$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lzbiHAbu56BUP2KitUP-lTAoZYU.roa File: lzbiHAbu56BUP2KitUP-lTAoZYU.roa (raw, json) Hash identifier: Fyabh4/9ulkLOnrpkgw7NiLzccfhODX6FEjgAT11CMA= Subject key identifier: 97:36:E2:1C:06:EE:E7:A0:54:3F:62:A2:B5:43:FE:95:30:28:65:85 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 026B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lzbiHAbu56BUP2KitUP-lTAoZYU.roa Signing time: Sun 01 Oct 2023 01:29:25 +0000 ROA not before: Sun 01 Oct 2023 01:29:25 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2516 IP address blocks: 61.200.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Oct 1 01:29:25 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=9736E21C06EEE7A0543F62A2B543FE9530286585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:16:51:a0:5b:f9:11:71:e1:1b:34:fe:c3: 23:c7:53:80:ed:48:2b:01:14:e3:17:6e:57:97:db: 79:40:34:8d:13:06:5d:11:5b:a8:93:4d:cf:47:52: 55:d8:75:d5:80:98:d5:ed:65:a3:97:59:0c:bc:bd: 21:a4:40:91:21:36:97:f8:78:15:f1:8a:38:c8:e2: 5d:c7:21:f5:79:2f:7a:ec:58:78:07:d1:91:c5:3c: 33:f6:44:5d:b4:6a:7a:8f:e1:a8:92:59:d9:ac:9e: 68:32:18:61:26:78:a1:f5:b1:7d:52:55:8f:5b:9f: 0a:99:1c:10:ec:cd:fb:77:49:7a:97:6c:2c:bc:15: 3a:e0:96:9f:f8:90:9f:29:a5:13:02:aa:99:b6:b6: a2:6c:97:7a:7c:59:7a:39:71:cf:f0:71:e6:e8:0c: 14:11:e2:49:73:55:e3:29:9a:af:0f:6e:2f:a5:4a: 5a:66:c2:0c:49:38:b7:de:c1:59:83:80:19:47:d0: 4a:fd:13:78:bf:f0:67:19:08:cc:46:26:50:3c:db: c9:9a:3a:06:5c:07:ae:e1:ae:b4:2c:94:84:b9:cb: cb:b1:7d:83:31:e4:c6:88:ab:6d:02:7c:b0:28:19: d0:02:82:08:f7:f6:23:45:4a:19:2d:c9:76:26:ca: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:36:E2:1C:06:EE:E7:A0:54:3F:62:A2:B5:43:FE:95:30:28:65:85 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lzbiHAbu56BUP2KitUP-lTAoZYU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.200.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1d:c5:b9:bb:f6:26:55:d7:cb:ff:27:61:f4:1e:f2:6a:50:7d: b7:2a:2f:5b:e8:a1:04:bf:2f:d8:bd:82:74:ab:c2:84:65:73: 90:d6:47:e1:34:a4:61:11:af:bd:0c:d3:da:bf:9e:ff:ad:92: be:72:c5:68:50:fd:99:c1:b7:16:20:ca:c2:82:ce:92:f0:6b: 71:e9:89:82:02:18:a8:da:10:41:f4:93:94:4a:a0:a2:24:3b: 09:68:26:9c:80:6b:77:8a:05:b1:1c:80:ef:72:2d:9f:b6:2c: 34:87:1e:59:85:22:7a:67:98:3e:67:0a:28:44:dd:2e:c5:e4: 15:3c:d1:b8:db:bc:4b:8c:1f:fc:9e:68:c4:b7:73:a9:94:c2: 68:18:66:c6:c2:22:09:08:f7:d5:9e:d4:1b:75:53:d3:f5:c1: eb:76:07:f1:09:5b:8c:63:73:0d:60:a1:c3:df:3e:38:9a:88: 35:6b:9b:3a:17:47:30:26:88:75:99:03:81:4e:ab:12:da:e0: 6a:df:57:7e:4b:b9:9a:00:e4:7a:e5:90:f4:12:bd:9b:7b:c2: 36:6b:69:c7:fd:2b:eb:79:7e:09:f7:94:92:81:33:d1:e6:db: b1:ea:f4:e0:a4:85:12:03:a0:5e:a4:60:b7:45:95:58:2e:53: 83:fc:60:50 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzEwMDEw MTI5MjVaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDk3MzZFMjFDMDZFRUU3 QTA1NDNGNjJBMkI1NDNGRTk1MzAyODY1ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfwhZRoFv5EXHhGzT+wyPHU4DtSCsBFOMXbleX23lANI0TBl0R W6iTTc9HUlXYddWAmNXtZaOXWQy8vSGkQJEhNpf4eBXxijjI4l3HIfV5L3rsWHgH 0ZHFPDP2RF20anqP4aiSWdmsnmgyGGEmeKH1sX1SVY9bnwqZHBDszft3SXqXbCy8 FTrglp/4kJ8ppRMCqpm2tqJsl3p8WXo5cc/wceboDBQR4klzVeMpmq8Pbi+lSlpm wgxJOLfewVmDgBlH0Er9E3i/8GcZCMxGJlA828maOgZcB67hrrQslIS5y8uxfYMx 5MaIq20CfLAoGdACggj39iNFShktyXYmyj2PAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUlzbiHAbu56BUP2KitUP+lTAoZYUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL2x6YmlIQWJ1NTZCVVAyS2l0VVAtbFRBb1pZVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc9yIAwDQYJKoZIhvcNAQELBQADggEBAB3Fubv2JlXXy/8nYfQe8mpQfbcq L1vooQS/L9i9gnSrwoRlc5DWR+E0pGERr70M09q/nv+tkr5yxWhQ/ZnBtxYgysKC zpLwa3HpiYICGKjaEEH0k5RKoKIkOwloJpyAa3eKBbEcgO9yLZ+2LDSHHlmFInpn mD5nCihE3S7F5BU80bjbvEuMH/yeaMS3c6mUwmgYZsbCIgkI99We1Bt1U9P1wet2 B/EJW4xjcw1gocPfPjiaiDVrmzoXRzAmiHWZA4FOqxLa4GrfV35LuZoA5HrlkPQS vZt7wjZracf9K+t5fgn3lJKBM9Hm27Hq9OCkhRIDoF6kYLdFlVguU4P8YFA= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org