$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oHRlbSS3D03W6LDdOjCqsTTu3iU.roa File: oHRlbSS3D03W6LDdOjCqsTTu3iU.roa (raw, json) Hash identifier: 71yW29a3EaK5iBVyX7+0spDQOHVAFh3nsMHHP3lOJcQ= Subject key identifier: A0:74:65:6D:24:B7:0F:4D:D6:E8:B0:DD:3A:30:AA:B1:34:EE:DE:25 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04FF Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oHRlbSS3D03W6LDdOjCqsTTu3iU.roa Signing time: Wed 18 Dec 2024 02:40:10 +0000 ROA not before: Wed 18 Dec 2024 02:40:10 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.10.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:40:10 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=A074656D24B70F4DD6E8B0DD3A30AAB134EEDE25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:ce:9f:b2:79:29:af:30:1a:18:f3:d8:fe: df:5e:0f:a9:43:f4:05:62:09:85:d0:f5:7c:d9:b7: 2b:87:01:62:9c:24:48:70:81:27:05:5f:66:48:a9: b1:a4:ee:a1:9c:39:bf:c6:77:2e:2d:2b:70:64:37: 85:6c:f3:4c:c9:67:fe:d5:69:fe:87:43:92:4b:cb: ed:9c:21:d5:14:b9:4b:2d:67:b6:5b:7d:42:7f:e6: de:07:21:cb:85:0c:27:c0:ea:1d:bb:9b:2f:1d:df: 83:83:c6:f8:e5:bc:27:87:b6:65:72:43:ad:b1:08: 0a:38:04:d5:ea:bc:98:b5:c8:77:1b:8b:fd:e9:34: f4:63:94:69:4e:c1:66:f1:20:f3:54:d0:09:63:7c: b6:4b:89:af:10:8f:08:46:dd:4f:b3:e2:3f:0b:f2: ba:71:b0:6e:2d:da:3a:1c:05:56:ec:df:a9:5f:b5: 5d:27:b5:d6:20:a9:98:8d:e8:7e:1a:60:0a:69:61: 4f:df:ae:5c:c4:f5:3f:55:6b:fa:8b:e4:c2:01:57: 67:de:de:c1:10:03:d2:63:d7:84:7f:52:44:c3:4f: f1:c5:55:9f:12:de:97:b6:e9:96:f6:0c:61:ed:f5: 00:56:7b:5a:5d:a8:f6:80:fd:61:95:3d:6d:9b:e8: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:74:65:6D:24:B7:0F:4D:D6:E8:B0:DD:3A:30:AA:B1:34:EE:DE:25 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oHRlbSS3D03W6LDdOjCqsTTu3iU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.10.134.0/23 Signature Algorithm: sha256WithRSAEncryption 55:4b:7f:4f:8f:97:95:dc:c1:1e:a6:e3:33:87:06:a5:9e:46: 35:2c:64:d9:5f:05:be:77:7e:42:46:65:bb:87:c8:7a:86:5a: 76:9f:21:0a:a9:ed:20:df:82:ce:fd:f7:bd:83:85:19:f6:7c: cb:91:a0:60:cc:f4:9f:d8:29:80:66:39:9c:c7:c4:d4:7d:fe: 99:cf:2c:b4:af:f8:a3:2b:8a:50:0e:e7:de:d3:74:96:04:3e: 0f:8a:dc:b9:fe:75:81:68:fa:6c:7a:04:ff:3b:23:28:f1:fc: f6:e2:90:c3:1a:f7:ea:80:ff:33:54:78:5a:4c:6c:ab:87:5d: 3d:28:d4:16:bb:13:f9:7e:96:14:25:fd:38:ec:dd:ba:f2:f9: e3:75:e3:2e:f5:b9:d2:b8:8d:c4:b2:a1:e4:6f:6e:3b:a5:3f: 8a:99:45:d6:64:c0:54:cb:0d:5a:81:9c:0e:7d:54:99:57:44: 67:36:49:5a:cd:89:33:b3:11:d4:0c:f6:a3:5a:3b:07:df:85: 0a:a4:45:77:61:21:01:94:f3:a9:1f:4b:58:30:90:b6:c2:a2: 2c:a5:67:28:d6:51:69:02:1b:80:f0:e8:3a:87:f5:a8:02:5d: 06:fe:ea:f6:8d:1b:24:b9:fb:d8:08:2b:1b:68:5e:bf:fa:62: 57:75:5b:a0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQwMTBaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEwNzQ2NTZEMjRCNzBG NERENkU4QjBERDNBMzBBQUIxMzRFRURFMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLmM6fsnkprzAaGPPY/t9eD6lD9AViCYXQ9XzZtyuHAWKcJEhw gScFX2ZIqbGk7qGcOb/Gdy4tK3BkN4Vs80zJZ/7Vaf6HQ5JLy+2cIdUUuUstZ7Zb fUJ/5t4HIcuFDCfA6h27my8d34ODxvjlvCeHtmVyQ62xCAo4BNXqvJi1yHcbi/3p NPRjlGlOwWbxIPNU0AljfLZLia8QjwhG3U+z4j8L8rpxsG4t2jocBVbs36lftV0n tdYgqZiN6H4aYAppYU/frlzE9T9Va/qL5MIBV2fe3sEQA9Jj14R/UkTDT/HFVZ8S 3pe26Zb2DGHt9QBWe1pdqPaA/WGVPW2b6JUfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoHRlbSS3D03W6LDdOjCqsTTu3iUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL29IUmxiU1MzRDAzVzZMRGRPakNxc1RUdTNpVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTCoYwDQYJKoZIhvcNAQELBQADggEBAFVLf0+Pl5XcwR6m4zOHBqWeRjUs ZNlfBb53fkJGZbuHyHqGWnafIQqp7SDfgs79972DhRn2fMuRoGDM9J/YKYBmOZzH xNR9/pnPLLSv+KMrilAO597TdJYEPg+K3Ln+dYFo+mx6BP87Iyjx/PbikMMa9+qA /zNUeFpMbKuHXT0o1Ba7E/l+lhQl/Tjs3bry+eN14y71udK4jcSyoeRvbjulP4qZ RdZkwFTLDVqBnA59VJlXRGc2SVrNiTOzEdQM9qNaOwffhQqkRXdhIQGU86kfS1gw kLbCoiylZyjWUWkCG4Dw6DqH9agCXQb+6vaNGyS5+9gIKxtoXr/6Yld1W6A= -----END CERTIFICATE-----Generated at Sat Apr 5 17:25:01 2025 by rpki-client