$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa File: o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa (raw, json) Hash identifier: CFFh0de/8/II3FE+tiA92ZA64oOP9zJ+WaA7nMpWiGI= Subject key identifier: A3:C0:FF:CD:A8:8C:60:5E:F2:94:5D:9E:C2:07:3A:39:22:1A:FD:26 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0488 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa Signing time: Wed 18 Dec 2024 02:26:30 +0000 ROA not before: Wed 18 Dec 2024 02:26:30 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 119.104.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:26:30 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=A3C0FFCDA88C605EF2945D9EC2073A39221AFD26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:e3:d7:26:58:e1:f6:00:b2:df:b1:3a:55: 1b:1c:83:d0:ac:55:05:2e:0c:ba:a7:5d:f6:1d:51: d4:89:c1:8e:3a:9c:c1:90:af:77:0d:5e:29:54:e5: d5:e2:67:54:32:c6:37:36:fe:04:7c:de:5b:ef:36: 55:77:ac:3d:6f:45:ed:26:f1:6e:ef:b7:4e:13:6b: 80:90:b7:cb:73:b3:c3:6e:ae:eb:48:7a:ad:82:ec: e7:f4:ca:12:9d:be:92:b3:d1:94:b3:41:5c:e6:4d: 2d:93:67:bf:b4:ca:83:f0:69:27:fd:a1:d9:01:dd: 17:72:10:9e:f3:c2:98:fa:e6:0d:b4:68:d4:1a:68: d9:52:c8:09:3c:45:9c:66:81:43:97:76:31:6f:c7: 04:1f:cf:67:7a:c4:ab:ca:5c:1e:73:05:73:1c:12: 6f:18:de:84:96:99:b4:06:d2:e0:b9:8e:c7:47:b5: 59:c6:44:e0:17:b9:3e:cb:2e:dd:3e:8c:e7:b8:3a: db:17:67:b9:f7:f0:33:b0:af:31:85:29:95:ef:e6: b6:6a:ae:28:8f:26:ab:01:39:cc:bc:b5:d7:a3:a1: 5e:e6:9c:bd:06:7c:2d:22:80:d1:79:2e:23:31:06: 14:12:bc:b6:97:ce:94:b0:57:d4:df:ab:b1:b2:a4: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C0:FF:CD:A8:8C:60:5E:F2:94:5D:9E:C2:07:3A:39:22:1A:FD:26 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:4d:d3:13:e4:0b:6e:be:d6:a3:fd:f3:c0:2a:71:17:6d:65: 21:49:8a:f2:e7:18:92:08:bf:59:92:60:95:95:54:19:52:b5: 8a:34:84:60:94:73:fc:9b:1c:99:2f:e8:9a:df:77:d9:c4:67: 1b:a3:0f:9d:97:2f:47:4c:f8:ec:7b:b8:50:91:50:19:f4:83: 56:c1:06:7b:2e:de:13:ee:21:94:0b:22:36:2b:7e:5d:0b:73: bf:d5:14:36:9e:01:33:b0:18:af:49:2c:14:05:21:34:1c:b4: 83:55:2a:07:65:2b:33:68:39:e5:67:2c:06:16:a5:cd:23:01: 40:44:81:7d:9a:c3:86:df:5d:2a:1b:ad:f1:d7:2c:db:29:24: 48:b8:ae:83:df:34:48:ed:1f:8f:3f:02:a0:2f:94:34:7b:90: e4:21:3e:cb:3d:cc:30:9b:03:0c:d9:30:8d:b8:e4:cc:1e:05: 28:49:aa:c6:21:45:82:74:09:4f:ac:82:25:04:b3:d5:e8:6b: 98:74:42:50:5e:09:10:03:3d:3c:6f:bb:56:cd:da:1d:93:7e: 62:36:c0:2d:3e:6b:ba:da:70:11:00:c1:52:63:8f:d7:6c:09: a9:04:35:42:21:77:c6:f5:04:cf:92:e8:a1:c5:f9:ce:49:5d: 44:33:a1:18 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjI2MzBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEzQzBGRkNEQTg4QzYw NUVGMjk0NUQ5RUMyMDczQTM5MjIxQUZEMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvXOPXJljh9gCy37E6VRscg9CsVQUuDLqnXfYdUdSJwY46nMGQ r3cNXilU5dXiZ1Qyxjc2/gR83lvvNlV3rD1vRe0m8W7vt04Ta4CQt8tzs8NurutI eq2C7Of0yhKdvpKz0ZSzQVzmTS2TZ7+0yoPwaSf9odkB3RdyEJ7zwpj65g20aNQa aNlSyAk8RZxmgUOXdjFvxwQfz2d6xKvKXB5zBXMcEm8Y3oSWmbQG0uC5jsdHtVnG ROAXuT7LLt0+jOe4OtsXZ7n38DOwrzGFKZXv5rZqriiPJqsBOcy8tdejoV7mnL0G fC0igNF5LiMxBhQSvLaXzpSwV9Tfq7GypNUbAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUo8D/zaiMYF7ylF2ewgc6OSIa/SYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL284RF96YWlNWUY3eWxGMmV3Z2M2T1NJYV9TWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB3aDANBgkqhkiG9w0BAQsFAAOCAQEAM03TE+QLbr7Wo/3zwCpxF21lIUmK 8ucYkgi/WZJglZVUGVK1ijSEYJRz/JscmS/omt932cRnG6MPnZcvR0z47Hu4UJFQ GfSDVsEGey7eE+4hlAsiNit+XQtzv9UUNp4BM7AYr0ksFAUhNBy0g1UqB2UrM2g5 5WcsBhalzSMBQESBfZrDht9dKhut8dcs2ykkSLiug980SO0fjz8CoC+UNHuQ5CE+ yz3MMJsDDNkwjbjkzB4FKEmqxiFFgnQJT6yCJQSz1ehrmHRCUF4JEAM9PG+7Vs3a HZN+YjbALT5rutpwEQDBUmOP12wJqQQ1QiF3xvUEz5LoocX5zkldRDOhGA== -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:13 2025 by rpki-client