$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa File: lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa (raw, json) Hash identifier: iK/QT7jJPmHexgAeKjqLRb23l9zjxf2EP8NA/YGc1eI= Subject key identifier: 96:7C:C0:FF:54:4F:A7:25:6A:8A:EF:B3:C6:3C:32:5A:72:9F:08:28 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0299 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa Signing time: Sun 31 Mar 2024 01:29:37 +0000 ROA not before: Sun 31 Mar 2024 01:29:37 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 118.158.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:29:37 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=967CC0FF544FA7256A8AEFB3C63C325A729F0828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:8b:af:27:0f:57:24:11:a4:31:d4:38:ad: 59:00:1a:16:02:b6:13:ff:0e:84:31:b7:42:0e:f0: ef:f7:84:78:a9:d3:41:63:50:ff:72:27:f8:89:a5: b7:26:ea:cb:8a:79:38:f2:5f:50:98:7f:56:3b:ef: 31:ee:b1:83:85:7a:89:0f:43:57:98:51:41:57:df: 1c:e8:d0:64:3c:4d:a8:88:64:6b:74:6c:43:18:57: c2:6b:af:81:08:b3:b1:89:ce:ca:d3:6c:b3:31:a6: 94:0a:ed:77:cb:a3:0d:74:fb:f9:69:c9:31:f9:6f: ca:e9:49:04:c4:f2:12:72:c0:b5:33:c4:98:e2:1c: 9e:30:57:b4:b8:58:d5:f7:4d:7e:18:29:4f:0c:1a: 6b:4e:64:43:74:a4:1c:f5:3a:e4:c3:99:89:45:4e: ae:c9:c7:e6:88:2a:98:43:b1:3a:5b:34:27:58:d6: 82:f2:36:5a:e9:a2:44:6d:98:64:29:4f:c9:44:2b: a3:42:47:ff:e9:d7:63:4e:e8:e9:7b:d8:a3:29:0a: 70:a0:ec:00:d2:60:0b:54:03:1e:30:78:98:32:8d: f4:83:13:81:cd:b5:14:b5:10:05:05:3c:a8:7e:57: 36:5a:57:d5:ee:18:eb:2d:79:a2:d7:8a:24:be:58: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7C:C0:FF:54:4F:A7:25:6A:8A:EF:B3:C6:3C:32:5A:72:9F:08:28 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lnzA_1RPpyVqiu-zxjwyWnKfCCg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 99:33:fc:fc:9b:3a:c9:c0:aa:ce:b3:4a:6d:9e:46:03:af:b4: 5e:ca:1a:ba:f9:e1:52:aa:cc:1c:32:c2:8a:68:99:47:0e:e3: e7:2f:a6:c6:3e:8d:fd:c8:9e:35:4f:ce:6c:3c:05:9d:f5:f0: 0a:2b:52:14:97:3f:44:eb:77:d3:66:71:80:0c:e1:e9:68:9f: fd:29:1c:f1:97:1f:a5:4a:da:7c:fa:40:be:3c:94:5a:e5:80: 8c:1f:73:f0:f5:f2:6c:df:63:82:9d:75:b7:75:da:4e:d9:ad: 1d:52:aa:f5:8b:0c:36:b8:1c:63:b6:e7:61:9f:b1:73:82:c9: ca:8a:97:e6:24:07:60:7c:c7:8a:65:48:77:76:ef:c8:57:b4: b4:81:a4:d8:f4:23:8c:05:1f:e7:77:99:79:a3:a1:82:db:37: 8c:b2:e9:36:b9:4d:35:eb:89:e7:32:62:19:ee:49:7c:1c:22: 9c:eb:ff:f9:2d:1a:de:77:b5:6a:f9:e8:4d:ad:00:a9:4b:48: 3e:d0:db:cb:17:6a:bc:52:c0:26:99:ef:e1:12:ae:80:63:c4: cc:7a:9c:b1:48:cf:7c:25:3a:73:9b:fa:d4:7e:da:b3:70:9c: 50:be:c0:bc:26:a7:5e:27:a7:4f:f1:42:6c:a6:b9:7d:a6:3d: 54:b9:f0:af -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICApkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTI5MzdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk2N0NDMEZGNTQ0RkE3 MjU2QThBRUZCM0M2M0MzMjVBNzI5RjA4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBCouvJw9XJBGkMdQ4rVkAGhYCthP/DoQxt0IO8O/3hHip00Fj UP9yJ/iJpbcm6suKeTjyX1CYf1Y77zHusYOFeokPQ1eYUUFX3xzo0GQ8TaiIZGt0 bEMYV8Jrr4EIs7GJzsrTbLMxppQK7XfLow10+/lpyTH5b8rpSQTE8hJywLUzxJji HJ4wV7S4WNX3TX4YKU8MGmtOZEN0pBz1OuTDmYlFTq7Jx+aIKphDsTpbNCdY1oLy NlrpokRtmGQpT8lEK6NCR//p12NO6Ol72KMpCnCg7ADSYAtUAx4weJgyjfSDE4HN tRS1EAUFPKh+VzZaV9XuGOsteaLXiiS+WE3zAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUlnzA/1RPpyVqiu+zxjwyWnKfCCgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2xuekFfMVJQcHlWcWl1LXp4and5V25LZkNDZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB2njANBgkqhkiG9w0BAQsFAAOCAQEAmTP8/Js6ycCqzrNKbZ5GA6+0Xsoa uvnhUqrMHDLCimiZRw7j5y+mxj6N/cieNU/ObDwFnfXwCitSFJc/ROt302ZxgAzh 6Wif/Skc8ZcfpUrafPpAvjyUWuWAjB9z8PXybN9jgp11t3XaTtmtHVKq9YsMNrgc Y7bnYZ+xc4LJyoqX5iQHYHzHimVId3bvyFe0tIGk2PQjjAUf53eZeaOhgts3jLLp NrlNNeuJ5zJiGe5JfBwinOv/+S0a3ne1avnoTa0AqUtIPtDbyxdqvFLAJpnv4RKu gGPEzHqcsUjPfCU6c5v61H7as3CcUL7AvCanXienT/FCbKa5faY9VLnwrw== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org