$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7KZMgfXopkSWXs7O4KiP4awxnc.roa File: F7KZMgfXopkSWXs7O4KiP4awxnc.roa (raw, json) Hash identifier: 4+32q7gVud4vQUsKyIkLZyWP49zUIBNsDmmXsEhV/bw= Subject key identifier: 17:B2:99:32:07:D7:A2:99:12:59:7B:3B:3B:82:A2:3F:86:B0:C6:77 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 028E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7KZMgfXopkSWXs7O4KiP4awxnc.roa Signing time: Thu 29 Feb 2024 01:31:32 +0000 ROA not before: Thu 29 Feb 2024 01:31:32 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 29 01:31:32 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=17B2993207D7A29912597B3B3B82A23F86B0C677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:5a:fb:58:03:0e:65:47:0a:5b:05:1e:fe: 46:08:44:72:a4:cd:e1:60:6e:f5:c0:08:3d:1d:13: 49:e6:f4:a3:0b:f4:f9:0b:08:2f:2b:b1:4d:11:ce: c6:c1:46:90:1a:6c:58:2b:d9:6f:42:55:10:9e:1d: 03:27:cd:06:2b:a0:56:4f:00:3c:37:65:2e:b7:45: 88:85:95:57:3f:9d:03:30:bd:db:1e:95:cf:40:ab: 32:f3:ed:41:62:e6:c2:bc:36:08:ae:22:b5:4f:71: 9e:5d:b9:82:48:61:7d:e0:c6:4b:f6:6f:86:91:df: 62:93:86:62:0d:27:e8:dc:3f:3a:4c:ea:c1:2c:61: 01:0e:9e:8a:1c:c1:78:95:95:df:47:ad:71:57:91: a7:c3:ce:da:63:22:50:66:f2:05:0c:57:df:bf:cc: a0:a1:14:c3:d1:d4:44:b5:d4:58:ca:52:c3:21:70: 36:7a:70:41:97:ee:ca:25:47:4f:c6:be:2c:9f:a7: bc:84:4c:ee:97:08:c3:ca:d5:12:6d:85:93:cb:01: ee:10:0a:44:0d:ec:e1:35:68:63:ec:76:92:ee:ea: f1:50:8b:64:65:c3:de:f8:c9:ac:85:c3:74:0f:ba: 82:48:fc:8d:55:f7:eb:c0:f8:09:eb:1f:fe:3c:8d: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:99:32:07:D7:A2:99:12:59:7B:3B:3B:82:A2:3F:86:B0:C6:77 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7KZMgfXopkSWXs7O4KiP4awxnc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 61:92:4a:25:00:fe:cf:e6:43:10:08:6c:e1:5a:7b:b3:67:06: 5b:7a:0c:35:2b:a9:cb:82:b3:e2:9c:f1:f7:fd:d6:8a:62:b7: 05:fd:d6:67:76:c0:c1:f0:9b:30:0f:85:a2:28:63:57:78:14: 7b:5d:ef:e7:99:78:f8:3c:10:13:79:4f:e4:19:53:aa:0c:e8: f8:13:3c:6a:b3:23:18:47:57:ff:be:22:e0:7d:28:fe:43:05: 1f:b2:cd:fc:8e:56:4c:13:36:0b:0d:14:4c:54:88:77:6a:e4: 68:cf:b6:48:93:58:32:90:32:55:94:d7:45:2b:52:ef:4a:c7: 49:16:3d:48:47:8c:bc:cb:f0:f8:bc:50:9a:e1:1f:51:2e:77: aa:02:49:00:7f:e5:8b:65:0b:2e:b0:75:ef:8e:b8:67:57:29: dc:aa:02:69:b8:10:97:4a:dc:24:47:6d:a1:dd:e6:47:24:93: 1a:47:af:c5:ba:68:ca:36:3a:d2:a2:a5:af:4e:dc:49:69:84: 71:a1:1c:2b:b2:1d:c3:b6:28:77:47:de:50:35:d5:c1:82:cf: 72:23:88:9a:a5:4e:86:cf:3f:e5:73:7a:98:30:de:2d:fc:51: 8e:3e:25:b6:52:54:e7:00:a5:8a:9f:55:e7:e3:91:3a:21:2b: b0:13:c4:00 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMjkw MTMxMzJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDE3QjI5OTMyMDdEN0Ey OTkxMjU5N0IzQjNCODJBMjNGODZCMEM2NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeVFr7WAMOZUcKWwUe/kYIRHKkzeFgbvXACD0dE0nm9KML9PkL CC8rsU0RzsbBRpAabFgr2W9CVRCeHQMnzQYroFZPADw3ZS63RYiFlVc/nQMwvdse lc9AqzLz7UFi5sK8NgiuIrVPcZ5duYJIYX3gxkv2b4aR32KThmINJ+jcPzpM6sEs YQEOnoocwXiVld9HrXFXkafDztpjIlBm8gUMV9+/zKChFMPR1ES11FjKUsMhcDZ6 cEGX7solR0/Gviyfp7yETO6XCMPK1RJthZPLAe4QCkQN7OE1aGPsdpLu6vFQi2Rl w974yayFw3QPuoJI/I1V9+vA+AnrH/48jSKLAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUF7KZMgfXopkSWXs7O4KiP4awxncwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0Y3S1pNZ2ZYb3BrU1dYczdPNEtpUDRhd3huYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7hDANBgkqhkiG9w0BAQsFAAOCAQEAYZJKJQD+z+ZDEAhs4Vp7s2cGW3oM NSupy4Kz4pzx9/3WimK3Bf3WZ3bAwfCbMA+FoihjV3gUe13v55l4+DwQE3lP5BlT qgzo+BM8arMjGEdX/74i4H0o/kMFH7LN/I5WTBM2Cw0UTFSId2rkaM+2SJNYMpAy VZTXRStS70rHSRY9SEeMvMvw+LxQmuEfUS53qgJJAH/li2ULLrB17464Z1cp3KoC abgQl0rcJEdtod3mRySTGkevxbpoyjY60qKlr07cSWmEcaEcK7Idw7Yod0feUDXV wYLPciOImqVOhs8/5XN6mDDeLfxRjj4ltlJU5wClip9V5+OROiErsBPEAA== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org