$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/K8e5OCua7lNTxtvrVxU4BVNqwTg.roa File: K8e5OCua7lNTxtvrVxU4BVNqwTg.roa (raw, json) Hash identifier: GI0uuwLOQP+4e0IxFhRNLpcUg4TFFO25AkElBo1zke0= Subject key identifier: 2B:C7:B9:38:2B:9A:EE:53:53:C6:DB:EB:57:15:38:05:53:6A:C1:38 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 033E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K8e5OCua7lNTxtvrVxU4BVNqwTg.roa Signing time: Sun 31 Mar 2024 01:42:37 +0000 ROA not before: Sun 31 Mar 2024 01:42:37 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 61.120.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:42:37 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=2BC7B9382B9AEE5353C6DBEB57153805536AC138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:c9:83:c0:aa:89:88:82:bb:86:49:51:bc: 07:bf:4d:a9:05:c6:8b:81:db:36:78:b0:d4:cd:16: 46:2a:55:2d:99:88:6f:32:f4:c6:50:a9:3c:6c:14: 77:5f:f0:a9:b3:0e:59:bc:25:2f:cb:f2:b1:b8:78: a2:7a:0c:c3:43:e5:44:f6:72:47:21:f0:68:fb:f8: 2f:8c:d1:a5:80:3e:d6:a3:e1:8b:2c:3b:0d:c7:93: 04:f6:f1:ac:30:13:5b:ce:d5:07:e6:04:2b:d3:4f: 42:31:0f:4c:71:82:87:29:a2:e5:90:4a:d9:2d:17: bd:7e:73:a5:4b:66:3f:b3:3d:b7:5f:b7:01:82:d5: ca:fd:b1:eb:e5:66:66:e3:c5:cf:5d:42:da:48:78: ea:c4:60:47:ba:22:05:3e:fb:62:a1:ae:ec:86:08: 95:2b:e3:be:5a:75:11:b8:a2:c6:91:c7:43:4c:77: df:11:67:2b:fa:bb:a6:72:98:a8:13:fe:6f:b4:05: 42:90:9c:6d:4a:10:6d:42:f8:89:26:49:4f:85:f0: 0e:fa:f2:03:97:a8:64:85:46:f1:ba:32:1b:1f:18: 05:50:c3:7a:b3:af:48:ea:bc:cd:ca:77:b3:cd:54: f5:05:7c:f8:ec:34:e4:b8:0d:61:c7:0d:03:8c:70: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C7:B9:38:2B:9A:EE:53:53:C6:DB:EB:57:15:38:05:53:6A:C1:38 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K8e5OCua7lNTxtvrVxU4BVNqwTg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5e:ab:15:9a:31:82:0b:d7:a6:cc:1a:be:03:49:35:cd:52:f7: a6:f9:16:4f:2a:16:1f:93:c9:4c:ed:8c:50:2d:08:26:16:91: 60:35:87:e1:9a:0e:12:4a:8b:be:7c:a4:f4:d7:81:fd:15:2a: 75:4b:5f:94:a1:03:f1:96:4f:4e:c5:6f:09:66:9d:7a:9c:e0: 25:c4:dc:43:a2:24:77:d4:2a:17:95:3f:c8:c0:97:f6:8a:87: 56:3c:1b:76:4e:79:dc:d6:d9:c7:86:4d:02:c8:71:0a:77:61: 57:31:59:40:aa:3f:72:8d:6a:30:45:1d:f6:47:78:0e:33:1d: 7c:ff:4c:68:5a:83:b0:6d:63:28:4e:f0:14:3a:a6:98:99:cd: 8d:1b:c2:08:0f:b9:f0:8a:45:65:1a:85:37:c1:2d:29:ef:46: ed:2f:26:a7:5f:b2:05:9e:83:4c:6a:d0:4d:49:c1:92:ee:f5: 43:f2:6f:5a:c4:21:40:ec:82:f2:b1:a0:f6:35:75:b6:b7:45: ce:ff:66:df:02:44:5d:4f:b3:41:b4:ff:dc:84:fe:83:ab:20: d0:51:bf:64:d9:f3:c3:75:8b:e2:3f:21:79:4a:52:f5:d2:cc: cd:0c:fb:30:b6:14:62:70:57:72:d9:97:59:d8:17:d2:ef:d9: c4:01:8b:17 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQyMzdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCQzdCOTM4MkI5QUVF NTM1M0M2REJFQjU3MTUzODA1NTM2QUMxMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/MsmDwKqJiIK7hklRvAe/TakFxouB2zZ4sNTNFkYqVS2ZiG8y 9MZQqTxsFHdf8KmzDlm8JS/L8rG4eKJ6DMND5UT2ckch8Gj7+C+M0aWAPtaj4Yss Ow3HkwT28awwE1vO1QfmBCvTT0IxD0xxgocpouWQStktF71+c6VLZj+zPbdftwGC 1cr9sevlZmbjxc9dQtpIeOrEYEe6IgU++2KhruyGCJUr475adRG4osaRx0NMd98R Zyv6u6ZymKgT/m+0BUKQnG1KEG1C+IkmSU+F8A768gOXqGSFRvG6MhsfGAVQw3qz r0jqvM3Kd7PNVPUFfPjsNOS4DWHHDQOMcJzPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUK8e5OCua7lNTxtvrVxU4BVNqwTgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0s4ZTVPQ3VhN2xOVHh0dnJWeFU0QlZOcXdUZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9eAAwDQYJKoZIhvcNAQELBQADggEBAF6rFZoxggvXpswavgNJNc1S96b5 Fk8qFh+TyUztjFAtCCYWkWA1h+GaDhJKi758pPTXgf0VKnVLX5ShA/GWT07Fbwlm nXqc4CXE3EOiJHfUKheVP8jAl/aKh1Y8G3ZOedzW2ceGTQLIcQp3YVcxWUCqP3KN ajBFHfZHeA4zHXz/TGhag7BtYyhO8BQ6ppiZzY0bwggPufCKRWUahTfBLSnvRu0v JqdfsgWeg0xq0E1JwZLu9UPyb1rEIUDsgvKxoPY1dba3Rc7/Zt8CRF1Ps0G0/9yE /oOrINBRv2TZ88N1i+I/IXlKUvXSzM0M+zC2FGJwV3LZl1nYF9Lv2cQBixc= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org