$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Oq0vTcd0mHO9ILz01271293jxiY.roa File: Oq0vTcd0mHO9ILz01271293jxiY.roa (raw, json) Hash identifier: 8RiWRd699QL4oM0RNWu01HuxcMTnSD2DkrputjHK9Ao= Subject key identifier: 3A:AD:2F:4D:C7:74:98:73:BD:20:BC:F4:D7:6E:F5:DB:DD:E3:C6:26 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04A4 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Oq0vTcd0mHO9ILz01271293jxiY.roa Signing time: Wed 18 Dec 2024 02:28:58 +0000 ROA not before: Wed 18 Dec 2024 02:28:58 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 111.110.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:28:58 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=3AAD2F4DC7749873BD20BCF4D76EF5DBDDE3C626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:74:f0:3b:6c:ac:a6:67:53:f5:58:36:4f: a9:bc:9c:03:24:c8:bb:dd:d9:62:17:f8:ce:3f:e3: 82:09:ce:9b:38:3b:cb:af:8f:b8:8b:4e:64:08:ae: 1a:d9:05:e7:d5:08:50:4b:aa:fc:6d:07:f9:cf:26: e4:07:cd:c0:81:0b:f1:c4:df:cd:67:11:99:e2:c9: 5b:74:e8:87:ac:68:96:e9:3b:bf:3a:be:e1:57:bc: 62:37:bb:58:f7:f5:34:06:4d:d5:35:cb:f4:dd:ea: 3f:4d:6f:8e:c2:72:02:87:fd:b0:b1:6c:0c:76:68: b2:50:52:17:86:6e:cd:92:4a:ee:50:d9:30:f1:b7: f4:cd:a5:df:39:46:6c:89:58:0f:38:e5:08:37:9e: a9:64:f8:6e:e8:ab:43:70:a6:58:6e:4a:77:d2:ac: 30:8b:b0:08:3d:aa:98:21:57:0d:4f:30:1a:ec:f7: 3b:12:f5:a7:5d:43:72:e8:e1:2f:d4:7d:67:5d:64: ce:33:d6:cb:19:1f:95:f7:6f:3b:9e:19:af:0e:c0: 4e:cd:c0:43:ce:5e:60:db:20:50:e2:b8:09:63:c8: 1b:49:25:bf:ff:21:dd:2f:99:70:ca:88:86:8e:90: ce:64:0e:1c:cc:b9:a5:18:eb:cb:77:a2:31:74:d9: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AD:2F:4D:C7:74:98:73:BD:20:BC:F4:D7:6E:F5:DB:DD:E3:C6:26 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Oq0vTcd0mHO9ILz01271293jxiY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.110.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:cc:01:c3:72:7c:81:e5:3f:c5:f9:e1:19:fb:84:41:92:9a: a8:32:50:88:e0:95:98:f1:74:ef:75:d1:dd:92:c3:36:df:7a: d8:d5:15:73:fd:30:0e:bf:89:5b:36:4d:9d:3f:c7:ee:78:13: b8:a9:e1:ea:5d:3a:90:b7:b0:75:f8:bf:5b:fe:32:8f:ea:d2: b7:3b:a7:c8:32:68:9b:8a:ad:e6:4d:8d:4f:a2:56:a8:ef:06: ec:be:c7:2c:29:87:66:18:5b:8f:7a:c3:65:89:91:63:6b:ad: 74:25:f7:18:6b:bd:df:34:a0:74:3a:30:72:27:d9:57:f3:da: d8:45:cf:04:c3:de:c7:b3:c4:c7:02:3f:8f:3b:5e:a0:cc:75: 6b:72:14:38:8e:e4:97:8a:c4:6f:4d:99:ae:7a:ef:bb:a1:aa: 21:a9:d1:5b:ca:15:a9:59:ca:92:f9:98:14:f5:99:fc:7a:84: 43:28:45:ff:98:8f:a9:c7:41:92:55:97:6a:82:86:3e:0d:5d: d9:1d:28:ce:42:3c:90:db:a8:3f:30:70:61:e3:f1:23:dc:ae: 97:dd:08:dc:09:68:3f:cd:43:ab:61:f6:2c:f6:43:a8:90:7e: d9:4a:60:c0:6f:0b:e7:0d:6e:3f:c3:61:3d:f8:b6:20:f7:00: 25:2a:f5:b0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI4NThaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNBQUQyRjREQzc3NDk4 NzNCRDIwQkNGNEQ3NkVGNURCRERFM0M2MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT9nTwO2yspmdT9Vg2T6m8nAMkyLvd2WIX+M4/44IJzps4O8uv j7iLTmQIrhrZBefVCFBLqvxtB/nPJuQHzcCBC/HE381nEZniyVt06IesaJbpO786 vuFXvGI3u1j39TQGTdU1y/Td6j9Nb47CcgKH/bCxbAx2aLJQUheGbs2SSu5Q2TDx t/TNpd85RmyJWA845Qg3nqlk+G7oq0NwplhuSnfSrDCLsAg9qpghVw1PMBrs9zsS 9addQ3Lo4S/UfWddZM4z1ssZH5X3bzueGa8OwE7NwEPOXmDbIFDiuAljyBtJJb// Id0vmXDKiIaOkM5kDhzMuaUY68t3ojF02WOVAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUOq0vTcd0mHO9ILz01271293jxiYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL09xMHZUY2QwbUhPOUlMejAxMjcxMjkzanhpWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBvbjANBgkqhkiG9w0BAQsFAAOCAQEAKcwBw3J8geU/xfnhGfuEQZKaqDJQ iOCVmPF073XR3ZLDNt962NUVc/0wDr+JWzZNnT/H7ngTuKnh6l06kLewdfi/W/4y j+rStzunyDJom4qt5k2NT6JWqO8G7L7HLCmHZhhbj3rDZYmRY2utdCX3GGu93zSg dDowcifZV/Pa2EXPBMPex7PExwI/jzteoMx1a3IUOI7kl4rEb02Zrnrvu6GqIanR W8oVqVnKkvmYFPWZ/HqEQyhF/5iPqcdBklWXaoKGPg1d2R0ozkI8kNuoPzBwYePx I9yul90I3AloP81Dq2H2LPZDqJB+2UpgwG8L5w1uP8NhPfi2IPcAJSr1sA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:43 2025 by rpki-client