$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TXbyFZLVEr4VTh-UrL0HHjAYhfA.roa File: TXbyFZLVEr4VTh-UrL0HHjAYhfA.roa (raw, json) Hash identifier: Dax7GuXrR7EryBmGn0AEqBzTYi9INzSN6M9V6P86TBo= Subject key identifier: 4D:76:F2:15:92:D5:12:BE:15:4E:1F:94:AC:BD:07:1E:30:18:85:F0 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0268 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TXbyFZLVEr4VTh-UrL0HHjAYhfA.roa Signing time: Sun 01 Oct 2023 01:29:24 +0000 ROA not before: Sun 01 Oct 2023 01:29:24 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2516 IP address blocks: 59.128.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Oct 1 01:29:24 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=4D76F21592D512BE154E1F94ACBD071E301885F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:50:df:cc:c8:44:2b:93:75:1e:cc:fc:72: 07:f9:ce:55:46:cf:6d:83:15:a9:28:22:6c:0b:5e: 52:d1:7d:df:ba:58:37:f2:3b:34:96:5f:4e:29:dd: bb:47:8b:3f:2b:34:b0:16:6a:0d:84:94:b0:7f:53: 32:31:b7:b6:ba:cc:be:78:59:b3:e9:97:f9:c6:4f: ee:54:af:8e:b5:16:0d:2f:af:c2:ec:d7:48:9e:3d: 50:24:88:bb:3d:a7:56:ce:d7:8e:4d:b9:50:64:21: 8a:0b:70:d7:46:b7:af:a9:f4:a0:0e:14:99:f2:d8: 60:3f:0f:50:29:30:6a:0b:11:99:85:b7:61:75:80: aa:4f:f9:af:48:7a:2f:0d:cd:b8:3a:22:73:ed:54: 4b:54:b4:2c:9d:7f:98:6e:eb:c8:8a:1d:c7:b2:91: d7:2d:bb:cf:33:b4:dd:83:ff:6e:82:2b:50:84:0d: 11:df:26:50:04:46:e8:95:00:98:04:72:b2:0d:07: ab:7d:03:dd:17:0d:ea:ce:d5:68:c6:6f:65:fd:03: 9e:11:aa:08:86:f4:db:c1:83:33:d1:75:fa:35:5b: 0e:1b:21:8c:6c:2e:56:6f:d4:dd:45:93:62:c9:a6: 60:47:f8:1c:bd:6d:fc:b2:56:7f:9b:45:0c:79:6c: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:76:F2:15:92:D5:12:BE:15:4E:1F:94:AC:BD:07:1E:30:18:85:F0 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TXbyFZLVEr4VTh-UrL0HHjAYhfA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.128.128.0/17 Signature Algorithm: sha256WithRSAEncryption 34:f4:c7:41:3b:7c:ac:29:dd:28:05:56:a5:f2:5e:88:82:bb: b0:d6:94:da:2c:03:1b:21:69:59:fd:af:4a:a5:d4:ed:db:40: 28:ff:a3:35:d1:fd:cc:14:cd:f4:3a:05:f7:24:93:8f:93:a1: 46:b3:fc:58:06:bb:14:55:1c:0a:21:fa:a6:8b:e1:00:57:16: 68:b5:49:6b:48:a0:0d:71:6f:ce:cb:5d:15:28:ed:0f:7a:75: b5:f5:7b:ac:fd:d0:b8:20:37:86:82:92:e2:ae:fa:26:f7:22: 0a:93:b6:df:3f:30:64:6d:3e:92:4d:3e:ca:c8:07:a3:60:34: 37:50:48:f7:fa:0f:5d:f7:d6:72:4e:a4:85:a4:a0:fe:a8:84: d3:a8:12:1a:51:e9:63:84:ae:2e:11:9b:3f:e3:a6:61:f1:0c: 3b:79:dc:1f:15:d8:0a:74:c9:6a:4e:33:1f:6f:ed:20:15:6c: 09:31:b1:f4:30:32:7c:ca:47:58:ee:6b:f0:31:42:49:dd:e4: e1:16:32:69:a9:26:5c:08:28:4c:a0:c7:06:6f:11:4e:59:33: 57:12:48:68:64:b3:03:88:16:9e:b0:da:37:58:7d:57:e3:23: 96:89:c9:df:5d:c7:0b:62:16:63:b0:0e:2a:cf:74:82:c9:00: ad:e8:28:73 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzEwMDEw MTI5MjRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRENzZGMjE1OTJENTEy QkUxNTRFMUY5NEFDQkQwNzFFMzAxODg1RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXiFDfzMhEK5N1Hsz8cgf5zlVGz22DFakoImwLXlLRfd+6WDfy OzSWX04p3btHiz8rNLAWag2ElLB/UzIxt7a6zL54WbPpl/nGT+5Ur461Fg0vr8Ls 10iePVAkiLs9p1bO145NuVBkIYoLcNdGt6+p9KAOFJny2GA/D1ApMGoLEZmFt2F1 gKpP+a9Iei8Nzbg6InPtVEtUtCydf5hu68iKHceykdctu88ztN2D/26CK1CEDRHf JlAERuiVAJgEcrINB6t9A90XDerO1WjGb2X9A54RqgiG9NvBgzPRdfo1Ww4bIYxs LlZv1N1Fk2LJpmBH+By9bfyyVn+bRQx5bOMhAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTXbyFZLVEr4VTh+UrL0HHjAYhfAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1RYYnlGWkxWRXI0VlRoLVVyTDBISGpBWWhmQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc7gIAwDQYJKoZIhvcNAQELBQADggEBADT0x0E7fKwp3SgFVqXyXoiCu7DW lNosAxshaVn9r0ql1O3bQCj/ozXR/cwUzfQ6Bfckk4+ToUaz/FgGuxRVHAoh+qaL 4QBXFmi1SWtIoA1xb87LXRUo7Q96dbX1e6z90LggN4aCkuKu+ib3IgqTtt8/MGRt PpJNPsrIB6NgNDdQSPf6D1331nJOpIWkoP6ohNOoEhpR6WOEri4Rmz/jpmHxDDt5 3B8V2Ap0yWpOMx9v7SAVbAkxsfQwMnzKR1jua/AxQknd5OEWMmmpJlwIKEygxwZv EU5ZM1cSSGhkswOIFp6w2jdYfVfjI5aJyd9dxwtiFmOwDirPdILJAK3oKHM= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org