$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8iCgRNnIPwy6lR69L1ZcaNUzgQU.roa File: 8iCgRNnIPwy6lR69L1ZcaNUzgQU.roa (raw, json) Hash identifier: lMB9bq+FXY99jjp37RB8GP7R9YAJqfv9h45B2NpLhEk= Subject key identifier: F2:20:A0:44:D9:C8:3F:0C:BA:95:1E:BD:2F:56:5C:68:D5:33:81:05 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04BF Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8iCgRNnIPwy6lR69L1ZcaNUzgQU.roa Signing time: Wed 18 Dec 2024 02:32:23 +0000 ROA not before: Wed 18 Dec 2024 02:32:23 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 111.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:32:23 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=F220A044D9C83F0CBA951EBD2F565C68D5338105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:9a:7c:7a:93:dd:bc:16:e5:0e:7f:53:95: 10:23:55:40:4a:2b:1b:4f:f8:94:a6:68:ad:28:45: 5a:12:af:21:31:3f:35:ec:44:4e:35:36:78:9a:69: 81:d6:b0:bb:f2:be:a8:a8:11:61:b6:fd:68:90:6a: d3:74:9a:cf:ac:eb:f4:01:ac:75:92:59:26:de:19: 59:60:f2:c1:4d:dc:07:bb:3f:d1:64:87:7e:49:18: 60:cd:23:13:03:cf:e0:da:40:1f:f6:71:e1:94:57: 36:a0:c9:51:39:a4:41:8f:8e:71:25:9c:67:ba:d3: 4b:c7:11:84:35:14:79:49:5f:7b:c9:da:00:21:ea: bb:a6:0f:26:95:5e:bd:f5:18:ab:9b:8e:f0:3c:9e: 26:41:c5:49:9b:18:1e:bd:86:f4:7b:23:8d:5f:4f: 1c:4b:0f:e0:86:96:c5:76:c8:10:82:26:b1:42:12: 64:32:c7:62:c1:97:c2:d2:64:04:40:f9:fd:b1:2e: 86:a0:a4:54:e4:d4:74:17:b3:6b:8e:b9:d5:bb:a6: 8e:17:64:20:5f:64:72:5e:2c:fa:c5:07:64:25:f1: b5:39:f9:92:73:eb:66:bc:53:f4:ad:e3:56:c7:72: f6:a1:a4:76:35:ee:4e:9c:1a:04:79:39:02:b6:34: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:20:A0:44:D9:C8:3F:0C:BA:95:1E:BD:2F:56:5C:68:D5:33:81:05 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8iCgRNnIPwy6lR69L1ZcaNUzgQU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 70:ee:17:8d:f6:e3:fa:ab:69:58:69:4f:ca:ed:44:53:a1:ef: 1b:12:12:65:c7:d8:20:c5:27:bc:8c:24:32:4d:27:b3:c1:59: b6:0d:0a:ca:8f:37:dd:00:d1:d2:8d:29:0c:0a:f7:be:3a:de: 23:11:16:8e:90:de:2a:59:52:5c:0f:e4:fa:66:c1:7c:86:d8: 0f:09:93:2f:b1:0e:b4:e9:24:1f:21:3a:55:a6:b3:ef:66:8b: cb:0b:76:f1:de:ca:8b:7d:20:d7:a4:a0:ec:6a:54:4d:51:0f: 17:90:64:e2:9a:44:41:60:4d:0d:dc:f1:71:8a:78:48:e2:d2: ab:91:40:55:18:1e:c0:ed:d0:e6:bc:a6:24:f4:d6:ae:61:3f: 1c:10:d9:92:00:74:5c:d4:05:0d:a1:1c:f5:a8:50:a7:23:0b: ac:02:7b:a5:cf:47:9d:5c:5f:9f:92:3a:f0:03:c7:87:46:34: 1f:41:9e:e7:2a:55:23:63:d4:65:09:7b:3c:df:d9:40:ff:74: 4a:88:0b:0b:20:7b:77:a5:40:29:16:df:3b:f5:cb:ec:f8:12: 89:ed:5a:c3:1e:26:a8:dd:94:fd:f9:f4:b8:33:f0:fb:7b:20: b4:0b:5b:d6:4d:80:89:6c:62:68:cc:ef:b3:d1:83:ed:e7:20: 9a:58:df:32 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjMyMjNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYyMjBBMDQ0RDlDODNG MENCQTk1MUVCRDJGNTY1QzY4RDUzMzgxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0/5p8epPdvBblDn9TlRAjVUBKKxtP+JSmaK0oRVoSryExPzXs RE41NniaaYHWsLvyvqioEWG2/WiQatN0ms+s6/QBrHWSWSbeGVlg8sFN3Ae7P9Fk h35JGGDNIxMDz+DaQB/2ceGUVzagyVE5pEGPjnElnGe600vHEYQ1FHlJX3vJ2gAh 6rumDyaVXr31GKubjvA8niZBxUmbGB69hvR7I41fTxxLD+CGlsV2yBCCJrFCEmQy x2LBl8LSZARA+f2xLoagpFTk1HQXs2uOudW7po4XZCBfZHJeLPrFB2Ql8bU5+ZJz 62a8U/St41bHcvahpHY17k6cGgR5OQK2NBwDAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU8iCgRNnIPwy6lR69L1ZcaNUzgQUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzhpQ2dSTm5JUHd5NmxSNjlMMVpjYU5VemdRVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBvZjANBgkqhkiG9w0BAQsFAAOCAQEAcO4Xjfbj+qtpWGlPyu1EU6HvGxIS ZcfYIMUnvIwkMk0ns8FZtg0Kyo833QDR0o0pDAr3vjreIxEWjpDeKllSXA/k+mbB fIbYDwmTL7EOtOkkHyE6Vaaz72aLywt28d7Ki30g16Sg7GpUTVEPF5Bk4ppEQWBN DdzxcYp4SOLSq5FAVRgewO3Q5rymJPTWrmE/HBDZkgB0XNQFDaEc9ahQpyMLrAJ7 pc9HnVxfn5I68APHh0Y0H0Ge5ypVI2PUZQl7PN/ZQP90SogLCyB7d6VAKRbfO/XL 7PgSie1awx4mqN2U/fn0uDPw+3sgtAtb1k2AiWxiaMzvs9GD7ecgmljfMg== -----END CERTIFICATE-----Generated at Sat Apr 5 17:27:29 2025 by rpki-client