$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zPokgHRmmakWhAVWHc9_b27tUQE.roa File: zPokgHRmmakWhAVWHc9_b27tUQE.roa (raw, json) Hash identifier: GU5N6KuGrXGvxwYE8Bxy3DdRP+JBtpsA/pUHyiI7BRE= Subject key identifier: CC:FA:24:80:74:66:99:A9:16:84:05:56:1D:CF:7F:6F:6E:ED:51:01 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 04F8 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zPokgHRmmakWhAVWHc9_b27tUQE.roa Signing time: Wed 18 Dec 2024 02:40:06 +0000 ROA not before: Wed 18 Dec 2024 02:40:06 +0000 ROA not after: Mon 15 Dec 2025 01:30:03 +0000 asID: 2516 IP address blocks: 210.235.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Dec 18 02:40:06 2024 GMT Not After : Dec 15 01:30:03 2025 GMT Subject: CN=CCFA2480746699A9168405561DCF7F6F6EED5101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:60:20:6b:2d:0e:c0:00:f4:89:02:e8:f6: 3b:3e:29:4f:3c:f9:68:c2:e6:15:62:ed:e9:cd:16: 3d:72:44:6b:eb:4a:c0:4f:c8:4a:f2:80:74:4a:6a: 1f:6c:ee:10:04:38:5e:69:75:39:da:3c:e8:e2:7e: dc:01:97:d0:03:a0:ce:cd:0e:a9:66:8d:32:38:19: b4:24:92:52:a1:85:9b:0a:a2:25:19:cc:4e:1c:04: b4:6d:95:33:cc:d7:c7:54:27:44:a3:c7:00:65:96: 55:f4:79:a1:e5:d7:2a:73:1d:bd:80:6c:4b:45:5a: 9d:21:85:91:4e:73:ee:91:09:8d:0e:67:50:dc:b8: 5a:90:c8:63:b7:ea:a6:b4:a9:1d:be:68:77:21:de: f3:f9:0a:de:f5:12:5c:d7:7c:4b:f8:d5:9d:cd:75: f8:23:ad:e4:3c:67:b2:b5:32:13:41:9c:4e:52:64: aa:a7:2e:f9:62:dc:33:df:6f:cc:e5:33:b5:86:f3: c0:89:9a:8c:5e:8f:da:05:12:f2:48:a9:9e:91:0c: 76:0e:d7:88:eb:77:8c:89:78:eb:40:61:43:5c:ea: bf:f3:f0:81:25:b1:11:78:da:2a:1b:f6:03:1c:e4: b7:76:23:f5:04:05:18:c1:18:e9:19:44:81:6f:6e: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:24:80:74:66:99:A9:16:84:05:56:1D:CF:7F:6F:6E:ED:51:01 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zPokgHRmmakWhAVWHc9_b27tUQE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.235.152.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:db:f4:de:99:20:ad:22:45:6e:f6:2c:f5:71:2e:0c:ce:07: fb:91:77:1c:a2:14:79:3c:48:c0:4e:48:47:2d:68:10:71:cf: ed:db:95:07:5c:b8:a9:c7:11:63:70:aa:3f:24:97:9f:eb:0f: 43:da:c7:b6:d4:16:29:06:ea:8b:97:3f:1a:26:c0:39:21:88: a4:84:24:64:2c:2a:c8:f6:80:52:a8:47:47:e2:6b:cf:d1:21: c9:ac:e2:e8:5a:f8:7d:44:f5:b9:00:98:f3:41:67:be:3c:1c: bc:d0:d1:99:10:20:88:cf:9b:89:39:da:7c:bd:cb:b4:e1:20: da:b7:2e:e3:29:2d:36:0a:3e:95:5f:5b:34:25:de:59:0b:ba: 44:f7:c1:b3:c5:62:90:3a:d8:58:a9:81:31:00:de:f9:15:f3: 13:40:93:c3:cd:f8:65:2b:d3:c7:5c:45:8a:84:43:43:0c:91: cc:30:76:6d:cb:77:a1:07:a5:55:0b:f9:29:8c:07:f6:6f:e2: dc:5d:5e:7d:30:bf:f1:28:2e:68:3b:3d:8e:d0:a9:2b:ab:1a: 72:6f:2a:a6:8d:22:db:e0:20:9a:08:78:5e:87:d5:b1:3f:ae: 96:d4:8c:da:60:6e:dc:36:46:be:09:f4:a4:70:bd:2c:22:e7: 25:93:f3:7c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw MjQwMDZaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKENDRkEyNDgwNzQ2Njk5 QTkxNjg0MDU1NjFEQ0Y3RjZGNkVFRDUxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH9GAgay0OwAD0iQLo9js+KU88+WjC5hVi7enNFj1yRGvrSsBP yErygHRKah9s7hAEOF5pdTnaPOjiftwBl9ADoM7NDqlmjTI4GbQkklKhhZsKoiUZ zE4cBLRtlTPM18dUJ0SjxwBlllX0eaHl1ypzHb2AbEtFWp0hhZFOc+6RCY0OZ1Dc uFqQyGO36qa0qR2+aHch3vP5Ct71ElzXfEv41Z3NdfgjreQ8Z7K1MhNBnE5SZKqn Lvli3DPfb8zlM7WG88CJmoxej9oFEvJIqZ6RDHYO14jrd4yJeOtAYUNc6r/z8IEl sRF42iob9gMc5Ld2I/UEBRjBGOkZRIFvbkoLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUzPokgHRmmakWhAVWHc9/b27tUQEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3pQb2tnSFJtbWFrV2hBVldIYzlfYjI3dFVRRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADS65gwDQYJKoZIhvcNAQELBQADggEBABvb9N6ZIK0iRW72LPVxLgzOB/uR dxyiFHk8SMBOSEctaBBxz+3blQdcuKnHEWNwqj8kl5/rD0Pax7bUFikG6ouXPxom wDkhiKSEJGQsKsj2gFKoR0fia8/RIcms4uha+H1E9bkAmPNBZ748HLzQ0ZkQIIjP m4k52ny9y7ThINq3LuMpLTYKPpVfWzQl3lkLukT3wbPFYpA62FipgTEA3vkV8xNA k8PN+GUr08dcRYqEQ0MMkcwwdm3Ld6EHpVUL+SmMB/Zv4txdXn0wv/EoLmg7PY7Q qSurGnJvKqaNItvgIJoIeF6H1bE/rpbUjNpgbtw2Rr4J9KRwvSwi5yWT83w= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:06 2025 by rpki-client on console.sobornost.net