$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EcAvrc-BZsk2TIILNmqsPH-ISFc.roa File: EcAvrc-BZsk2TIILNmqsPH-ISFc.roa (raw, json) Hash identifier: DWMQoxz1fxhYOl+nmyocISxPC0+zqSYWslwuMO1K06c= Subject key identifier: 11:C0:2F:AD:CF:81:66:C9:36:4C:82:0B:36:6A:AC:3C:7F:88:48:57 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02D3 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EcAvrc-BZsk2TIILNmqsPH-ISFc.roa Signing time: Sun 31 Mar 2024 01:33:27 +0000 ROA not before: Sun 31 Mar 2024 01:33:27 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 125.29.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:33:27 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=11C02FADCF8166C9364C820B366AAC3C7F884857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:75:23:b3:72:ef:cb:73:34:14:a5:37:a7: 22:7f:72:a8:75:b3:4e:e8:3a:ca:eb:58:cf:f4:4a: 80:a0:6c:c6:32:13:10:84:42:c0:cc:5e:40:96:f6: 9f:4d:e8:33:bf:c3:e2:14:84:db:19:ba:d5:8a:98: bd:65:aa:c9:a2:cd:1d:91:66:3d:6b:e5:a4:6e:8c: 27:4f:1b:94:b6:c3:58:92:6e:51:66:1d:d7:4a:77: 23:fc:ef:2e:f4:32:08:ac:9a:e9:85:7e:d1:00:61: 2c:bb:72:19:6d:17:02:a7:87:03:ee:d7:23:d9:db: 53:05:5a:1a:43:d1:91:b3:d2:49:2d:8a:80:d1:0e: 55:ea:f1:51:8c:0d:76:d6:18:3e:99:3e:91:19:61: 68:fe:7d:59:7a:24:ee:0b:19:d0:33:76:24:b4:20: f4:68:78:af:a0:29:36:2c:46:40:03:a2:c4:8d:ab: 20:0b:9c:83:9a:58:d2:3a:1a:4a:96:62:df:92:98: c8:c0:15:9b:c9:f8:9e:40:60:1b:45:15:7d:63:de: 3a:35:f1:9e:62:a9:bb:72:cf:f8:b4:4d:8c:01:16: d0:82:e0:84:53:c7:28:cc:a9:83:a6:d2:e7:d6:86: c2:8e:a6:97:c1:c9:16:df:94:3d:7a:09:45:6b:8b: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:2F:AD:CF:81:66:C9:36:4C:82:0B:36:6A:AC:3C:7F:88:48:57 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EcAvrc-BZsk2TIILNmqsPH-ISFc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.29.64.0/18 Signature Algorithm: sha256WithRSAEncryption a9:6a:94:a7:0e:86:9a:26:28:4b:b1:44:41:be:a4:c2:e9:20: ec:9e:93:a8:45:13:5b:61:6d:de:69:b7:8e:ad:04:dd:16:43: 1c:2e:c3:8d:f0:f0:81:4c:4c:a8:c4:c3:8c:9f:4e:5d:9f:f7: e4:a9:1e:81:c8:39:2d:9a:6c:da:2c:89:a3:b1:5e:a4:67:7c: 72:22:61:40:80:fc:1d:3c:40:3d:78:06:35:81:2d:08:14:e0: 9b:02:5a:61:47:ed:48:09:38:a1:48:92:23:3e:d1:e0:bb:37: 74:05:02:50:01:0f:d5:86:cc:fe:78:80:cb:f8:5e:92:5a:8f: 25:c4:dc:56:87:6d:b6:0f:e2:c2:c4:2a:f3:77:f7:7b:71:90: a5:8e:16:6f:89:21:9a:5a:3a:6d:6a:c4:75:f2:74:af:4b:c4: 97:74:55:4a:10:82:ae:7a:80:c8:03:d7:41:a1:38:cf:56:42: 43:98:09:ba:0f:92:bd:7e:f1:3e:05:8d:ea:61:51:ef:69:a1: 4b:6c:63:33:59:07:ed:87:f7:a7:0f:b9:3a:28:8b:34:39:13: df:93:94:25:78:d9:b9:b3:b6:b6:79:af:f0:c6:de:a1:d6:1e: 67:7b:97:2c:86:f3:4a:6a:ff:a8:e2:2e:0c:16:b6:87:8f:3d: dd:c1:79:f3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTMzMjdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDExQzAyRkFEQ0Y4MTY2 QzkzNjRDODIwQjM2NkFBQzNDN0Y4ODQ4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/vnUjs3Lvy3M0FKU3pyJ/cqh1s07oOsrrWM/0SoCgbMYyExCE QsDMXkCW9p9N6DO/w+IUhNsZutWKmL1lqsmizR2RZj1r5aRujCdPG5S2w1iSblFm HddKdyP87y70MgismumFftEAYSy7chltFwKnhwPu1yPZ21MFWhpD0ZGz0kktioDR DlXq8VGMDXbWGD6ZPpEZYWj+fVl6JO4LGdAzdiS0IPRoeK+gKTYsRkADosSNqyAL nIOaWNI6GkqWYt+SmMjAFZvJ+J5AYBtFFX1j3jo18Z5iqbtyz/i0TYwBFtCC4IRT xyjMqYOm0ufWhsKOppfByRbflD16CUVri0bdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEcAvrc+BZsk2TIILNmqsPH+ISFcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0VjQXZyYy1CWnNrMlRJSUxObXFzUEgtSVNGYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZ9HUAwDQYJKoZIhvcNAQELBQADggEBAKlqlKcOhpomKEuxREG+pMLpIOye k6hFE1thbd5pt46tBN0WQxwuw43w8IFMTKjEw4yfTl2f9+SpHoHIOS2abNosiaOx XqRnfHIiYUCA/B08QD14BjWBLQgU4JsCWmFH7UgJOKFIkiM+0eC7N3QFAlABD9WG zP54gMv4XpJajyXE3FaHbbYP4sLEKvN393txkKWOFm+JIZpaOm1qxHXydK9LxJd0 VUoQgq56gMgD10GhOM9WQkOYCboPkr1+8T4FjephUe9poUtsYzNZB+2H96cPuToo izQ5E9+TlCV42bmztrZ5r/DG3qHWHmd7lyyG80pq/6jiLgwWtoePPd3BefM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org