$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rgmx9bL2zu7w3UOpiqA2VpnFkIQ.roa File: rgmx9bL2zu7w3UOpiqA2VpnFkIQ.roa (raw, json) Hash identifier: 0ynEmeHsQaMU14bmRhfDnbZYXtuWbqRUOire4hgG7wk= Subject key identifier: AE:09:B1:F5:B2:F6:CE:EE:F0:DD:43:A9:8A:A0:36:56:99:C5:90:84 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 02B5 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rgmx9bL2zu7w3UOpiqA2VpnFkIQ.roa Signing time: Sun 31 Mar 2024 01:29:49 +0000 ROA not before: Sun 31 Mar 2024 01:29:49 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 59.135.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:29:49 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=AE09B1F5B2F6CEEEF0DD43A98AA0365699C59084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:47:93:1c:64:25:73:cb:b3:6b:27:d6:40:3d: 5b:cd:dc:6e:3a:ee:97:6f:3d:48:e3:7b:90:a2:bb: 08:68:90:b8:6a:92:10:ab:dc:70:05:13:fe:54:97: 8b:52:f2:63:f0:a1:43:2d:1e:04:27:6b:d9:e4:b4: b3:9e:96:aa:c6:9a:0a:ba:b7:6d:dc:1d:a9:b7:4f: 64:ab:c1:b4:f0:25:fd:16:54:f0:97:04:e3:ce:63: e3:0a:ea:82:f1:68:e3:a0:c0:53:59:08:53:5e:10: b9:0f:14:1c:61:b6:41:48:a6:38:11:97:69:e6:86: 91:bb:f3:5b:b5:cd:58:8b:fa:24:54:9a:93:4f:c9: 0a:ef:06:cf:59:ba:c1:ed:46:e9:57:4f:78:57:bb: 77:73:e6:87:bb:6f:86:87:17:37:81:b2:6e:fa:1a: 84:1a:c9:47:28:cf:d3:79:3d:9d:8a:db:b8:ca:1d: df:97:87:2f:32:7b:a3:17:44:ce:5c:08:10:be:a2: 11:65:cd:b0:63:4b:e4:22:3d:6a:ef:f3:fe:39:a4: dc:82:9f:1e:e2:70:36:cd:63:33:43:8d:8a:a0:5f: 90:23:e5:95:ec:5d:79:2a:91:ab:36:9b:56:ed:dd: 21:f9:ba:8c:f5:61:31:3a:2e:39:ca:c1:80:6e:59: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:09:B1:F5:B2:F6:CE:EE:F0:DD:43:A9:8A:A0:36:56:99:C5:90:84 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rgmx9bL2zu7w3UOpiqA2VpnFkIQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.135.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:65:81:b2:fa:08:ea:13:fa:08:cf:93:eb:a4:b2:c5:7f:55: 5d:61:90:8f:67:7f:43:f2:4e:5b:93:3b:ce:1a:28:20:a1:96: 65:8d:bd:60:2a:0c:f3:f0:67:19:66:f4:28:84:85:08:83:6d: 4d:b0:62:16:c5:20:cd:e2:b3:ec:1e:02:6d:fd:86:44:c9:15: 90:a4:9e:74:89:76:bd:72:0b:db:74:72:b5:27:dc:c3:0f:1f: bf:9e:54:03:82:f3:a1:7c:87:6a:35:97:67:15:87:21:84:59: 68:89:cc:b7:4a:a3:08:35:7b:fb:b1:57:bb:b7:09:87:04:89: fe:15:5e:e5:73:f4:c1:1e:8a:8e:1e:f2:7f:48:13:17:41:71: cb:09:d3:0d:9a:3c:6d:1b:1b:65:5b:2c:f4:9c:46:30:4c:f3: db:4b:c3:22:0e:94:39:c7:65:47:c2:35:18:63:3d:dc:3b:c5: 9f:d1:49:d6:bb:19:04:c1:07:cd:ee:43:bd:76:94:60:3c:76: 62:d3:b8:c4:5e:76:64:02:62:16:fd:5e:5d:9a:e0:e9:4d:c5: 4d:76:09:45:21:2c:62:c0:1f:ee:de:eb:33:f4:66:60:b0:98: 74:00:e5:bf:2d:99:8c:a2:ea:ec:a5:4a:07:97:76:4e:bd:ea: 44:6a:91:08 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICArUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTI5NDlaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFMDlCMUY1QjJGNkNF RUVGMERENDNBOThBQTAzNjU2OTlDNTkwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVR5McZCVzy7NrJ9ZAPVvN3G467pdvPUjje5CiuwhokLhqkhCr 3HAFE/5Ul4tS8mPwoUMtHgQna9nktLOelqrGmgq6t23cHam3T2SrwbTwJf0WVPCX BOPOY+MK6oLxaOOgwFNZCFNeELkPFBxhtkFIpjgRl2nmhpG781u1zViL+iRUmpNP yQrvBs9ZusHtRulXT3hXu3dz5oe7b4aHFzeBsm76GoQayUcoz9N5PZ2K27jKHd+X hy8ye6MXRM5cCBC+ohFlzbBjS+QiPWrv8/45pNyCnx7icDbNYzNDjYqgX5Aj5ZXs XXkqkas2m1bt3SH5uoz1YTE6LjnKwYBuWVPtAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUrgmx9bL2zu7w3UOpiqA2VpnFkIQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3JnbXg5YkwyenU3dzNVT3BpcUEyVnBuRmtJUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7hzANBgkqhkiG9w0BAQsFAAOCAQEAJmWBsvoI6hP6CM+T66SyxX9VXWGQ j2d/Q/JOW5M7zhooIKGWZY29YCoM8/BnGWb0KISFCINtTbBiFsUgzeKz7B4Cbf2G RMkVkKSedIl2vXIL23RytSfcww8fv55UA4LzoXyHajWXZxWHIYRZaInMt0qjCDV7 +7FXu7cJhwSJ/hVe5XP0wR6Kjh7yf0gTF0FxywnTDZo8bRsbZVss9JxGMEzz20vD Ig6UOcdlR8I1GGM93DvFn9FJ1rsZBMEHze5DvXaUYDx2YtO4xF52ZAJiFv1eXZrg 6U3FTXYJRSEsYsAf7t7rM/RmYLCYdADlvy2ZjKLq7KVKB5d2Tr3qRGqRCA== -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org