$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s0sfPvPnAIoGWz82uwCn6RLgigY.roa File: s0sfPvPnAIoGWz82uwCn6RLgigY.roa (raw, json) Hash identifier: sFqCfAS/23etT9ZTSKriFL3I8oFYlTtBTyzdCGRhafQ= Subject key identifier: B3:4B:1F:3E:F3:E7:00:8A:06:5B:3F:36:BB:00:A7:E9:12:E0:8A:06 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04E5 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s0sfPvPnAIoGWz82uwCn6RLgigY.roa Signing time: Wed 18 Dec 2024 02:37:07 +0000 ROA not before: Wed 18 Dec 2024 02:37:07 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.10.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:37:07 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=B34B1F3EF3E7008A065B3F36BB00A7E912E08A06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:94:22:5c:d1:a6:6a:c4:f0:b8:58:23:af: 9d:b1:32:41:c2:a7:f1:fb:c1:7e:80:d2:18:e1:5b: e5:a5:c3:bc:b4:dd:0a:3c:f1:6d:45:94:8b:0c:00: ee:25:cf:9e:f3:f4:56:99:39:ef:51:25:c3:45:70: 19:fb:58:e0:d2:55:77:9b:f9:ae:29:ca:e7:4b:03: 48:70:92:19:3d:6c:6f:68:c9:1f:f8:b6:65:59:aa: ea:5c:fb:ff:5a:6b:6a:72:ad:ac:4b:4d:ac:43:8a: 5a:86:49:29:fe:88:17:d2:93:32:6a:0e:56:45:4a: 29:35:db:d4:f9:03:cb:2e:5a:c6:2a:fc:9f:9b:c5: 8b:c2:67:11:0d:48:72:85:7d:d7:d5:92:2b:f2:3f: de:dc:14:ad:39:2d:46:dc:b4:17:86:2f:e3:37:11: cf:78:8b:75:72:96:2f:b0:31:0a:c1:10:a9:ea:b9: d0:b9:80:59:65:d1:a3:72:90:1a:08:71:0f:20:dd: 47:a1:68:7d:48:de:48:4d:65:08:fc:71:2d:a1:68: c1:ea:48:a7:1d:4f:fc:13:f2:f5:5e:08:a7:28:3d: 34:0d:25:44:31:0b:6d:92:27:be:02:e7:65:28:e5: d8:ff:ca:82:6d:f2:c2:e4:44:74:f2:89:63:5d:0c: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:1F:3E:F3:E7:00:8A:06:5B:3F:36:BB:00:A7:E9:12:E0:8A:06 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s0sfPvPnAIoGWz82uwCn6RLgigY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.10.178.0/23 Signature Algorithm: sha256WithRSAEncryption 83:c8:2a:e8:f6:7c:42:7d:ed:75:be:78:a7:a9:52:b4:d4:27: b1:bf:f7:98:04:60:e5:9c:52:ad:02:cc:b6:9d:9f:93:b1:dc: 52:55:08:6a:95:d6:5c:6c:24:90:b4:1a:e8:10:85:92:54:53: 49:67:65:2c:41:6c:1f:a4:40:0d:79:e7:e5:1f:c5:e3:82:5e: e7:12:95:f2:4b:17:aa:e7:8d:bb:c0:63:3c:02:c9:62:6a:3a: 4d:ea:be:c8:df:a9:cf:85:51:ab:fc:b7:e6:07:b6:8b:4d:b2: ce:2e:df:f1:e6:16:85:58:e7:e0:f5:af:91:97:c6:10:7c:7b: ed:8c:39:f4:4e:54:ef:58:ba:b7:99:ff:ec:ee:fc:87:0a:11: f1:da:d4:af:f7:06:2f:b4:1d:cf:d4:40:54:d6:8a:ed:3c:bc: 62:e2:9c:b9:a8:5e:9b:54:df:f4:8c:4e:db:3d:57:8d:11:7c: 2d:7e:d0:32:7f:72:e1:0e:72:f1:e7:6a:81:6c:81:b9:b6:8a: ea:a1:19:58:4d:22:8e:52:8e:d0:2a:01:71:92:a3:cd:85:d4: cc:03:0d:89:22:c1:f9:41:3d:f7:cc:6b:bd:8a:60:f4:b5:f7: 1e:d7:4d:46:a8:a5:eb:7b:c3:95:fe:3c:49:db:65:f2:5b:24: 5b:04:18:03 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjM3MDdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEIzNEIxRjNFRjNFNzAw OEEwNjVCM0YzNkJCMDBBN0U5MTJFMDhBMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe7JQiXNGmasTwuFgjr52xMkHCp/H7wX6A0hjhW+Wlw7y03Qo8 8W1FlIsMAO4lz57z9FaZOe9RJcNFcBn7WODSVXeb+a4pyudLA0hwkhk9bG9oyR/4 tmVZqupc+/9aa2pyraxLTaxDilqGSSn+iBfSkzJqDlZFSik129T5A8suWsYq/J+b xYvCZxENSHKFfdfVkivyP97cFK05LUbctBeGL+M3Ec94i3Vyli+wMQrBEKnqudC5 gFll0aNykBoIcQ8g3UehaH1I3khNZQj8cS2haMHqSKcdT/wT8vVeCKcoPTQNJUQx C22SJ74C52Uo5dj/yoJt8sLkRHTyiWNdDJzxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUs0sfPvPnAIoGWz82uwCn6RLgigYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3Mwc2ZQdlBuQUlvR1d6ODJ1d0NuNlJMZ2lnWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTCrIwDQYJKoZIhvcNAQELBQADggEBAIPIKuj2fEJ97XW+eKepUrTUJ7G/ 95gEYOWcUq0CzLadn5Ox3FJVCGqV1lxsJJC0GugQhZJUU0lnZSxBbB+kQA155+Uf xeOCXucSlfJLF6rnjbvAYzwCyWJqOk3qvsjfqc+FUav8t+YHtotNss4u3/HmFoVY 5+D1r5GXxhB8e+2MOfROVO9YureZ/+zu/IcKEfHa1K/3Bi+0Hc/UQFTWiu08vGLi nLmoXptU3/SMTts9V40RfC1+0DJ/cuEOcvHnaoFsgbm2iuqhGVhNIo5SjtAqAXGS o82F1MwDDYkiwflBPffMa72KYPS19x7XTUaopet7w5X+PEnbZfJbJFsEGAM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:09 2025 by rpki-client