$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hiMzy9byFlUeQQTjcpKvKAQJ3XM.roa File: hiMzy9byFlUeQQTjcpKvKAQJ3XM.roa (raw, json) Hash identifier: th3Up2O/yL2czH/Wi1LtF0qk8JLL/6OY7DvNAF0MxJg= Subject key identifier: 86:23:33:CB:D6:F2:16:55:1E:41:04:E3:72:92:AF:28:04:09:DD:73 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02C6 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hiMzy9byFlUeQQTjcpKvKAQJ3XM.roa Signing time: Sun 31 Mar 2024 01:33:22 +0000 ROA not before: Sun 31 Mar 2024 01:33:22 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 61.204.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:33:22 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=862333CBD6F216551E4104E37292AF280409DD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:0b:43:a2:7e:50:92:07:04:4e:42:55:59: dd:df:f2:b4:30:f0:be:dc:52:d2:f9:72:b1:bf:c7: e3:94:6f:55:30:1b:c9:0c:2f:5b:55:09:b3:42:ab: 38:36:ac:5e:cc:67:52:7d:4b:02:bd:3e:6f:31:d0: b3:3c:06:57:80:90:ed:35:0c:03:03:1c:8f:99:42: 10:f8:03:0c:b2:92:f4:b7:01:de:ac:06:bd:6c:2a: 79:dc:8a:b9:8b:f4:53:e0:bc:2c:49:ff:7b:58:bf: 90:3d:d1:aa:fb:eb:bd:6b:fa:26:91:95:73:25:4c: 6a:bc:9f:3f:22:8b:ad:23:53:9f:07:d2:fb:ef:e1: 73:05:e0:ad:8c:44:0e:81:5b:b8:31:67:49:fd:fe: f4:cc:ee:88:21:58:c4:96:c8:17:09:18:b0:5b:aa: 3b:10:d4:38:81:4c:54:fc:04:d8:20:43:e1:55:e0: 68:66:6c:b7:4b:9d:13:4e:ee:7a:88:cc:3f:91:1e: b4:b5:b7:80:c0:45:17:13:18:22:1d:11:36:49:68: 56:ee:40:45:70:8c:48:e6:35:d7:fa:92:62:75:37: 49:f4:5d:a8:cc:94:e1:c7:31:34:85:1f:3b:e3:62: 10:df:1a:3c:f9:44:ba:27:fe:ab:51:4f:1d:80:8d: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:33:CB:D6:F2:16:55:1E:41:04:E3:72:92:AF:28:04:09:DD:73 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hiMzy9byFlUeQQTjcpKvKAQJ3XM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.204.0.0/17 Signature Algorithm: sha256WithRSAEncryption 1f:28:33:db:6d:fd:a6:65:df:3b:7e:df:95:3d:ad:18:c6:a3: 40:c9:cd:dd:f7:79:63:fb:dc:97:18:26:66:e0:64:c4:61:1e: 41:72:49:5f:06:73:19:1b:19:e7:da:aa:be:f7:78:d2:0c:cf: bc:14:f1:7e:c2:6a:8d:74:25:cb:da:b2:76:9f:5d:34:53:4b: 8c:14:5d:d8:ae:95:37:a3:9d:8d:92:ad:39:9e:7f:3d:03:15: 5a:94:a7:5c:cc:9a:1d:d9:de:ff:76:ad:89:f3:ec:f5:15:93: cc:05:d8:77:3d:94:75:3c:63:66:32:b1:78:62:93:05:87:02: 46:d2:8e:3b:48:fc:a2:cd:43:ad:5c:27:07:42:e8:b2:ca:e0: 9d:64:1f:bb:ef:f0:0e:bb:90:3f:19:53:82:7f:c1:e7:95:96: 7d:2b:cb:7e:2f:f0:43:32:d3:a3:cb:19:03:3f:d9:48:b5:15: a2:58:f3:70:a5:7f:4f:2a:fb:5a:f0:a4:e6:9b:b1:5b:fa:be: 12:ad:ca:12:59:13:19:dc:a1:47:a3:76:19:bc:e0:f0:93:08: e7:56:21:07:1c:11:16:e8:09:93:d5:3c:97:01:f5:96:2a:a6: 67:c6:78:88:21:27:df:d7:40:5c:2a:bf:c7:3a:cf:97:83:fb: d1:d2:6d:93 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTMzMjJaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2MjMzM0NCRDZGMjE2 NTUxRTQxMDRFMzcyOTJBRjI4MDQwOURENzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8wQtDon5QkgcETkJVWd3f8rQw8L7cUtL5crG/x+OUb1UwG8kM L1tVCbNCqzg2rF7MZ1J9SwK9Pm8x0LM8BleAkO01DAMDHI+ZQhD4AwyykvS3Ad6s Br1sKnncirmL9FPgvCxJ/3tYv5A90ar7671r+iaRlXMlTGq8nz8ii60jU58H0vvv 4XMF4K2MRA6BW7gxZ0n9/vTM7oghWMSWyBcJGLBbqjsQ1DiBTFT8BNggQ+FV4Ghm bLdLnRNO7nqIzD+RHrS1t4DARRcTGCIdETZJaFbuQEVwjEjmNdf6kmJ1N0n0XajM lOHHMTSFHzvjYhDfGjz5RLon/qtRTx2AjUehAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhiMzy9byFlUeQQTjcpKvKAQJ3XMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2hpTXp5OWJ5RmxVZVFRVGpjcEt2S0FRSjNYTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9zAAwDQYJKoZIhvcNAQELBQADggEBAB8oM9tt/aZl3zt+35U9rRjGo0DJ zd33eWP73JcYJmbgZMRhHkFySV8GcxkbGefaqr73eNIMz7wU8X7Cao10Jcvasnaf XTRTS4wUXdiulTejnY2SrTmefz0DFVqUp1zMmh3Z3v92rYnz7PUVk8wF2Hc9lHU8 Y2YysXhikwWHAkbSjjtI/KLNQ61cJwdC6LLK4J1kH7vv8A67kD8ZU4J/weeVln0r y34v8EMy06PLGQM/2Ui1FaJY83Clf08q+1rwpOabsVv6vhKtyhJZExncoUejdhm8 4PCTCOdWIQccERboCZPVPJcB9ZYqpmfGeIghJ9/XQFwqv8c6z5eD+9HSbZM= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org