$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/iUQk80TeyukU6cprzlsa0svdcko.roa File: iUQk80TeyukU6cprzlsa0svdcko.roa (raw, json) Hash identifier: PFATuSQC6J2QIodRS+af/Ntd8xFPyDpY1cP3ruFDlK4= Subject key identifier: 89:44:24:F3:44:DE:CA:E9:14:E9:CA:6B:CE:5B:1A:D2:CB:DD:72:4A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 02A2 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iUQk80TeyukU6cprzlsa0svdcko.roa Signing time: Fri 31 May 2024 01:39:51 +0000 ROA not before: Fri 31 May 2024 01:39:51 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 119.150.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:39:51 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=894424F344DECAE914E9CA6BCE5B1AD2CBDD724A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:07:89:33:a3:5e:81:e8:0e:d3:46:ef:d3: ed:21:3c:33:79:2b:b5:ca:f3:2d:be:12:ce:fe:5f: 29:67:72:d4:5c:5a:13:74:8d:28:57:5a:cf:f1:cb: b3:b3:b8:9f:26:48:83:99:6a:62:ac:d3:6a:74:80: 8b:73:9d:d2:f4:88:cf:3c:63:35:21:ea:9b:b8:85: e7:69:82:f9:f7:8b:d5:c8:16:9c:36:d4:50:c8:20: 22:8f:cf:49:78:cb:29:28:19:8f:23:8e:d0:1a:9a: 1a:21:15:e5:af:e5:36:92:ba:83:4a:74:0b:eb:ab: 94:76:5f:7a:86:e0:8c:51:5c:3b:40:97:59:17:08: 9a:e1:c6:d4:be:bb:98:c6:8f:51:f8:75:9a:75:d3: 51:ca:7d:3a:8f:a3:c2:06:3f:94:f0:b4:2e:73:e8: d4:3b:fb:de:67:2d:49:e7:6c:55:2b:5b:1b:df:aa: 8a:4f:d5:7d:7a:93:78:a2:75:72:64:bc:6c:54:9b: 1a:fd:ef:30:77:f8:50:3d:72:af:4a:51:67:53:b0: 2d:9f:09:f6:8a:ea:22:c7:e5:f1:f8:44:ad:ab:67: ac:77:ce:0d:a9:14:2a:bd:6a:6c:ca:0e:4c:79:cd: ee:47:af:10:20:78:2c:c5:2b:e8:85:0f:13:52:f0: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:44:24:F3:44:DE:CA:E9:14:E9:CA:6B:CE:5B:1A:D2:CB:DD:72:4A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/iUQk80TeyukU6cprzlsa0svdcko.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.216.0/21 Signature Algorithm: sha256WithRSAEncryption 13:9b:1b:cc:f8:aa:99:6e:99:1a:1d:8a:8a:41:98:ee:80:81: 77:a1:7f:06:78:33:0a:25:84:e3:c7:80:24:46:12:3d:2e:52: 8a:26:b2:5d:78:9f:f9:06:51:e2:1b:d3:5b:0e:95:27:d0:05: 66:71:79:32:90:f3:23:61:59:3e:d6:de:49:0b:de:ab:f3:9f: c9:bb:8d:a6:2e:e7:48:b9:c4:28:0c:95:6d:2a:e0:57:c4:3b: 27:b1:d0:7e:b1:5c:be:52:6a:0d:a9:61:30:40:59:ca:f3:ae: 77:d3:f1:33:60:67:35:06:d8:17:22:5a:b7:bd:49:aa:91:2f: 06:c0:6e:18:de:6b:4a:97:11:71:79:f5:54:5d:80:8a:69:98: 03:88:f3:02:f9:43:b8:bb:f8:dd:07:2b:19:9c:c2:8d:08:e7: d3:96:d5:c0:09:49:c0:d2:a6:a4:27:d4:71:0c:0e:f7:8a:a0: fd:ce:cf:55:42:76:3e:53:ab:cf:86:9c:b3:6e:4d:bb:c1:78: 3d:f5:9a:96:1a:6d:50:0f:26:f2:39:d6:85:37:ab:72:a8:94: a4:9e:8b:cc:cb:55:10:c3:76:21:81:9f:7f:49:1f:f8:ef:de: 93:86:f8:6d:16:28:c4:92:61:9d:29:52:3d:d7:20:33:8a:93: 69:92:8a:d2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTM5NTFaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg5NDQyNEYzNDRERUNB RTkxNEU5Q0E2QkNFNUIxQUQyQ0JERDcyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfjgeJM6NegegO00bv0+0hPDN5K7XK8y2+Es7+XylnctRcWhN0 jShXWs/xy7OzuJ8mSIOZamKs02p0gItzndL0iM88YzUh6pu4hedpgvn3i9XIFpw2 1FDIICKPz0l4yykoGY8jjtAamhohFeWv5TaSuoNKdAvrq5R2X3qG4IxRXDtAl1kX CJrhxtS+u5jGj1H4dZp101HKfTqPo8IGP5TwtC5z6NQ7+95nLUnnbFUrWxvfqopP 1X16k3iidXJkvGxUmxr97zB3+FA9cq9KUWdTsC2fCfaK6iLH5fH4RK2rZ6x3zg2p FCq9amzKDkx5ze5HrxAgeCzFK+iFDxNS8DxRAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUiUQk80TeyukU6cprzlsa0svdckowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2lVUWs4MFRleXVrVTZjcHJ6bHNhMHN2ZGNrby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN3ltgwDQYJKoZIhvcNAQELBQADggEBABObG8z4qplumRodiopBmO6AgXeh fwZ4MwolhOPHgCRGEj0uUoomsl14n/kGUeIb01sOlSfQBWZxeTKQ8yNhWT7W3kkL 3qvzn8m7jaYu50i5xCgMlW0q4FfEOyex0H6xXL5Sag2pYTBAWcrzrnfT8TNgZzUG 2BciWre9SaqRLwbAbhjea0qXEXF59VRdgIppmAOI8wL5Q7i7+N0HKxmcwo0I59OW 1cAJScDSpqQn1HEMDveKoP3Oz1VCdj5Tq8+GnLNuTbvBeD31mpYabVAPJvI51oU3 q3KolKSei8zLVRDDdiGBn39JH/jv3pOG+G0WKMSSYZ0pUj3XIDOKk2mSitI= -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:23 2024 by rpki-client on console-fra.rpki-client.org