$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zgCfesmqzvEAYZhIbOtk7AYqVNQ.roa File: zgCfesmqzvEAYZhIbOtk7AYqVNQ.roa (raw, json) Hash identifier: XwPnlLzjMEIX5I/Jo2KndwlagOrPUMka7EGAYFrQk4s= Subject key identifier: CE:00:9F:7A:C9:AA:CE:F1:00:61:98:48:6C:EB:64:EC:06:2A:54:D4 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04B8 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zgCfesmqzvEAYZhIbOtk7AYqVNQ.roa Signing time: Wed 18 Dec 2024 02:32:19 +0000 ROA not before: Wed 18 Dec 2024 02:32:19 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 113.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:32:19 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=CE009F7AC9AACEF1006198486CEB64EC062A54D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:61:9e:47:3c:f8:00:4f:e7:98:1b:64:b0: 1a:34:f3:10:e9:ec:b4:9e:52:bd:42:45:e3:bb:41: 13:8a:0d:a7:f2:94:26:29:21:d0:d3:fa:b2:1f:56: 9e:95:d3:29:d1:63:14:9f:29:8c:63:cd:b1:f3:2b: e5:27:68:bf:7b:e5:80:9d:6c:f9:60:6c:09:a5:81: 60:53:ae:fb:8c:6a:89:b8:ef:d4:11:f6:84:b2:c0: a2:d8:a7:05:a6:a7:bc:cd:97:02:18:3e:46:bf:4f: bb:67:3a:16:b3:0d:36:66:7f:74:77:10:bc:e9:bd: 4f:d1:91:19:c2:aa:95:3f:b4:a7:27:68:9b:21:e6: 78:7e:7c:40:69:f1:da:9f:3d:42:98:fe:db:f9:be: eb:96:5b:02:df:31:8f:23:6d:59:e8:6a:10:d0:17: d9:8e:b1:4f:27:f0:ca:a5:9a:f5:16:4d:79:ce:e2: c0:dd:20:08:44:9c:6f:80:9b:df:bc:8e:52:ae:77: 14:6c:6f:3d:8e:4e:0f:82:23:32:52:71:91:a3:95: 8e:8c:42:51:0a:00:3c:db:45:f0:d5:de:b0:87:0f: a4:ec:8d:56:7a:48:eb:40:93:4e:ce:bb:3a:16:4d: 5e:dc:32:42:24:99:6c:05:10:f2:0f:c6:ff:4b:22: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:00:9F:7A:C9:AA:CE:F1:00:61:98:48:6C:EB:64:EC:06:2A:54:D4 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zgCfesmqzvEAYZhIbOtk7AYqVNQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:0f:5b:d0:44:40:6d:b5:98:bb:21:39:9b:c5:6b:1b:1a:c5: 0d:48:15:9c:63:e0:83:a0:51:02:a4:42:06:9a:72:c8:c9:58: 76:86:6f:ae:8a:48:cf:25:b6:37:40:84:10:0a:40:85:bf:d2: 17:95:af:2d:d6:11:2c:9b:c6:ba:e7:85:fb:b9:6b:68:34:d9: a7:19:b6:34:30:92:af:76:7f:72:a0:61:cb:22:29:0f:86:9a: 18:b4:0e:1e:a9:73:af:f2:0e:bb:5b:a8:3d:90:f1:9f:c8:f0: 65:e7:b0:f8:28:ee:40:5b:22:28:56:99:08:ab:e5:54:b0:ea: e8:db:f9:9e:d5:dd:7b:08:28:27:65:88:f0:ed:14:95:14:49: 1d:2a:07:b7:19:07:cc:81:f1:d0:dd:ec:22:a3:e1:28:00:6f: 9e:95:ec:4d:5f:89:c0:4b:b1:93:51:69:85:ba:7f:cb:7a:35: cf:1e:be:a5:09:59:48:0d:3a:0e:ed:2e:27:66:bb:04:85:0d: 4d:23:98:ea:4f:d1:b4:36:5a:28:83:21:ae:84:05:87:39:76: 05:8e:81:64:61:a4:3c:fc:7a:04:ce:5e:3a:03:9c:3b:46:48: b8:15:d0:86:45:d0:63:18:9d:97:91:76:71:d6:b5:ad:11:64: ba:22:7b:9c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjMyMTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENFMDA5RjdBQzlBQUNF RjEwMDYxOTg0ODZDRUI2NEVDMDYyQTU0RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN/2GeRzz4AE/nmBtksBo08xDp7LSeUr1CReO7QROKDafylCYp IdDT+rIfVp6V0ynRYxSfKYxjzbHzK+UnaL975YCdbPlgbAmlgWBTrvuMaom479QR 9oSywKLYpwWmp7zNlwIYPka/T7tnOhazDTZmf3R3ELzpvU/RkRnCqpU/tKcnaJsh 5nh+fEBp8dqfPUKY/tv5vuuWWwLfMY8jbVnoahDQF9mOsU8n8MqlmvUWTXnO4sDd IAhEnG+Am9+8jlKudxRsbz2OTg+CIzJScZGjlY6MQlEKADzbRfDV3rCHD6TsjVZ6 SOtAk07OuzoWTV7cMkIkmWwFEPIPxv9LIr5pAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUzgCfesmqzvEAYZhIbOtk7AYqVNQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3pnQ2Zlc21xenZFQVlaaEliT3RrN0FZcVZOUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBxmjANBgkqhkiG9w0BAQsFAAOCAQEAMw9b0ERAbbWYuyE5m8VrGxrFDUgV nGPgg6BRAqRCBppyyMlYdoZvropIzyW2N0CEEApAhb/SF5WvLdYRLJvGuueF+7lr aDTZpxm2NDCSr3Z/cqBhyyIpD4aaGLQOHqlzr/IOu1uoPZDxn8jwZeew+CjuQFsi KFaZCKvlVLDq6Nv5ntXdewgoJ2WI8O0UlRRJHSoHtxkHzIHx0N3sIqPhKABvnpXs TV+JwEuxk1Fphbp/y3o1zx6+pQlZSA06Du0uJ2a7BIUNTSOY6k/RtDZaKIMhroQF hzl2BY6BZGGkPPx6BM5eOgOcO0ZIuBXQhkXQYxidl5F2cda1rRFkuiJ7nA== -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:31 2025 by rpki-client