$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/SY3s4xnwBRGbdF9KyCSwEfuoOCg.roa File: SY3s4xnwBRGbdF9KyCSwEfuoOCg.roa (raw, json) Hash identifier: QrwkqEXHMRYms+R0tnaLylJ5HSrycUCJ4LRf6XLdaZc= Subject key identifier: 49:8D:EC:E3:19:F0:05:11:9B:74:5F:4A:C8:24:B0:11:FB:A8:38:28 Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 5C Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/SY3s4xnwBRGbdF9KyCSwEfuoOCg.roa Signing time: Mon 01 Jul 2024 06:13:20 +0000 ROA not before: Mon 01 Jul 2024 06:13:20 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 38631 IP address blocks: 119.235.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Jul 1 06:13:20 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=498DECE319F005119B745F4AC824B011FBA83828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:24:ca:5f:aa:2a:e2:3f:b4:f1:b1:b7:51: 47:72:ce:a0:92:2f:04:03:d2:b5:c9:0c:f4:2a:84: 3b:48:d5:03:73:df:d5:c9:4f:13:47:5c:12:75:e3: 44:2c:c9:18:6a:a6:cb:38:89:6a:bd:47:21:ba:33: 4c:e0:f4:1a:3c:ea:65:e1:42:f1:8e:0c:24:d2:91: e5:7e:30:ce:64:fc:09:07:a4:ee:4f:77:32:2a:dd: 50:1a:2d:b0:cf:a6:9b:a3:80:00:1f:68:bb:11:b8: f7:d3:25:70:03:e6:b8:95:ab:91:62:cb:f9:db:45: 48:37:64:85:1f:c4:5e:80:2b:a0:2f:76:f4:25:d4: d1:c3:93:49:d9:25:b0:34:99:43:41:79:40:a6:a8: 04:1f:2b:84:33:77:9d:60:74:04:ae:95:75:d2:45: 06:27:04:f3:26:bf:1f:46:8f:f2:4a:a6:94:3d:51: 71:6e:f5:f8:87:be:64:f4:02:00:46:9f:7f:51:0c: d2:d1:9f:99:6c:4d:48:00:57:d5:53:61:fe:43:4f: 26:2c:d1:e7:7f:47:95:f6:9f:fe:6b:9a:fd:a6:d8: ce:a9:65:b1:c4:3b:92:59:64:3f:d1:23:7e:fc:50: 46:3b:5a:a5:57:cf:e1:f9:50:d9:fc:cf:68:80:28: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8D:EC:E3:19:F0:05:11:9B:74:5F:4A:C8:24:B0:11:FB:A8:38:28 X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/SY3s4xnwBRGbdF9KyCSwEfuoOCg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.235.224.0/24 Signature Algorithm: sha256WithRSAEncryption 02:88:60:1f:58:17:97:cd:fd:3d:5f:bd:17:33:48:36:0a:37: 03:cf:cf:d6:92:b8:24:d9:8f:82:e8:95:f8:93:4a:68:37:11: 70:34:4a:93:95:a7:93:24:24:20:5f:44:a8:b7:c8:e1:a3:7a: 7d:2b:2d:6f:16:c9:fd:6d:3b:5f:36:99:3a:36:88:69:c5:b4: 1a:87:0e:69:e4:80:81:f3:0d:2b:18:36:eb:98:aa:95:59:c6: bb:d9:43:82:d0:3b:5d:6d:d1:9a:f9:c0:fe:d5:70:4a:18:53: 89:08:c7:18:a2:50:8d:65:25:aa:37:9e:29:bc:cd:bd:df:3a: f1:a6:57:fe:16:8a:68:32:a2:15:28:d9:59:1a:0a:8c:55:1a: cb:42:ee:83:ee:eb:5b:6e:5c:d9:48:5d:59:68:fd:0a:cb:c3: 2e:d6:62:30:a7:3e:5a:10:f5:ee:75:20:f4:4e:f2:45:aa:54: 7f:2e:db:86:39:cf:aa:1f:bc:d1:19:cc:dd:f2:32:c3:57:f1: 58:27:18:41:bf:a2:ae:1c:bd:dd:d5:d2:ef:31:61:f0:1a:a9: 68:f7:5a:fe:43:37:d4:be:77:26:43:e5:18:51:e8:82:67:3b: 80:6b:97:a2:70:5f:50:6c:f4:29:9b:f2:23:27:53:4e:97:0c: 40:ab:55:d6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDcwMTA2 MTMyMFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoNDk4REVDRTMxOUYwMDUx MTlCNzQ1RjRBQzgyNEIwMTFGQkE4MzgyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALWKJMpfqiriP7TxsbdRR3LOoJIvBAPStckM9CqEO0jVA3Pf1clP E0dcEnXjRCzJGGqmyziJar1HIbozTOD0GjzqZeFC8Y4MJNKR5X4wzmT8CQek7k93 MirdUBotsM+mm6OAAB9ouxG499MlcAPmuJWrkWLL+dtFSDdkhR/EXoAroC929CXU 0cOTSdklsDSZQ0F5QKaoBB8rhDN3nWB0BK6VddJFBicE8ya/H0aP8kqmlD1RcW71 +Ie+ZPQCAEaff1EM0tGfmWxNSABX1VNh/kNPJizR539Hlfaf/mua/abYzqllscQ7 kllkP9EjfvxQRjtapVfP4flQ2fzPaIAoH6ECAwEAAaOCAigwggIkMB0GA1UdDgQW BBRJjezjGfAFEZt0X0rIJLAR+6g4KDAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTE2L1NZM3M0eG53QlJHYmRGOUt5Q1N3RWZ1b09DZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAB36+AwDQYJKoZIhvcNAQELBQADggEBAAKIYB9YF5fN/T1fvRczSDYK NwPPz9aSuCTZj4LolfiTSmg3EXA0SpOVp5MkJCBfRKi3yOGjen0rLW8Wyf1tO182 mTo2iGnFtBqHDmnkgIHzDSsYNuuYqpVZxrvZQ4LQO11t0Zr5wP7VcEoYU4kIxxii UI1lJao3nim8zb3fOvGmV/4WimgyohUo2VkaCoxVGstC7oPu61tuXNlIXVlo/QrL wy7WYjCnPloQ9e51IPRO8kWqVH8u24Y5z6ofvNEZzN3yMsNX8VgnGEG/oq4cvd3V 0u8xYfAaqWj3Wv5DN9S+dyZD5RhR6IJnO4Brl6JwX1Bs9Cmb8iMnU06XDECrVdY= -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org