$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/L4JAD0fGDEtsQwEOLG7JkfO3rgQ.roa File: L4JAD0fGDEtsQwEOLG7JkfO3rgQ.roa (raw, json) Hash identifier: 343j1GcuwMR/hOQrt7TEiFR/UanZy+Sch8Ve4J5sB8k= Subject key identifier: 2F:82:40:0F:47:C6:0C:4B:6C:43:01:0E:2C:6E:C9:91:F3:B7:AE:04 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0327 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/L4JAD0fGDEtsQwEOLG7JkfO3rgQ.roa Signing time: Sun 31 Mar 2024 01:40:37 +0000 ROA not before: Sun 31 Mar 2024 01:40:37 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 113.146.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:40:37 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=2F82400F47C60C4B6C43010E2C6EC991F3B7AE04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:da:9a:d0:67:0d:96:6f:17:8d:ba:eb:a1: ae:e4:31:fa:3a:25:b8:0b:c4:1b:74:d1:e9:a6:49: cd:83:40:95:4f:14:0c:e1:f9:c3:23:16:b7:90:ba: 61:6d:81:c6:4b:f7:39:13:94:81:2b:b8:3c:62:a0: 22:ab:f8:51:37:e0:2b:0f:d6:1e:d4:10:4d:fd:00: 57:dc:16:ec:89:d5:a1:1d:d6:7a:56:f9:14:11:cb: 09:be:34:69:a0:b5:1e:ce:2e:8b:2b:b7:69:21:dc: fb:c8:ab:5a:5b:c0:dd:bb:4e:34:28:5e:c4:33:d6: 7f:aa:48:3e:5e:a8:28:19:fb:b0:79:32:ec:79:25: 79:b0:49:8a:e6:33:c6:14:99:fa:b4:2e:66:9e:93: 88:35:27:99:24:4f:57:2c:af:f7:25:8f:00:35:91: d6:98:7b:50:4f:9b:3b:b9:6c:64:a7:3d:fc:47:a7: 26:a2:7b:b0:20:73:64:1b:d3:f1:67:ac:e7:31:1d: 5f:d6:1e:0a:52:1e:ce:b1:71:78:01:8d:57:4b:5f: 28:4b:fc:17:4e:80:5b:77:be:fd:fb:5e:d6:b8:fe: 57:49:05:3a:67:da:95:f3:c4:f0:50:d2:98:67:bc: 2a:22:12:06:ab:57:e2:1f:a9:db:08:25:d4:c5:e6: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:82:40:0F:47:C6:0C:4B:6C:43:01:0E:2C:6E:C9:91:F3:B7:AE:04 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/L4JAD0fGDEtsQwEOLG7JkfO3rgQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.146.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:6f:2c:e3:c3:32:6c:a1:be:49:e3:ed:85:d5:fe:c6:7c:aa: bb:f1:5b:42:e0:f4:d2:48:85:c4:f4:43:f0:a9:70:11:43:25: 50:8c:03:8e:63:f5:d0:f2:06:89:5a:cb:0c:8f:b7:40:be:4b: 13:66:ab:23:38:96:36:ea:59:64:a7:78:c5:6d:b4:76:41:e1: 34:4e:4c:41:57:80:cc:e1:2a:8e:04:49:9c:e3:50:ed:2b:a0: 8a:8f:d9:ee:56:e2:a0:00:6b:ca:17:b0:6c:28:c3:bb:28:c2: 68:1d:07:ed:27:d5:7f:81:b4:af:60:8c:f1:f7:00:27:5f:04: 1e:43:8c:2f:41:5e:d5:82:59:12:33:41:47:2d:55:43:7e:c5: bd:8d:d2:66:0f:7a:c7:76:30:fc:ca:a3:55:2d:a0:a9:9b:b8: 0e:ef:04:29:cc:67:f7:26:d2:4a:66:ac:b5:0e:d3:bd:87:f1: 1c:e3:df:b7:a0:34:26:ac:8a:2f:5d:88:38:f7:ed:9c:6f:42: b2:da:0a:27:d4:72:be:8b:4f:58:58:87:9c:a6:28:98:dd:d0: ef:71:7f:dc:40:ec:c7:ad:48:35:46:20:ff:3b:c5:df:39:92: 2c:89:fc:ba:7a:da:2a:65:f5:6e:da:b7:9f:a6:cf:5b:82:48: 12:45:c6:bd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAycwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQwMzdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGODI0MDBGNDdDNjBD NEI2QzQzMDEwRTJDNkVDOTkxRjNCN0FFMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuENqa0GcNlm8Xjbrroa7kMfo6JbgLxBt00emmSc2DQJVPFAzh +cMjFreQumFtgcZL9zkTlIEruDxioCKr+FE34CsP1h7UEE39AFfcFuyJ1aEd1npW +RQRywm+NGmgtR7OLosrt2kh3PvIq1pbwN27TjQoXsQz1n+qSD5eqCgZ+7B5Mux5 JXmwSYrmM8YUmfq0Lmaek4g1J5kkT1csr/cljwA1kdaYe1BPmzu5bGSnPfxHpyai e7Agc2Qb0/FnrOcxHV/WHgpSHs6xcXgBjVdLXyhL/BdOgFt3vv37Xta4/ldJBTpn 2pXzxPBQ0phnvCoiEgarV+IfqdsIJdTF5lEPAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUL4JAD0fGDEtsQwEOLG7JkfO3rgQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0w0SkFEMGZHREV0c1F3RU9MRzdKa2ZPM3JnUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBxkjANBgkqhkiG9w0BAQsFAAOCAQEAr28s48MybKG+SePthdX+xnyqu/Fb QuD00kiFxPRD8KlwEUMlUIwDjmP10PIGiVrLDI+3QL5LE2arIziWNupZZKd4xW20 dkHhNE5MQVeAzOEqjgRJnONQ7Sugio/Z7lbioABryhewbCjDuyjCaB0H7SfVf4G0 r2CM8fcAJ18EHkOML0Fe1YJZEjNBRy1VQ37FvY3SZg96x3Yw/MqjVS2gqZu4Du8E Kcxn9ybSSmastQ7TvYfxHOPft6A0JqyKL12IOPftnG9CstoKJ9RyvotPWFiHnKYo mN3Q73F/3EDsx61INUYg/zvF3zmSLIn8unraKmX1btq3n6bPW4JIEkXGvQ== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org