$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zIGLb3eMmnJ5r_cUzvxuuQwh5bY.roa File: zIGLb3eMmnJ5r_cUzvxuuQwh5bY.roa (raw, json) Hash identifier: dM07GX9UhNo9zNT6FmX2Pz6/7CLhmUF8gNiTXdmtiHI= Subject key identifier: CC:81:8B:6F:77:8C:9A:72:79:AF:F7:14:CE:FC:6E:B9:0C:21:E5:B6 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0537 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zIGLb3eMmnJ5r_cUzvxuuQwh5bY.roa Signing time: Wed 18 Dec 2024 02:44:16 +0000 ROA not before: Wed 18 Dec 2024 02:44:16 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.255.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:44:16 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=CC818B6F778C9A7279AFF714CEFC6EB90C21E5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:74:a5:5a:23:36:6c:08:ed:e2:8a:6d:49: 32:d5:3e:4b:17:42:ed:39:d5:65:b3:41:2a:13:ed: 67:21:a5:26:69:bb:1a:e1:e8:0e:5f:18:77:cc:30: d3:c4:ee:b9:20:0a:b7:22:8b:6c:59:f5:44:6d:cf: 35:84:40:01:33:22:63:c5:3c:e3:4a:fc:d4:b1:1c: 7f:48:ba:36:11:1d:0b:ec:28:4b:f8:89:58:9d:de: 93:d3:82:38:e1:1d:e2:e7:26:7b:a8:4d:40:c1:46: 32:0c:21:64:4f:45:9d:c6:7f:e2:e9:41:db:a2:0b: 47:1d:6a:cb:bb:b2:14:d7:5c:60:3b:11:07:01:8e: b7:a8:ba:54:a8:79:94:b5:88:44:b0:d8:8c:32:37: fe:21:2f:5f:1c:02:c6:14:b0:fb:23:67:79:43:e6: 1f:95:88:ff:27:94:71:07:ff:9b:72:df:43:69:e3: e2:fb:20:45:8a:a3:61:8b:12:a1:68:e0:6a:7e:70: a9:06:4a:83:4f:2a:5c:55:3c:b5:da:fd:be:49:29: a0:31:2a:5a:f9:98:b5:a0:31:2b:ba:5f:91:57:6d: 6d:cc:da:50:c1:2b:35:f5:f8:20:4f:f4:ed:40:78: 16:a7:f0:8f:2a:1c:4e:a0:d0:f3:e5:fc:c6:d3:3d: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:81:8B:6F:77:8C:9A:72:79:AF:F7:14:CE:FC:6E:B9:0C:21:E5:B6 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zIGLb3eMmnJ5r_cUzvxuuQwh5bY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.255.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:5f:f4:93:be:c8:0b:1e:49:a9:aa:89:76:ff:48:88:da:38: 7c:42:5a:e8:4d:48:ff:e6:37:d4:58:07:1d:43:14:e5:f4:e9: 2c:d1:55:e2:2a:82:b9:65:43:c0:e9:e5:1a:94:7d:f7:ca:0c: c7:98:32:84:66:43:78:3e:24:bb:14:b3:4d:17:c4:e7:62:13: be:ec:c8:76:60:2d:48:5c:72:05:db:e3:48:4a:35:34:ff:74: 7e:49:ac:50:a7:75:33:b8:be:7b:64:d8:4f:67:41:03:eb:c5: 70:df:35:76:dd:29:05:06:f0:0f:fc:02:ae:ef:42:67:e7:3e: 96:8e:55:4f:4f:0c:49:41:05:7e:9a:c4:f6:68:4a:71:23:d9: 1d:65:59:70:a0:1b:8b:b9:0a:8d:70:c1:4b:da:32:3c:2d:a5: 0b:fd:10:99:63:14:90:eb:d5:0b:af:fa:2a:43:f3:92:3c:ac: 50:0d:6c:90:bd:bc:27:52:e4:27:08:69:de:0d:5c:bd:ca:eb: 70:b5:27:a1:46:34:e8:42:c0:ce:fb:ef:70:ea:1f:b6:8c:30: 8a:99:4a:0e:fa:b8:81:61:99:c3:17:b6:78:ac:50:75:1d:ae: b0:96:32:10:41:04:a7:dd:c1:fa:47:9c:41:d9:33:65:5b:fd: 40:0a:8a:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQ0MTZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENDODE4QjZGNzc4QzlB NzI3OUFGRjcxNENFRkM2RUI5MEMyMUU1QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDhnSlWiM2bAjt4optSTLVPksXQu051WWzQSoT7WchpSZpuxrh 6A5fGHfMMNPE7rkgCrcii2xZ9URtzzWEQAEzImPFPONK/NSxHH9IujYRHQvsKEv4 iVid3pPTgjjhHeLnJnuoTUDBRjIMIWRPRZ3Gf+LpQduiC0cdasu7shTXXGA7EQcB jreoulSoeZS1iESw2IwyN/4hL18cAsYUsPsjZ3lD5h+ViP8nlHEH/5ty30Np4+L7 IEWKo2GLEqFo4Gp+cKkGSoNPKlxVPLXa/b5JKaAxKlr5mLWgMSu6X5FXbW3M2lDB KzX1+CBP9O1AeBan8I8qHE6g0PPl/MbTPR9xAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzIGLb3eMmnJ5r/cUzvxuuQwh5bYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3pJR0xiM2VNbW5KNXJfY1V6dnh1dVF3aDViWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXS/8AwDQYJKoZIhvcNAQELBQADggEBAEpf9JO+yAseSamqiXb/SIjaOHxC WuhNSP/mN9RYBx1DFOX06SzRVeIqgrllQ8Dp5RqUfffKDMeYMoRmQ3g+JLsUs00X xOdiE77syHZgLUhccgXb40hKNTT/dH5JrFCndTO4vntk2E9nQQPrxXDfNXbdKQUG 8A/8Aq7vQmfnPpaOVU9PDElBBX6axPZoSnEj2R1lWXCgG4u5Co1wwUvaMjwtpQv9 EJljFJDr1Quv+ipD85I8rFANbJC9vCdS5CcIad4NXL3K63C1J6FGNOhCwM7773Dq H7aMMIqZSg76uIFhmcMXtnisUHUdrrCWMhBBBKfdwfpHnEHZM2Vb/UAKirg= -----END CERTIFICATE-----Generated at Sat Apr 5 17:42:30 2025 by rpki-client