$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2Tqd5hI69Pwv_vDUQlSkwVHyP1c.roa File: 2Tqd5hI69Pwv_vDUQlSkwVHyP1c.roa (raw, json) Hash identifier: qpdsTA01R/z/2JDB4icvBlDuiSIKZyar/hK2RGkTBI0= Subject key identifier: D9:3A:9D:E6:12:3A:F4:FC:2F:FE:F0:D4:42:54:A4:C1:51:F2:3F:57 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02C4 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2Tqd5hI69Pwv_vDUQlSkwVHyP1c.roa Signing time: Sun 31 Mar 2024 01:33:20 +0000 ROA not before: Sun 31 Mar 2024 01:33:20 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 61.198.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:33:20 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=D93A9DE6123AF4FC2FFEF0D44254A4C151F23F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:f9:36:22:45:0e:d4:a2:33:96:a4:ed:db: 94:9a:5a:64:0c:dd:b0:da:89:7a:45:82:ff:46:90: 2b:57:ce:ec:40:20:44:80:72:60:6b:57:c9:51:67: ff:24:cf:ab:b2:bd:d3:77:b3:fb:d5:49:09:cf:d3: 14:e2:95:5c:9a:a6:45:2a:d8:af:38:2c:89:ca:08: c4:3b:a3:5f:68:c6:07:48:92:c0:a8:c3:32:72:5b: f6:d6:af:2f:af:dc:d1:20:91:a7:c5:6c:6f:0a:42: 2b:ec:b5:fe:0e:bb:85:3d:90:69:23:3f:71:7f:f0: b5:62:f4:e5:c8:22:dc:0f:89:ab:4a:88:b2:b1:02: 54:13:19:82:52:46:8d:52:22:10:b1:7e:37:0a:fc: 21:c0:18:a0:58:47:db:01:d5:04:ca:8b:2b:b1:fe: a0:dd:fe:84:7e:89:2b:0a:2c:15:6c:c8:a8:a6:1c: ea:28:a7:27:fd:a6:64:8e:6a:df:19:8a:63:aa:04: ea:52:dc:e7:bf:f1:af:0d:31:be:a9:79:be:4b:84: d2:12:ef:0e:22:e9:01:4e:ce:d6:90:bd:7c:c7:99: e4:35:fc:14:77:c1:ea:16:60:23:9c:6c:27:11:f4: 6b:e0:35:a5:a1:78:1f:e5:ba:ce:c5:b3:b3:09:1c: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3A:9D:E6:12:3A:F4:FC:2F:FE:F0:D4:42:54:A4:C1:51:F2:3F:57 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2Tqd5hI69Pwv_vDUQlSkwVHyP1c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.198.128.0/17 Signature Algorithm: sha256WithRSAEncryption 23:de:de:52:30:f9:76:03:d5:36:6b:34:cb:e7:cd:e4:b4:0a: b3:aa:ae:93:d7:3e:3f:b5:18:26:eb:3e:10:d8:fc:84:22:40: 45:12:fb:1f:28:a4:5a:0f:e4:71:82:57:49:07:92:ce:bc:ce: 52:35:27:dd:3d:1c:fd:66:b1:7f:30:5c:c5:57:2e:f5:af:36: 44:f7:81:0c:1e:00:01:10:c3:62:80:7b:d6:cb:73:88:1c:21: b5:80:90:be:b9:ef:97:81:8e:09:1c:52:d2:f1:c5:78:ab:f9: db:da:61:f4:17:78:04:0a:e9:01:7e:98:e3:74:c7:e7:12:bd: 4d:e3:01:1e:2e:1d:22:e1:1d:97:0b:58:37:e8:62:46:c5:af: fc:fc:2e:50:2e:8c:da:e9:7e:0b:0f:6c:81:8e:1e:14:df:44: 51:a9:66:ff:6a:b2:3d:e5:a9:89:b9:9a:31:8f:f5:09:63:ee: b0:b3:ab:7d:a4:68:6b:e0:ac:a5:f3:44:60:24:68:d7:bb:28: 50:68:ba:69:72:df:f5:7b:26:b3:e9:e9:54:59:43:cb:d9:cf: db:51:5f:0c:0e:a8:59:79:d9:a8:26:8d:5d:3e:1b:fe:71:e4: 8b:30:5f:20:e6:02:f2:82:61:96:82:d7:f2:ff:93:b3:01:03: 25:04:67:00 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTMzMjBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5M0E5REU2MTIzQUY0 RkMyRkZFRjBENDQyNTRBNEMxNTFGMjNGNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkV/k2IkUO1KIzlqTt25SaWmQM3bDaiXpFgv9GkCtXzuxAIESA cmBrV8lRZ/8kz6uyvdN3s/vVSQnP0xTilVyapkUq2K84LInKCMQ7o19oxgdIksCo wzJyW/bWry+v3NEgkafFbG8KQivstf4Ou4U9kGkjP3F/8LVi9OXIItwPiatKiLKx AlQTGYJSRo1SIhCxfjcK/CHAGKBYR9sB1QTKiyux/qDd/oR+iSsKLBVsyKimHOoo pyf9pmSOat8ZimOqBOpS3Oe/8a8NMb6peb5LhNIS7w4i6QFOztaQvXzHmeQ1/BR3 weoWYCOcbCcR9GvgNaWheB/lus7Fs7MJHCcrAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2Tqd5hI69Pwv/vDUQlSkwVHyP1cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzJUcWQ1aEk2OVB3dl92RFVRbFNrd1ZIeVAxYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9xoAwDQYJKoZIhvcNAQELBQADggEBACPe3lIw+XYD1TZrNMvnzeS0CrOq rpPXPj+1GCbrPhDY/IQiQEUS+x8opFoP5HGCV0kHks68zlI1J909HP1msX8wXMVX LvWvNkT3gQweAAEQw2KAe9bLc4gcIbWAkL6575eBjgkcUtLxxXir+dvaYfQXeAQK 6QF+mON0x+cSvU3jAR4uHSLhHZcLWDfoYkbFr/z8LlAujNrpfgsPbIGOHhTfRFGp Zv9qsj3lqYm5mjGP9Qlj7rCzq32kaGvgrKXzRGAkaNe7KFBoumly3/V7JrPp6VRZ Q8vZz9tRXwwOqFl52agmjV0+G/5x5IswXyDmAvKCYZaC1/L/k7MBAyUEZwA= -----END CERTIFICATE-----Generated at Thu May 30 03:38:37 2024 by rpki-client on console-ams.rpki-client.org