$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZVOT94GqamuEBykaC2IoyAvvhZ8.roa File: ZVOT94GqamuEBykaC2IoyAvvhZ8.roa (raw, json) Hash identifier: MS+bb9Y/uayLSy/CEeW9HUBOhQN3Iy0p6qZKBCGTVy4= Subject key identifier: 65:53:93:F7:81:AA:6A:6B:84:07:29:1A:0B:62:28:C8:0B:EF:85:9F Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0520 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZVOT94GqamuEBykaC2IoyAvvhZ8.roa Signing time: Wed 18 Dec 2024 02:42:22 +0000 ROA not before: Wed 18 Dec 2024 02:42:22 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 211.7.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:42:22 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=655393F781AA6A6B8407291A0B6228C80BEF859F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:79:0d:bb:83:25:b5:57:da:88:8f:9a:ee: 38:c6:5e:fd:2a:ed:a8:5d:14:07:ea:bb:6c:eb:93: a4:e8:3e:48:da:61:40:aa:7e:f1:fc:59:29:d9:7e: 66:13:c7:6c:01:0a:bc:4f:a0:32:33:36:6b:46:d3: 43:35:82:7d:75:3a:e1:a8:a4:35:63:85:d9:6e:cb: 7b:b0:1b:31:e2:ee:85:02:2b:e7:a0:c0:fe:1d:cb: eb:55:da:d1:96:c5:e5:b9:5e:dd:73:d5:48:b2:9c: de:23:86:a8:17:77:4b:a2:d7:34:c3:84:0f:09:4a: 9c:70:96:0a:d2:30:0f:df:84:57:2a:02:9b:3a:55: 0c:50:25:50:20:c2:12:e9:a7:fe:fa:f7:3d:c3:f0: 17:c8:45:fa:40:6f:6d:3d:8a:be:81:cb:1e:b8:0b: 05:48:1d:e3:ea:a4:ef:c5:d3:d1:40:7f:61:d4:59: a7:2e:87:70:0f:06:8a:5b:ba:6a:1e:0e:25:2a:0d: 1f:14:4b:82:7e:28:8e:9b:5c:b6:11:9c:47:e9:85: 6e:16:28:ca:d3:f8:d5:f0:c6:c5:0c:aa:46:85:36: 84:c4:dc:c0:77:c7:66:3a:94:1e:45:e6:b4:69:88: b0:ac:56:06:d8:0d:b9:4c:f9:5b:36:5d:39:e0:88: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:93:F7:81:AA:6A:6B:84:07:29:1A:0B:62:28:C8:0B:EF:85:9F X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZVOT94GqamuEBykaC2IoyAvvhZ8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.7.40.0/23 Signature Algorithm: sha256WithRSAEncryption a8:69:32:a4:2a:6f:49:f2:4d:84:ed:8a:d0:fa:5d:0c:ae:42: 5d:2a:18:a1:ac:c1:6a:e8:e7:1f:6a:dc:d0:12:b1:e3:7b:76: 47:05:76:35:72:85:9e:95:a7:31:ce:0b:f5:bf:b2:96:25:45: 29:86:13:4e:2a:98:ec:7f:41:d5:fa:4b:42:e3:9f:0b:f5:88: 13:12:71:f8:62:75:15:c8:17:67:69:71:2a:bf:9f:21:20:b6: 38:21:f6:62:4e:f6:3c:d6:b3:4d:12:7a:8e:99:ff:59:48:5f: 31:d8:74:e2:a6:b7:cf:04:fa:ec:95:b8:a0:73:3f:d9:6e:87: 8a:47:cd:d6:35:8e:d0:8b:53:7b:8c:44:97:c4:ef:a8:0e:b9: 92:5c:21:bd:53:90:70:2e:f9:77:f7:a2:23:c8:a6:d5:05:a8: f2:cc:a6:f4:87:53:d6:5b:9e:91:69:54:28:57:58:44:c0:30: a0:f3:8c:e2:b7:02:5e:a0:5d:60:24:01:65:2b:37:8f:23:4e: 81:6a:1e:5f:2c:e4:d5:0d:46:22:3f:5c:d1:fd:98:2c:9d:91: 7f:94:87:c2:dc:8e:92:35:de:d7:0f:92:3c:71:1f:9b:d8:35: c4:f9:be:81:ae:01:30:3d:a8:38:ef:48:1c:ea:27:f2:54:01: d8:5d:a5:48 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQyMjJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY1NTM5M0Y3ODFBQTZB NkI4NDA3MjkxQTBCNjIyOEM4MEJFRjg1OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmSXkNu4MltVfaiI+a7jjGXv0q7ahdFAfqu2zrk6ToPkjaYUCq fvH8WSnZfmYTx2wBCrxPoDIzNmtG00M1gn11OuGopDVjhdluy3uwGzHi7oUCK+eg wP4dy+tV2tGWxeW5Xt1z1UiynN4jhqgXd0ui1zTDhA8JSpxwlgrSMA/fhFcqAps6 VQxQJVAgwhLpp/769z3D8BfIRfpAb209ir6Byx64CwVIHePqpO/F09FAf2HUWacu h3APBopbumoeDiUqDR8US4J+KI6bXLYRnEfphW4WKMrT+NXwxsUMqkaFNoTE3MB3 x2Y6lB5F5rRpiLCsVgbYDblM+Vs2XTngiEszAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZVOT94GqamuEBykaC2IoyAvvhZ8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1pWT1Q5NEdxYW11RUJ5a2FDMklveUF2dmhaOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHTBygwDQYJKoZIhvcNAQELBQADggEBAKhpMqQqb0nyTYTtitD6XQyuQl0q GKGswWro5x9q3NASseN7dkcFdjVyhZ6VpzHOC/W/spYlRSmGE04qmOx/QdX6S0Lj nwv1iBMScfhidRXIF2dpcSq/nyEgtjgh9mJO9jzWs00Seo6Z/1lIXzHYdOKmt88E +uyVuKBzP9luh4pHzdY1jtCLU3uMRJfE76gOuZJcIb1TkHAu+Xf3oiPIptUFqPLM pvSHU9ZbnpFpVChXWETAMKDzjOK3Al6gXWAkAWUrN48jToFqHl8s5NUNRiI/XNH9 mCydkX+Uh8LcjpI13tcPkjxxH5vYNcT5voGuATA9qDjvSBzqJ/JUAdhdpUg= -----END CERTIFICATE-----Generated at Tue May 6 03:03:30 2025 by rpki-client