$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TThwT4oenKhRJRiJ3ON0uv9l2ik.roa File: TThwT4oenKhRJRiJ3ON0uv9l2ik.roa (raw, json) Hash identifier: gmBnPt1hPYvLRcQ2zycCUEvYUZKwhkkPCYDnubUmEHk= Subject key identifier: 4D:38:70:4F:8A:1E:9C:A8:51:25:18:89:DC:E3:74:BA:FF:65:DA:29 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02A2 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TThwT4oenKhRJRiJ3ON0uv9l2ik.roa Signing time: Sun 31 Mar 2024 01:29:40 +0000 ROA not before: Sun 31 Mar 2024 01:29:40 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 27.84.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:29:40 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=4D38704F8A1E9CA851251889DCE374BAFF65DA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:46:c4:b8:47:fb:84:69:8b:b6:c6:f6:3d: e2:8d:fd:d1:b7:11:53:0c:66:9b:35:30:1e:b3:75: 8c:65:78:a9:f1:31:b4:51:1a:81:a4:65:6a:6e:dd: 15:e0:24:2d:74:7c:e4:08:6b:64:b7:7e:b9:af:bb: e7:d9:c4:3f:e1:90:c4:c9:fa:3c:1a:cf:9e:8a:8b: 9e:05:95:85:97:57:4b:ba:71:c5:cd:c4:4e:dd:9d: 39:f3:ab:0e:7a:ca:84:40:f2:fa:49:c2:05:ae:59: dc:75:65:4a:5e:3b:cb:cf:f9:96:b4:97:ea:6e:71: 70:66:bd:0b:41:0f:e2:dc:95:57:18:21:04:5a:58: 84:25:c0:60:e8:80:17:0f:c3:b0:89:0a:f5:00:a7: 90:9a:eb:de:41:f4:db:21:6d:85:48:62:85:ae:82: f2:25:9a:6d:3d:63:5a:cd:09:81:b8:fc:c7:8f:6f: c6:aa:51:dc:0c:c9:dd:ed:5c:b4:c1:8c:9e:0e:8a: a9:e5:c4:91:46:a0:74:4f:d6:ce:cc:50:ee:1d:e8: 41:c1:c0:be:1c:80:2b:2d:85:62:87:1b:e6:15:16: 2c:be:53:76:93:08:ef:4f:b1:f4:d4:ce:44:bb:d1: 4f:8b:18:ac:a8:60:9a:fc:bf:c4:1d:84:92:43:eb: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:70:4F:8A:1E:9C:A8:51:25:18:89:DC:E3:74:BA:FF:65:DA:29 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TThwT4oenKhRJRiJ3ON0uv9l2ik.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.84.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:b9:7d:87:69:3d:ce:e2:1f:9a:82:fb:80:47:90:75:e5:8a: 5a:46:ca:ae:b1:a9:bf:0d:fe:e4:db:29:8e:56:65:a6:4f:f3: 10:99:2c:c3:f7:26:ac:8a:eb:d0:f8:c0:f5:ba:66:bd:ad:c1: 46:ff:2a:38:2e:56:0a:16:34:7b:eb:fe:91:33:ed:9c:ef:91: 21:94:3c:81:47:1d:a7:68:39:7f:d8:62:9f:5b:4e:b2:cf:28: 91:82:56:16:37:f7:c9:b1:44:9c:12:f2:bc:f4:1a:ff:dc:b1: d1:89:d5:de:4b:49:47:a5:07:3f:63:c5:8e:33:66:af:b8:7c: cf:fb:90:1e:e7:39:9d:c9:e7:be:ae:c8:81:45:2c:43:41:42: 25:7a:f3:f1:e7:5e:e7:8a:7e:5e:7b:a8:ea:e2:bd:90:21:c3: 04:eb:0a:41:2b:a2:34:00:d8:b7:8a:4c:b5:d5:27:0a:2a:f0: 21:a4:e9:74:1a:ad:d1:08:2d:18:4e:d6:0b:3b:2b:05:87:6c: 7b:de:ce:85:2c:da:69:ff:f0:5a:57:fd:a8:82:8c:44:22:46: f1:56:bc:36:0e:59:02:d7:62:c0:37:55:e7:fb:2e:39:76:27: ea:f9:28:36:f8:59:97:c3:fe:16:a0:4f:e7:57:b6:d8:bc:40: 78:93:0b:86 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTI5NDBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREMzg3MDRGOEExRTlD QTg1MTI1MTg4OURDRTM3NEJBRkY2NURBMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4hEbEuEf7hGmLtsb2PeKN/dG3EVMMZps1MB6zdYxleKnxMbRR GoGkZWpu3RXgJC10fOQIa2S3frmvu+fZxD/hkMTJ+jwaz56Ki54FlYWXV0u6ccXN xE7dnTnzqw56yoRA8vpJwgWuWdx1ZUpeO8vP+Za0l+pucXBmvQtBD+LclVcYIQRa WIQlwGDogBcPw7CJCvUAp5Ca695B9NshbYVIYoWugvIlmm09Y1rNCYG4/MePb8aq UdwMyd3tXLTBjJ4OiqnlxJFGoHRP1s7MUO4d6EHBwL4cgCsthWKHG+YVFiy+U3aT CO9PsfTUzkS70U+LGKyoYJr8v8QdhJJD6xYPAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUTThwT4oenKhRJRiJ3ON0uv9l2ikwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1RUaHdUNG9lbktoUkpSaUozT04wdXY5bDJpay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbVDANBgkqhkiG9w0BAQsFAAOCAQEAWrl9h2k9zuIfmoL7gEeQdeWKWkbK rrGpvw3+5NspjlZlpk/zEJksw/cmrIrr0PjA9bpmva3BRv8qOC5WChY0e+v+kTPt nO+RIZQ8gUcdp2g5f9hin1tOss8okYJWFjf3ybFEnBLyvPQa/9yx0YnV3ktJR6UH P2PFjjNmr7h8z/uQHuc5ncnnvq7IgUUsQ0FCJXrz8ede54p+Xnuo6uK9kCHDBOsK QSuiNADYt4pMtdUnCirwIaTpdBqt0QgtGE7WCzsrBYdse97OhSzaaf/wWlf9qIKM RCJG8Va8Ng5ZAtdiwDdV5/suOXYn6vkoNvhZl8P+FqBP51e22LxAeJMLhg== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org