$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa File: PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa (raw, json) Hash identifier: VfPRg4fsfUfVBpii8yzE1rgTd7NfPvXvXcZgTDRFIb8= Subject key identifier: 3F:14:AB:F3:52:3E:05:FB:3B:A4:56:77:F2:6F:96:BE:D7:1B:69:EF Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0459 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa Signing time: Wed 18 Dec 2024 02:24:10 +0000 ROA not before: Wed 18 Dec 2024 02:24:10 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.230.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:10 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=3F14ABF3523E05FB3BA45677F26F96BED71B69EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:3b:f0:8f:af:c0:da:a3:2c:6e:2b:8a:57: 54:b6:22:c1:55:6f:70:64:c4:55:35:3b:95:a3:28: 8f:17:e6:0c:0a:28:fc:e8:52:a8:56:02:27:fa:d9: ee:c1:fc:a4:0b:c1:c2:6a:7d:3d:92:8c:c1:56:cd: 0e:12:81:12:18:2b:5e:28:26:2c:53:d4:99:79:a1: 49:72:25:4a:5d:b2:fc:48:d8:4d:e2:76:82:b8:8b: 15:02:47:04:42:97:c0:1b:41:23:ec:0b:a0:d2:59: b8:28:16:2b:1e:51:a7:a3:59:ed:f2:66:33:bb:b4: 4c:3a:29:f6:81:05:af:72:6b:c1:88:64:be:52:b1: 6b:bf:a4:53:8e:af:d9:2a:0f:b1:0c:cf:3b:fc:33: a1:ac:98:11:d3:e3:bc:b6:0f:ab:75:a8:ae:e8:e5: 80:4c:f1:2c:95:49:f8:fa:cf:ac:c1:30:46:73:3c: 4f:8b:2f:a6:fe:7d:0a:07:4d:b2:b6:4e:60:50:f5: ce:92:ec:09:eb:41:d0:44:fa:f8:56:d0:63:a4:17: 23:8e:e3:52:3e:f9:7d:ca:c2:bd:73:94:f3:49:da: 0c:85:90:c1:57:4c:a4:5c:0a:20:67:c1:ac:ce:ee: 08:62:53:8c:71:a3:05:3f:cd:c0:9f:c6:89:b4:f0: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:14:AB:F3:52:3E:05:FB:3B:A4:56:77:F2:6F:96:BE:D7:1B:69:EF X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.230.128.0/17 Signature Algorithm: sha256WithRSAEncryption 09:ec:17:88:d1:9b:a0:b3:40:88:f6:97:74:69:85:c3:c5:05: 01:e7:26:a0:e3:1c:86:b5:69:10:b0:ac:a0:d6:4d:f0:56:1f: eb:08:12:92:9c:d5:09:8d:bc:42:30:2c:01:6b:50:cc:ac:ab: 57:a2:fc:0e:40:88:82:32:ce:b1:db:34:37:ed:80:d3:71:76: 60:8a:72:b4:ab:1b:8d:f7:05:dd:e0:cc:20:c8:35:88:6b:90: aa:51:4a:08:bd:96:ac:57:5c:44:c2:0e:f9:e0:62:3c:c0:9f: 71:8f:23:53:08:44:54:c0:dd:7f:b7:e5:11:2e:83:1a:96:6a: eb:63:aa:49:d3:d0:fe:88:e2:b0:94:6e:21:44:d3:7f:a1:dc: bd:71:01:3b:1d:a9:30:8b:fb:31:c7:c1:f9:6e:0a:e1:8c:04: 03:18:76:1e:f1:e9:e5:28:9d:ac:a8:83:20:bc:9d:d1:82:6c: d9:7c:6c:c1:af:a1:ea:57:65:9b:e2:8a:fe:a0:7d:4a:d6:b9: 68:35:c7:c2:67:1f:7e:4b:d3:bd:c9:9f:4e:e7:88:6f:03:e0: 24:54:39:e7:de:7a:8c:01:a3:c9:c9:c3:6f:87:ea:20:fe:c8: af:59:ba:c2:16:8a:05:2e:79:11:2f:32:78:a2:a4:a5:be:2a: 79:60:77:fb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MTBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNGMTRBQkYzNTIzRTA1 RkIzQkE0NTY3N0YyNkY5NkJFRDcxQjY5RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9ADvwj6/A2qMsbiuKV1S2IsFVb3BkxFU1O5WjKI8X5gwKKPzo UqhWAif62e7B/KQLwcJqfT2SjMFWzQ4SgRIYK14oJixT1Jl5oUlyJUpdsvxI2E3i doK4ixUCRwRCl8AbQSPsC6DSWbgoFiseUaejWe3yZjO7tEw6KfaBBa9ya8GIZL5S sWu/pFOOr9kqD7EMzzv8M6GsmBHT47y2D6t1qK7o5YBM8SyVSfj6z6zBMEZzPE+L L6b+fQoHTbK2TmBQ9c6S7AnrQdBE+vhW0GOkFyOO41I++X3Kwr1zlPNJ2gyFkMFX TKRcCiBnwazO7ghiU4xxowU/zcCfxom08OxXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUPxSr81I+Bfs7pFZ38m+Wvtcbae8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1B4U3I4MUktQmZzN3BGWjM4bS1XdnRjYmFlOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfS5oAwDQYJKoZIhvcNAQELBQADggEBAAnsF4jRm6CzQIj2l3RphcPFBQHn JqDjHIa1aRCwrKDWTfBWH+sIEpKc1QmNvEIwLAFrUMysq1ei/A5AiIIyzrHbNDft gNNxdmCKcrSrG433Bd3gzCDINYhrkKpRSgi9lqxXXETCDvngYjzAn3GPI1MIRFTA 3X+35REugxqWautjqknT0P6I4rCUbiFE03+h3L1xATsdqTCL+zHHwfluCuGMBAMY dh7x6eUonayogyC8ndGCbNl8bMGvoepXZZviiv6gfUrWuWg1x8JnH35L073Jn07n iG8D4CRUOefeeowBo8nJw2+H6iD+yK9ZusIWigUueREvMniipKW+Knlgd/s= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:01 2025 by rpki-client on console.sobornost.net