$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/zMOUPsofGYuDoIKRlA2NYXnK5xs.roa File: zMOUPsofGYuDoIKRlA2NYXnK5xs.roa (raw, json) Hash identifier: ZrHcclMl+pLWV/aFZMPmmdKGs4UO8A6vgXqWPcJ6zGA= Subject key identifier: CC:C3:94:3E:CA:1F:19:8B:83:A0:82:91:94:0D:8D:61:79:CA:E7:1B Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6 Certificate serial: 60 Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/zMOUPsofGYuDoIKRlA2NYXnK5xs.roa Signing time: Sat 30 Nov 2024 01:28:50 +0000 ROA not before: Sat 30 Nov 2024 01:28:50 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 10011 IP address blocks: 103.13.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6 Validity Not Before: Nov 30 01:28:50 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=CCC3943ECA1F198B83A08291940D8D6179CAE71B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:ad:97:5e:2a:4d:ab:0d:3e:db:e4:34:32: 8f:e5:5b:ea:e3:67:cb:9d:e6:bc:4b:f6:eb:bb:79: d7:ab:f4:46:d4:b7:be:84:58:cc:6c:d6:b8:5d:65: 39:24:8f:4f:d3:c9:03:9c:3f:75:e0:72:c6:9f:1b: 60:12:10:fc:6c:e5:8a:e4:88:8e:e4:45:15:ba:02: b3:4e:f2:16:ec:28:dd:61:67:e7:c1:1f:cc:8d:c8: a6:92:78:ea:ad:e9:8e:41:b4:cf:62:2f:6a:f3:65: 5d:e8:4e:28:44:e5:63:23:3f:f5:d7:f4:50:b9:3a: d4:c8:9d:8f:18:63:66:9a:5a:d0:ab:3e:e1:1c:5b: cb:23:30:23:88:49:cf:a9:92:59:47:56:80:32:e7: 33:73:86:31:52:fe:a3:69:b0:2a:b3:9d:9c:38:05: 0c:ba:24:b7:e7:48:6d:fd:e1:77:5a:ca:91:76:74: 56:51:0b:0b:92:3d:01:28:69:e1:fb:9a:72:82:1d: 71:e2:67:66:08:74:b8:a2:72:a2:0b:e1:38:28:75: 7e:56:8d:ff:a5:0f:42:19:b7:62:13:de:30:41:b1: 08:b8:49:4b:75:3e:a3:7e:6e:11:3c:a9:48:7e:d4: 55:64:0e:c3:cf:b6:25:31:06:12:be:94:3d:cb:6b: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C3:94:3E:CA:1F:19:8B:83:A0:82:91:94:0D:8D:61:79:CA:E7:1B X509v3 Authority Key Identifier: keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/zMOUPsofGYuDoIKRlA2NYXnK5xs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.13.60.0/22 Signature Algorithm: sha256WithRSAEncryption aa:49:f8:7d:0d:95:ed:b4:0c:ae:92:ff:b9:2f:b7:f9:cc:2c: 8b:db:71:46:83:62:79:7d:28:04:91:23:e1:13:3f:8c:01:47: 66:0a:2d:68:e9:1e:ea:95:e9:b8:20:c1:81:df:0a:ad:4d:32: 80:17:ef:2a:80:58:1f:38:07:72:b4:87:53:90:ed:f3:25:da: a0:d5:9e:34:79:5d:e5:ff:b7:fe:c7:dc:27:07:34:7f:4a:07: 5d:10:9c:63:8b:0b:87:ea:a0:15:0e:25:8b:78:1f:e8:6c:7d: a7:57:c4:d9:f2:f6:f2:45:e1:12:2e:ba:c2:3f:b0:9e:66:3d: 2e:e8:50:66:12:86:8a:a5:1c:7a:63:f2:b4:4c:8d:e1:94:89: f6:0c:c2:ef:ec:9c:29:9d:9a:fc:1d:e5:55:c6:76:7a:35:ee: f2:65:52:27:03:fa:0e:0a:aa:6b:37:0e:e6:27:a4:4c:e1:c8: b3:9e:44:22:35:8b:ad:02:fc:b9:a7:80:44:bf:fc:28:84:9e: ef:5f:f3:79:41:8d:d3:1c:7d:08:df:bc:c0:13:56:cb:fb:bd: 56:aa:4e:97:ae:11:6b:3b:6d:31:5b:1d:44:59:37:0b:6f:fb: 49:c2:66:95:42:22:d4:c2:20:20:24:f2:38:e6:d7:c1:96:d7: 46:35:e2:e0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTI0MTEzMDAx Mjg1MFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoQ0NDMzk0M0VDQTFGMTk4 QjgzQTA4MjkxOTQwRDhENjE3OUNBRTcxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL0ZrZdeKk2rDT7b5DQyj+Vb6uNny53mvEv267t516v0RtS3voRY zGzWuF1lOSSPT9PJA5w/deByxp8bYBIQ/GzliuSIjuRFFboCs07yFuwo3WFn58Ef zI3IppJ46q3pjkG0z2IvavNlXehOKETlYyM/9df0ULk61MidjxhjZppa0Ks+4Rxb yyMwI4hJz6mSWUdWgDLnM3OGMVL+o2mwKrOdnDgFDLokt+dIbf3hd1rKkXZ0VlEL C5I9AShp4fuacoIdceJnZgh0uKJyogvhOCh1flaN/6UPQhm3YhPeMEGxCLhJS3U+ o35uETypSH7UVWQOw8+2JTEGEr6UPctrLrMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTMw5Q+yh8Zi4OggpGUDY1hecrnGzAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2 X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjUvek1PVVBzb2ZHWXVEb0lLUmxBMk5ZWG5LNXhzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcNPDANBgkqhkiG9w0BAQsFAAOCAQEAqkn4fQ2V7bQMrpL/uS+3+cwsi9tx RoNieX0oBJEj4RM/jAFHZgotaOke6pXpuCDBgd8KrU0ygBfvKoBYHzgHcrSHU5Dt 8yXaoNWeNHld5f+3/sfcJwc0f0oHXRCcY4sLh+qgFQ4li3gf6Gx9p1fE2fL28kXh Ei66wj+wnmY9LuhQZhKGiqUcemPytEyN4ZSJ9gzC7+ycKZ2a/B3lVcZ2ejXu8mVS JwP6DgqqazcO5iekTOHIs55EIjWLrQL8uaeARL/8KISe71/zeUGN0xx9CN+8wBNW y/u9VqpOl64RazttMVsdRFk3C2/7ScJmlUIi1MIgICTyOObXwZbXRjXi4A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:48:33 2025 by rpki-client