$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OuDck2rO62-OCZenPl6lkkl6UL4.roa File: OuDck2rO62-OCZenPl6lkkl6UL4.roa (raw, json) Hash identifier: NPSeAMoJdKT2ffBZcamKeIZOau6Pp/LP3Kgu3DrbmPU= Subject key identifier: 3A:E0:DC:93:6A:CE:EB:6F:8E:09:97:A7:3E:5E:A5:92:49:7A:50:BE Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02EF Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OuDck2rO62-OCZenPl6lkkl6UL4.roa Signing time: Sun 31 Mar 2024 01:35:50 +0000 ROA not before: Sun 31 Mar 2024 01:35:50 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 111.99.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:35:50 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=3AE0DC936ACEEB6F8E0997A73E5EA592497A50BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fc:8e:9c:2d:47:4c:82:97:6a:84:62:bf:aa: 82:84:00:49:04:74:13:89:5b:8d:16:16:f2:40:49: 5b:66:04:c7:48:c1:38:dd:09:ba:78:3e:0f:41:5c: e5:30:87:94:23:5a:4a:ea:cb:24:b8:69:ab:9f:81: 13:67:66:ce:92:bb:46:d3:fe:11:a5:5e:8d:1e:d5: 91:39:45:37:72:51:13:63:23:af:4d:a9:3e:28:86: 0a:bb:0a:81:7b:a9:65:c1:9d:da:85:f4:ea:4f:79: 41:7e:ea:88:3c:0d:76:26:2b:4e:42:be:e0:76:43: 70:6b:5b:3e:6f:2b:b4:cc:94:d2:11:0f:a8:2f:04: 69:2b:bf:14:b4:d7:bc:a6:29:81:da:fb:27:e0:e2: c9:0b:8d:04:db:69:26:f0:b0:0f:27:07:50:05:60: 24:44:f3:8b:07:43:2c:be:a8:04:1d:88:84:a2:5d: 1b:57:46:94:15:8a:6f:c5:17:c9:51:c6:e3:18:82: 8a:82:54:bf:8e:b7:29:9c:4d:ad:7f:6b:ef:3a:bd: 32:c4:91:ff:7b:2e:8e:a5:8c:51:b1:da:30:ef:d1: da:7c:52:dd:90:b3:3b:0b:ff:ff:f5:e8:c4:62:2c: ff:ab:b6:9d:36:0f:f1:9d:e3:4e:b8:2b:08:8e:b0: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:DC:93:6A:CE:EB:6F:8E:09:97:A7:3E:5E:A5:92:49:7A:50:BE X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OuDck2rO62-OCZenPl6lkkl6UL4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.99.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:39:8e:26:17:b1:9b:e0:ac:0f:d2:21:bd:5f:6b:90:f7:f9: 6f:ed:cf:ba:0a:aa:22:fb:d6:fb:44:d9:6f:4e:19:53:89:86: fb:0c:0f:70:31:04:13:a8:e7:d4:18:98:50:33:34:91:30:73: a3:5e:3a:2b:e9:ee:70:dc:79:04:f5:8b:b8:5d:4b:20:dd:ff: d2:eb:e5:96:37:1e:3f:8e:ed:4e:bb:49:0e:d5:b0:97:76:f6: a7:6e:bb:06:52:70:44:aa:89:5a:36:dd:ae:6e:3e:c8:b8:a3: 15:16:2f:4c:80:d3:ec:af:1e:18:37:68:eb:2d:ef:ee:43:86: 1d:4b:d7:7c:64:7c:77:1f:9c:20:78:7d:92:8f:34:f0:1c:25: ae:cf:c9:aa:6a:a8:80:2a:11:d6:5b:5c:e9:f7:05:2c:1b:27: 66:48:e3:04:0b:94:0e:6b:a7:ff:b1:a0:cf:50:ea:f9:41:5b: 4e:50:09:5d:7a:fb:bb:2a:bd:1f:a8:94:9f:17:e0:a0:52:23: e8:f8:bc:e7:0c:6d:31:b5:62:6b:f0:2e:e8:1b:49:52:6a:0d: fb:f8:9e:16:5c:d0:77:13:81:b0:b8:b0:3f:e6:39:7c:33:70: 94:6b:5a:ec:09:e0:6c:f1:98:88:d1:cd:f4:72:0f:3c:8f:32: d0:45:f0:a1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTM1NTBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBRTBEQzkzNkFDRUVC NkY4RTA5OTdBNzNFNUVBNTkyNDk3QTUwQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc/I6cLUdMgpdqhGK/qoKEAEkEdBOJW40WFvJASVtmBMdIwTjd Cbp4Pg9BXOUwh5QjWkrqyyS4aaufgRNnZs6Su0bT/hGlXo0e1ZE5RTdyURNjI69N qT4ohgq7CoF7qWXBndqF9OpPeUF+6og8DXYmK05CvuB2Q3BrWz5vK7TMlNIRD6gv BGkrvxS017ymKYHa+yfg4skLjQTbaSbwsA8nB1AFYCRE84sHQyy+qAQdiISiXRtX RpQVim/FF8lRxuMYgoqCVL+OtymcTa1/a+86vTLEkf97Lo6ljFGx2jDv0dp8Ut2Q szsL///16MRiLP+rtp02D/Gd4064KwiOsDp/AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUOuDck2rO62+OCZenPl6lkkl6UL4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL091RGNrMnJPNjItT0NaZW5QbDZsa2tsNlVMNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBvYzANBgkqhkiG9w0BAQsFAAOCAQEAqjmOJhexm+CsD9IhvV9rkPf5b+3P ugqqIvvW+0TZb04ZU4mG+wwPcDEEE6jn1BiYUDM0kTBzo146K+nucNx5BPWLuF1L IN3/0uvlljceP47tTrtJDtWwl3b2p267BlJwRKqJWjbdrm4+yLijFRYvTIDT7K8e GDdo6y3v7kOGHUvXfGR8dx+cIHh9ko808Bwlrs/JqmqogCoR1ltc6fcFLBsnZkjj BAuUDmun/7Ggz1Dq+UFbTlAJXXr7uyq9H6iUnxfgoFIj6Pi85wxtMbVia/Au6BtJ UmoN+/ieFlzQdxOBsLiwP+Y5fDNwlGta7AngbPGYiNHN9HIPPI8y0EXwoQ== -----END CERTIFICATE-----Generated at Sat Jun 15 02:01:37 2024 by rpki-client on console-fra.rpki-client.org