$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xr1dG1r4J52h2yLTeA7EXD5nVwo.roa File: xr1dG1r4J52h2yLTeA7EXD5nVwo.roa (raw, json) Hash identifier: xjfWc41ufR/UNtvHAdYS0uWbCVAo4qZZatmHLNmz0ZE= Subject key identifier: C6:BD:5D:1B:5A:F8:27:9D:A1:DB:22:D3:78:0E:C4:5C:3E:67:57:0A Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0292 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xr1dG1r4J52h2yLTeA7EXD5nVwo.roa Signing time: Thu 29 Feb 2024 01:31:33 +0000 ROA not before: Thu 29 Feb 2024 01:31:33 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 2516 IP address blocks: 125.28.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 29 01:31:33 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=C6BD5D1B5AF8279DA1DB22D3780EC45C3E67570A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:2b:a3:1b:22:2e:be:94:2b:19:94:7b:a8: e6:25:6f:37:5f:40:6e:0e:d8:3d:60:53:9f:71:d7: 0d:a7:47:e6:bf:f7:03:e8:1f:5f:5a:a4:f4:bc:d0: 3a:38:e5:30:76:e7:75:7d:12:c4:1d:a7:bb:ff:0e: e3:4e:12:25:4c:a4:12:cf:dc:6e:e5:42:65:15:89: ae:75:48:1c:5f:5c:a4:25:79:5f:30:ac:87:12:56: 22:1c:15:3c:34:af:df:70:3d:7b:96:a6:0e:14:ed: 7d:40:d8:7c:3d:bb:88:b6:26:62:fe:44:84:a5:af: 1a:24:51:1c:93:d6:89:ad:8a:e2:fe:a1:bf:db:89: 86:2f:52:f1:6d:ab:bd:a2:1d:68:9c:57:61:f5:d8: b4:29:81:4c:fb:99:c8:d3:ec:fd:80:d7:e4:21:f7: 39:90:12:cd:3a:61:28:02:37:cb:18:3d:87:8a:7c: 7a:10:7e:89:60:fe:c1:9b:42:44:c9:d8:cd:f3:fc: 70:34:33:47:bc:f1:d7:85:6d:77:c1:d7:ab:eb:d2: cb:18:15:33:51:d3:78:a5:70:4f:be:b7:84:48:ea: 57:d9:66:0b:ea:1c:a8:38:e8:b3:cf:57:47:44:f8: 48:cd:39:41:ae:e6:c8:05:d0:15:6a:f6:84:d6:8f: 9f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BD:5D:1B:5A:F8:27:9D:A1:DB:22:D3:78:0E:C4:5C:3E:67:57:0A X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xr1dG1r4J52h2yLTeA7EXD5nVwo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.28.128.0/17 Signature Algorithm: sha256WithRSAEncryption 71:6f:51:7c:a6:6c:52:fd:64:a5:d3:60:a9:b0:fb:dd:f3:e7: 00:97:14:a6:9d:89:7b:33:7d:dd:f3:50:ba:f5:4d:fd:1a:a8: 43:10:e2:07:ba:3a:76:3d:06:42:d9:70:69:14:42:b6:3a:ba: ed:cd:c9:0a:a4:71:65:42:d5:7d:34:4c:ab:ff:27:26:3b:53: 52:2d:f4:08:0c:0a:fc:2b:a6:94:8c:dd:b6:cd:7e:20:b2:6b: df:de:ce:b7:6f:ea:c6:72:e1:b2:f6:60:03:86:63:f3:dc:f8: 17:5e:f4:03:61:6f:1a:1a:44:ba:b6:e9:09:79:fe:8e:98:27: 7f:ae:35:4e:b0:51:92:6f:32:b9:d8:14:52:98:1b:13:28:cc: b3:b2:1f:44:3b:c9:fa:2d:d0:c6:83:e9:7c:17:6a:a5:7e:f3: 09:22:bb:cc:84:07:41:65:47:8b:1b:31:2c:9f:c3:48:3d:f5: 73:34:fa:7a:cf:94:2d:ea:60:7e:8a:76:7a:d3:0c:45:6d:ad: 0b:50:9b:33:a4:76:d4:93:5c:bb:96:49:63:39:73:34:0a:10: 0b:76:50:9e:f9:ee:01:56:ee:ff:e7:f2:42:16:ba:72:62:a9: 3a:cd:88:ad:df:57:b8:3e:ac:14:58:d7:bd:fb:e9:8a:74:a2: 02:7e:fd:95 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMjkw MTMxMzNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEM2QkQ1RDFCNUFGODI3 OURBMURCMjJEMzc4MEVDNDVDM0U2NzU3MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3iujGyIuvpQrGZR7qOYlbzdfQG4O2D1gU59x1w2nR+a/9wPo H19apPS80Do45TB253V9EsQdp7v/DuNOEiVMpBLP3G7lQmUVia51SBxfXKQleV8w rIcSViIcFTw0r99wPXuWpg4U7X1A2Hw9u4i2JmL+RISlrxokURyT1omtiuL+ob/b iYYvUvFtq72iHWicV2H12LQpgUz7mcjT7P2A1+Qh9zmQEs06YSgCN8sYPYeKfHoQ folg/sGbQkTJ2M3z/HA0M0e88deFbXfB16vr0ssYFTNR03ilcE++t4RI6lfZZgvq HKg46LPPV0dE+EjNOUGu5sgF0BVq9oTWj58RAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUxr1dG1r4J52h2yLTeA7EXD5nVwowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3hyMWRHMXI0SjUyaDJ5TFRlQTdFWEQ1blZ3by5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd9HIAwDQYJKoZIhvcNAQELBQADggEBAHFvUXymbFL9ZKXTYKmw+93z5wCX FKadiXszfd3zULr1Tf0aqEMQ4ge6OnY9BkLZcGkUQrY6uu3NyQqkcWVC1X00TKv/ JyY7U1It9AgMCvwrppSM3bbNfiCya9/ezrdv6sZy4bL2YAOGY/Pc+Bde9ANhbxoa RLq26Ql5/o6YJ3+uNU6wUZJvMrnYFFKYGxMozLOyH0Q7yfot0MaD6XwXaqV+8wki u8yEB0FlR4sbMSyfw0g99XM0+nrPlC3qYH6KdnrTDEVtrQtQmzOkdtSTXLuWSWM5 czQKEAt2UJ757gFW7v/n8kIWunJiqTrNiK3fV7g+rBRY17376Yp0ogJ+/ZU= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org