$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/RAa0D89PdOL81BAXvFye_mMdfAk.roa File: RAa0D89PdOL81BAXvFye_mMdfAk.roa (raw, json) Hash identifier: QxTWG+TeBzR2cWSZiLZ0MUBFOkl8ILGovn23odf1DXA= Subject key identifier: 44:06:B4:0F:CF:4F:74:E2:FC:D4:10:17:BC:5C:9E:FE:63:1D:7C:09 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0349 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RAa0D89PdOL81BAXvFye_mMdfAk.roa Signing time: Sun 31 Mar 2024 01:42:40 +0000 ROA not before: Sun 31 Mar 2024 01:42:40 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 106.170.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:42:40 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=4406B40FCF4F74E2FCD41017BC5C9EFE631D7C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:46:e7:28:19:bb:33:69:41:54:a2:b4:fd:60: 80:3d:9d:00:f2:03:dd:9e:77:18:16:ef:b8:b6:6a: 8b:7d:b0:ef:a3:83:36:75:09:1a:0a:d5:4f:29:56: c5:32:1f:3c:b0:01:ed:f7:f2:ad:34:b1:de:f9:59: e4:d9:dd:c5:65:22:4b:95:3c:88:f5:3f:73:b4:8e: 1d:26:14:8f:2c:36:a8:c0:c0:08:45:82:79:67:1b: 9f:3f:af:80:60:b1:aa:f2:53:a3:34:80:c9:c2:9a: ff:ec:26:a4:ca:fe:d1:6c:1a:f1:e2:67:e5:b5:78: 4f:a6:31:e5:9b:ff:ac:dd:a7:fc:19:3d:bb:04:9d: 7d:bb:55:7d:ae:5d:6e:2b:47:d6:ec:cf:be:f8:77: 65:a7:d1:30:cf:cd:f7:2e:03:2d:6d:34:8a:bb:d0: a0:87:1b:bd:68:da:12:71:57:d8:97:0b:a0:f6:28: fd:7e:0d:14:27:51:c6:d1:0f:c5:48:3b:37:59:b4: e5:c6:d1:a6:d8:c2:48:00:b2:66:aa:15:4d:59:9c: 88:9e:1c:bf:ec:9c:cf:cf:0a:58:92:94:ed:e8:fb: b5:d0:fb:48:76:73:2c:f7:c2:d5:84:59:7d:dd:89: 61:41:3c:ed:be:27:12:9e:0c:76:15:a7:c1:7e:ec: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:06:B4:0F:CF:4F:74:E2:FC:D4:10:17:BC:5C:9E:FE:63:1D:7C:09 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RAa0D89PdOL81BAXvFye_mMdfAk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.170.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:ea:1d:8c:3f:75:3a:07:d5:b0:fd:72:6c:a4:9b:c6:f7:bb: 5c:d3:42:82:b5:04:f3:e8:2e:2b:4d:d0:6e:db:0b:aa:47:6c: b7:12:fa:0e:d6:6e:df:09:ae:45:73:38:73:6d:9a:05:a1:61: 05:cb:e1:90:00:81:d3:7d:f0:29:5a:bb:ed:f6:23:69:8e:0c: 43:eb:e7:a0:54:f4:87:6e:63:34:97:fd:ba:f7:f2:82:ea:7e: 8d:d6:d2:ab:2c:a4:85:7d:27:6b:1e:8c:93:eb:53:e7:94:84: 71:90:a5:a9:3e:61:b0:e4:d4:61:4b:c2:16:6d:86:72:ad:3e: 0e:99:56:4a:58:02:c1:c9:5e:3c:42:e1:ca:a0:f4:20:43:8c: 55:51:85:7d:5d:e8:b9:a0:94:48:fa:fe:91:27:30:d6:cd:3f: 43:b2:ab:ab:f6:2c:6b:e6:b9:c5:54:65:15:87:f2:35:02:e8: c4:99:b4:2c:4a:b5:bb:84:5f:59:b0:51:3b:26:89:a7:58:e4: 9c:bf:2d:60:2e:e7:39:85:3c:28:a7:07:75:07:8e:65:2b:f7: f9:05:9e:bf:17:ff:76:67:f2:11:45:ff:90:61:27:86:18:53: 7e:54:e4:d3:a2:55:4f:eb:a4:58:9f:df:c6:14:5b:67:88:50: 00:32:25:a8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQyNDBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ0MDZCNDBGQ0Y0Rjc0 RTJGQ0Q0MTAxN0JDNUM5RUZFNjMxRDdDMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlRucoGbszaUFUorT9YIA9nQDyA92edxgW77i2aot9sO+jgzZ1 CRoK1U8pVsUyHzywAe338q00sd75WeTZ3cVlIkuVPIj1P3O0jh0mFI8sNqjAwAhF gnlnG58/r4BgsaryU6M0gMnCmv/sJqTK/tFsGvHiZ+W1eE+mMeWb/6zdp/wZPbsE nX27VX2uXW4rR9bsz774d2Wn0TDPzfcuAy1tNIq70KCHG71o2hJxV9iXC6D2KP1+ DRQnUcbRD8VIOzdZtOXG0abYwkgAsmaqFU1ZnIieHL/snM/PCliSlO3o+7XQ+0h2 cyz3wtWEWX3diWFBPO2+JxKeDHYVp8F+7Hc1AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQURAa0D89PdOL81BAXvFye/mMdfAkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1JBYTBEODlQZE9MODFCQVh2RnllX21NZGZBay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBqqjANBgkqhkiG9w0BAQsFAAOCAQEACuodjD91OgfVsP1ybKSbxve7XNNC grUE8+guK03QbtsLqkdstxL6DtZu3wmuRXM4c22aBaFhBcvhkACB033wKVq77fYj aY4MQ+vnoFT0h25jNJf9uvfygup+jdbSqyykhX0nax6Mk+tT55SEcZClqT5hsOTU YUvCFm2Gcq0+DplWSlgCwclePELhyqD0IEOMVVGFfV3ouaCUSPr+kScw1s0/Q7Kr q/Ysa+a5xVRlFYfyNQLoxJm0LEq1u4RfWbBROyaJp1jknL8tYC7nOYU8KKcHdQeO ZSv3+QWevxf/dmfyEUX/kGEnhhhTflTk06JVT+ukWJ/fxhRbZ4hQADIlqA== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org