$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nXFUZXYVfmH_JBJEt3qPN10UZo0.roa File: nXFUZXYVfmH_JBJEt3qPN10UZo0.roa (raw, json) Hash identifier: VULh0eHM5KM6iSM1uo1rO1B0o5ua8kOErZVSQsAwRpE= Subject key identifier: 9D:71:54:65:76:15:7E:61:FF:24:12:44:B7:7A:8F:37:5D:14:66:8D Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0300 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nXFUZXYVfmH_JBJEt3qPN10UZo0.roa Signing time: Sun 31 Mar 2024 01:35:57 +0000 ROA not before: Sun 31 Mar 2024 01:35:57 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 222.7.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:35:57 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=9D71546576157E61FF241244B77A8F375D14668D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:c8:7b:92:29:34:2f:88:b2:c3:50:d5:21: ec:d1:71:01:0a:5c:66:33:2a:cb:82:a9:b1:71:0a: d1:4c:69:73:1b:d0:a2:29:ee:a6:c2:4d:4b:9c:74: dc:b2:2d:71:ed:c5:7d:8c:10:27:9a:6a:12:5d:1f: e2:14:0d:e9:5c:e5:7b:24:31:56:24:38:54:65:86: ff:09:49:b5:26:fb:7d:87:49:35:76:8a:2a:b4:f2: e3:f2:0c:33:89:5d:03:14:43:db:be:64:b2:cf:9d: 9f:bc:9b:10:95:22:58:95:af:26:f4:30:e8:47:41: 09:ef:86:28:5e:b3:56:8d:77:36:b7:d1:1b:22:8d: ab:dc:8a:a6:90:7d:0b:bc:ac:16:d4:4e:fd:54:5b: 82:c8:95:43:29:a5:8e:b7:fe:4f:b1:2c:07:6a:af: 70:e8:a6:a3:b8:35:5b:98:77:38:e6:ca:95:d9:fc: f8:ea:b6:48:a6:3f:13:8a:e7:80:a8:d1:dd:00:4a: fb:ca:5a:90:74:fa:fe:ef:f8:b3:b1:5c:14:97:f8: 6c:60:e1:f2:06:5c:05:57:19:c4:a0:61:88:f7:cc: 0c:76:de:a8:63:fa:67:d9:b0:5f:9c:84:90:cf:6d: 79:a0:28:ec:1b:2b:4c:f6:b8:d9:ef:10:5e:d4:d4: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:71:54:65:76:15:7E:61:FF:24:12:44:B7:7A:8F:37:5D:14:66:8D X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nXFUZXYVfmH_JBJEt3qPN10UZo0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 222.7.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2f:3d:e2:74:20:89:fd:3e:cd:4a:23:87:fd:c0:52:18:56:f2: 73:85:96:c9:62:cc:52:73:a3:7c:1e:ed:e2:c6:6c:68:6f:7c: b8:16:6a:60:7f:34:bc:0b:b8:59:19:41:13:42:8d:0c:05:14: b1:89:98:7e:5a:03:8a:cf:66:69:58:ed:e3:e3:fd:0e:fe:0b: b0:51:70:e1:97:1a:24:9c:31:ea:88:69:eb:5b:40:f0:dc:09: 4b:11:dc:be:23:d6:5d:a1:a8:b3:51:df:bf:3b:06:a5:1a:cb: f9:87:15:8a:38:b4:12:bd:7e:e2:cd:9d:a9:b9:c6:76:77:39: 7f:5e:c1:40:fc:d5:d7:b1:9d:23:64:cc:4a:ae:19:84:c1:b4: 6c:11:d0:25:f4:b4:29:0d:96:07:e8:fb:fe:7a:18:bc:6e:9c: 11:49:7d:78:21:d4:5a:8e:19:a4:a7:cd:fc:49:b1:60:8f:72: b6:62:2d:80:86:ad:64:97:44:bb:5f:79:d0:f2:bb:f1:31:3e: 56:cd:65:c5:e5:37:5f:2b:0a:5e:d6:0e:42:b6:61:1b:14:de: cb:5b:78:3f:62:f0:bf:29:66:69:2f:7f:2f:2f:86:0f:14:20: 7e:2c:27:65:28:39:40:8e:6d:3c:1c:bd:ce:31:a8:ca:2b:90: e4:1d:b6:4b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTM1NTdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlENzE1NDY1NzYxNTdF NjFGRjI0MTI0NEI3N0E4RjM3NUQxNDY2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6ush7kik0L4iyw1DVIezRcQEKXGYzKsuCqbFxCtFMaXMb0KIp 7qbCTUucdNyyLXHtxX2MECeaahJdH+IUDelc5XskMVYkOFRlhv8JSbUm+32HSTV2 iiq08uPyDDOJXQMUQ9u+ZLLPnZ+8mxCVIliVryb0MOhHQQnvhihes1aNdza30Rsi javciqaQfQu8rBbUTv1UW4LIlUMppY63/k+xLAdqr3DopqO4NVuYdzjmypXZ/Pjq tkimPxOK54Co0d0ASvvKWpB0+v7v+LOxXBSX+Gxg4fIGXAVXGcSgYYj3zAx23qhj +mfZsF+chJDPbXmgKOwbK0z2uNnvEF7U1E0/AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUnXFUZXYVfmH/JBJEt3qPN10UZo0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL25YRlVaWFlWZm1IX0pCSkV0M3FQTjEwVVpvMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDeBzANBgkqhkiG9w0BAQsFAAOCAQEALz3idCCJ/T7NSiOH/cBSGFbyc4WW yWLMUnOjfB7t4sZsaG98uBZqYH80vAu4WRlBE0KNDAUUsYmYfloDis9maVjt4+P9 Dv4LsFFw4ZcaJJwx6ohp61tA8NwJSxHcviPWXaGos1HfvzsGpRrL+YcViji0Er1+ 4s2dqbnGdnc5f17BQPzV17GdI2TMSq4ZhMG0bBHQJfS0KQ2WB+j7/noYvG6cEUl9 eCHUWo4ZpKfN/EmxYI9ytmItgIatZJdEu1950PK78TE+Vs1lxeU3XysKXtYOQrZh GxTey1t4P2LwvylmaS9/Ly+GDxQgfiwnZSg5QI5tPBy9zjGoyiuQ5B22Sw== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org