$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa File: IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa (raw, json) Hash identifier: /tDtDJ4TlYFncSoKsGrpKXROLaxt/K6e2wBe2QZ8kFw= Subject key identifier: 21:0F:EB:40:CD:1A:0E:9A:82:5A:E7:ED:9E:ED:47:2A:4A:55:2E:B4 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 033A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa Signing time: Sun 31 Mar 2024 01:40:47 +0000 ROA not before: Sun 31 Mar 2024 01:40:47 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 202.239.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:40:47 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=210FEB40CD1A0E9A825AE7ED9EED472A4A552EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:4c:10:42:46:f8:2a:5b:19:d5:4a:ea:e3: 9f:7c:ac:2d:b4:d7:df:ff:56:af:c5:38:fe:c2:ae: 90:52:da:8a:f9:a5:c8:ed:63:51:ea:4b:8d:f1:1c: 55:9e:57:5a:13:47:1b:55:37:ab:63:35:cf:54:b6: 7a:e9:79:8c:b7:2f:34:70:f1:56:8b:2a:55:ac:da: 17:d1:ee:b8:c3:b0:78:98:a4:2d:f6:a9:f8:c3:78: bc:5b:b4:95:97:af:ab:d4:3d:8e:34:c0:b6:77:df: 35:07:37:99:b1:22:ea:48:8b:09:53:ba:7d:cf:cf: b7:49:50:75:18:eb:fa:b2:00:65:df:7b:4b:48:cb: df:be:2a:e6:8b:31:78:38:2c:2f:72:35:f5:c0:7f: 51:f5:be:23:31:ac:bb:c0:ad:6a:4e:96:99:f3:7a: eb:72:e8:2d:3e:f5:23:68:66:5e:7c:68:c7:d4:49: ce:e2:3c:2b:10:47:dc:e5:af:20:97:42:e4:17:d0: ef:0a:8a:88:90:23:89:9c:af:49:75:33:c3:22:63: 36:b9:23:61:86:ae:c9:73:ea:3f:19:02:00:f9:99: 1c:1b:9c:f0:b1:a5:6b:b3:58:83:e5:17:4a:bd:96: a6:41:ba:70:1b:d3:59:df:4d:d1:71:c3:5f:ac:07: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0F:EB:40:CD:1A:0E:9A:82:5A:E7:ED:9E:ED:47:2A:4A:55:2E:B4 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IQ_rQM0aDpqCWuftnu1HKkpVLrQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.239.128.0/18 Signature Algorithm: sha256WithRSAEncryption aa:a2:a1:b8:7a:f4:a4:e8:5d:04:6e:f6:ed:cd:6f:12:fb:6c: 17:42:21:2e:ea:2d:99:81:eb:d3:ca:69:82:bf:31:00:ad:65: 66:40:cf:bc:e8:07:98:43:a4:a0:7a:56:13:8a:72:61:64:4d: 61:26:ca:33:ca:db:4d:bf:33:d5:a5:1a:8a:bf:df:83:40:9d: db:0e:7a:9b:6c:4f:b8:84:2e:fc:29:49:c7:fa:8b:8d:36:26: 63:ab:3d:7e:c4:c5:b3:98:3d:dc:74:85:d1:e3:0a:c1:72:9f: f4:6c:9a:ee:ed:92:9e:1b:f4:e2:67:c1:7c:4e:0f:fd:0f:cd: fb:75:f5:52:c9:ff:03:47:fa:44:5c:02:d1:09:a8:87:0d:32: 85:08:43:12:41:74:d4:fb:8a:25:b1:63:5a:e7:fd:28:82:b2: 0a:89:9f:92:c7:13:0f:fd:50:59:f4:28:13:48:f2:2f:3a:ec: 0e:3d:91:36:6b:f4:62:5b:c4:77:6f:ab:d4:79:b9:e8:60:87: 0c:a5:11:21:67:5b:21:5e:2f:68:fa:a5:2e:c4:fc:b2:27:4e: a4:94:14:45:5a:a6:a5:8e:23:19:9d:ad:ce:06:98:cf:c4:73: 3d:ee:da:b7:92:d4:f4:75:95:1e:61:ff:16:48:24:cc:25:1c: cc:d4:6a:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQwNDdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxMEZFQjQwQ0QxQTBF OUE4MjVBRTdFRDlFRUQ0NzJBNEE1NTJFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXZ0wQQkb4KlsZ1Urq4598rC2019//Vq/FOP7CrpBS2or5pcjt Y1HqS43xHFWeV1oTRxtVN6tjNc9UtnrpeYy3LzRw8VaLKlWs2hfR7rjDsHiYpC32 qfjDeLxbtJWXr6vUPY40wLZ33zUHN5mxIupIiwlTun3Pz7dJUHUY6/qyAGXfe0tI y9++KuaLMXg4LC9yNfXAf1H1viMxrLvArWpOlpnzeuty6C0+9SNoZl58aMfUSc7i PCsQR9zlryCXQuQX0O8KioiQI4mcr0l1M8MiYza5I2GGrslz6j8ZAgD5mRwbnPCx pWuzWIPlF0q9lqZBunAb01nfTdFxw1+sB9mlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIQ/rQM0aDpqCWuftnu1HKkpVLrQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0lRX3JRTTBhRHBxQ1d1ZnRudTFIS2twVkxyUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbK74AwDQYJKoZIhvcNAQELBQADggEBAKqiobh69KToXQRu9u3NbxL7bBdC IS7qLZmB69PKaYK/MQCtZWZAz7zoB5hDpKB6VhOKcmFkTWEmyjPK202/M9WlGoq/ 34NAndsOeptsT7iELvwpScf6i402JmOrPX7ExbOYPdx0hdHjCsFyn/Rsmu7tkp4b 9OJnwXxOD/0Pzft19VLJ/wNH+kRcAtEJqIcNMoUIQxJBdNT7iiWxY1rn/SiCsgqJ n5LHEw/9UFn0KBNI8i867A49kTZr9GJbxHdvq9R5uehghwylESFnWyFeL2j6pS7E /LInTqSUFEVapqWOIxmdrc4GmM/Ecz3u2reS1PR1lR5h/xZIJMwlHMzUaoI= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org