$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9AcP1PX9VZND-W70xLuL_tBweY.roa File: s9AcP1PX9VZND-W70xLuL_tBweY.roa (raw, json) Hash identifier: M3Ik0n/66bhjupLGUiXxLfaSp9GAQrIQP4YfjmquojQ= Subject key identifier: B3:D0:1C:3F:53:D7:F5:56:4D:0F:E5:BB:D3:12:EE:2F:FB:41:C1:E6 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0438 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9AcP1PX9VZND-W70xLuL_tBweY.roa Signing time: Wed 18 Dec 2024 02:22:19 +0000 ROA not before: Wed 18 Dec 2024 02:22:19 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 114.20.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:22:19 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=B3D01C3F53D7F5564D0FE5BBD312EE2FFB41C1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:de:b9:8a:48:d8:79:69:00:f5:82:9e:da: 68:c9:9d:ae:58:19:77:44:b5:4c:b3:1c:b4:7f:6c: d9:b7:a7:a3:ab:8f:4f:32:8d:a5:ef:af:08:33:ca: bb:de:a6:77:6f:f8:df:76:3f:e2:1f:94:3f:b6:57: 61:fb:7f:25:e6:0c:52:93:1f:9f:06:01:29:6b:bc: f1:33:c5:b6:5c:cd:92:26:11:6f:1c:6d:39:e9:f1: 17:8c:bd:f2:56:9e:9b:55:bc:c8:c3:c8:5e:d1:4c: 82:f7:01:a1:38:8b:40:7a:9c:ab:76:2e:f8:65:a4: e9:db:9c:08:d1:01:c8:8f:8b:95:ca:18:08:41:9d: a7:f8:3a:b7:f4:ed:c3:5a:c0:59:13:29:a1:dc:f6: f1:f2:de:8a:f3:c5:3d:e0:e7:19:b1:36:94:57:38: 47:e4:ed:54:10:a3:50:22:e9:5e:63:bc:8a:42:f5: 0e:81:ca:25:37:06:64:fe:79:b8:07:d7:80:77:60: 22:2e:16:3b:50:99:e8:b0:25:a5:e1:03:79:e8:5a: cb:8f:e0:e2:21:e7:46:eb:3b:d5:07:80:61:72:c4: ce:69:90:14:1c:74:bb:c8:01:bd:9b:15:f1:d6:9b: 26:3c:e4:03:12:0f:48:d6:5c:7f:e4:32:ef:f4:ad: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D0:1C:3F:53:D7:F5:56:4D:0F:E5:BB:D3:12:EE:2F:FB:41:C1:E6 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9AcP1PX9VZND-W70xLuL_tBweY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.20.0.0/15 Signature Algorithm: sha256WithRSAEncryption 62:1c:1c:4b:52:a4:a9:65:85:5d:8d:d2:94:92:ca:fa:8b:81: 7e:08:3f:44:08:e2:0a:b3:c8:49:54:7d:d2:f7:8e:17:ff:bc: f3:21:e8:13:42:fc:82:a1:78:82:82:2f:25:a1:62:ba:f1:34: bf:8f:58:35:e2:11:11:62:37:f1:ac:32:46:a0:b6:a2:ed:ee: 6e:04:84:fd:d0:eb:40:26:86:34:f0:e3:4a:7d:07:15:97:9c: eb:7b:40:07:7a:75:bb:30:16:76:56:8c:ed:72:c6:63:79:3b: eb:c1:64:d9:97:7a:f7:36:f2:dc:c8:65:44:16:f9:c6:97:2a: 21:88:e2:fe:aa:23:d9:59:f0:c2:4e:2b:c3:08:a9:10:0c:c5: 98:7c:ed:13:7d:7f:87:7d:e3:41:38:87:3d:95:37:86:87:ff: d4:31:99:49:c5:b7:46:f0:fc:08:56:8d:ce:81:61:50:77:e2: 05:48:3b:fd:85:54:14:37:4d:1a:8c:c8:ff:3e:6c:96:5b:ee: 38:12:5e:90:63:1a:bd:79:63:20:37:3d:6f:f1:bd:36:4e:18: cb:0a:4e:0c:8b:a9:79:48:1a:09:fb:0b:4d:63:53:31:e8:79: 3c:60:ef:bd:46:a1:92:31:34:0a:11:cb:09:33:e1:8d:88:06: 53:8d:d6:c5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjIyMTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIzRDAxQzNGNTNEN0Y1 NTY0RDBGRTVCQkQzMTJFRTJGRkI0MUMxRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChSd65ikjYeWkA9YKe2mjJna5YGXdEtUyzHLR/bNm3p6Orj08y jaXvrwgzyrvepndv+N92P+IflD+2V2H7fyXmDFKTH58GASlrvPEzxbZczZImEW8c bTnp8ReMvfJWnptVvMjDyF7RTIL3AaE4i0B6nKt2LvhlpOnbnAjRAciPi5XKGAhB naf4Orf07cNawFkTKaHc9vHy3orzxT3g5xmxNpRXOEfk7VQQo1Ai6V5jvIpC9Q6B yiU3BmT+ebgH14B3YCIuFjtQmeiwJaXhA3noWsuP4OIh50brO9UHgGFyxM5pkBQc dLvIAb2bFfHWmyY85AMSD0jWXH/kMu/0reeJAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUs9AcP1PX9VZND+W70xLuL/tBweYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3M5QWNQMVBYOVZaTkQtVzcweEx1TF90QndlWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwFyFDANBgkqhkiG9w0BAQsFAAOCAQEAYhwcS1KkqWWFXY3SlJLK+ouBfgg/ RAjiCrPISVR90veOF/+88yHoE0L8gqF4goIvJaFiuvE0v49YNeIREWI38awyRqC2 ou3ubgSE/dDrQCaGNPDjSn0HFZec63tAB3p1uzAWdlaM7XLGY3k768Fk2Zd69zby 3MhlRBb5xpcqIYji/qoj2Vnwwk4rwwipEAzFmHztE31/h33jQTiHPZU3hof/1DGZ ScW3RvD8CFaNzoFhUHfiBUg7/YVUFDdNGozI/z5sllvuOBJekGMavXljIDc9b/G9 Nk4YywpODIupeUgaCfsLTWNTMeh5PGDvvUahkjE0ChHLCTPhjYgGU43WxQ== -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:05 2025 by rpki-client on console.sobornost.net