$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa File: 9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa (raw, json) Hash identifier: 3XtBTkeFt4j7KU9Er9X6qGXEfjGYKlk6OiERM7BBfDQ= Subject key identifier: F5:49:1E:DD:7A:FE:F4:84:CE:31:76:1F:B0:57:CB:2D:97:4B:CC:56 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0220 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa Signing time: Fri 31 May 2024 01:33:05 +0000 ROA not before: Fri 31 May 2024 01:33:05 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:33:05 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=F5491EDD7AFEF484CE31761FB057CB2D974BCC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:e9:86:0b:95:b7:04:2f:22:65:c4:33:90: f9:2c:a4:b4:54:2f:c3:d9:b1:81:3f:ab:04:d8:30: 7a:27:9d:50:19:80:ff:1e:4c:d0:e8:5f:26:73:ea: cd:a6:8e:dd:a2:9c:23:1e:f0:a7:e3:47:0d:5b:00: c5:f0:6b:72:61:fa:f5:c3:a9:d6:a7:82:8f:c5:44: b2:0a:eb:c5:aa:ba:f2:01:42:00:33:18:dc:3e:90: 5e:0b:73:15:ef:bd:ed:86:cb:11:cd:5b:0f:27:d4: fa:ff:86:4e:bb:ad:ce:56:f6:d3:0d:c0:f9:9d:8d: d4:bf:0b:76:5e:4c:44:de:40:92:e6:54:a6:41:96: 08:ff:00:0a:69:c3:c3:71:67:48:d5:d9:3d:5c:fc: 2e:cb:ab:c8:6c:0f:2c:4e:c9:b5:82:6d:11:20:7b: 77:48:37:ed:16:c0:ec:36:4d:f8:b8:27:89:ee:8c: ba:58:c4:bb:58:3a:df:e1:8d:48:ec:1b:10:2a:b0: ff:dc:83:73:47:f8:76:2d:58:96:75:36:cc:59:bb: 57:66:57:7c:80:0b:fc:1f:30:57:92:44:8a:97:45: ba:69:b8:5a:a9:89:60:5d:96:0b:90:81:c2:04:f9: a2:4a:4f:62:88:ee:dd:dd:7e:d7:f0:d9:56:02:7f: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:49:1E:DD:7A:FE:F4:84:CE:31:76:1F:B0:57:CB:2D:97:4B:CC:56 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9Uke3Xr-9ITOMXYfsFfLLZdLzFY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.208.0/21 Signature Algorithm: sha256WithRSAEncryption 68:87:ea:df:e8:f9:23:3e:d3:1a:78:3a:3d:e5:b7:7e:2d:26: d1:96:16:b9:4d:01:4d:e7:d3:9b:85:63:92:47:a5:53:dc:88: f7:e2:9a:4f:3d:5d:1e:ca:f9:4e:f7:8b:1c:82:52:a5:c0:38: 30:0b:ab:96:e3:89:d7:98:e0:76:d1:5f:05:39:1d:93:61:87: 6b:ef:fb:f4:68:e4:01:c8:01:14:01:b4:49:bc:30:81:b9:ff: 62:51:14:a9:f1:57:06:0c:1d:b0:9a:fb:5b:a0:19:99:00:b4: c1:d0:e8:64:53:2d:74:a2:a5:71:0e:b0:15:a5:e3:af:1d:a6: cc:aa:4f:ba:b1:30:a5:20:16:c2:0b:2a:02:85:5e:53:33:ee: 9d:18:68:cd:53:26:a0:73:a5:3e:cf:05:db:ae:57:56:4b:73: 2d:3f:b2:a5:36:7a:99:bb:46:f4:2e:67:43:00:08:63:2f:cc: 89:54:14:29:f8:a3:85:f9:aa:fd:b4:e3:14:1a:f6:b6:44:27: 6c:33:68:56:cf:53:5e:ab:34:a8:93:d0:51:ac:ed:ee:05:31: 46:53:bc:1b:5e:82:db:0a:1d:24:7e:af:cd:c7:68:02:a3:60: 6f:bd:c2:54:95:82:69:66:4c:5d:c5:01:67:ad:57:b4:dd:f7: 2a:b4:94:8f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTMzMDVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY1NDkxRUREN0FGRUY0 ODRDRTMxNzYxRkIwNTdDQjJEOTc0QkNDNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3humGC5W3BC8iZcQzkPkspLRUL8PZsYE/qwTYMHonnVAZgP8e TNDoXyZz6s2mjt2inCMe8KfjRw1bAMXwa3Jh+vXDqdango/FRLIK68WquvIBQgAz GNw+kF4LcxXvve2GyxHNWw8n1Pr/hk67rc5W9tMNwPmdjdS/C3ZeTETeQJLmVKZB lgj/AAppw8NxZ0jV2T1c/C7Lq8hsDyxOybWCbREge3dIN+0WwOw2Tfi4J4nujLpY xLtYOt/hjUjsGxAqsP/cg3NH+HYtWJZ1NsxZu1dmV3yAC/wfMFeSRIqXRbppuFqp iWBdlguQgcIE+aJKT2KI7t3dftfw2VYCfzS7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU9Uke3Xr+9ITOMXYfsFfLLZdLzFYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0LzlVa2UzWHItOUlUT01YWWZzRmZMTFpkTHpGWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMkNNAwDQYJKoZIhvcNAQELBQADggEBAGiH6t/o+SM+0xp4Oj3lt34tJtGW FrlNAU3n05uFY5JHpVPciPfimk89XR7K+U73ixyCUqXAODALq5bjideY4HbRXwU5 HZNhh2vv+/Ro5AHIARQBtEm8MIG5/2JRFKnxVwYMHbCa+1ugGZkAtMHQ6GRTLXSi pXEOsBWl468dpsyqT7qxMKUgFsILKgKFXlMz7p0YaM1TJqBzpT7PBduuV1ZLcy0/ sqU2epm7RvQuZ0MACGMvzIlUFCn4o4X5qv204xQa9rZEJ2wzaFbPU16rNKiT0FGs 7e4FMUZTvBtegtsKHSR+r83HaAKjYG+9wlSVgmlmTF3FAWetV7Td9yq0lI8= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:22 2024 by rpki-client on console-fra.rpki-client.org