$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7le2AMJHHLTdo8bf903BwSJbXik.roa File: 7le2AMJHHLTdo8bf903BwSJbXik.roa (raw, json) Hash identifier: kTOgPwy+emyGP4Pw9/mIkuSzuR1sTDyC4y5xXQq2B8I= Subject key identifier: EE:57:B6:00:C2:47:1C:B4:DD:A3:C6:DF:F7:4D:C1:C1:22:5B:5E:29 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 029B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7le2AMJHHLTdo8bf903BwSJbXik.roa Signing time: Sun 31 Mar 2024 01:29:38 +0000 ROA not before: Sun 31 Mar 2024 01:29:38 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 14.101.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:29:38 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=EE57B600C2471CB4DDA3C6DFF74DC1C1225B5E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:2b:d3:49:70:df:f7:61:f6:45:d5:2f:56: b1:07:64:c7:f9:21:bc:e2:6c:ed:5d:b7:32:18:05: e1:78:56:9f:8f:5f:69:8d:5b:cb:0b:4e:14:f3:ef: 52:7a:ff:5b:03:e8:02:ad:0c:a5:6d:57:ca:3f:a8: 55:57:8c:f1:fb:8c:65:5c:c9:ad:61:c5:cd:61:64: c8:3b:a4:a0:e6:1b:08:85:01:71:57:64:3d:19:e1: 1d:b0:c5:65:6a:3e:79:82:a8:4c:d4:f0:53:93:44: 69:bc:a8:fa:76:4e:e5:a8:a8:c8:29:1a:9a:0c:94: d8:96:a9:81:6c:61:a8:cb:2a:bc:96:77:c5:5d:fb: 8f:32:70:bd:70:55:ab:f5:ec:6f:f4:46:57:aa:f0: 71:a0:72:53:51:9f:bd:cb:21:f6:30:6a:c4:f0:bb: 01:95:6e:83:14:09:42:f5:46:ff:64:85:33:de:ff: 90:e8:c8:6b:56:ec:15:fe:a7:74:72:78:68:e8:e6: 01:0c:e8:40:70:c8:be:c7:35:04:6d:63:b9:35:b5: 8c:86:d2:8d:4a:63:08:1f:01:b0:97:18:72:f2:e1: 07:3a:08:13:45:0d:78:ee:0a:83:24:b6:77:80:37: ce:1f:bf:3c:75:6e:71:a1:e9:b6:5d:fd:85:12:c6: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:57:B6:00:C2:47:1C:B4:DD:A3:C6:DF:F7:4D:C1:C1:22:5B:5E:29 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7le2AMJHHLTdo8bf903BwSJbXik.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.101.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:fd:ad:a7:cc:c4:e7:20:32:96:a0:c2:ac:bf:c6:ff:7b:52: 38:e8:dd:fd:8b:36:72:01:48:51:1a:51:27:a9:a3:ec:47:be: cb:a2:51:8f:fd:c6:9b:77:ab:71:9b:78:41:39:15:26:92:43: d3:69:ee:3f:a4:1b:ed:b4:2b:c3:10:13:22:f6:fb:5b:d0:4d: 9d:aa:13:eb:55:b1:25:3d:fe:fc:bb:07:a9:02:27:21:ac:0f: 69:0f:7c:41:a8:ea:19:93:86:4e:ff:5b:46:7e:e6:24:76:e3: 00:57:28:40:d3:d4:c9:bc:62:22:8b:90:02:40:fd:e1:a4:03: e3:d8:64:50:ef:78:01:6f:e2:06:3a:b3:07:1d:72:95:a1:51: 56:4d:8e:76:ee:76:90:97:9b:52:90:c9:dc:85:91:e0:e2:61: e2:f1:c1:cb:f2:82:7e:43:24:93:1c:42:f7:32:de:a0:50:69: 1b:ad:b1:8d:5c:46:02:f2:34:6b:a8:61:cc:09:31:a9:06:d5: b3:43:55:eb:95:1e:31:b2:93:0e:79:bb:24:8f:53:4d:e9:59: 4e:6d:2b:4a:ba:ae:d1:85:ba:77:a4:b1:31:33:cc:77:46:81: 8a:b6:ce:88:2f:06:26:86:aa:61:d9:b9:7b:e8:4d:22:b6:6e: 65:1b:ea:50 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICApswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTI5MzhaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVFNTdCNjAwQzI0NzFD QjREREEzQzZERkY3NERDMUMxMjI1QjVFMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrFyvTSXDf92H2RdUvVrEHZMf5IbzibO1dtzIYBeF4Vp+PX2mN W8sLThTz71J6/1sD6AKtDKVtV8o/qFVXjPH7jGVcya1hxc1hZMg7pKDmGwiFAXFX ZD0Z4R2wxWVqPnmCqEzU8FOTRGm8qPp2TuWoqMgpGpoMlNiWqYFsYajLKryWd8Vd +48ycL1wVav17G/0Rleq8HGgclNRn73LIfYwasTwuwGVboMUCUL1Rv9khTPe/5Do yGtW7BX+p3RyeGjo5gEM6EBwyL7HNQRtY7k1tYyG0o1KYwgfAbCXGHLy4Qc6CBNF DXjuCoMktneAN84fvzx1bnGh6bZd/YUSxul1AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU7le2AMJHHLTdo8bf903BwSJbXikwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxLzdsZTJBTUpISExUZG84YmY5MDNCd1NKYlhpay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAOZTANBgkqhkiG9w0BAQsFAAOCAQEAIf2tp8zE5yAylqDCrL/G/3tSOOjd /Ys2cgFIURpRJ6mj7Ee+y6JRj/3Gm3ercZt4QTkVJpJD02nuP6Qb7bQrwxATIvb7 W9BNnaoT61WxJT3+/LsHqQInIawPaQ98QajqGZOGTv9bRn7mJHbjAFcoQNPUybxi IouQAkD94aQD49hkUO94AW/iBjqzBx1ylaFRVk2Odu52kJebUpDJ3IWR4OJh4vHB y/KCfkMkkxxC9zLeoFBpG62xjVxGAvI0a6hhzAkxqQbVs0NV65UeMbKTDnm7JI9T TelZTm0rSrqu0YW6d6SxMTPMd0aBirbOiC8GJoaqYdm5e+hNIrZuZRvqUA== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org