$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ncvUoA7Ta8G7Olnnu0Ui4s3H8Kk.roa File: ncvUoA7Ta8G7Olnnu0Ui4s3H8Kk.roa (raw, json) Hash identifier: WdNfRkl55Ov9dygNkX15nSUB7rqm11dppOQN1rl5IK8= Subject key identifier: 9D:CB:D4:A0:0E:D3:6B:C1:BB:3A:59:E7:BB:45:22:E2:CD:C7:F0:A9 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02DF Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ncvUoA7Ta8G7Olnnu0Ui4s3H8Kk.roa Signing time: Sun 31 Mar 2024 01:33:31 +0000 ROA not before: Sun 31 Mar 2024 01:33:31 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 124.211.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:33:31 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=9DCBD4A00ED36BC1BB3A59E7BB4522E2CDC7F0A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:ee:8a:84:cc:b1:c1:fc:99:03:1c:7a:9d: 44:89:b1:28:5d:b2:22:ee:37:2f:67:46:2a:ec:27: 8c:b9:d2:d0:ce:ab:91:db:2a:63:8c:95:70:ae:de: 54:cb:f9:50:f1:50:ca:fc:04:b0:5f:97:20:12:e3: a8:04:76:5d:44:67:5b:a0:3a:68:46:82:75:f2:05: 70:2a:dd:b4:80:2e:36:fd:d2:94:09:3b:5c:52:32: cf:b8:25:89:f0:68:bf:8f:93:06:34:42:5b:b5:b4: a9:f7:27:b7:9b:0e:db:6c:ea:a2:b9:71:c3:1b:ea: 6e:0d:35:97:fe:b4:03:a7:54:8b:f8:4d:33:55:52: d3:c0:ea:9f:84:82:05:df:92:a7:61:9e:b8:53:fd: 2b:b2:e4:aa:e5:3b:e1:e3:3d:a1:ef:5b:f2:d6:aa: 8d:00:7a:c7:22:ca:7b:c6:96:93:2a:63:d9:40:42: d6:12:71:db:42:5c:45:71:2c:db:49:29:e5:33:30: 5f:4c:43:ed:53:03:55:8a:c3:e9:b5:49:4e:e4:05: c1:d2:55:94:a4:fb:c4:0d:b0:dc:e2:d9:7a:1c:05: cb:8a:f7:2e:a2:03:a7:f8:73:c2:fa:0e:45:46:0a: d6:0e:91:fa:e0:71:29:b6:92:44:7f:d8:b4:94:3f: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CB:D4:A0:0E:D3:6B:C1:BB:3A:59:E7:BB:45:22:E2:CD:C7:F0:A9 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ncvUoA7Ta8G7Olnnu0Ui4s3H8Kk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.211.128.0/17 Signature Algorithm: sha256WithRSAEncryption b7:be:a7:4b:3a:92:b3:b9:c8:c8:2c:74:53:28:72:b7:09:ff: 07:f7:af:2e:85:42:09:48:77:89:65:cb:07:b4:34:62:c8:9e: 53:8e:c7:e1:31:aa:eb:c6:09:4c:40:2b:1c:88:d7:6c:10:6b: 4f:e3:e4:a1:7c:27:fd:bb:85:8c:cb:38:c7:f0:9b:30:41:89: 0d:a4:20:9f:cf:16:9e:f0:52:ee:9d:f4:ae:11:b3:8c:49:af: 85:00:63:98:0a:39:16:aa:d9:95:39:ce:6e:56:f3:14:12:86: d6:b9:bb:4b:43:65:dd:69:07:a1:62:93:de:44:4b:b2:d2:23: 09:1e:9b:50:06:93:2b:e2:9a:c6:f3:7a:58:18:8d:00:26:0c: 16:03:1f:c9:c5:dd:33:b6:6f:62:73:b7:36:24:f7:9d:d8:fb: 5d:34:89:69:3c:11:48:b0:a0:fd:fb:aa:b1:01:8a:be:5c:94: ad:d9:07:40:ea:9b:f2:6b:99:44:b7:6b:80:7e:a3:c4:1a:2d: 42:0d:90:ba:46:d5:84:80:04:a9:db:da:be:65:f0:bc:59:bd: f3:b7:32:fb:25:a4:a0:fb:df:5b:38:64:df:ed:51:a9:27:1a: bd:e9:dc:e0:2e:1c:77:6f:9e:67:6a:b9:7c:65:cc:3d:51:e7: d7:41:a4:e0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTMzMzFaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEQ0JENEEwMEVEMzZC QzFCQjNBNTlFN0JCNDUyMkUyQ0RDN0YwQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE7u6KhMyxwfyZAxx6nUSJsShdsiLuNy9nRirsJ4y50tDOq5Hb KmOMlXCu3lTL+VDxUMr8BLBflyAS46gEdl1EZ1ugOmhGgnXyBXAq3bSALjb90pQJ O1xSMs+4JYnwaL+PkwY0Qlu1tKn3J7ebDtts6qK5ccMb6m4NNZf+tAOnVIv4TTNV UtPA6p+EggXfkqdhnrhT/Suy5KrlO+HjPaHvW/LWqo0AesciynvGlpMqY9lAQtYS cdtCXEVxLNtJKeUzMF9MQ+1TA1WKw+m1SU7kBcHSVZSk+8QNsNzi2XocBcuK9y6i A6f4c8L6DkVGCtYOkfrgcSm2kkR/2LSUP+NLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUncvUoA7Ta8G7Olnnu0Ui4s3H8KkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL25jdlVvQTdUYThHN09sbm51MFVpNHMzSDhLay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd804AwDQYJKoZIhvcNAQELBQADggEBALe+p0s6krO5yMgsdFMocrcJ/wf3 ry6FQglId4llywe0NGLInlOOx+ExquvGCUxAKxyI12wQa0/j5KF8J/27hYzLOMfw mzBBiQ2kIJ/PFp7wUu6d9K4Rs4xJr4UAY5gKORaq2ZU5zm5W8xQShta5u0tDZd1p B6Fik95ES7LSIwkem1AGkyvimsbzelgYjQAmDBYDH8nF3TO2b2JztzYk953Y+100 iWk8EUiwoP37qrEBir5clK3ZB0Dqm/JrmUS3a4B+o8QaLUINkLpG1YSABKnb2r5l 8LxZvfO3MvslpKD731s4ZN/tUaknGr3p3OAuHHdvnmdquXxlzD1R59dBpOA= -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org