$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR4juL_y6IozEkCGE_oEqo4C6aM.roa File: QR4juL_y6IozEkCGE_oEqo4C6aM.roa (raw, json) Hash identifier: 7IA3FzL6MrEq0tCJ5HaKtkzs2hS25cnDHMxkaPmY/30= Subject key identifier: 41:1E:23:B8:BF:F2:E8:8A:33:12:40:86:13:FA:04:AA:8E:02:E9:A3 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 03FB Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR4juL_y6IozEkCGE_oEqo4C6aM.roa Signing time: Wed 18 Dec 2024 02:18:49 +0000 ROA not before: Wed 18 Dec 2024 02:18:49 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 111.86.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:18:49 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=411E23B8BFF2E88A3312408613FA04AA8E02E9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:43:b3:ca:ab:16:fe:c7:a3:cb:39:0b:bb: f4:53:97:38:2c:1b:75:74:5b:3d:e7:1a:fc:23:52: 65:ed:2a:22:c0:51:a7:b0:ab:a9:e5:b9:d9:4c:4c: 91:d9:99:fd:b5:56:41:41:9e:e6:77:31:93:86:0a: ee:1b:64:e9:0a:a0:ec:7e:c2:32:8b:72:b5:85:b1: aa:24:22:58:d6:33:4a:db:93:20:59:47:4f:bd:96: a6:44:ad:bb:eb:c9:58:ec:c3:cf:c9:0a:cb:32:2b: 3f:3e:18:2a:88:58:38:91:d5:60:4d:ab:bf:81:43: 29:67:fe:eb:34:60:8c:e9:50:47:35:e7:80:2e:d3: 52:75:a3:b4:8a:f1:30:1b:71:78:1a:5e:5f:6d:aa: 49:48:0b:72:34:68:03:86:e7:b1:12:c6:d5:6e:fd: 73:97:5d:8a:af:55:e5:79:50:48:a0:3c:51:3f:93: 77:0a:5c:d9:a9:5b:80:f7:0b:67:ec:b2:70:2d:6e: 84:ad:13:d3:4f:1d:98:df:ed:40:ee:a6:9f:5f:3c: 47:71:b1:57:82:45:6d:19:10:37:aa:92:c4:f6:3f: c6:f3:25:f2:42:c6:b5:25:0c:83:4a:35:22:07:8b: 3d:27:d6:9a:75:1a:4d:b3:0f:69:e2:5e:e4:1a:05: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:23:B8:BF:F2:E8:8A:33:12:40:86:13:FA:04:AA:8E:02:E9:A3 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QR4juL_y6IozEkCGE_oEqo4C6aM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.86.0.0/17 Signature Algorithm: sha256WithRSAEncryption 91:90:c0:f2:e4:34:28:8f:81:ba:de:28:97:2e:da:47:8e:a8: a2:b9:d1:18:f5:43:49:3f:50:46:c7:35:c0:df:5b:ae:0a:31: 1a:74:a5:45:0b:bb:49:b7:e3:4e:64:48:59:c3:a0:b9:4c:79: 2e:4e:42:31:3a:6a:84:c5:d8:ba:7f:2c:d5:8d:04:8d:d0:cb: 12:1a:9a:0d:26:3c:33:2e:17:a8:bc:c0:e5:3e:1d:a9:1f:79: 80:29:f2:da:c8:a2:62:e1:6c:60:8d:69:33:49:b4:cf:04:9c: e1:1b:65:4b:98:14:25:aa:e2:04:8c:4d:ff:c0:be:b6:86:b3: fb:8c:b1:cf:af:ad:2d:e2:5e:e5:97:c4:e4:f6:f5:32:16:80: 6e:3e:d3:da:e9:7b:19:c7:66:75:7e:24:bc:88:c3:d0:fc:54: 66:f9:01:58:70:66:8f:90:3b:f1:75:13:ec:b7:cb:11:fc:21: 18:b7:a0:a5:cc:84:e1:c9:aa:f9:6c:20:bf:4f:8d:57:f6:f3: e4:91:56:e6:27:64:71:26:5e:a5:26:d4:37:97:b0:a7:14:66: da:26:91:77:64:cc:51:44:67:9a:3a:78:22:83:13:05:3b:fe: 8a:16:db:c1:56:92:1b:40:0b:57:19:a5:a5:c6:90:63:0c:dd: 99:25:ca:0d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjE4NDlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQxMUUyM0I4QkZGMkU4 OEEzMzEyNDA4NjEzRkEwNEFBOEUwMkU5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDha0OzyqsW/sejyzkLu/RTlzgsG3V0Wz3nGvwjUmXtKiLAUaew q6nludlMTJHZmf21VkFBnuZ3MZOGCu4bZOkKoOx+wjKLcrWFsaokIljWM0rbkyBZ R0+9lqZErbvryVjsw8/JCssyKz8+GCqIWDiR1WBNq7+BQyln/us0YIzpUEc154Au 01J1o7SK8TAbcXgaXl9tqklIC3I0aAOG57ESxtVu/XOXXYqvVeV5UEigPFE/k3cK XNmpW4D3C2fssnAtboStE9NPHZjf7UDupp9fPEdxsVeCRW0ZEDeqksT2P8bzJfJC xrUlDINKNSIHiz0n1pp1Gk2zD2niXuQaBcy9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQR4juL/y6IozEkCGE/oEqo4C6aMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1FSNGp1TF95NklvekVrQ0dFX29FcW80QzZhTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAdvVgAwDQYJKoZIhvcNAQELBQADggEBAJGQwPLkNCiPgbreKJcu2keOqKK5 0Rj1Q0k/UEbHNcDfW64KMRp0pUULu0m3405kSFnDoLlMeS5OQjE6aoTF2Lp/LNWN BI3QyxIamg0mPDMuF6i8wOU+HakfeYAp8trIomLhbGCNaTNJtM8EnOEbZUuYFCWq 4gSMTf/AvraGs/uMsc+vrS3iXuWXxOT29TIWgG4+09rpexnHZnV+JLyIw9D8VGb5 AVhwZo+QO/F1E+y3yxH8IRi3oKXMhOHJqvlsIL9PjVf28+SRVuYnZHEmXqUm1DeX sKcUZtomkXdkzFFEZ5o6eCKDEwU7/ooW28FWkhtAC1cZpaXGkGMM3Zklyg0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:01 2025 by rpki-client on console.sobornost.net