$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OL24qLPZHD34H6XJMJaoAe7Efi4.roa File: OL24qLPZHD34H6XJMJaoAe7Efi4.roa (raw, json) Hash identifier: E4/e7ShWleRV1wx2hQL0Omkw4EOhWGGmYD5GKokHBig= Subject key identifier: 38:BD:B8:A8:B3:D9:1C:3D:F8:1F:A5:C9:30:96:A8:01:EE:C4:7E:2E Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 034E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OL24qLPZHD34H6XJMJaoAe7Efi4.roa Signing time: Sun 31 Mar 2024 01:42:42 +0000 ROA not before: Sun 31 Mar 2024 01:42:42 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 210.132.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:42:42 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=38BDB8A8B3D91C3DF81FA5C93096A801EEC47E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:b7:d4:5c:38:d1:5b:40:f0:9b:1f:02:ee: 94:46:7d:bb:33:ba:35:da:8d:f1:5e:69:a9:c0:57: 60:f5:43:7c:00:63:40:c6:32:d4:d0:d8:ff:2c:29: c2:5b:ff:cf:83:7f:b0:0a:0f:1e:0f:ce:16:7d:5c: e8:24:9d:17:0c:87:6f:78:aa:9b:42:c3:cd:fc:12: 40:cc:98:f6:78:80:b0:32:ea:97:e3:08:e3:e8:11: c1:07:b4:2f:3d:1f:c2:0d:5c:56:b5:73:af:bd:79: 59:d2:49:e2:82:5a:e9:e0:dd:b9:da:03:64:99:b9: b3:bf:e0:14:a9:74:9c:da:e9:c7:d2:7e:e7:76:17: 08:25:54:32:92:4c:15:b1:d4:39:b6:e5:14:ed:c1: 86:e7:34:96:c4:a3:97:f8:93:5b:a1:77:a6:c4:44: 63:c9:06:18:3f:89:bc:87:79:84:18:0f:bd:f4:42: 83:60:d5:4e:dc:52:0d:c7:a5:76:7d:cf:1d:19:a3: dd:10:02:43:5a:d0:55:f4:5c:8d:f0:df:22:91:e0: 61:33:19:aa:b0:8a:37:3f:64:0f:fc:d1:d8:3f:e1: 52:26:c7:d6:7d:57:c1:d8:7c:4c:4d:69:a1:c3:20: 2c:26:46:5a:e0:b3:2d:7e:51:dd:e0:b4:8c:68:51: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BD:B8:A8:B3:D9:1C:3D:F8:1F:A5:C9:30:96:A8:01:EE:C4:7E:2E X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OL24qLPZHD34H6XJMJaoAe7Efi4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.132.96.0/19 Signature Algorithm: sha256WithRSAEncryption b0:ed:5b:6c:d5:44:43:08:61:ad:b2:e0:77:f2:c1:fa:1a:6b: 21:27:c4:51:c3:6f:13:e5:a9:fe:6d:60:21:85:a6:97:5c:e9: f6:95:c9:22:2f:f9:34:52:1b:e7:33:90:ae:e7:47:58:18:0f: ba:c6:c5:41:4f:1d:56:d7:c9:c8:c5:06:3a:10:bd:cc:53:0c: e3:0e:cf:66:1c:dc:dd:5c:54:c5:6e:9b:56:4f:9a:6a:69:56: 5f:b8:d6:32:c3:3f:08:3f:38:01:f2:e8:90:0b:c4:75:76:3f: b8:56:8f:f4:19:6f:75:83:cb:e5:61:7e:19:f1:6c:38:db:19: f7:36:69:42:46:75:58:f6:a8:21:70:2a:eb:3c:ac:aa:70:08: e2:39:59:7f:a7:2a:53:05:31:31:7f:6a:17:57:2f:85:dd:03: 27:d2:20:f2:2d:e7:4a:af:4d:50:5a:7b:62:16:f6:27:ad:0c: a3:3b:f8:58:a7:28:11:88:9c:32:f5:e8:4e:99:32:ad:4f:b7: 89:cb:ed:ad:f1:01:cb:33:9a:48:9c:0e:d2:ed:0a:a8:95:b5: 92:fc:ef:79:9d:c0:77:98:56:83:a9:a3:5a:63:31:35:de:5b: 16:8b:ba:97:f4:b0:3a:8b:bf:07:58:7c:01:b3:9f:4e:1e:a7: 56:c4:18:f4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQyNDJaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4QkRCOEE4QjNEOTFD M0RGODFGQTVDOTMwOTZBODAxRUVDNDdFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeybfUXDjRW0Dwmx8C7pRGfbszujXajfFeaanAV2D1Q3wAY0DG MtTQ2P8sKcJb/8+Df7AKDx4PzhZ9XOgknRcMh294qptCw838EkDMmPZ4gLAy6pfj COPoEcEHtC89H8INXFa1c6+9eVnSSeKCWung3bnaA2SZubO/4BSpdJza6cfSfud2 FwglVDKSTBWx1Dm25RTtwYbnNJbEo5f4k1uhd6bERGPJBhg/ibyHeYQYD730QoNg 1U7cUg3HpXZ9zx0Zo90QAkNa0FX0XI3w3yKR4GEzGaqwijc/ZA/80dg/4VImx9Z9 V8HYfExNaaHDICwmRlrgsy1+Ud3gtIxoUYzDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOL24qLPZHD34H6XJMJaoAe7Efi4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL09MMjRxTFBaSEQzNEg2WEpNSmFvQWU3RWZpNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXShGAwDQYJKoZIhvcNAQELBQADggEBALDtW2zVREMIYa2y4HfywfoaayEn xFHDbxPlqf5tYCGFppdc6faVySIv+TRSG+czkK7nR1gYD7rGxUFPHVbXycjFBjoQ vcxTDOMOz2Yc3N1cVMVum1ZPmmppVl+41jLDPwg/OAHy6JALxHV2P7hWj/QZb3WD y+VhfhnxbDjbGfc2aUJGdVj2qCFwKus8rKpwCOI5WX+nKlMFMTF/ahdXL4XdAyfS IPIt50qvTVBae2IW9ietDKM7+FinKBGInDL16E6ZMq1Pt4nL7a3xAcszmkicDtLt CqiVtZL873mdwHeYVoOpo1pjMTXeWxaLupf0sDqLvwdYfAGzn04ep1bEGPQ= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org