$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZbhzzTuACXi7tzCv1omD8UMTdOU.roa File: ZbhzzTuACXi7tzCv1omD8UMTdOU.roa (raw, json) Hash identifier: M6+YQ5l3faBkF7cpxSAp8hj9L7obJGmKXBdwLb9LKGw= Subject key identifier: 65:B8:73:CD:3B:80:09:78:BB:B7:30:AF:D6:89:83:F1:43:13:74:E5 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0289 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZbhzzTuACXi7tzCv1omD8UMTdOU.roa Signing time: Mon 05 Feb 2024 09:29:40 +0000 ROA not before: Mon 05 Feb 2024 09:29:40 +0000 ROA not after: Tue 14 Jan 2025 01:30:02 +0000 asID: 2516 IP address blocks: 14.12.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 5 09:29:40 2024 GMT Not After : Jan 14 01:30:02 2025 GMT Subject: CN=65B873CD3B800978BBB730AFD68983F1431374E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:9a:74:53:75:06:40:a1:ba:c5:a5:ac:eb: f4:e4:e2:f4:02:33:e8:af:d1:4b:11:23:c0:bb:ee: cf:31:ef:f5:b5:35:bf:e0:83:63:7a:c6:ae:f1:08: 5b:72:b1:af:48:49:e2:b5:11:42:85:d0:c9:e4:be: 26:7e:79:c5:27:34:cb:af:d6:4e:5d:83:08:39:66: 22:36:62:73:1c:4c:1a:37:ac:04:cb:a7:29:da:de: bd:fd:64:9f:bc:dc:30:ad:fb:0d:99:ea:51:bb:6d: 63:ef:c7:95:93:ad:d9:7d:64:88:c0:d8:7f:fe:16: 7e:5a:4e:05:cf:cc:31:d8:f9:82:22:c7:71:f2:81: bc:1b:b5:2a:77:87:2e:80:24:40:78:d0:a0:e8:fd: 77:30:55:db:89:7d:8d:21:8e:3f:7f:44:ac:47:b2: a1:54:64:f4:17:99:8c:3e:5d:7e:a0:30:e6:6f:65: d7:15:d7:30:57:a9:a5:c4:06:f8:f4:66:fd:f6:0e: 80:c0:60:99:be:ac:42:bd:93:f4:81:91:ce:a9:82: d3:17:04:07:a5:3a:10:69:21:9f:d3:fd:e4:3b:8e: 74:ae:82:c3:f4:3d:f4:3b:67:13:09:b8:db:a7:31: 13:c0:b2:aa:8e:aa:d4:b2:95:a1:66:06:19:02:fd: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B8:73:CD:3B:80:09:78:BB:B7:30:AF:D6:89:83:F1:43:13:74:E5 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZbhzzTuACXi7tzCv1omD8UMTdOU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.12.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2a:0e:ea:7b:92:ab:ea:67:fd:80:aa:fd:21:31:78:f5:14:17: 49:1e:7f:3c:d6:e8:ba:16:1b:8d:32:23:51:d4:85:30:9d:8b: 00:f6:ce:d9:b8:69:78:fb:62:4c:79:49:6d:31:91:b6:c9:c6: 56:ff:74:63:33:73:c3:b9:bc:0c:28:a4:ba:6d:95:9f:9c:df: 56:15:d7:0f:82:b0:a8:51:7b:cc:d6:ca:b6:18:1c:7d:9d:e3: ea:c7:2b:65:38:9f:8c:c3:20:08:c2:d4:b8:f3:41:6c:cb:46: 56:6f:61:bd:6f:cd:ec:bb:03:bd:91:af:92:79:f1:e2:04:0a: 61:be:04:88:10:8b:22:d3:41:93:d1:90:d0:69:e2:48:6b:46: fa:93:32:f2:8b:a5:97:a2:b2:d6:f7:90:99:f5:9d:1e:b0:6c: 20:6b:73:6c:5d:e3:7d:02:45:f5:0a:19:a7:d4:8c:f3:47:43: a3:1a:ae:da:43:d9:95:21:88:b6:62:7c:55:e6:ef:66:0c:45: 55:3f:60:f8:b7:d0:7e:b7:58:28:38:46:93:00:53:57:f7:d6: 9c:d3:7f:b8:f1:30:b7:2f:54:ac:de:aa:09:25:d2:6a:3b:8b: 2a:65:65:0a:d6:9d:5c:f2:41:2b:32:68:20:b7:aa:38:ab:2e: ea:74:37:ea -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMDUw OTI5NDBaFw0yNTAxMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY1Qjg3M0NEM0I4MDA5 NzhCQkI3MzBBRkQ2ODk4M0YxNDMxMzc0RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI3Zp0U3UGQKG6xaWs6/Tk4vQCM+iv0UsRI8C77s8x7/W1Nb/g g2N6xq7xCFtysa9ISeK1EUKF0MnkviZ+ecUnNMuv1k5dgwg5ZiI2YnMcTBo3rATL pyna3r39ZJ+83DCt+w2Z6lG7bWPvx5WTrdl9ZIjA2H/+Fn5aTgXPzDHY+YIix3Hy gbwbtSp3hy6AJEB40KDo/XcwVduJfY0hjj9/RKxHsqFUZPQXmYw+XX6gMOZvZdcV 1zBXqaXEBvj0Zv32DoDAYJm+rEK9k/SBkc6pgtMXBAelOhBpIZ/T/eQ7jnSugsP0 PfQ7ZxMJuNunMRPAsqqOqtSylaFmBhkC/eRtAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUZbhzzTuACXi7tzCv1omD8UMTdOUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1piaHp6VHVBQ1hpN3R6Q3Yxb21EOFVNVGRPVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEODDANBgkqhkiG9w0BAQsFAAOCAQEAKg7qe5Kr6mf9gKr9ITF49RQXSR5/ PNbouhYbjTIjUdSFMJ2LAPbO2bhpePtiTHlJbTGRtsnGVv90YzNzw7m8DCikum2V n5zfVhXXD4KwqFF7zNbKthgcfZ3j6scrZTifjMMgCMLUuPNBbMtGVm9hvW/N7LsD vZGvknnx4gQKYb4EiBCLItNBk9GQ0GniSGtG+pMy8oull6Ky1veQmfWdHrBsIGtz bF3jfQJF9QoZp9SM80dDoxqu2kPZlSGItmJ8VebvZgxFVT9g+LfQfrdYKDhGkwBT V/fWnNN/uPEwty9UrN6qCSXSajuLKmVlCtadXPJBKzJoILeqOKsu6nQ36g== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org