$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/C2x36wLFzwSIMxJOfyihknq1RC4.roa File: C2x36wLFzwSIMxJOfyihknq1RC4.roa (raw, json) Hash identifier: HtT2XFKg2fU/hY6R91zNNTJjxsdXwdyt8VMoSUBvMNI= Subject key identifier: 0B:6C:77:EB:02:C5:CF:04:88:33:12:4E:7F:28:A1:92:7A:B5:44:2E Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 048C Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C2x36wLFzwSIMxJOfyihknq1RC4.roa Signing time: Wed 18 Dec 2024 02:26:31 +0000 ROA not before: Wed 18 Dec 2024 02:26:31 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 27.95.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:26:31 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=0B6C77EB02C5CF048833124E7F28A1927AB5442E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:21:7f:a9:49:79:5a:cb:71:33:46:c4:d1:e7: 79:af:1f:ca:dc:4b:9f:ee:bf:a0:cc:1e:73:1d:d8: 6b:b4:24:f0:5c:7a:91:22:96:6e:35:d7:7b:b9:ec: 90:11:6d:6d:24:aa:95:9e:27:dc:fb:74:ac:87:4a: e0:83:3b:99:c8:ee:d8:5d:5c:cb:4f:5d:2d:26:79: 29:50:ac:b5:42:6d:dc:d9:1e:e0:0b:32:53:b7:48: e2:95:d9:20:7b:1d:e4:ad:21:98:29:ad:40:7f:e5: 34:98:1a:eb:67:4b:64:df:38:93:15:89:41:9c:6b: 1a:ea:db:9f:8f:c7:6d:6a:1a:ef:42:ba:f7:00:d8: 72:33:2b:a2:67:66:fb:e7:56:3c:33:4c:f9:d5:24: 2a:94:b9:70:9b:8e:90:48:95:78:c8:fa:32:94:26: 05:9d:19:42:60:a8:30:ff:34:7e:fc:5e:2e:19:ae: 97:f3:1a:8b:48:b1:07:5f:29:7d:7a:97:63:46:0e: 07:5c:06:cf:50:90:69:d7:ce:f8:6e:f6:00:97:27: 19:4b:f2:81:b3:9a:f7:8f:8a:5f:69:d2:af:4e:27: b5:0a:86:1b:12:e1:fe:45:50:01:5f:2e:38:81:3b: e7:1a:c1:9c:59:5a:44:01:03:01:37:63:f2:b7:fd: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6C:77:EB:02:C5:CF:04:88:33:12:4E:7F:28:A1:92:7A:B5:44:2E X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C2x36wLFzwSIMxJOfyihknq1RC4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:89:c4:fb:e4:f8:bf:c4:10:73:40:81:ad:b3:be:24:fb:d2: cb:5f:54:5a:5d:e1:31:65:3d:e9:18:f8:7a:ec:1f:0a:6c:48: 8a:19:2e:26:0a:fd:78:e9:c2:51:1f:d0:b1:81:2e:14:0b:f0: 87:4e:da:b6:01:f8:c5:7a:57:41:58:73:3e:f7:01:94:3c:d1: e2:2d:f7:d5:b7:23:fc:80:f0:04:73:cc:bf:70:ea:bc:ca:6c: a2:9c:f4:70:5f:76:85:ba:0f:66:43:69:28:25:97:f0:f1:e4: 3c:8d:2c:2a:71:ac:35:f8:9e:d1:17:ae:b8:83:03:2c:12:7d: b0:f6:b8:51:d3:e6:e3:ee:ca:5d:b2:67:cd:55:da:05:eb:2f: e4:ae:e2:98:35:9c:f9:02:84:46:53:c3:6f:95:c7:98:54:4b: ab:77:20:3a:02:05:1f:88:fc:d3:38:7c:b8:9c:26:6a:df:01: f2:a1:5b:18:d0:61:bc:cd:9c:d4:5f:78:0c:6f:a3:14:22:87: 35:c4:ca:52:b0:43:1c:a7:0a:b8:e8:e3:58:22:60:a8:54:b4: 5e:de:1b:e9:d6:0b:46:67:45:72:62:20:87:97:7e:14:54:13: 27:02:94:6d:4a:e9:1a:55:ea:09:69:99:cd:31:1d:d5:9a:34: 66:c0:6a:98 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI2MzFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBCNkM3N0VCMDJDNUNG MDQ4ODMzMTI0RTdGMjhBMTkyN0FCNTQ0MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpIX+pSXlay3EzRsTR53mvH8rcS5/uv6DMHnMd2Gu0JPBcepEi lm4113u57JARbW0kqpWeJ9z7dKyHSuCDO5nI7thdXMtPXS0meSlQrLVCbdzZHuAL MlO3SOKV2SB7HeStIZgprUB/5TSYGutnS2TfOJMViUGcaxrq25+Px21qGu9CuvcA 2HIzK6JnZvvnVjwzTPnVJCqUuXCbjpBIlXjI+jKUJgWdGUJgqDD/NH78Xi4Zrpfz GotIsQdfKX16l2NGDgdcBs9QkGnXzvhu9gCXJxlL8oGzmvePil9p0q9OJ7UKhhsS 4f5FUAFfLjiBO+cawZxZWkQBAwE3Y/K3/aPHAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUC2x36wLFzwSIMxJOfyihknq1RC4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0MyeDM2d0xGendTSU14Sk9meWloa25xMVJDNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbXzANBgkqhkiG9w0BAQsFAAOCAQEApYnE++T4v8QQc0CBrbO+JPvSy19U Wl3hMWU96Rj4euwfCmxIihkuJgr9eOnCUR/QsYEuFAvwh07atgH4xXpXQVhzPvcB lDzR4i331bcj/IDwBHPMv3DqvMpsopz0cF92hboPZkNpKCWX8PHkPI0sKnGsNfie 0ReuuIMDLBJ9sPa4UdPm4+7KXbJnzVXaBesv5K7imDWc+QKERlPDb5XHmFRLq3cg OgIFH4j80zh8uJwmat8B8qFbGNBhvM2c1F94DG+jFCKHNcTKUrBDHKcKuOjjWCJg qFS0Xt4b6dYLRmdFcmIgh5d+FFQTJwKUbUrpGlXqCWmZzTEd1Zo0ZsBqmA== -----END CERTIFICATE-----Generated at Sat Apr 5 23:11:18 2025 by rpki-client