$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CHhF93U5cVEnCQl6f5b6ICgtFVQ.roa File: CHhF93U5cVEnCQl6f5b6ICgtFVQ.roa (raw, json) Hash identifier: xngr2DTosiJOadYiDlZZg5iSzY5Qcn7YWhE89xilR54= Subject key identifier: 08:78:45:F7:75:39:71:51:27:09:09:7A:7F:96:FA:20:28:2D:15:54 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04BB Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CHhF93U5cVEnCQl6f5b6ICgtFVQ.roa Signing time: Wed 18 Dec 2024 02:32:21 +0000 ROA not before: Wed 18 Dec 2024 02:32:21 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 111.103.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:32:21 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=087845F7753971512709097A7F96FA20282D1554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:cf:2b:12:66:71:49:a6:78:67:69:32:70: 18:ce:a3:9a:50:df:6e:0d:00:8b:f8:b0:f7:33:2e: 35:20:87:3e:d4:9e:42:22:47:e3:50:0b:4d:42:cc: 83:b6:5c:3a:8a:4c:0e:07:c6:9a:73:9b:df:d0:cf: 95:63:2f:dc:93:8f:69:55:7b:49:f9:6c:88:a9:4f: 49:74:e9:bb:6e:23:04:7c:33:ec:3a:40:8b:7d:b1: b9:b0:80:f2:64:5b:ac:45:95:e0:96:83:55:d4:21: 45:55:41:d8:2a:ce:50:98:7b:c5:ab:7a:9f:67:f2: c2:97:91:aa:c9:1c:53:6f:2d:f0:5c:68:f7:a9:68: 66:36:13:6c:61:1e:92:ea:50:3a:88:20:47:7e:a3: 8d:0d:40:1c:37:4b:b1:6d:b6:98:ff:59:8f:f5:f8: 5d:88:42:dd:b9:ef:a1:7c:79:60:da:98:5f:a5:8e: 0d:8c:e3:f5:b9:0d:1d:c8:36:1e:60:cf:b7:6d:0e: 2f:56:50:8e:63:f5:6a:2b:b6:49:10:ad:38:95:54: d7:c4:38:e4:1e:91:62:e0:4b:6b:b8:26:72:40:ce: 90:32:04:d3:5a:d3:09:37:47:4a:b6:66:c2:08:9d: be:65:3d:9d:5c:11:de:0e:80:f1:6f:d4:ec:86:ee: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:78:45:F7:75:39:71:51:27:09:09:7A:7F:96:FA:20:28:2D:15:54 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CHhF93U5cVEnCQl6f5b6ICgtFVQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.103.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:5c:c9:48:d9:37:90:11:5e:4f:6e:27:51:e3:8b:5c:88:a8: 88:c8:3f:df:88:fd:d9:d6:eb:0d:79:22:be:c9:07:0b:15:cf: 1b:38:30:0a:97:2e:4b:3a:e3:65:cf:9f:b4:00:9a:43:4f:16: f6:e9:d9:88:d4:30:6b:7b:a3:2c:fc:27:06:1a:c0:34:51:84: 33:97:41:83:22:c1:11:f3:63:a5:fc:a6:d5:84:95:f2:45:17: ab:fa:e2:52:08:bf:5e:94:f5:38:9f:7c:0c:c8:f1:59:44:37: d5:25:25:b7:1f:56:ce:4e:dc:ce:71:0c:fc:c0:1f:94:b3:29: 1b:59:a2:bd:2b:ab:c2:1c:e5:24:a3:d0:0a:97:0d:73:c0:0b: 7c:aa:8d:89:58:38:d5:1c:be:da:c5:81:24:44:60:44:d4:5b: f8:e7:8f:6e:ff:a0:62:2a:41:e9:41:54:d3:8f:ad:42:93:b7: 14:c8:07:34:4a:25:2a:eb:c4:57:e8:ca:8b:0e:f3:09:1c:c8: cf:ef:01:e0:8e:07:81:92:de:20:7e:cf:5f:6c:ac:34:b9:ae: 2d:21:95:ae:86:ac:6a:ea:bd:a4:c6:8d:8b:b4:52:90:a0:1b: b0:0f:81:73:b2:99:07:e5:d0:6a:5a:9a:c4:1c:9e:5e:97:0e: 58:2e:69:c7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjMyMjFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA4Nzg0NUY3NzUzOTcx NTEyNzA5MDk3QTdGOTZGQTIwMjgyRDE1NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSMs8rEmZxSaZ4Z2kycBjOo5pQ324NAIv4sPczLjUghz7UnkIi R+NQC01CzIO2XDqKTA4Hxppzm9/Qz5VjL9yTj2lVe0n5bIipT0l06btuIwR8M+w6 QIt9sbmwgPJkW6xFleCWg1XUIUVVQdgqzlCYe8Wrep9n8sKXkarJHFNvLfBcaPep aGY2E2xhHpLqUDqIIEd+o40NQBw3S7Fttpj/WY/1+F2IQt2576F8eWDamF+ljg2M 4/W5DR3INh5gz7dtDi9WUI5j9WortkkQrTiVVNfEOOQekWLgS2u4JnJAzpAyBNNa 0wk3R0q2ZsIInb5lPZ1cEd4OgPFv1OyG7isLAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUCHhF93U5cVEnCQl6f5b6ICgtFVQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0NIaEY5M1U1Y1ZFbkNRbDZmNWI2SUNndEZWUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBvZzANBgkqhkiG9w0BAQsFAAOCAQEAh1zJSNk3kBFeT24nUeOLXIioiMg/ 34j92dbrDXkivskHCxXPGzgwCpcuSzrjZc+ftACaQ08W9unZiNQwa3ujLPwnBhrA NFGEM5dBgyLBEfNjpfym1YSV8kUXq/riUgi/XpT1OJ98DMjxWUQ31SUltx9Wzk7c znEM/MAflLMpG1mivSurwhzlJKPQCpcNc8ALfKqNiVg41Ry+2sWBJERgRNRb+OeP bv+gYipB6UFU04+tQpO3FMgHNEolKuvEV+jKiw7zCRzIz+8B4I4HgZLeIH7PX2ys NLmuLSGVroasauq9pMaNi7RSkKAbsA+Bc7KZB+XQalqaxByeXpcOWC5pxw== -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:36 2025 by rpki-client