$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3OPPZUpRqSlaEdFQEpUFq8E0WHI.roa File: 3OPPZUpRqSlaEdFQEpUFq8E0WHI.roa (raw, json) Hash identifier: 0bKlOKsPDoPMAc76mUYZLBKvm9hKtyNkPckxDlOiL24= Subject key identifier: DC:E3:CF:65:4A:51:A9:29:5A:11:D1:50:12:95:05:AB:C1:34:58:72 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 031B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3OPPZUpRqSlaEdFQEpUFq8E0WHI.roa Signing time: Sun 31 Mar 2024 01:38:45 +0000 ROA not before: Sun 31 Mar 2024 01:38:45 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 222.15.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:38:45 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=DCE3CF654A51A9295A11D150129505ABC1345872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:76:c1:37:10:79:66:34:b5:c6:63:87:cd: 6b:48:c7:0a:74:0b:c8:04:96:07:11:b8:25:97:58: a7:46:6d:c0:31:c7:ad:bb:2c:10:7c:20:bf:6f:6c: e6:fc:6a:72:20:dc:98:31:0e:bf:51:96:cd:18:b7: 23:3c:78:cb:e4:f3:8c:63:93:c0:be:0c:22:5d:2e: ad:a8:52:77:6e:d8:98:b2:a4:a6:1a:d7:86:2b:e2: 79:40:98:7b:b8:a4:50:4a:93:94:bd:df:d4:1c:71: d1:1b:94:1c:22:39:2f:46:0b:86:fb:70:31:69:dc: b6:dd:41:6d:a0:72:aa:01:84:80:d2:0a:26:83:8e: 9e:a9:52:8b:f5:9b:22:df:82:cd:3c:86:8d:03:99: 62:d3:c5:cd:2f:e4:17:98:2d:5d:ac:c1:43:38:5e: 1b:5b:6e:02:ae:69:79:ab:93:6c:68:6c:5c:2e:bd: 81:fe:c8:44:07:cc:8f:63:ba:4b:a5:3f:ce:2c:fe: 5b:b6:5d:6f:45:85:a9:ff:19:05:16:27:a2:21:5c: 7e:c7:aa:e1:c3:a2:08:21:23:c2:d6:99:23:e7:18: 09:ca:bb:07:6d:75:88:36:9c:d9:ca:a2:40:f9:d9: c9:29:a1:66:47:8d:e6:2c:dd:ea:57:59:ec:3a:3e: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E3:CF:65:4A:51:A9:29:5A:11:D1:50:12:95:05:AB:C1:34:58:72 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3OPPZUpRqSlaEdFQEpUFq8E0WHI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 222.15.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:9b:9c:46:3b:34:48:c5:82:fe:7a:3d:c3:f8:a5:6e:fa:74: f6:7c:52:a0:c0:6f:9b:81:d8:95:0c:fb:4f:88:67:ab:8f:d5: 73:2f:95:69:af:1f:50:27:38:6d:4e:67:98:21:f6:41:2f:ab: c1:26:36:2e:7d:47:6d:78:82:e8:e2:1d:12:45:90:46:5b:d7: 50:ae:ff:ba:be:47:3f:eb:54:33:15:42:a0:d8:55:83:65:d7: 82:02:71:a2:04:ca:18:36:6c:f2:b8:00:76:d3:ea:81:63:ab: 02:99:81:42:e5:36:6a:2b:de:33:da:38:ec:26:a2:11:5d:9e: e3:ca:99:4c:7b:e4:aa:1a:11:11:c2:c0:81:28:de:0f:f2:a6: 43:8e:bc:34:e7:61:3a:ca:91:5e:07:82:49:13:91:9d:31:a8: 91:4a:dc:cb:73:66:00:d1:89:a6:af:2c:ac:1c:40:34:6e:5a: 9f:5a:f6:bb:f9:a0:76:2e:a3:6a:fa:14:ff:f2:01:5a:05:43: 64:46:22:59:67:4d:ff:52:92:e2:3b:07:71:e8:8f:4e:e8:f0: 6f:c1:ab:84:29:5a:5e:3e:11:12:4a:f6:ea:cf:be:d8:d3:e1: 49:50:7e:2b:9e:7f:ba:c3:a4:55:27:85:55:cd:31:ab:56:8e: 4a:1f:33:2e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAxswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTM4NDVaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDRTNDRjY1NEE1MUE5 Mjk1QTExRDE1MDEyOTUwNUFCQzEzNDU4NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQComXbBNxB5ZjS1xmOHzWtIxwp0C8gElgcRuCWXWKdGbcAxx627 LBB8IL9vbOb8anIg3JgxDr9Rls0YtyM8eMvk84xjk8C+DCJdLq2oUndu2JiypKYa 14Yr4nlAmHu4pFBKk5S939QccdEblBwiOS9GC4b7cDFp3LbdQW2gcqoBhIDSCiaD jp6pUov1myLfgs08ho0DmWLTxc0v5BeYLV2swUM4XhtbbgKuaXmrk2xobFwuvYH+ yEQHzI9jukulP84s/lu2XW9Fhan/GQUWJ6IhXH7HquHDogghI8LWmSPnGAnKuwdt dYg2nNnKokD52ckpoWZHjeYs3epXWew6PjzjAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU3OPPZUpRqSlaEdFQEpUFq8E0WHIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzNPUFBaVXBScVNsYUVkRlFFcFVGcThFMFdISS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDeDzANBgkqhkiG9w0BAQsFAAOCAQEAeJucRjs0SMWC/no9w/ilbvp09nxS oMBvm4HYlQz7T4hnq4/Vcy+Vaa8fUCc4bU5nmCH2QS+rwSY2Ln1HbXiC6OIdEkWQ RlvXUK7/ur5HP+tUMxVCoNhVg2XXggJxogTKGDZs8rgAdtPqgWOrApmBQuU2aive M9o47CaiEV2e48qZTHvkqhoREcLAgSjeD/KmQ468NOdhOsqRXgeCSRORnTGokUrc y3NmANGJpq8srBxANG5an1r2u/mgdi6javoU//IBWgVDZEYiWWdN/1KS4jsHceiP Tujwb8GrhClaXj4REkr26s++2NPhSVB+K55/usOkVSeFVc0xq1aOSh8zLg== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:15 2024 by rpki-client on console-ams.rpki-client.org