$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LIh7eM_cn-0oiGI5Kkaz8l5p848.roa File: LIh7eM_cn-0oiGI5Kkaz8l5p848.roa (raw, json) Hash identifier: 4WXKcweF8XtL6KkjFrQtFqXNfZljM04BqBY2wgq9c8Y= Subject key identifier: 2C:88:7B:78:CF:DC:9F:ED:28:88:62:39:2A:46:B3:F2:5E:69:F3:8F Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0341 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LIh7eM_cn-0oiGI5Kkaz8l5p848.roa Signing time: Sun 31 Mar 2024 01:42:38 +0000 ROA not before: Sun 31 Mar 2024 01:42:38 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 106.161.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:42:38 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=2C887B78CFDC9FED288862392A46B3F25E69F38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:50:cd:4e:8c:4f:c0:c2:62:48:e6:a5:b7: cd:eb:f5:94:7b:72:3f:0a:fa:1a:4d:cf:db:06:41: c9:ef:0b:1e:6d:b7:fa:5c:79:59:b5:aa:a8:53:69: f3:e1:59:75:b0:2c:c0:93:79:2b:1d:10:55:11:6a: 52:d4:67:c1:9e:4b:b2:27:92:b1:6b:7d:31:ab:19: 66:57:bb:aa:05:fe:45:9e:12:62:2c:89:e2:4b:1f: d1:8d:82:23:86:bf:8a:a6:2d:27:98:57:7a:9a:f3: 75:3e:13:16:85:00:6c:ba:eb:eb:1a:54:f7:c1:58: 8f:34:94:45:10:1d:a6:7e:cd:76:4e:04:29:53:2c: af:81:d9:4c:21:a7:e9:e7:82:10:94:52:bd:18:1f: 7c:d5:d2:b8:39:b6:d1:94:3f:9b:1b:1a:12:e2:e8: 2b:42:23:e6:26:59:5b:7f:ec:2d:08:58:a7:89:b7: d4:69:67:6d:b2:fa:c8:7f:c0:7d:d7:5a:fc:83:73: f2:09:35:9e:19:ba:90:33:f3:53:0c:17:f0:fc:c1: bd:02:d1:d4:da:de:5c:e4:68:a5:20:ae:3c:10:ee: bd:4f:16:79:58:3f:af:2a:16:09:11:04:03:f4:96: 8f:69:1d:c9:96:0c:d7:76:77:c9:c0:5f:13:05:e6: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:7B:78:CF:DC:9F:ED:28:88:62:39:2A:46:B3:F2:5E:69:F3:8F X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LIh7eM_cn-0oiGI5Kkaz8l5p848.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.161.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4c:71:75:b3:a9:6d:c5:ca:93:e6:d6:10:10:78:c4:9a:f5:c4: 7e:e0:7a:70:24:4c:35:5b:cb:7b:b5:b2:e0:1d:fd:94:72:76: 7f:3a:19:f1:38:15:d7:96:38:ca:c3:57:d4:1f:00:35:6e:d7: 5a:d3:df:b6:43:6a:08:19:1f:ab:83:7c:b1:cb:db:88:07:bc: b7:12:23:39:69:da:d2:63:90:b3:d2:e8:e5:c8:bf:d1:70:8d: 62:a1:f1:44:99:1d:76:95:40:88:fd:0e:52:3d:85:0a:c1:6c: db:fd:1b:75:2e:24:b1:63:64:7f:cb:77:98:d4:7b:8e:36:70: 3e:07:a5:5c:9f:6e:a8:72:81:ec:60:20:64:df:80:4d:69:5c: 3e:ab:6c:5b:55:56:b7:6a:95:3c:9a:fd:09:04:e6:f8:c2:cf: 3c:dd:06:35:66:b6:85:65:e2:5f:ae:9a:39:0f:39:69:39:17: 89:b8:cd:87:e2:62:db:73:ac:16:08:a5:51:f1:a7:9d:ca:d5: b0:bb:4d:ef:9a:4e:ad:ed:f4:87:20:35:c3:b8:dc:b5:bf:17: 4c:53:26:d7:e0:b5:ee:15:d9:da:21:f3:d4:fa:ab:6b:06:ab: f6:7e:7c:97:98:84:ea:fb:c5:1e:7f:8e:ad:ef:1e:3a:53:36: 5c:fb:05:a3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQyMzhaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDODg3Qjc4Q0ZEQzlG RUQyODg4NjIzOTJBNDZCM0YyNUU2OUYzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3FVDNToxPwMJiSOalt83r9ZR7cj8K+hpNz9sGQcnvCx5tt/pc eVm1qqhTafPhWXWwLMCTeSsdEFURalLUZ8GeS7InkrFrfTGrGWZXu6oF/kWeEmIs ieJLH9GNgiOGv4qmLSeYV3qa83U+ExaFAGy66+saVPfBWI80lEUQHaZ+zXZOBClT LK+B2Uwhp+nnghCUUr0YH3zV0rg5ttGUP5sbGhLi6CtCI+YmWVt/7C0IWKeJt9Rp Z22y+sh/wH3XWvyDc/IJNZ4ZupAz81MMF/D8wb0C0dTa3lzkaKUgrjwQ7r1PFnlY P68qFgkRBAP0lo9pHcmWDNd2d8nAXxMF5rV/AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQULIh7eM/cn+0oiGI5Kkaz8l5p848wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL0xJaDdlTV9jbi0wb2lHSTVLa2F6OGw1cDg0OC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBqoTANBgkqhkiG9w0BAQsFAAOCAQEATHF1s6ltxcqT5tYQEHjEmvXEfuB6 cCRMNVvLe7Wy4B39lHJ2fzoZ8TgV15Y4ysNX1B8ANW7XWtPftkNqCBkfq4N8scvb iAe8txIjOWna0mOQs9Lo5ci/0XCNYqHxRJkddpVAiP0OUj2FCsFs2/0bdS4ksWNk f8t3mNR7jjZwPgelXJ9uqHKB7GAgZN+ATWlcPqtsW1VWt2qVPJr9CQTm+MLPPN0G NWa2hWXiX66aOQ85aTkXibjNh+Ji23OsFgilUfGnncrVsLtN75pOre30hyA1w7jc tb8XTFMm1+C17hXZ2iHz1Pqrawar9n58l5iE6vvFHn+Ore8eOlM2XPsFow== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org