$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa File: njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa (raw, json) Hash identifier: NM9Jl6cWrReGvUHLVwHbHYf3+vs9SRbT/eLUy9NWTOs= Subject key identifier: 9E:35:0C:92:34:A8:59:26:A2:44:4C:E8:08:5A:7C:27:2D:15:B3:92 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02D4 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa Signing time: Sun 31 Mar 2024 01:33:27 +0000 ROA not before: Sun 31 Mar 2024 01:33:27 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 125.51.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:33:27 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=9E350C9234A85926A2444CE8085A7C272D15B392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:bb:b4:38:d4:66:1b:af:66:2d:c6:ae:d9: e4:81:c4:cf:8e:4d:79:82:26:35:86:27:1a:04:35: 34:d4:f2:3f:89:7e:64:5b:ef:97:9f:13:c1:c7:7a: 9a:80:93:ac:ad:51:be:c3:2f:6e:f2:ae:58:0c:7d: 07:10:68:95:04:b8:2e:69:12:af:4b:da:9f:cd:e5: 45:14:78:06:5e:a3:2b:9d:b2:63:dc:6c:8b:f5:62: b8:89:5e:a6:8c:b8:ce:80:9a:f3:62:b6:f9:e4:94: 51:7f:59:db:a1:e0:fd:da:93:17:57:aa:70:59:09: ca:66:06:c5:af:da:07:f3:15:f6:a0:02:23:a4:06: fc:ba:86:29:c6:fa:9e:ec:d8:c5:89:fc:e2:10:cf: 8c:53:c1:29:ea:23:d7:9e:99:45:af:30:26:61:13: 5d:f7:1c:f3:2e:37:e7:83:09:0e:10:c6:7f:e3:e9: eb:04:4b:0e:82:a3:4d:b8:65:21:89:b7:91:79:52: de:c6:e5:3d:c8:ed:76:ac:71:f8:2b:ec:02:a8:56: 7c:47:ba:a5:7b:73:83:85:03:65:93:3e:8a:9e:ad: ac:3f:06:d6:ac:fa:17:1f:8e:d5:93:73:2d:af:0b: ae:ee:93:b4:e9:61:8b:03:43:41:9a:c6:4f:29:b4: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:0C:92:34:A8:59:26:A2:44:4C:E8:08:5A:7C:27:2D:15:B3:92 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.51.0.0/16 Signature Algorithm: sha256WithRSAEncryption 81:b5:09:50:3e:65:72:72:83:85:81:07:c9:6a:ad:79:a0:0f: 96:57:64:ab:b9:bf:46:ee:0c:cf:17:b1:90:7b:f9:e0:12:33: 6c:d4:85:15:86:13:02:13:37:11:fc:6b:27:38:ab:58:bd:3a: 1e:9a:3e:a8:b7:a1:4b:23:7b:ec:1f:b4:c3:89:33:97:4c:3f: 27:52:81:a1:db:bd:ef:7b:b0:7e:8c:09:31:00:2b:cd:8c:3c: be:8e:89:cf:c1:18:7c:54:61:ab:ed:11:91:86:e2:35:d1:39: 0c:ae:3f:78:d0:0f:bf:30:92:1e:4d:67:8c:7a:48:bf:de:d6: 96:84:63:ed:42:0f:3f:b8:71:8e:fb:54:7a:b8:4b:40:aa:42: 63:b1:b2:24:54:a7:bc:83:2d:2d:b8:47:e6:cb:9f:59:91:2c: c9:fa:ca:b3:07:68:19:09:84:53:7f:f5:b7:9c:b1:01:56:71: 03:e1:e2:c3:cb:11:ae:5c:d7:15:df:fb:a0:52:39:c2:07:45: a9:c3:d8:9b:49:71:19:55:27:38:b0:b4:eb:f1:4c:aa:56:9c: 8e:9a:59:62:d2:f5:cd:67:ba:15:4c:c8:37:8a:e5:7f:e3:10: a2:2d:9d:76:5b:16:2b:42:47:9b:71:d4:4b:e2:c4:06:7d:7b: 9d:76:a9:f7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTMzMjdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFMzUwQzkyMzRBODU5 MjZBMjQ0NENFODA4NUE3QzI3MkQxNUIzOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwCru0ONRmG69mLcau2eSBxM+OTXmCJjWGJxoENTTU8j+JfmRb 75efE8HHepqAk6ytUb7DL27yrlgMfQcQaJUEuC5pEq9L2p/N5UUUeAZeoyudsmPc bIv1YriJXqaMuM6AmvNitvnklFF/Wduh4P3akxdXqnBZCcpmBsWv2gfzFfagAiOk Bvy6hinG+p7s2MWJ/OIQz4xTwSnqI9eemUWvMCZhE133HPMuN+eDCQ4Qxn/j6esE Sw6Co024ZSGJt5F5Ut7G5T3I7Xascfgr7AKoVnxHuqV7c4OFA2WTPoqeraw/Btas +hcfjtWTcy2vC67uk7TpYYsDQ0Gaxk8ptDY9AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUnjUMkjSoWSaiREzoCFp8Jy0Vs5IwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL25qVU1ralNvV1NhaVJFem9DRnA4SnkwVnM1SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB9MzANBgkqhkiG9w0BAQsFAAOCAQEAgbUJUD5lcnKDhYEHyWqteaAPlldk q7m/Ru4MzxexkHv54BIzbNSFFYYTAhM3EfxrJzirWL06Hpo+qLehSyN77B+0w4kz l0w/J1KBodu973uwfowJMQArzYw8vo6Jz8EYfFRhq+0RkYbiNdE5DK4/eNAPvzCS Hk1njHpIv97WloRj7UIPP7hxjvtUerhLQKpCY7GyJFSnvIMtLbhH5sufWZEsyfrK swdoGQmEU3/1t5yxAVZxA+Hiw8sRrlzXFd/7oFI5wgdFqcPYm0lxGVUnOLC06/FM qlacjppZYtL1zWe6FUzIN4rlf+MQoi2ddlsWK0JHm3HUS+LEBn17nXap9w== -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:03 2024 by rpki-client on console-fra.rpki-client.org