$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa File: b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa (raw, json) Hash identifier: 9tjIIWp0ZS0vq0rKq8ZtSkmmcRMzb4GKKnF7pW28zac= Subject key identifier: 6F:8B:9C:A0:C7:5B:AC:36:0D:49:0B:A7:40:9E:D2:F9:96:47:C5:99 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02D6 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa Signing time: Sun 31 Mar 2024 01:33:27 +0000 ROA not before: Sun 31 Mar 2024 01:33:27 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 106.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:33:27 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=6F8B9CA0C75BAC360D490BA7409ED2F99647C599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:4b:48:9f:1e:fb:76:3c:0c:57:d8:b8:59: f0:b8:7a:28:64:cc:29:f3:50:78:6f:b2:d6:52:1b: fa:1d:82:3a:41:d0:cd:4b:6a:7e:2f:12:1c:29:a2: 5c:8b:a2:26:78:33:67:3f:11:b5:d9:0e:50:66:4d: 68:9f:9b:f9:ac:4a:1b:11:07:00:38:93:19:ad:51: 2b:90:de:4c:d2:f0:38:f2:7e:52:95:0f:9a:5f:92: d6:29:ca:f4:98:51:5f:3a:d4:c6:69:71:72:b2:09: 8e:7b:09:75:b6:3a:89:4e:9b:05:9e:97:e1:8d:32: df:7b:0d:31:e4:7c:9f:48:96:25:72:8d:e9:84:b7: d6:64:4e:95:2a:2d:bd:b8:d0:73:d5:97:67:a2:32: fe:62:b4:02:00:d1:ac:39:8c:ee:55:5f:c4:40:38: 03:4c:22:75:fa:9d:fe:7c:26:67:71:1d:48:3d:c1: 23:97:df:0a:be:22:b2:94:4d:d6:7e:7f:ce:3c:c2: 76:6f:e8:38:82:1f:4f:c1:4a:dd:88:cd:1f:bd:05: 75:01:b1:67:44:61:88:b7:89:09:cf:0a:6a:a3:15: 26:3b:3c:f2:a6:67:c5:0a:1e:f3:fb:f3:f7:60:a6: 72:38:e4:2a:29:4e:25:3c:fb:e4:e3:c5:b0:83:36: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8B:9C:A0:C7:5B:AC:36:0D:49:0B:A7:40:9E:D2:F9:96:47:C5:99 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:47:8c:04:64:74:e5:b4:81:ac:2c:b5:94:c0:7e:6d:63:d6: 95:3c:49:52:ef:29:79:88:2d:e0:d1:f9:7f:a6:71:33:e4:af: 89:df:d1:9b:2b:8a:2b:6c:b6:a3:5f:5d:a2:dc:ab:af:97:31: 68:d8:b8:3c:30:95:fb:dc:a8:33:02:86:ac:03:15:44:6f:ec: 5f:24:9e:9c:53:83:15:54:31:fd:23:d0:06:7f:53:69:f1:d3: 03:8d:25:2a:3f:75:40:26:82:3f:29:54:c1:06:b1:cf:1c:62: 2c:7e:36:19:0a:9b:63:c5:97:e5:27:db:96:06:dd:75:76:91: ea:cd:24:39:26:50:b5:57:60:cf:17:c8:49:80:2c:92:0a:6f: a2:a4:f3:2a:58:4e:5d:d8:67:4b:0b:b0:af:99:5c:29:4b:6e: e7:7f:d7:56:97:44:aa:29:bc:86:91:bf:1d:85:2d:7b:d4:8e: d7:7b:ff:44:a5:d2:70:35:f1:1f:4f:fb:c4:ed:8e:a2:6e:bb: 4b:63:18:da:9b:de:52:8a:b9:d9:a7:47:35:57:30:89:54:de: 10:9c:5c:dd:af:0e:84:d8:d3:be:1e:08:94:a3:d0:66:4c:25: 67:13:45:bd:75:b8:8a:fa:31:e1:8d:e8:a7:a7:14:04:dc:1d: 65:dd:d1:17 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTMzMjdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZGOEI5Q0EwQzc1QkFD MzYwRDQ5MEJBNzQwOUVEMkY5OTY0N0M1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH30tInx77djwMV9i4WfC4eihkzCnzUHhvstZSG/odgjpB0M1L an4vEhwpolyLoiZ4M2c/EbXZDlBmTWifm/msShsRBwA4kxmtUSuQ3kzS8DjyflKV D5pfktYpyvSYUV861MZpcXKyCY57CXW2OolOmwWel+GNMt97DTHkfJ9IliVyjemE t9ZkTpUqLb240HPVl2eiMv5itAIA0aw5jO5VX8RAOANMInX6nf58JmdxHUg9wSOX 3wq+IrKUTdZ+f848wnZv6DiCH0/BSt2IzR+9BXUBsWdEYYi3iQnPCmqjFSY7PPKm Z8UKHvP78/dgpnI45CopTiU8++TjxbCDNmktAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUb4ucoMdbrDYNSQunQJ7S+ZZHxZkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2I0dWNvTWRickRZTlNRdW5RSjdTLVpaSHhaay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBqrDANBgkqhkiG9w0BAQsFAAOCAQEAoUeMBGR05bSBrCy1lMB+bWPWlTxJ Uu8peYgt4NH5f6ZxM+Svid/RmyuKK2y2o19dotyrr5cxaNi4PDCV+9yoMwKGrAMV RG/sXySenFODFVQx/SPQBn9TafHTA40lKj91QCaCPylUwQaxzxxiLH42GQqbY8WX 5SfblgbddXaR6s0kOSZQtVdgzxfISYAskgpvoqTzKlhOXdhnSwuwr5lcKUtu53/X VpdEqim8hpG/HYUte9SO13v/RKXScDXxH0/7xO2Oom67S2MY2pveUoq52adHNVcw iVTeEJxc3a8OhNjTvh4IlKPQZkwlZxNFvXW4ivox4Y3op6cUBNwdZd3RFw== -----END CERTIFICATE-----Generated at Thu Jun 20 08:53:08 2024 by rpki-client on console-fra.rpki-client.org