$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vNuNk8KxMe1EsHHeCPb6BFMN0As.roa File: vNuNk8KxMe1EsHHeCPb6BFMN0As.roa (raw, json) Hash identifier: 6I5hip6DzSHm+VvncNbQb2MlIlIHB5WGzNNq79dNIrY= Subject key identifier: BC:DB:8D:93:C2:B1:31:ED:44:B0:71:DE:08:F6:FA:04:53:0D:D0:0B Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 039B Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vNuNk8KxMe1EsHHeCPb6BFMN0As.roa Signing time: Sat 31 Aug 2024 01:34:40 +0000 ROA not before: Sat 31 Aug 2024 01:34:40 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 2516 IP address blocks: 125.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Aug 31 01:34:40 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=BCDB8D93C2B131ED44B071DE08F6FA04530DD00B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:47:f0:11:f3:0c:c7:f6:a2:45:a5:15:e4: 1b:c6:48:8c:8d:75:18:ac:39:c7:f3:95:89:73:6d: 5e:d7:2a:c5:e0:a6:bb:7e:74:4a:0e:b3:fd:48:2b: ff:da:1c:49:51:55:e4:0e:e8:2e:bc:85:41:cc:dd: 4f:6d:13:4e:dc:4d:89:4d:72:b7:05:25:01:a5:b2: 44:fc:d0:9e:63:2a:41:7b:ef:88:63:da:25:f1:a1: 06:20:30:6e:29:e6:52:31:fb:3e:19:b5:02:46:22: 48:d6:bf:68:2c:2f:90:b8:19:51:69:14:0e:60:bb: 20:51:d2:22:91:fd:69:6a:66:51:2e:d7:10:bd:73: e2:95:bd:17:80:4a:7e:4e:0f:5b:30:61:6a:12:8f: d1:13:d2:21:f8:bd:e5:ea:b8:a3:29:f2:56:c0:0b: 04:1b:77:a4:5d:aa:83:a4:be:11:8b:73:d7:45:5c: e9:4e:e8:fd:83:39:bd:ba:73:b8:54:fb:06:c1:0a: e2:9f:ba:0e:a1:ee:e1:08:c2:40:ba:00:78:10:04: 27:a4:92:32:de:f2:8e:77:23:2b:cd:5b:60:ca:82: 51:e6:2b:43:1d:58:c1:15:0a:bb:29:28:9c:21:a6: 43:52:d1:7a:21:8e:23:57:dd:4b:16:be:6d:7c:ed: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:8D:93:C2:B1:31:ED:44:B0:71:DE:08:F6:FA:04:53:0D:D0:0B X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vNuNk8KxMe1EsHHeCPb6BFMN0As.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:26:16:07:38:6a:b9:0b:19:ad:60:58:62:ee:4c:7c:6f:07: 5d:2f:ce:be:97:19:e5:14:ef:53:50:bb:c6:79:96:28:7c:41: ee:8f:72:99:27:c1:85:f6:67:6d:10:6a:ba:ea:10:81:35:ae: 42:ea:a9:78:3f:0b:52:3e:11:85:c0:2c:ea:a5:a7:11:eb:b3: 55:8d:2a:de:35:e3:e4:05:bf:f2:47:3f:ae:a4:08:b4:16:ba: c3:ab:61:a3:af:c3:c1:5a:27:99:fb:38:3b:a9:e3:01:c5:21: 05:7e:db:f3:eb:9d:8b:9b:65:a2:23:04:ff:b8:a3:e1:a7:3d: cc:ae:9f:27:49:6a:87:40:3e:94:b8:4a:f4:53:d7:29:97:8b: 31:4b:23:60:62:fe:3f:1e:f6:43:39:ed:7d:33:0a:5c:2d:95: ac:e1:44:4c:3d:ea:0e:9c:8b:de:d5:a8:40:d8:c2:cc:0f:09: 21:e5:f7:1b:cd:27:7b:45:eb:43:c3:58:26:83:c6:64:29:57: f5:ea:dd:5e:50:55:29:91:53:94:36:63:43:ff:b4:73:21:5a: d8:1d:52:4d:4c:b7:f0:7b:a0:8a:04:47:a6:4c:8e:e7:0f:4d: 15:00:d7:60:16:2d:c2:05:d4:e8:e5:6a:05:fb:fd:fe:42:70: 50:30:b4:28 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDA4MzEw MTM0NDBaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDREI4RDkzQzJCMTMx RUQ0NEIwNzFERTA4RjZGQTA0NTMwREQwMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/3kfwEfMMx/aiRaUV5BvGSIyNdRisOcfzlYlzbV7XKsXgprt+ dEoOs/1IK//aHElRVeQO6C68hUHM3U9tE07cTYlNcrcFJQGlskT80J5jKkF774hj 2iXxoQYgMG4p5lIx+z4ZtQJGIkjWv2gsL5C4GVFpFA5guyBR0iKR/WlqZlEu1xC9 c+KVvReASn5OD1swYWoSj9ET0iH4veXquKMp8lbACwQbd6RdqoOkvhGLc9dFXOlO 6P2DOb26c7hU+wbBCuKfug6h7uEIwkC6AHgQBCekkjLe8o53IyvNW2DKglHmK0Md WMEVCrspKJwhpkNS0XohjiNX3UsWvm187Qv7AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUvNuNk8KxMe1EsHHeCPb6BFMN0AswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3ZOdU5rOEt4TWUxRXNISGVDUGI2QkZNTjBBcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwB9NTANBgkqhkiG9w0BAQsFAAOCAQEAVSYWBzhquQsZrWBYYu5MfG8HXS/O vpcZ5RTvU1C7xnmWKHxB7o9ymSfBhfZnbRBquuoQgTWuQuqpeD8LUj4RhcAs6qWn EeuzVY0q3jXj5AW/8kc/rqQItBa6w6tho6/DwVonmfs4O6njAcUhBX7b8+udi5tl oiME/7ij4ac9zK6fJ0lqh0A+lLhK9FPXKZeLMUsjYGL+Px72QzntfTMKXC2VrOFE TD3qDpyL3tWoQNjCzA8JIeX3G80ne0XrQ8NYJoPGZClX9erdXlBVKZFTlDZjQ/+0 cyFa2B1STUy38HugigRHpkyO5w9NFQDXYBYtwgXU6OVqBfv9/kJwUDC0KA== -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:26 2024 by rpki-client on console-ams.rpki-client.org