$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/x87AO5f5UyLQC79DqqOaiVX1Hsk.roa File: x87AO5f5UyLQC79DqqOaiVX1Hsk.roa (raw, json) Hash identifier: DO+qYiQhRzMQh0RDgVnW0t99JzOjcOMZZ+B/70yVMtQ= Subject key identifier: C7:CE:C0:3B:97:F9:53:22:D0:0B:BF:43:AA:A3:9A:89:55:F5:1E:C9 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 045E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/x87AO5f5UyLQC79DqqOaiVX1Hsk.roa Signing time: Wed 18 Dec 2024 02:24:12 +0000 ROA not before: Wed 18 Dec 2024 02:24:12 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 203.140.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:12 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=C7CEC03B97F95322D00BBF43AAA39A8955F51EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:30:d8:40:3c:e8:81:c6:cc:07:7d:18:fc: 16:bc:4c:14:3a:13:d1:e1:d1:38:46:47:5b:3e:36: 7b:69:7d:db:96:0c:0a:dc:c9:2d:1d:a8:85:3b:46: 7b:7c:f6:31:79:fd:09:dc:6f:45:d8:d4:f4:ae:81: a4:97:c2:69:5b:c5:d7:90:ec:66:20:b6:a0:b3:e6: be:53:1b:3a:f5:02:2d:c1:69:d8:41:64:86:53:fa: 7d:39:c1:40:36:01:a9:80:1f:61:43:35:e0:29:ce: 32:d8:bb:17:0d:17:56:91:b1:5f:c0:ac:17:0b:47: 49:19:40:46:55:e6:d8:c6:27:60:40:8f:a4:fc:98: f2:85:cb:a1:77:62:c2:19:ad:57:bb:a1:fe:17:2d: de:ae:72:6e:ce:bf:9a:ae:23:6c:73:96:76:1a:8e: aa:bd:31:ba:ac:40:3f:f6:68:6c:26:94:8b:d9:9f: 25:56:4f:99:71:26:dd:23:2f:c6:c1:a5:02:31:9f: 41:4a:a2:e9:2b:14:fd:d4:96:c2:b4:49:76:04:e5: 37:fc:75:af:72:b8:07:52:0e:2d:2d:5a:b7:d4:73: 0f:70:0c:58:9d:a7:ed:4a:89:c9:dc:37:4d:e1:2e: 8d:dd:4e:01:ea:3b:5b:fc:68:05:32:c7:e8:a6:5c: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:C0:3B:97:F9:53:22:D0:0B:BF:43:AA:A3:9A:89:55:F5:1E:C9 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/x87AO5f5UyLQC79DqqOaiVX1Hsk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.140.128.0/19 Signature Algorithm: sha256WithRSAEncryption 69:54:cc:46:de:c0:2d:a9:5d:9c:eb:9e:a0:fa:b2:dd:9e:54: cb:73:dc:6c:86:ae:74:2b:4f:53:c9:72:5f:99:51:c9:62:d1: 7b:2d:43:61:bd:df:85:89:12:6d:f0:dc:47:4f:21:a0:b9:8f: 36:4b:8f:dd:be:c9:2f:b5:26:3f:70:d8:40:72:ba:6c:f2:50: b0:b2:a5:72:ca:21:16:e5:ee:f3:89:b0:78:70:79:b2:88:15: 41:54:a1:56:a4:f6:67:83:7d:bc:5a:a4:7e:8d:18:70:e8:b5: 35:1a:68:c3:92:16:4d:db:5a:34:92:60:cb:f6:4b:52:1c:92: 65:63:7e:ca:98:30:97:bf:e7:a9:0d:5e:37:19:bc:f4:64:5c: 4d:db:8e:f1:34:3f:94:50:51:5a:15:93:5d:7c:5d:3d:59:ed: 2c:c7:82:b6:93:61:49:3d:d3:46:ac:1a:7a:55:7f:f2:47:af: 51:f6:56:10:98:12:4a:ab:17:45:e4:9f:30:ea:e6:4c:74:75: 5a:d0:68:54:bd:5c:c8:94:7d:19:c0:63:de:ff:91:eb:41:f7: 32:19:f4:a8:43:27:dc:1f:d8:2e:7e:35:fc:39:fe:e9:fd:e6: fa:69:d5:d9:4c:e1:9a:28:fc:41:75:50:59:cd:c2:e0:53:06: a5:7b:e8:57 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MTJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM3Q0VDMDNCOTdGOTUz MjJEMDBCQkY0M0FBQTM5QTg5NTVGNTFFQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0zjDYQDzogcbMB30Y/Ba8TBQ6E9Hh0ThGR1s+NntpfduWDArc yS0dqIU7Rnt89jF5/Qncb0XY1PSugaSXwmlbxdeQ7GYgtqCz5r5TGzr1Ai3BadhB ZIZT+n05wUA2AamAH2FDNeApzjLYuxcNF1aRsV/ArBcLR0kZQEZV5tjGJ2BAj6T8 mPKFy6F3YsIZrVe7of4XLd6ucm7Ov5quI2xzlnYajqq9MbqsQD/2aGwmlIvZnyVW T5lxJt0jL8bBpQIxn0FKoukrFP3UlsK0SXYE5Tf8da9yuAdSDi0tWrfUcw9wDFid p+1KicncN03hLo3dTgHqO1v8aAUyx+imXPgHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUx87AO5f5UyLQC79DqqOaiVX1HskwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3g4N0FPNWY1VXlMUUM3OURxcU9haVZYMUhzay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXLjIAwDQYJKoZIhvcNAQELBQADggEBAGlUzEbewC2pXZzrnqD6st2eVMtz 3GyGrnQrT1PJcl+ZUcli0XstQ2G934WJEm3w3EdPIaC5jzZLj92+yS+1Jj9w2EBy umzyULCypXLKIRbl7vOJsHhwebKIFUFUoVak9meDfbxapH6NGHDotTUaaMOSFk3b WjSSYMv2S1IckmVjfsqYMJe/56kNXjcZvPRkXE3bjvE0P5RQUVoVk118XT1Z7SzH graTYUk900asGnpVf/JHr1H2VhCYEkqrF0XknzDq5kx0dVrQaFS9XMiUfRnAY97/ ketB9zIZ9KhDJ9wf2C5+Nfw5/un95vpp1dlM4Zoo/EF1UFnNwuBTBqV76Fc= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:05 2025 by rpki-client on console.sobornost.net