$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pqvdR8nzYmDwH09XTkYUY3mBQ-w.roa File: pqvdR8nzYmDwH09XTkYUY3mBQ-w.roa (raw, json) Hash identifier: QWe8KbN69c70ocQgEwsCKiwnCOJujSvo2j/yQcTIeu8= Subject key identifier: A6:AB:DD:47:C9:F3:62:60:F0:1F:4F:57:4E:46:14:63:79:81:43:EC Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0287 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pqvdR8nzYmDwH09XTkYUY3mBQ-w.roa Signing time: Mon 05 Feb 2024 09:21:33 +0000 ROA not before: Mon 05 Feb 2024 09:21:33 +0000 ROA not after: Tue 14 Jan 2025 01:30:02 +0000 asID: 2516 IP address blocks: 14.8.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 5 09:21:33 2024 GMT Not After : Jan 14 01:30:02 2025 GMT Subject: CN=A6ABDD47C9F36260F01F4F574E461463798143EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:54:4a:8a:51:c2:99:c1:03:d4:59:0a:1a: 7b:a3:52:82:1e:84:30:c9:d4:cb:63:f8:5f:03:c6: 04:27:b6:2a:94:0d:0a:9a:28:d9:c3:51:aa:bf:cf: 7f:c8:b1:99:a8:c1:eb:3b:0a:a1:d9:5c:e9:57:40: bd:f1:48:95:a1:96:00:1b:33:5a:38:ed:63:4b:1a: af:f5:b4:72:c7:56:b4:47:fb:33:a8:49:8d:bb:f8: 91:b1:f0:77:3c:8e:8c:30:60:97:eb:91:9d:ca:e3: 05:6f:4e:cf:00:3f:81:30:f7:23:dd:ce:de:65:b1: 66:ab:a3:67:a2:44:85:25:0c:ef:8e:90:34:be:14: ff:7d:2e:4f:64:cf:1c:5e:bf:fd:42:61:e4:43:0d: 40:c8:00:85:da:a5:01:5a:91:38:20:2e:d4:cc:66: b6:e2:5b:07:7e:c8:25:8b:b9:3f:4e:31:47:58:1b: de:f9:b9:38:44:c7:da:fc:c1:e2:4e:cc:d8:68:c8: 95:a0:77:7d:6b:75:fe:0e:56:31:a2:5a:6c:01:03: 5a:65:96:1b:27:f7:40:24:03:3d:9c:98:e2:42:a4: f2:2e:db:2e:29:96:47:ea:8f:95:3c:fb:d2:0b:7d: 06:41:57:f9:45:b8:09:28:fc:7d:1e:71:99:69:b2: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AB:DD:47:C9:F3:62:60:F0:1F:4F:57:4E:46:14:63:79:81:43:EC X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pqvdR8nzYmDwH09XTkYUY3mBQ-w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.8.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2c:ce:d6:e7:cf:11:8f:b3:e5:da:91:fa:a6:08:13:bf:50:48: 33:36:ba:13:b2:a6:eb:36:2f:48:d7:dd:f1:dd:45:c4:78:6e: 68:6f:ed:e1:97:10:38:1b:42:53:50:9b:43:84:e2:f7:d7:72: 4d:53:e2:c1:e2:8c:bd:c2:ae:ae:f4:b5:75:43:73:f7:f6:1b: 14:7c:a2:f0:35:f9:5e:88:79:41:53:d3:9d:e4:49:f5:87:67: cc:17:47:28:5f:65:01:a6:d0:ba:7e:cc:f4:7b:74:31:d0:bd: e6:ff:52:46:6a:47:db:99:b3:0e:b8:69:dd:78:6e:75:af:e3: bd:f5:92:d1:d7:5e:bb:6c:4c:38:8a:cd:5d:85:28:c0:1e:ef: b2:9d:c2:47:e8:e5:60:83:64:7f:46:a8:27:a0:52:0b:d0:19: 1c:21:29:e6:cd:ff:88:7d:76:9d:16:93:d6:6f:21:f9:9d:4a: c2:5e:53:61:fa:fc:38:00:5e:0e:c6:de:0a:51:71:52:34:90: f9:fb:ed:c6:b1:3f:94:20:10:d2:ce:80:68:18:56:32:16:3c: 43:73:98:2c:87:fe:ee:b8:f2:5b:00:af:af:b3:72:40:4e:32: f2:52:52:4f:78:64:5f:b7:49:71:12:2e:40:24:7d:28:48:89: 50:70:f0:57 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMDUw OTIxMzNaFw0yNTAxMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE2QUJERDQ3QzlGMzYy NjBGMDFGNEY1NzRFNDYxNDYzNzk4MTQzRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWgFRKilHCmcED1FkKGnujUoIehDDJ1Mtj+F8DxgQntiqUDQqa KNnDUaq/z3/IsZmowes7CqHZXOlXQL3xSJWhlgAbM1o47WNLGq/1tHLHVrRH+zOo SY27+JGx8Hc8jowwYJfrkZ3K4wVvTs8AP4Ew9yPdzt5lsWaro2eiRIUlDO+OkDS+ FP99Lk9kzxxev/1CYeRDDUDIAIXapQFakTggLtTMZrbiWwd+yCWLuT9OMUdYG975 uThEx9r8weJOzNhoyJWgd31rdf4OVjGiWmwBA1pllhsn90AkAz2cmOJCpPIu2y4p lkfqj5U8+9ILfQZBV/lFuAko/H0ecZlpsmrpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUpqvdR8nzYmDwH09XTkYUY3mBQ+wwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3BxdmRSOG56WW1Ed0gwOVhUa1lVWTNtQlEtdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEOCDANBgkqhkiG9w0BAQsFAAOCAQEALM7W588Rj7Pl2pH6pggTv1BIMza6 E7Km6zYvSNfd8d1FxHhuaG/t4ZcQOBtCU1CbQ4Ti99dyTVPiweKMvcKurvS1dUNz 9/YbFHyi8DX5Xoh5QVPTneRJ9YdnzBdHKF9lAabQun7M9Ht0MdC95v9SRmpH25mz Drhp3Xhuda/jvfWS0ddeu2xMOIrNXYUowB7vsp3CR+jlYINkf0aoJ6BSC9AZHCEp 5s3/iH12nRaT1m8h+Z1Kwl5TYfr8OABeDsbeClFxUjSQ+fvtxrE/lCAQ0s6AaBhW MhY8Q3OYLIf+7rjyWwCvr7NyQE4y8lJST3hkX7dJcRIuQCR9KEiJUHDwVw== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org