$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa File: cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa (raw, json) Hash identifier: c3+amCYv0/Y+jLJiuNFPjrXU/695ms9Kn9gjIQI4DGU= Subject key identifier: 70:1F:8E:1B:65:47:A8:14:43:45:1E:91:B4:81:92:C4:37:84:2B:C1 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0255 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa Signing time: Sun 01 Oct 2023 01:29:14 +0000 ROA not before: Sun 01 Oct 2023 01:29:14 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2516 IP address blocks: 27.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Oct 1 01:29:14 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=701F8E1B6547A81443451E91B48192C437842BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:55:ae:b6:53:fa:cd:de:c3:20:38:7a:54: 18:4c:71:5f:f3:1b:f6:b9:6e:f1:2f:57:b1:06:e3: 43:fa:37:0f:5b:58:d7:34:79:54:8e:58:9b:29:5f: 9a:b3:61:8d:98:e4:65:c8:58:9a:58:a3:f6:f8:0d: a2:11:08:47:3b:ae:7f:a9:5a:ba:90:fe:88:65:4b: 9a:c6:9a:b8:25:da:41:b2:7e:a0:44:20:44:61:6a: 31:0e:1a:fb:a7:98:8c:46:f6:62:39:43:7f:60:3d: 3e:61:d6:d6:93:fe:03:c6:28:fc:4d:ca:2e:73:49: 08:23:ea:38:aa:4f:43:60:07:65:93:36:ab:0f:d9: 11:86:58:07:89:9a:71:25:b6:87:4d:a8:57:a9:a0: fe:b3:31:a2:21:46:9a:31:f3:21:5c:62:d1:bf:bb: e0:1e:ca:69:70:5d:a6:7d:10:ca:21:89:f1:63:90: f5:27:2a:cc:c3:5a:cc:42:c9:f7:b5:cc:33:8e:ab: bc:03:2d:99:90:88:3e:13:d5:e5:df:01:f7:e6:7f: 68:a9:1d:cb:38:b2:3d:a7:04:1c:19:39:80:84:aa: 27:aa:76:3f:f8:69:7a:7e:40:77:84:83:77:d5:99: 6e:61:bb:0e:33:33:fa:41:b6:f0:f4:78:ad:8f:2a: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:8E:1B:65:47:A8:14:43:45:1E:91:B4:81:92:C4:37:84:2B:C1 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cB-OG2VHqBRDRR6RtIGSxDeEK8E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:bf:05:36:d6:a5:27:a6:88:90:0c:21:f9:81:e3:83:23:f7: 8b:b3:d9:9a:4a:a1:35:23:18:5a:09:ad:6b:c0:c9:ae:c3:fa: 93:1b:44:1c:e8:28:8e:b2:d7:4e:db:68:77:87:3d:aa:0d:29: be:60:fb:6b:77:72:12:2e:58:a7:31:40:2a:be:51:a4:16:e6: ca:b8:4f:03:e1:39:eb:a7:2c:3a:02:25:97:fa:bc:b1:d1:37: 53:4b:a3:0d:7c:20:56:bc:29:c7:02:53:99:cf:6b:05:59:48: 39:2c:4f:81:73:8e:0d:ed:99:51:bf:99:96:14:31:d2:21:49: 3e:7f:0f:38:4e:1e:a4:cb:06:9e:39:61:a6:90:80:14:d9:95: ba:05:3e:3e:ed:93:1e:86:e1:a1:f4:6d:3f:2c:e3:55:92:5f: 6e:f4:eb:bf:3a:be:b2:00:37:f6:4b:95:d2:77:a3:e5:d6:f9: 97:ea:28:c2:3b:01:f8:f9:8e:9f:09:13:19:5c:f3:81:6d:a3: 1d:5a:d9:fe:85:d6:ab:ea:7d:ad:db:a5:cf:22:d4:1c:b8:d0: f0:f2:99:d8:26:89:50:4a:fb:de:7a:df:92:b3:bd:e5:a6:92: be:78:71:16:7c:86:8d:39:d6:3c:0c:15:fb:8a:be:f3:03:3f: 8a:e3:ff:e9 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzEwMDEw MTI5MTRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDcwMUY4RTFCNjU0N0E4 MTQ0MzQ1MUU5MUI0ODE5MkM0Mzc4NDJCQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkXVWutlP6zd7DIDh6VBhMcV/zG/a5bvEvV7EG40P6Nw9bWNc0 eVSOWJspX5qzYY2Y5GXIWJpYo/b4DaIRCEc7rn+pWrqQ/ohlS5rGmrgl2kGyfqBE IERhajEOGvunmIxG9mI5Q39gPT5h1taT/gPGKPxNyi5zSQgj6jiqT0NgB2WTNqsP 2RGGWAeJmnEltodNqFepoP6zMaIhRpox8yFcYtG/u+AeymlwXaZ9EMohifFjkPUn KszDWsxCyfe1zDOOq7wDLZmQiD4T1eXfAffmf2ipHcs4sj2nBBwZOYCEqieqdj/4 aXp+QHeEg3fVmW5huw4zM/pBtvD0eK2PKlM1AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUcB+OG2VHqBRDRR6RtIGSxDeEK8EwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2NCLU9HMlZIcUJSRFJSNlJ0SUdTeERlRUs4RS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAbVTANBgkqhkiG9w0BAQsFAAOCAQEAM78FNtalJ6aIkAwh+YHjgyP3i7PZ mkqhNSMYWgmta8DJrsP6kxtEHOgojrLXTttod4c9qg0pvmD7a3dyEi5YpzFAKr5R pBbmyrhPA+E566csOgIll/q8sdE3U0ujDXwgVrwpxwJTmc9rBVlIOSxPgXOODe2Z Ub+ZlhQx0iFJPn8POE4epMsGnjlhppCAFNmVugU+Pu2THobhofRtPyzjVZJfbvTr vzq+sgA39kuV0nej5db5l+oowjsB+PmOnwkTGVzzgW2jHVrZ/oXWq+p9rdulzyLU HLjQ8PKZ2CaJUEr73nrfkrO95aaSvnhxFnyGjTnWPAwV+4q+8wM/iuP/6Q== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org