$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yITE68nRNyNohHedXigbt99RtJA.roa File: yITE68nRNyNohHedXigbt99RtJA.roa (raw, json) Hash identifier: VCB0TPks++CZ9SKYnyZuT1T0tHRYGi0lA8km1skjP2k= Subject key identifier: C8:84:C4:EB:C9:D1:37:23:68:84:77:9D:5E:28:1B:B7:DF:51:B4:90 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0315 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yITE68nRNyNohHedXigbt99RtJA.roa Signing time: Sun 31 Mar 2024 01:38:42 +0000 ROA not before: Sun 31 Mar 2024 01:38:42 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 2516 IP address blocks: 219.108.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Mar 31 01:38:42 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=C884C4EBC9D137236884779D5E281BB7DF51B490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:d0:63:6f:09:c9:65:72:8c:37:2e:5a:a2: b3:20:53:11:17:51:55:6d:05:9d:53:16:7d:95:36: 0a:d0:a3:00:19:ba:e7:d0:68:69:6d:ec:00:80:59: f7:06:84:de:5c:8a:91:b6:e1:be:51:ae:77:9a:de: 60:2f:09:91:5f:6a:1b:42:2a:63:1a:75:b5:ab:0c: 3a:f7:37:de:7a:77:f0:c0:60:f5:41:75:b2:9b:d2: 98:12:ec:f8:3e:c9:b9:41:04:d0:16:5d:34:5b:0f: aa:5b:68:92:14:9c:14:e5:89:b8:3c:12:86:5e:d5: 28:3b:48:35:9a:8e:c7:5a:b2:ce:11:ce:6d:dd:56: 54:29:1a:e0:af:6b:37:46:a6:1e:50:f2:2f:46:40: 25:73:9f:2b:d0:49:93:50:44:8c:21:b0:ab:0d:2e: ce:c2:df:8d:77:a0:eb:e9:17:af:58:9c:e8:68:58: 3e:22:2d:d9:36:82:09:b6:7b:54:bf:68:82:0a:c1: ce:89:30:4e:84:b6:93:cf:ef:c4:51:bb:d2:34:94: 27:3f:cf:f1:00:8e:99:c3:c9:ea:79:c5:c4:d8:15: 29:a5:96:58:41:0a:87:1e:1e:9b:cc:c4:82:39:d9: ab:eb:ac:5b:08:ca:4d:da:e1:b7:76:ed:f6:46:a3: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:C4:EB:C9:D1:37:23:68:84:77:9D:5E:28:1B:B7:DF:51:B4:90 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yITE68nRNyNohHedXigbt99RtJA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption 29:b8:9c:84:08:34:0f:1b:df:e9:e0:d0:64:29:fe:0a:bc:3a: 68:c4:2e:2f:e8:53:20:57:62:e1:d8:2f:ee:8e:57:60:d8:90: 55:df:f0:b8:a8:6e:34:3f:6b:7b:d0:e2:80:5d:3b:38:21:ea: d8:d6:2e:ef:9a:26:a9:ff:80:2e:83:54:e1:4f:30:e2:b6:06: 89:bc:46:87:52:5f:cf:d0:e1:f1:2a:a9:fe:f2:c2:07:b4:57: fb:83:03:2a:6d:fd:fc:d2:43:cc:5e:e4:b2:ca:ae:17:95:c6: 11:0b:0b:d9:4b:58:48:37:2e:35:f5:03:c8:1a:04:02:fe:21: 3c:8b:6a:3a:34:ac:bb:30:4e:4f:59:72:f0:9e:4e:08:49:6f: 91:6e:19:74:32:f9:df:74:d4:6d:a9:81:0d:c9:41:c7:31:a2: 6c:ae:97:0d:3e:c7:3f:00:80:9f:36:13:df:c6:f6:93:36:98: 5b:d3:c3:cc:10:2e:a0:4b:69:c2:bd:53:2c:a5:d7:b9:a5:56: a8:d6:66:e7:6a:58:bb:76:b5:82:d2:f2:0c:38:56:4a:d4:77: e3:10:84:51:e1:5c:9a:95:e1:84:8b:da:a3:1b:21:03:b5:e3: 6f:be:32:90:16:6f:17:86:48:1a:cc:54:5a:e4:fa:93:dd:43: 9b:bc:11:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw MTM4NDJaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM4ODRDNEVCQzlEMTM3 MjM2ODg0Nzc5RDVFMjgxQkI3REY1MUI0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA/tBjbwnJZXKMNy5aorMgUxEXUVVtBZ1TFn2VNgrQowAZuufQ aGlt7ACAWfcGhN5cipG24b5Rrnea3mAvCZFfahtCKmMadbWrDDr3N956d/DAYPVB dbKb0pgS7Pg+yblBBNAWXTRbD6pbaJIUnBTlibg8EoZe1Sg7SDWajsdass4Rzm3d VlQpGuCvazdGph5Q8i9GQCVznyvQSZNQRIwhsKsNLs7C3413oOvpF69YnOhoWD4i Ldk2ggm2e1S/aIIKwc6JME6EtpPP78RRu9I0lCc/z/EAjpnDyep5xcTYFSmlllhB CoceHpvMxII52avrrFsIyk3a4bd27fZGowctAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUyITE68nRNyNohHedXigbt99RtJAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3lJVEU2OG5STnlOb2hIZWRYaWdidDk5UnRKQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDbbDANBgkqhkiG9w0BAQsFAAOCAQEAKbichAg0Dxvf6eDQZCn+Crw6aMQu L+hTIFdi4dgv7o5XYNiQVd/wuKhuND9re9DigF07OCHq2NYu75omqf+ALoNU4U8w 4rYGibxGh1Jfz9Dh8Sqp/vLCB7RX+4MDKm39/NJDzF7kssquF5XGEQsL2UtYSDcu NfUDyBoEAv4hPItqOjSsuzBOT1ly8J5OCElvkW4ZdDL533TUbamBDclBxzGibK6X DT7HPwCAnzYT38b2kzaYW9PDzBAuoEtpwr1TLKXXuaVWqNZm52pYu3a1gtLyDDhW StR34xCEUeFcmpXhhIvaoxshA7Xjb74ykBZvF4ZIGsxUWuT6k91Dm7wRVA== -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:31 2024 by rpki-client on console-ams.rpki-client.org