8vsicEyyqwr sWE/VaJznHpA5WsUP14K9/ZQ3M2g5uWN8MHb7XZHYEZeBmvXxR15ssfhniS3vehW 3V416oTl4h+HPd1fRYi7iZqsT3FO4M4mS6M53v1P/9dzQa/uxxIaqap19C/sxsu3 tgQgqH4qSAvakbkqXmZ7QSI9lnN5ejkFD2w3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUGXQa9yIRhgNCdOWM+JU/Oi4TvLowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0dYUWE5eUlSaGdOQ2RPV00tSlVfT2k0VHZMby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd804AwDQYJKoZIhvcNAQELBQADggEBAFBq1e/UnfK5ONrAJCnhLLLf6pyZ a9JIj395RiQ6Buzq+NmfNkwXOxe+ISR88A/oZ6v94x4+tD+1ps9WA9zxr02Fwxry 16ikFxkoN164DVi8q2RcqTvOINzJqWYLuz/H8yjvONWB6RbJAfYb4g4aeaCzu6QG k2+/4ypwfEIAKGyTChCL+usYGecXK92UaGMV44rcxc2kNZOqZahd04DaYqLTfjV1 +UwAuvCW/bgPG2a0eIoiZ2IoYiQvWP1xmcbRW2hQEWx10LUGTIl5t+m0SDE04Sbl z1Y3clh+/E6Ro1IbfyRN8OUDe6vVzeJ5P424oDncP4smEMSXj+9s2/FWr3Y= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:00 2025 by rpki-client on console.sobornost.net