$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P9jaLUS242U9-YM7cXlZjDO6v8w.roa File: P9jaLUS242U9-YM7cXlZjDO6v8w.roa (raw, json) Hash identifier: 4DmIoBDWrnJVgGgbj3eVr9XtIUZtBxELgRp81MZ5fWU= Subject key identifier: 3F:D8:DA:2D:44:B6:E3:65:3D:F9:83:3B:71:79:59:8C:33:BA:BF:CC Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 033D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P9jaLUS242U9-YM7cXlZjDO6v8w.roa Signing time: Sun 31 Mar 2024 01:40:49 +0000 ROA not before: Sun 31 Mar 2024 01:40:49 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 118.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 829 (0x33d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:40:49 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=3FD8DA2D44B6E3653DF9833B7179598C33BABFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:f0:fa:25:62:cd:0e:ea:ef:ca:9c:22:91: b0:be:f8:3e:8c:0d:6d:a8:f2:d5:20:3b:3f:d8:17: 77:ae:9a:d4:0f:af:19:f9:9a:f7:32:c5:85:3d:aa: 8f:e1:2d:d1:67:ff:df:9d:6f:5e:6d:b4:08:6d:48: b7:1f:6a:ff:0a:98:e1:f5:58:24:e6:a3:85:b4:48: ee:3f:25:91:db:86:ad:c9:8e:0f:bd:86:ae:ff:9d: 56:bf:07:b8:a5:9d:03:e8:46:c3:79:a4:0d:58:3f: 67:65:61:87:da:55:85:d1:28:79:1b:ba:d3:52:72: eb:2d:61:d6:ed:c1:39:32:9e:28:1f:23:0a:08:ad: fb:69:36:6f:d3:a7:ab:73:eb:f3:38:91:17:9d:89: 00:38:cc:28:ee:6b:bd:fb:87:1d:33:3e:5e:35:54: e4:6e:38:ed:34:00:2d:b9:b2:5d:87:87:50:4b:49: 3e:d3:c1:4e:ac:58:e8:56:58:ba:2c:e8:02:81:7b: b7:10:9f:73:58:ca:ac:51:5f:a1:ca:93:c2:5a:d3: 1e:96:0a:38:d6:53:d5:d4:70:cb:75:6c:47:5b:99: c2:29:2e:7e:6c:49:9d:fa:23:c1:96:a2:08:37:ee: 00:27:86:87:dc:90:95:a7:b8:68:06:b3:06:21:e3: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D8:DA:2D:44:B6:E3:65:3D:F9:83:3B:71:79:59:8C:33:BA:BF:CC X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P9jaLUS242U9-YM7cXlZjDO6v8w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.153.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:ba:79:5a:b3:50:10:82:fa:68:f0:87:bf:bd:18:cd:1e:7a: 26:4a:7e:85:81:44:fc:8f:cd:78:91:f0:40:a9:de:4c:b8:ac: d0:09:de:6c:0b:61:37:22:d9:91:6c:98:04:fd:40:2b:25:c4: 67:41:79:1d:b0:6c:fb:98:62:4f:41:5f:b4:d6:79:f5:ec:74: a7:ee:24:ae:08:f3:34:59:4e:da:a2:ae:e5:91:be:f5:e5:49: df:94:2c:b2:5e:c1:1e:b4:3d:3c:ac:ca:2c:21:7e:16:f7:1e: ff:65:0c:ec:34:7b:bc:b3:85:c6:99:a7:e0:5f:90:1d:d6:d8: 1c:4b:4d:9f:0a:03:37:10:3c:94:ce:fe:68:52:03:4c:05:d2: b8:d9:63:15:45:aa:ae:62:89:b2:d4:54:e9:a8:58:c7:73:ad: f4:c1:11:2f:d6:86:74:b5:a0:8c:74:5f:c5:36:96:87:f2:02: 6c:c4:22:c1:0e:97:a9:6e:02:93:2b:0a:40:07:a5:cd:7a:6a: 89:50:e0:41:90:59:45:56:73:56:ec:8a:8f:70:80:0c:9d:2e: 21:bd:28:ea:d4:93:4d:6f:41:13:2f:e6:b9:16:c4:6d:00:e8: 9f:c6:ef:cc:02:74:64:9d:33:63:8b:3a:b9:ec:20:9c:ef:c4: a6:66:26:61 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQwNDlaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGRDhEQTJENDRCNkUz NjUzREY5ODMzQjcxNzk1OThDMzNCQUJGQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCkfD6JWLNDurvypwikbC++D6MDW2o8tUgOz/YF3eumtQPrxn5 mvcyxYU9qo/hLdFn/9+db15ttAhtSLcfav8KmOH1WCTmo4W0SO4/JZHbhq3Jjg+9 hq7/nVa/B7ilnQPoRsN5pA1YP2dlYYfaVYXRKHkbutNScustYdbtwTkynigfIwoI rftpNm/Tp6tz6/M4kRediQA4zCjua737hx0zPl41VORuOO00AC25sl2Hh1BLST7T wU6sWOhWWLos6AKBe7cQn3NYyqxRX6HKk8Ja0x6WCjjWU9XUcMt1bEdbmcIpLn5s SZ36I8GWogg37gAnhofckJWnuGgGswYh48cbAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUP9jaLUS242U9+YM7cXlZjDO6v8wwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1A5amFMVVMyNDJVOS1ZTTdjWGxaakRPNnY4dy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB2mTANBgkqhkiG9w0BAQsFAAOCAQEAlrp5WrNQEIL6aPCHv70YzR56Jkp+ hYFE/I/NeJHwQKneTLis0AnebAthNyLZkWyYBP1AKyXEZ0F5HbBs+5hiT0FftNZ5 9ex0p+4krgjzNFlO2qKu5ZG+9eVJ35Qssl7BHrQ9PKzKLCF+Fvce/2UM7DR7vLOF xpmn4F+QHdbYHEtNnwoDNxA8lM7+aFIDTAXSuNljFUWqrmKJstRU6ahYx3Ot9MER L9aGdLWgjHRfxTaWh/ICbMQiwQ6XqW4CkysKQAelzXpqiVDgQZBZRVZzVuyKj3CA DJ0uIb0o6tSTTW9BEy/muRbEbQDon8bvzAJ0ZJ0zY4s6uewgnO/EpmYmYQ== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org