$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa File: v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa (raw, json) Hash identifier: Ba1X4hWEahKqFekMSqQFptjVCED+s81kudNtJTIjVYg= Subject key identifier: BF:BF:AD:D8:50:D3:38:F5:3E:AE:F4:17:67:49:C0:A6:9D:B1:B0:4B Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0267 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa Signing time: Sun 01 Oct 2023 01:29:24 +0000 ROA not before: Sun 01 Oct 2023 01:29:24 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 2516 IP address blocks: 59.128.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Oct 1 01:29:24 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=BFBFADD850D338F53EAEF4176749C0A69DB1B04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:17:03:b1:14:a3:38:96:65:b8:cb:c9:bc:03: 22:4c:12:19:45:ee:69:b4:b1:9d:9b:55:c7:d9:85: 9f:9e:f4:f1:21:c8:d9:46:c4:34:6b:99:49:fc:2a: 22:b6:a7:06:80:5a:73:8a:30:b8:2d:38:df:98:5f: 9b:29:e0:cd:be:fe:ff:5f:81:6e:cc:71:24:ea:a1: 06:3c:de:1a:d6:ec:32:a6:3d:1e:2c:68:9b:8a:46: 3f:99:e1:bc:fa:41:b0:3f:dc:5d:56:81:ae:97:d7: 99:06:2d:24:8f:7c:c6:cc:2d:67:ed:49:75:59:6d: b3:52:f8:4a:77:70:c6:09:82:96:c6:5b:d1:83:3b: 1c:e8:db:e7:a4:b1:c8:24:01:8c:90:5f:21:ea:f1: 60:ad:2f:fb:1d:69:fe:9f:ef:4c:75:27:87:20:4d: be:cf:42:3d:b8:3a:92:70:0c:1d:fa:7d:5d:14:dd: a3:85:02:92:6e:7a:a8:c1:1c:1d:69:65:6f:c5:52: 66:0e:d6:72:d3:c4:fd:e1:99:58:98:ce:af:93:eb: 9b:91:0c:2d:48:bb:f7:d2:3d:9a:9f:bd:d0:fa:1f: 34:65:00:48:6e:f8:06:db:5b:4b:06:d6:59:74:fe: 26:0b:04:a3:10:1d:90:02:64:b3:d7:df:86:fe:62: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:AD:D8:50:D3:38:F5:3E:AE:F4:17:67:49:C0:A6:9D:B1:B0:4B X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v7-t2FDTOPU-rvQXZ0nApp2xsEs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.128.96.0/19 Signature Algorithm: sha256WithRSAEncryption 12:4e:75:d9:24:ca:ce:f4:5b:eb:fe:cb:62:50:63:4c:7e:d7: 43:e5:f8:64:b6:71:48:35:8a:08:d8:06:cc:a7:57:c0:73:a1: ec:38:72:af:9a:8e:a7:70:42:89:cc:82:a2:2d:e5:7e:94:d5: 8c:2f:f8:2c:94:64:a8:63:34:77:7c:e1:6f:a4:ab:3a:c7:a9: a4:78:31:26:e1:92:70:79:99:4e:4a:e9:55:69:5a:20:fa:18: 0f:1c:de:1f:38:ff:37:a1:5e:e7:89:a5:fc:87:0c:db:60:a1: 5c:dd:8d:0c:05:1f:3c:46:f2:dc:0a:c1:e7:46:5e:2e:0a:04: e3:6c:7f:cc:40:73:6f:ca:67:31:df:e4:3a:c4:cc:ac:3b:46: b5:f7:fa:83:66:15:05:13:bd:d7:c2:2b:07:19:4c:bb:ba:7a: 25:62:aa:a5:5c:87:f8:6c:ff:ca:09:6c:48:03:88:7d:68:6b: d0:a2:5e:3e:86:c6:db:6e:e8:27:89:c5:7c:d9:e3:e1:f8:fa: c9:3b:a0:1c:b7:46:fb:bb:83:24:cd:a3:1c:6c:39:41:dd:a3: 28:6c:10:67:79:95:16:a3:5e:29:14:00:ea:93:3c:ee:b7:fd: 1b:ae:7e:79:54:1a:89:0c:f7:4a:da:af:ac:4e:ac:84:53:90: 53:38:be:3f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzEwMDEw MTI5MjRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEJGQkZBREQ4NTBEMzM4 RjUzRUFFRjQxNzY3NDlDMEE2OURCMUIwNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1FwOxFKM4lmW4y8m8AyJMEhlF7mm0sZ2bVcfZhZ+e9PEhyNlG xDRrmUn8KiK2pwaAWnOKMLgtON+YX5sp4M2+/v9fgW7McSTqoQY83hrW7DKmPR4s aJuKRj+Z4bz6QbA/3F1Wga6X15kGLSSPfMbMLWftSXVZbbNS+Ep3cMYJgpbGW9GD Oxzo2+ekscgkAYyQXyHq8WCtL/sdaf6f70x1J4cgTb7PQj24OpJwDB36fV0U3aOF ApJueqjBHB1pZW/FUmYO1nLTxP3hmViYzq+T65uRDC1Iu/fSPZqfvdD6HzRlAEhu +AbbW0sG1ll0/iYLBKMQHZACZLPX34b+YlV/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUv7+t2FDTOPU+rvQXZ0nApp2xsEswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3Y3LXQyRkRUT1BVLXJ2UVhaMG5BcHAyeHNFcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU7gGAwDQYJKoZIhvcNAQELBQADggEBABJOddkkys70W+v+y2JQY0x+10Pl +GS2cUg1igjYBsynV8Bzoew4cq+ajqdwQonMgqIt5X6U1Ywv+CyUZKhjNHd84W+k qzrHqaR4MSbhknB5mU5K6VVpWiD6GA8c3h84/zehXueJpfyHDNtgoVzdjQwFHzxG 8twKwedGXi4KBONsf8xAc2/KZzHf5DrEzKw7RrX3+oNmFQUTvdfCKwcZTLu6eiVi qqVch/hs/8oJbEgDiH1oa9CiXj6Gxttu6CeJxXzZ4+H4+sk7oBy3Rvu7gyTNoxxs OUHdoyhsEGd5lRajXikUAOqTPO63/RuufnlUGokM90rar6xOrIRTkFM4vj8= -----END CERTIFICATE-----Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org