$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yVjcpzyEuPEgG7Iq2BjUqSUpPEQ.roa File: yVjcpzyEuPEgG7Iq2BjUqSUpPEQ.roa (raw, json) Hash identifier: JRESSxQXYiPN8Mw7MTw/gEBIAsDb6Lid4gDT6yi22Rc= Subject key identifier: C9:58:DC:A7:3C:84:B8:F1:20:1B:B2:2A:D8:18:D4:A9:25:29:3C:44 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 028D Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yVjcpzyEuPEgG7Iq2BjUqSUpPEQ.roa Signing time: Thu 29 Feb 2024 01:31:31 +0000 ROA not before: Thu 29 Feb 2024 01:31:31 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 2516 IP address blocks: 59.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Feb 29 01:31:31 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=C958DCA73C84B8F1201BB22AD818D4A925293C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:49:17:7a:0c:63:40:e9:96:45:86:5b:88: 67:bc:bb:8d:51:12:3f:5d:37:c9:39:74:cf:9b:e1: 83:0c:09:00:cd:80:d6:2f:1e:5f:04:27:13:7d:6d: c1:de:1b:9c:67:de:02:9d:a2:bb:01:7d:d5:b6:30: 6e:87:bc:66:7d:cb:6a:01:b8:3d:c6:ae:c7:a9:47: 0d:54:12:6f:ed:21:33:c2:ce:91:49:44:68:2a:54: 8f:c4:57:80:86:bd:9f:31:dd:d7:9c:cb:46:ca:72: 47:81:24:78:54:e3:d8:a4:d3:28:76:6d:36:6c:0c: 38:bb:a3:b1:b6:b3:d9:c6:ee:7c:65:f0:61:66:bb: 32:de:8a:47:57:7c:db:ee:61:a7:11:3a:05:89:d0: 73:85:25:06:55:75:3f:78:a8:1a:d0:34:83:0c:fa: 0d:34:c1:cb:35:69:15:ec:ec:90:9a:04:b8:3c:a0: a7:a7:ff:66:78:19:dd:b1:61:69:8a:46:b5:8b:b3: 36:6d:48:27:33:2b:05:2a:68:b3:c6:90:8e:5b:c2: 3d:7f:2b:0d:5b:3c:79:b8:e3:99:e5:64:6b:8a:f9: d6:b8:fd:73:63:07:7e:39:80:57:26:19:b8:bc:79: ec:67:07:91:e9:e4:61:a8:08:39:69:e0:a1:6f:b1: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:58:DC:A7:3C:84:B8:F1:20:1B:B2:2A:D8:18:D4:A9:25:29:3C:44 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yVjcpzyEuPEgG7Iq2BjUqSUpPEQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:be:7f:0b:06:c2:2e:75:fe:ec:eb:c1:be:df:91:61:99:ce: b4:6c:b6:61:b4:95:44:9c:31:71:95:9c:3a:7a:88:8c:ba:e4: 63:2e:87:bd:6e:96:03:73:f1:a2:07:dd:9e:29:6a:a1:92:29: 7b:26:ff:f7:61:9e:ca:ce:a8:19:36:99:de:9f:8f:58:64:be: ff:2e:05:03:c0:48:1d:41:8b:cc:74:fb:0e:6b:c9:bd:ea:63: 80:89:4e:82:e1:04:2b:6d:e7:5c:65:69:a0:67:1b:1f:fa:f9: af:e2:48:d2:41:c3:c0:a4:2f:51:6a:cb:20:86:96:5d:1b:9f: 90:52:c7:51:26:11:02:21:6e:1c:86:6b:fc:63:63:b7:e1:79: 70:4c:e6:98:8a:9a:c5:4a:73:41:ee:c6:be:09:87:ba:7f:2d: dc:b1:7a:99:c6:26:e5:4c:93:6b:5f:37:bd:85:7b:75:a3:ad: f2:f7:4f:93:9d:ff:17:cd:7c:dd:f3:d7:7b:47:22:af:2e:c6: 4f:08:8f:b2:23:86:48:2a:14:78:ac:8d:ce:1d:9e:2c:2e:b7: 16:2d:d3:6f:b5:09:aa:07:75:4c:49:98:79:4d:ea:0c:c4:db: da:88:0f:44:89:0b:a1:04:24:2b:4a:e2:d1:af:ea:92:eb:75: 2b:27:b4:6d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMjkw MTMxMzFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEM5NThEQ0E3M0M4NEI4 RjEyMDFCQjIyQUQ4MThENEE5MjUyOTNDNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2O0kXegxjQOmWRYZbiGe8u41REj9dN8k5dM+b4YMMCQDNgNYv Hl8EJxN9bcHeG5xn3gKdorsBfdW2MG6HvGZ9y2oBuD3GrsepRw1UEm/tITPCzpFJ RGgqVI/EV4CGvZ8x3decy0bKckeBJHhU49ik0yh2bTZsDDi7o7G2s9nG7nxl8GFm uzLeikdXfNvuYacROgWJ0HOFJQZVdT94qBrQNIMM+g00wcs1aRXs7JCaBLg8oKen /2Z4Gd2xYWmKRrWLszZtSCczKwUqaLPGkI5bwj1/Kw1bPHm445nlZGuK+da4/XNj B345gFcmGbi8eexnB5Hp5GGoCDlp4KFvsTRpAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUyVjcpzyEuPEgG7Iq2BjUqSUpPEQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL3lWamNwenlFdVBFZ0c3SXEyQmpVcVNVcFBFUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA7gzANBgkqhkiG9w0BAQsFAAOCAQEAIb5/CwbCLnX+7OvBvt+RYZnOtGy2 YbSVRJwxcZWcOnqIjLrkYy6HvW6WA3PxogfdnilqoZIpeyb/92Geys6oGTaZ3p+P WGS+/y4FA8BIHUGLzHT7DmvJvepjgIlOguEEK23nXGVpoGcbH/r5r+JI0kHDwKQv UWrLIIaWXRufkFLHUSYRAiFuHIZr/GNjt+F5cEzmmIqaxUpzQe7GvgmHun8t3LF6 mcYm5UyTa183vYV7daOt8vdPk53/F8183fPXe0ciry7GTwiPsiOGSCoUeKyNzh2e LC63Fi3Tb7UJqgd1TEmYeU3qDMTb2ogPRIkLoQQkK0ri0a/qkut1Kye0bQ== -----END CERTIFICATE-----Generated at Sat Jun 15 02:41:48 2024 by rpki-client on console-ams.rpki-client.org