$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YeiL0jqZBeQx2smIRxqYIUATH7c.roa File: YeiL0jqZBeQx2smIRxqYIUATH7c.roa (raw, json) Hash identifier: 9AjIyHrtcXggFv+2U+0zqMUop7mexBMVUDwc4GldJM8= Subject key identifier: 61:E8:8B:D2:3A:99:05:E4:31:DA:C9:88:47:1A:98:21:40:13:1F:B7 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0430 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YeiL0jqZBeQx2smIRxqYIUATH7c.roa Signing time: Wed 18 Dec 2024 02:22:17 +0000 ROA not before: Wed 18 Dec 2024 02:22:17 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.238.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:22:17 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=61E88BD23A9905E431DAC988471A982140131FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:57:f0:50:b3:b7:2d:91:11:3d:02:b2:72: 41:c2:0e:ba:4f:dc:ad:da:17:79:6b:81:c1:e4:d0: d9:ab:d0:c5:91:f6:65:e3:42:e1:55:0b:69:dd:4f: 67:f3:9d:6e:77:39:6a:f9:35:eb:5b:6a:19:92:d1: c1:96:85:d2:79:fc:15:1f:be:b2:3e:64:b5:37:ad: 3d:25:46:62:aa:77:a6:36:dd:f3:e7:10:d1:8d:77: fc:ee:d9:28:70:35:2d:94:b9:fb:99:44:ab:19:83: ff:55:0f:8e:fb:00:3b:2b:66:48:f5:49:42:66:6b: a5:b5:49:31:ba:8d:39:f7:d9:41:84:94:da:08:51: 53:f0:81:f9:66:80:f3:4a:53:71:2f:bb:e2:62:b0: e7:98:47:b1:06:25:88:4d:ce:94:77:bb:6b:97:f8: 4c:3f:97:6e:b0:39:18:fb:4d:8b:78:b4:df:f2:62: f9:2b:83:18:f9:5e:fd:47:46:49:19:ff:df:af:b7: d7:0f:40:e2:13:31:a3:17:2f:d0:4a:4a:ee:75:ca: 43:08:a8:8d:a0:f1:62:ff:d1:ea:a9:9d:e0:ed:d3: 9d:ea:54:49:88:22:9a:cc:f5:0a:a3:eb:1b:72:ef: c3:80:72:64:61:f6:ab:cd:d7:98:99:67:f0:8f:e7: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E8:8B:D2:3A:99:05:E4:31:DA:C9:88:47:1A:98:21:40:13:1F:B7 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YeiL0jqZBeQx2smIRxqYIUATH7c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.238.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:62:cf:94:35:17:ed:52:db:cc:67:19:e0:65:8e:7f:58:e0: c6:87:de:b3:5a:72:d4:f7:6c:4e:e2:e1:61:31:29:25:28:3a: 28:c4:03:2e:1c:72:32:69:5e:00:a7:b2:f1:8e:e9:25:18:96: 47:e3:4c:67:11:1a:2f:72:57:bb:73:a6:18:d5:fe:2f:2a:ac: 4c:d6:77:4b:fc:47:17:41:0e:16:ab:4f:e3:c7:38:a8:5a:a2: 14:8d:a8:4d:84:6d:5b:64:de:f0:49:b5:92:64:5a:96:f3:c9: fd:3d:33:71:6b:08:56:f4:1a:07:d2:5a:07:4d:99:2d:21:ac: 33:34:5f:ff:63:00:2e:c3:da:48:88:92:e6:4b:ed:a7:57:1b: b7:75:02:4f:bd:c3:0d:42:49:5b:98:80:0c:3d:5b:62:85:7c: 0a:b6:25:0f:b5:8f:20:a4:0b:75:1a:6f:c9:34:96:25:3e:88: 9c:17:d7:86:a7:b2:1a:5d:75:ac:cf:75:3b:81:7e:da:e0:d3: 27:0f:46:79:be:39:89:22:4f:ba:da:78:89:e1:14:49:57:be: a3:7b:b7:fd:59:e5:ca:f9:23:6f:6c:de:b3:ca:9c:d1:4e:30: 96:d1:8a:f5:12:e5:d4:4a:f7:76:b8:4d:07:52:f1:be:01:c9: cb:31:a2:a8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjIyMTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYxRTg4QkQyM0E5OTA1 RTQzMURBQzk4ODQ3MUE5ODIxNDAxMzFGQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqq1fwULO3LZERPQKyckHCDrpP3K3aF3lrgcHk0Nmr0MWR9mXj QuFVC2ndT2fznW53OWr5NetbahmS0cGWhdJ5/BUfvrI+ZLU3rT0lRmKqd6Y23fPn ENGNd/zu2ShwNS2UufuZRKsZg/9VD477ADsrZkj1SUJma6W1STG6jTn32UGElNoI UVPwgflmgPNKU3Evu+JisOeYR7EGJYhNzpR3u2uX+Ew/l26wORj7TYt4tN/yYvkr gxj5Xv1HRkkZ/9+vt9cPQOITMaMXL9BKSu51ykMIqI2g8WL/0eqpneDt053qVEmI IprM9Qqj6xty78OAcmRh9qvN15iZZ/CP5x2/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYeiL0jqZBeQx2smIRxqYIUATH7cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1llaUwwanFaQmVReDJzbUlSeHFZSVVBVEg3Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfS7oAwDQYJKoZIhvcNAQELBQADggEBAJ1iz5Q1F+1S28xnGeBljn9Y4MaH 3rNactT3bE7i4WExKSUoOijEAy4ccjJpXgCnsvGO6SUYlkfjTGcRGi9yV7tzphjV /i8qrEzWd0v8RxdBDharT+PHOKhaohSNqE2EbVtk3vBJtZJkWpbzyf09M3FrCFb0 GgfSWgdNmS0hrDM0X/9jAC7D2kiIkuZL7adXG7d1Ak+9ww1CSVuYgAw9W2KFfAq2 JQ+1jyCkC3Uab8k0liU+iJwX14anshpddazPdTuBftrg0ycPRnm+OYkiT7raeInh FElXvqN7t/1Z5cr5I29s3rPKnNFOMJbRivUS5dRK93a4TQdS8b4Bycsxoqg= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:02 2025 by rpki-client on console.sobornost.net