$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa File: KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa (raw, json) Hash identifier: hsq6SNpBaRRcmMkHG9i1UelVtKcKO5LPRVAgZU+Jpnw= Subject key identifier: 2B:10:94:C3:33:A0:4F:70:8A:49:7A:B8:4B:67:D2:2F:53:79:17:C7 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02E9 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa Signing time: Sun 31 Mar 2024 01:35:48 +0000 ROA not before: Sun 31 Mar 2024 01:35:48 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 124.215.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:35:48 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=2B1094C333A04F708A497AB84B67D22F537917C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:ef:03:70:c0:87:f1:4f:6d:15:21:52:24: d5:88:4b:6e:17:75:57:f5:7d:e2:1a:7f:9b:31:fe: b8:42:04:a0:cf:b1:c7:ce:44:14:0b:a3:47:b4:54: ec:ea:77:ba:2a:18:99:33:23:fe:7a:51:2b:ec:e0: 2e:87:b6:f2:cb:96:21:0d:f0:58:e5:13:8b:d8:fe: 4e:26:17:1e:f9:6c:02:8c:aa:1e:3a:09:f8:41:8c: 76:4c:45:a1:11:2d:8a:0b:ea:ef:de:40:8d:30:62: ea:c3:e5:4c:4b:f0:69:0e:d1:7e:f0:6b:b6:e7:95: 52:13:ed:ac:2c:81:ec:bc:0a:9a:e4:d8:b4:2d:a0: 48:f5:33:02:5b:29:32:02:e5:70:85:1b:5e:18:b9: 0d:d5:77:15:4b:01:2b:90:81:96:ec:4b:6a:d0:a2: d6:93:a5:e4:32:1d:c8:c3:c2:5b:e2:14:f8:83:1a: fc:16:e8:0d:0d:88:4d:17:f6:c9:ce:3a:9b:67:6b: b5:28:3e:0b:ae:8a:8c:da:4e:01:c5:93:a5:da:75: 86:5b:58:1b:fb:fe:8a:63:8c:5d:23:20:b4:70:02: 7b:8b:59:b3:97:3b:9e:97:e8:06:58:8a:a5:0d:ee: 1c:27:ab:17:d2:f8:5d:3b:db:17:08:d0:1c:9d:15: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:94:C3:33:A0:4F:70:8A:49:7A:B8:4B:67:D2:2F:53:79:17:C7 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KxCUwzOgT3CKSXq4S2fSL1N5F8c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.215.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3d:51:d3:11:29:11:5f:24:31:65:83:b4:12:b0:f4:d3:09:b8: 0c:54:eb:d1:95:a5:7e:bb:30:e9:02:47:35:58:06:7c:07:9f: 4e:de:46:eb:70:6f:0c:b5:70:f0:a5:5b:74:43:2b:44:d7:85: c5:ba:cc:bb:90:17:18:89:51:50:2d:1a:b4:52:ea:c6:3a:d2: a4:59:36:81:72:54:04:54:0f:65:7f:41:8f:f7:cf:af:78:a2: a6:33:20:6c:01:be:6e:0e:90:51:ee:e8:e9:e7:ef:40:5e:40: f8:83:02:80:a2:75:f3:03:50:c6:c3:f8:5c:e2:1d:89:cd:08: 3f:6d:ff:e9:36:f0:a7:9d:c5:29:0f:93:8d:bb:d0:f8:5c:5e: 98:03:af:d5:81:f3:1b:42:db:03:5c:44:4e:4d:75:21:4c:c6: 84:a2:99:ee:12:1a:dc:a1:0f:00:d7:bf:2a:8d:4b:cd:bc:e3: 6d:6d:9a:4a:c6:cf:68:59:b6:8a:c4:49:81:f8:5e:27:21:8f: 0d:08:98:25:fa:c2:79:3f:fe:78:fc:88:78:60:47:85:c5:e8: 43:aa:30:0c:b5:31:e0:08:5f:b9:a8:1d:c9:6b:22:f1:bf:22: dc:78:14:23:ed:02:c9:9f:31:b4:95:d2:a8:6a:5b:90:9e:62: b8:67:f9:6b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTM1NDhaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCMTA5NEMzMzNBMDRG NzA4QTQ5N0FCODRCNjdEMjJGNTM3OTE3QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB4e8DcMCH8U9tFSFSJNWIS24XdVf1feIaf5sx/rhCBKDPscfO RBQLo0e0VOzqd7oqGJkzI/56USvs4C6HtvLLliEN8FjlE4vY/k4mFx75bAKMqh46 CfhBjHZMRaERLYoL6u/eQI0wYurD5UxL8GkO0X7wa7bnlVIT7awsgey8Cprk2LQt oEj1MwJbKTIC5XCFG14YuQ3VdxVLASuQgZbsS2rQotaTpeQyHcjDwlviFPiDGvwW 6A0NiE0X9snOOptna7UoPguuiozaTgHFk6XadYZbWBv7/opjjF0jILRwAnuLWbOX O56X6AZYiqUN7hwnqxfS+F072xcI0BydFamtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKxCUwzOgT3CKSXq4S2fSL1N5F8cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0t4Q1V3ek9nVDNDS1NYcTRTMmZTTDFONUY4Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd81wAwDQYJKoZIhvcNAQELBQADggEBAD1R0xEpEV8kMWWDtBKw9NMJuAxU 69GVpX67MOkCRzVYBnwHn07eRutwbwy1cPClW3RDK0TXhcW6zLuQFxiJUVAtGrRS 6sY60qRZNoFyVARUD2V/QY/3z694oqYzIGwBvm4OkFHu6Onn70BeQPiDAoCidfMD UMbD+FziHYnNCD9t/+k28KedxSkPk4270PhcXpgDr9WB8xtC2wNcRE5NdSFMxoSi me4SGtyhDwDXvyqNS828421tmkrGz2hZtorESYH4Xichjw0ImCX6wnk//nj8iHhg R4XF6EOqMAy1MeAIX7moHclrIvG/Itx4FCPtAsmfMbSV0qhqW5CeYrhn+Ws= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org