$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTrlJTEQiM_chrj8Ec3l7LHPED8.roa File: nTrlJTEQiM_chrj8Ec3l7LHPED8.roa (raw, json) Hash identifier: cSYdsZ+E0RSmyetO8Rn/TP8mhoyXlFCCv0Ml0/prftk= Subject key identifier: 9D:3A:E5:25:31:10:88:CF:DC:86:B8:FC:11:CD:E5:EC:B1:CF:10:3F Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0296 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTrlJTEQiM_chrj8Ec3l7LHPED8.roa Signing time: Thu 29 Feb 2024 01:31:35 +0000 ROA not before: Thu 29 Feb 2024 01:31:35 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 2516 IP address blocks: 125.55.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 29 01:31:35 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=9D3AE525311088CFDC86B8FC11CDE5ECB1CF103F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:df:8b:a0:fe:5c:d9:d4:be:3e:55:97:90: db:51:ce:aa:63:62:b8:3b:5e:25:9e:a8:90:fb:0e: b5:8c:e2:71:ca:5a:29:dc:22:d9:85:f5:ac:c5:10: 16:7c:a9:39:46:84:e8:91:16:0a:64:10:fa:15:06: ca:38:5d:1f:cc:0f:20:f5:45:b6:13:68:11:56:86: a9:8d:f0:d3:77:7a:37:80:e3:00:af:ab:db:44:8e: 67:34:f9:27:ca:6a:0c:85:c1:18:3c:84:ae:41:22: 86:b2:88:0f:79:78:28:6b:c6:b8:02:cf:d2:88:7e: ee:55:ed:8c:1f:93:f5:c8:59:ef:1f:ec:76:c4:f5: f8:34:74:a4:49:b7:e3:16:dd:4f:7e:69:ac:a4:8a: 1a:a6:63:fc:3c:af:14:30:86:d8:42:36:97:22:01: 3d:39:d3:e7:60:2e:a8:66:9f:31:0b:9a:99:c0:56: 62:15:8b:2b:e1:6a:fc:d2:05:21:6b:49:32:df:8a: 2a:35:51:b5:9d:13:04:19:25:49:69:fb:c8:b0:7f: a2:14:38:04:87:93:96:31:9d:f0:8b:a3:34:6e:3b: 6e:2c:80:8e:35:aa:03:58:a2:9e:8d:19:31:39:96: b0:6d:b0:df:39:4a:c6:8f:93:3f:c5:e8:b4:cc:bd: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3A:E5:25:31:10:88:CF:DC:86:B8:FC:11:CD:E5:EC:B1:CF:10:3F X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTrlJTEQiM_chrj8Ec3l7LHPED8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.55.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:bd:b4:f1:d7:5c:15:a7:fe:8d:64:1a:88:de:fe:e8:b0:87: 44:ff:a1:7f:0b:39:b3:b2:6b:19:15:95:c8:9e:ee:df:99:9c: d8:ef:4a:83:f4:71:6a:71:71:a4:d1:22:66:22:6e:8f:36:45: ff:6e:f4:c4:23:6f:86:b0:7d:c2:6d:3e:9a:f0:24:ac:af:e8: c5:45:3c:73:91:6d:06:b6:e2:1f:6f:69:14:13:78:1f:82:40: 6f:9a:21:ec:d7:00:03:87:29:32:39:e3:54:65:30:df:56:2f: e7:8d:e9:4a:f1:1e:89:de:79:e5:e1:cf:16:e7:12:c8:38:71: 98:23:96:48:53:b4:de:20:1c:ff:25:69:76:5d:c3:39:29:56: bc:e6:f9:ad:54:b1:2f:b1:a0:78:00:e0:3e:81:e2:b6:c5:99: be:38:23:28:a3:40:27:a1:5e:a5:81:e1:2b:c8:e6:f8:52:c6: ab:0e:3f:bb:6c:ff:ee:56:da:c6:77:1c:e3:f0:ad:16:18:78: 5f:59:cf:b2:3d:6c:d4:28:87:1f:e6:7c:ae:b9:2e:4f:61:ae: 15:89:49:24:a4:82:e6:c7:78:a6:7e:31:64:a8:68:db:5e:69: 5b:c2:24:fe:87:3f:3e:92:36:a9:1e:7f:c6:24:f5:ae:fb:99: ce:11:78:fa -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICApYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMjkw MTMxMzVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlEM0FFNTI1MzExMDg4 Q0ZEQzg2QjhGQzExQ0RFNUVDQjFDRjEwM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyK9+LoP5c2dS+PlWXkNtRzqpjYrg7XiWeqJD7DrWM4nHKWinc ItmF9azFEBZ8qTlGhOiRFgpkEPoVBso4XR/MDyD1RbYTaBFWhqmN8NN3ejeA4wCv q9tEjmc0+SfKagyFwRg8hK5BIoayiA95eChrxrgCz9KIfu5V7Ywfk/XIWe8f7HbE 9fg0dKRJt+MW3U9+aaykihqmY/w8rxQwhthCNpciAT050+dgLqhmnzELmpnAVmIV iyvhavzSBSFrSTLfiio1UbWdEwQZJUlp+8iwf6IUOASHk5YxnfCLozRuO24sgI41 qgNYop6NGTE5lrBtsN85SsaPkz/F6LTMvefpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUnTrlJTEQiM/chrj8Ec3l7LHPED8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL25UcmxKVEVRaU1fY2hyajhFYzNsN0xIUEVEOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB9NzANBgkqhkiG9w0BAQsFAAOCAQEAbr208ddcFaf+jWQaiN7+6LCHRP+h fws5s7JrGRWVyJ7u35mc2O9Kg/RxanFxpNEiZiJujzZF/270xCNvhrB9wm0+mvAk rK/oxUU8c5FtBrbiH29pFBN4H4JAb5oh7NcAA4cpMjnjVGUw31Yv543pSvEeid55 5eHPFucSyDhxmCOWSFO03iAc/yVpdl3DOSlWvOb5rVSxL7GgeADgPoHitsWZvjgj KKNAJ6FepYHhK8jm+FLGqw4/u2z/7lbaxncc4/CtFhh4X1nPsj1s1CiHH+Z8rrku T2GuFYlJJKSC5sd4pn4xZKho215pW8Ik/oc/PpI2qR5/xiT1rvuZzhF4+g== -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org