$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa File: ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa (raw, json) Hash identifier: kK+C1JAwYS+iCUAY4UlHWeCvNoC5u+W/TSsm3OSMWro= Subject key identifier: 64:D8:01:C5:5F:3F:0C:CF:E0:48:DE:6B:71:42:E6:62:C2:CD:08:86 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 045D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa Signing time: Wed 18 Dec 2024 02:24:12 +0000 ROA not before: Wed 18 Dec 2024 02:24:12 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.18.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:24:12 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=64D801C55F3F0CCFE048DE6B7142E662C2CD0886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:fa:84:e4:23:76:a1:2c:b0:3f:f5:ff:0e: 74:21:df:b6:5c:98:24:ae:33:05:6b:5d:7c:29:24: 98:70:05:10:b6:43:61:8e:ec:fc:75:cf:51:05:b3: bb:7b:00:b4:d0:30:80:68:ee:08:47:a6:97:10:36: 41:0a:6d:7c:d7:80:26:c4:ac:a7:bc:54:6b:e8:4c: a1:ad:70:24:b4:92:93:9f:b0:de:6d:9a:4d:f9:ae: b0:70:c2:34:4b:e1:77:5f:4d:b7:43:01:9c:39:dd: fb:b9:1e:e3:54:cc:d2:a7:d7:90:ef:83:26:28:68: b0:ba:2a:58:48:7e:af:3d:58:62:1b:ab:43:58:fd: 61:25:3f:85:26:9e:20:af:6f:91:b2:03:f3:ee:c4: f4:7a:a0:0b:b4:7d:bc:ef:ae:9f:c2:56:b5:ab:96: da:87:de:f6:f9:78:18:f2:b8:c6:1b:0e:23:c4:0a: f6:1b:6d:ef:6d:36:ce:12:68:e9:07:40:ca:03:d1: 1c:24:cb:ff:9b:fb:72:0b:d9:43:e6:0e:f2:51:4b: a6:03:d0:48:4d:27:7a:ad:54:68:c5:4b:0a:7e:49: c1:d0:44:5e:3b:4c:f6:87:3c:ee:e9:42:49:4e:79: e5:c0:44:2f:99:9a:2e:8d:a2:7a:d6:5d:46:1c:c4: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:01:C5:5F:3F:0C:CF:E0:48:DE:6B:71:42:E6:62:C2:CD:08:86 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.18.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:b8:cb:d7:55:67:10:06:13:b4:0f:d9:5e:2e:79:6c:bd:85: 95:2e:a4:b9:81:73:0a:51:e5:ff:15:29:fe:7e:d9:c0:3d:76: 83:7e:92:df:86:64:87:d5:42:a3:57:3c:fe:01:45:06:f0:ea: d5:2c:58:99:04:be:d8:16:f7:82:b3:f0:d0:66:cc:e5:60:32: 2a:45:05:17:bf:38:37:9f:b3:9d:60:d1:7e:06:27:88:ab:95: 25:46:7e:9b:56:ad:e0:67:76:b1:2d:66:fd:a2:f4:fd:1d:e1: 35:ed:0e:9f:d4:29:9a:95:03:21:b1:fc:7d:9a:a8:e6:f5:fd: 24:1b:93:f2:c1:70:ca:01:82:ea:e0:6c:12:51:ac:3d:0a:c8: 86:2c:51:c6:67:f3:f0:26:74:81:ba:85:b5:7b:34:0c:4d:5d: ba:79:e9:df:a1:0a:f7:04:de:e5:ca:2a:a2:d5:9a:78:14:8a: a4:3f:e6:05:d7:f6:08:db:bb:e0:8a:97:23:0d:c8:aa:04:f2: 44:2a:12:fd:41:6c:20:d5:9f:52:f3:48:05:b9:64:e7:bb:e8: 3f:8d:9e:dd:90:11:a6:83:f8:92:de:02:d4:64:ca:8a:25:63: b2:13:0e:6b:71:fe:c8:67:95:4e:51:c5:79:a5:b4:3c:c8:a9: 3f:bf:7f:71 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI0MTJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0RDgwMUM1NUYzRjBD Q0ZFMDQ4REU2QjcxNDJFNjYyQzJDRDA4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq4PqE5CN2oSywP/X/DnQh37ZcmCSuMwVrXXwpJJhwBRC2Q2GO 7Px1z1EFs7t7ALTQMIBo7ghHppcQNkEKbXzXgCbErKe8VGvoTKGtcCS0kpOfsN5t mk35rrBwwjRL4XdfTbdDAZw53fu5HuNUzNKn15DvgyYoaLC6KlhIfq89WGIbq0NY /WElP4UmniCvb5GyA/PuxPR6oAu0fbzvrp/CVrWrltqH3vb5eBjyuMYbDiPECvYb be9tNs4SaOkHQMoD0Rwky/+b+3IL2UPmDvJRS6YD0EhNJ3qtVGjFSwp+ScHQRF47 TPaHPO7pQklOeeXARC+Zmi6NonrWXUYcxMk/AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUZNgBxV8/DM/gSN5rcULmYsLNCIYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1pOZ0J4VjhfRE1fZ1NONXJjVUxtWXNMTkNJWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDTEjANBgkqhkiG9w0BAQsFAAOCAQEAF7jL11VnEAYTtA/ZXi55bL2FlS6k uYFzClHl/xUp/n7ZwD12g36S34Zkh9VCo1c8/gFFBvDq1SxYmQS+2Bb3grPw0GbM 5WAyKkUFF784N5+znWDRfgYniKuVJUZ+m1at4Gd2sS1m/aL0/R3hNe0On9QpmpUD IbH8fZqo5vX9JBuT8sFwygGC6uBsElGsPQrIhixRxmfz8CZ0gbqFtXs0DE1dunnp 36EK9wTe5coqotWaeBSKpD/mBdf2CNu74IqXIw3IqgTyRCoS/UFsINWfUvNIBblk 57voP42e3ZARpoP4kt4C1GTKiiVjshMOa3H+yGeVTlHFeaW0PMipP79/cQ== -----END CERTIFICATE-----Generated at Sat Apr 5 17:33:32 2025 by rpki-client