$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qGjgXK1LPug89X9PD6Lb0xZTXGo.roa File: qGjgXK1LPug89X9PD6Lb0xZTXGo.roa (raw, json) Hash identifier: aZZv0wN3KuFW3xiMZM6/YZ9MBCn/+aCZwyj6fpJLiWU= Subject key identifier: A8:68:E0:5C:AD:4B:3E:E8:3C:F5:7F:4F:0F:A2:DB:D3:16:53:5C:6A Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 034A Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qGjgXK1LPug89X9PD6Lb0xZTXGo.roa Signing time: Sun 31 Mar 2024 01:42:40 +0000 ROA not before: Sun 31 Mar 2024 01:42:40 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 106.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:42:40 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=A868E05CAD4B3EE83CF57F4F0FA2DBD316535C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:87:cc:54:a8:5e:2f:81:7b:3c:7a:5c:5b: d8:ca:9b:df:2d:75:9b:fe:e5:f1:9c:0d:52:b5:20: 5b:33:88:09:2d:29:1b:6c:67:ba:32:c8:f6:c5:a9: 3e:13:37:f2:db:92:44:99:e5:70:b8:6f:f2:d7:1d: 9f:c3:ee:04:f3:f6:e5:6c:c3:91:00:86:2c:26:a8: e0:65:57:58:a8:41:3e:a9:50:1e:ac:81:f5:6f:8e: 20:21:be:1d:36:e4:11:41:0c:6f:dd:99:50:30:90: f2:0d:67:48:a8:20:0c:0d:a3:05:8e:a8:fa:4c:6e: 72:2f:dd:06:88:6b:21:96:e7:39:14:ca:e2:a3:8f: db:46:a9:e7:df:91:bf:c7:82:45:df:96:82:82:e6: 9a:eb:6e:27:0c:3e:5e:24:ea:e4:f5:11:87:e8:c7: 14:de:2e:3e:3e:ef:39:c5:f4:4a:ff:e6:40:99:a7: ef:e3:93:dc:fe:7a:c4:76:92:e1:35:0d:39:33:15: 94:fb:2e:b8:ee:0d:75:ab:1e:ae:87:65:ef:f8:50: ce:3d:16:ef:1a:a8:0d:2c:96:b0:31:7c:4a:d4:25: af:00:94:00:28:e4:68:9d:4a:8e:7a:ac:c1:06:1d: 3f:03:fb:55:82:be:20:18:17:4f:8a:83:86:91:53: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:E0:5C:AD:4B:3E:E8:3C:F5:7F:4F:0F:A2:DB:D3:16:53:5C:6A X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qGjgXK1LPug89X9PD6Lb0xZTXGo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3b:68:73:45:1d:cd:19:01:7f:71:b5:77:3c:df:14:44:df:b0: 14:a1:7e:32:a4:17:5e:ab:3d:06:2f:2a:7f:21:24:a5:4b:1b: 8d:06:1d:56:be:4f:09:77:15:b6:52:66:ac:10:d1:3b:e2:e8: a2:a2:8e:cd:6f:fe:a6:68:06:38:84:39:fc:e2:5d:56:7a:c6: 9b:25:b6:fd:7c:0f:0b:66:72:bc:68:96:f6:f2:d2:4f:87:3c: d5:cb:94:eb:cc:27:0e:36:ad:f3:15:7e:9a:e8:12:c8:31:28: b1:0c:93:a8:dc:b8:39:58:b7:cd:58:cb:b0:0e:a1:c6:74:93: 6f:b7:2f:f8:2b:e3:14:ac:70:95:bc:f4:d9:8c:d9:8d:e6:70: 47:f8:3a:33:11:9d:16:f1:9f:25:7f:4a:ae:7a:14:ac:28:c4: 69:90:16:33:fa:dd:d2:b9:73:00:04:27:d9:f1:8f:e5:84:84: c2:b5:4a:ea:d0:37:2f:f7:1a:dd:eb:34:23:01:13:f0:28:7a: ac:0d:46:91:a2:b2:f4:66:a7:b5:40:6b:8a:9f:ec:e8:46:fc: ea:8b:7b:1b:72:e8:a8:3a:50:68:49:11:eb:1d:4d:eb:82:02: 55:52:af:e9:c0:6b:4b:0b:36:dd:7d:aa:09:64:e5:2d:df:8a: db:8b:4c:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTQyNDBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE4NjhFMDVDQUQ0QjNF RTgzQ0Y1N0Y0RjBGQTJEQkQzMTY1MzVDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeDYfMVKheL4F7PHpcW9jKm98tdZv+5fGcDVK1IFsziAktKRts Z7oyyPbFqT4TN/LbkkSZ5XC4b/LXHZ/D7gTz9uVsw5EAhiwmqOBlV1ioQT6pUB6s gfVvjiAhvh025BFBDG/dmVAwkPINZ0ioIAwNowWOqPpMbnIv3QaIayGW5zkUyuKj j9tGqeffkb/HgkXfloKC5prrbicMPl4k6uT1EYfoxxTeLj4+7znF9Er/5kCZp+/j k9z+esR2kuE1DTkzFZT7LrjuDXWrHq6HZe/4UM49Fu8aqA0slrAxfErUJa8AlAAo 5GidSo56rMEGHT8D+1WCviAYF0+Kg4aRU7FpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUqGjgXK1LPug89X9PD6Lb0xZTXGowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3FHamdYSzFMUHVnODlYOVBENkxiMHhaVFhHby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwBqqzANBgkqhkiG9w0BAQsFAAOCAQEAO2hzRR3NGQF/cbV3PN8URN+wFKF+ MqQXXqs9Bi8qfyEkpUsbjQYdVr5PCXcVtlJmrBDRO+LooqKOzW/+pmgGOIQ5/OJd VnrGmyW2/XwPC2ZyvGiW9vLST4c81cuU68wnDjat8xV+mugSyDEosQyTqNy4OVi3 zVjLsA6hxnSTb7cv+CvjFKxwlbz02YzZjeZwR/g6MxGdFvGfJX9KrnoUrCjEaZAW M/rd0rlzAAQn2fGP5YSEwrVK6tA3L/ca3es0IwET8Ch6rA1GkaKy9GantUBrip/s 6Eb86ot7G3LoqDpQaEkR6x1N64ICVVKv6cBrSws23X2qCWTlLd+K24tMXQ== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org