$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTsCIbeASZGTF4MvcEDdzaCsteQ.roa File: OTsCIbeASZGTF4MvcEDdzaCsteQ.roa (raw, json) Hash identifier: aG96Q4Qtuny4aLdV5bayqWbTAtIkXfx2rRQ4EqJFTQ8= Subject key identifier: 39:3B:02:21:B7:80:49:91:93:17:83:2F:70:40:DD:CD:A0:AC:B5:E4 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 030E Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTsCIbeASZGTF4MvcEDdzaCsteQ.roa Signing time: Sun 31 Mar 2024 01:38:39 +0000 ROA not before: Sun 31 Mar 2024 01:38:39 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 210.255.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:38:39 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=393B0221B78049919317832F7040DDCDA0ACB5E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:f0:62:9f:23:5b:dd:06:90:bf:91:bf:5a: 42:86:bc:5c:ff:6d:76:0b:0e:3e:13:8e:92:64:0b: 16:61:91:35:e0:91:6f:d1:cf:5f:0b:35:20:0e:bd: 37:39:7a:e6:d8:6f:43:46:40:9c:46:99:39:9f:01: 07:e6:e4:01:87:c1:74:0a:63:a0:85:3a:67:1f:92: c2:32:87:8a:4c:74:5e:f4:50:5f:04:3f:45:b4:95: 76:2f:1c:87:55:03:e4:51:22:2e:4b:50:b3:d1:7a: 3a:95:48:32:2f:23:27:da:51:70:88:f5:45:ad:13: c9:70:c6:12:e0:17:d2:fa:44:fb:de:7c:96:f5:d7: 76:6c:2b:d6:28:f0:fe:81:20:5b:3e:54:d3:8c:2a: 84:9f:31:3f:fe:51:04:4f:db:c7:7c:c1:ee:bd:47: 47:75:06:28:f2:f4:c8:bd:fc:89:74:21:d6:4b:ed: a9:ab:6a:15:9f:3a:8d:b1:b7:86:2c:21:4c:57:c9: 8c:74:7a:78:72:92:ca:b6:6e:a2:79:77:ca:60:50: 33:df:b6:aa:69:fd:d0:c9:75:2a:63:ea:8d:23:78: a1:4d:37:b7:3c:4a:69:0d:20:08:1f:7e:f4:fa:6e: 07:5b:a4:c4:b4:d7:6c:59:69:29:fb:31:b6:28:99: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3B:02:21:B7:80:49:91:93:17:83:2F:70:40:DD:CD:A0:AC:B5:E4 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OTsCIbeASZGTF4MvcEDdzaCsteQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.255.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8a:86:70:a9:72:bd:cc:1f:f6:c0:e2:c7:8f:cb:47:fa:a2:47: 55:08:31:6d:04:db:e8:ee:37:7f:76:be:70:cd:06:a1:41:cc: 3d:87:22:bc:58:89:07:95:31:ae:fb:5d:ec:4a:89:09:f6:22: 5e:11:cb:40:9c:21:1c:6a:60:3f:fa:28:7c:73:c3:ef:c6:44: 2d:d9:56:3f:a8:c6:be:78:88:51:74:10:ef:1d:b0:00:ac:8d: 0d:6d:b2:74:25:5d:d8:b7:bb:25:e9:29:fa:e9:d5:9f:c1:8e: 56:78:c4:55:e8:94:86:11:63:8e:f3:dc:d5:74:1a:2e:3c:df: 6e:8a:b4:a4:bc:e2:85:0d:ac:01:30:56:56:a1:16:c5:7c:dd: 3d:73:e0:cc:79:58:41:6e:b1:99:b3:a0:fc:f2:61:11:44:4a: 29:9d:70:01:35:4f:17:98:e8:4a:38:c9:be:8d:d3:d6:05:24: bc:ca:f6:f7:28:b2:f7:5b:1c:05:fe:19:df:68:0a:b0:2a:3c: c3:fc:ea:30:d6:77:a1:d6:84:09:01:37:7c:52:e9:d9:26:73: 3b:b5:8f:47:69:af:a6:4f:36:e5:34:1c:5e:91:ce:ee:b5:e8: 06:dc:48:8d:a9:17:e9:57:b7:9a:0a:17:3f:33:c2:bd:62:fc: 0a:8b:66:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTM4MzlaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5M0IwMjIxQjc4MDQ5 OTE5MzE3ODMyRjcwNDBERENEQTBBQ0I1RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh8vBinyNb3QaQv5G/WkKGvFz/bXYLDj4TjpJkCxZhkTXgkW/R z18LNSAOvTc5eubYb0NGQJxGmTmfAQfm5AGHwXQKY6CFOmcfksIyh4pMdF70UF8E P0W0lXYvHIdVA+RRIi5LULPRejqVSDIvIyfaUXCI9UWtE8lwxhLgF9L6RPvefJb1 13ZsK9Yo8P6BIFs+VNOMKoSfMT/+UQRP28d8we69R0d1Bijy9Mi9/Il0IdZL7amr ahWfOo2xt4YsIUxXyYx0enhyksq2bqJ5d8pgUDPftqpp/dDJdSpj6o0jeKFNN7c8 SmkNIAgffvT6bgdbpMS012xZaSn7MbYombEpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOTsCIbeASZGTF4MvcEDdzaCsteQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL09Uc0NJYmVBU1pHVEY0TXZjRURkemFDc3RlUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfS/wAwDQYJKoZIhvcNAQELBQADggEBAIqGcKlyvcwf9sDix4/LR/qiR1UI MW0E2+juN392vnDNBqFBzD2HIrxYiQeVMa77XexKiQn2Il4Ry0CcIRxqYD/6KHxz w+/GRC3ZVj+oxr54iFF0EO8dsACsjQ1tsnQlXdi3uyXpKfrp1Z/BjlZ4xFXolIYR Y47z3NV0Gi48326KtKS84oUNrAEwVlahFsV83T1z4Mx5WEFusZmzoPzyYRFESimd cAE1TxeY6Eo4yb6N09YFJLzK9vcosvdbHAX+Gd9oCrAqPMP86jDWd6HWhAkBN3xS 6dkmczu1j0dpr6ZPNuU0HF6Rzu616AbcSI2pF+lXt5oKFz8zwr1i/AqLZhE= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org