$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/kAQ71SRNAJRfdcoFHGJWkaRsCeQ.roa File: kAQ71SRNAJRfdcoFHGJWkaRsCeQ.roa (raw, json) Hash identifier: kOSPTBVuOMwS9OPjMIAm2lzRZhXmXsl/HZtEf3DEZB8= Subject key identifier: 90:04:3B:D5:24:4D:00:94:5F:75:CA:05:1C:62:56:91:A4:6C:09:E4 Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 54 Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/kAQ71SRNAJRfdcoFHGJWkaRsCeQ.roa Signing time: Sun 30 Jun 2024 01:31:39 +0000 ROA not before: Sun 30 Jun 2024 01:31:39 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 23816 IP address blocks: 202.239.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Jun 30 01:31:39 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=90043BD5244D00945F75CA051C625691A46C09E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:16:97:b8:98:e6:ee:34:98:5d:8e:c1:cd: 8b:3b:89:f6:68:e0:56:0e:52:fd:85:eb:95:59:62: 5b:09:f9:ae:6d:1b:f5:d4:d4:9a:99:13:90:61:26: db:35:15:f2:6b:da:8c:4c:e6:c4:8b:83:7f:0a:c2: 68:a4:20:7b:6d:68:9c:83:0d:e7:50:15:58:b7:9f: ea:e5:bb:a2:61:7f:a2:7f:ee:dc:c4:00:50:de:35: 97:7a:9b:52:db:93:77:00:37:da:5b:fe:af:6b:09: 42:34:2f:db:98:74:78:ad:4b:fa:16:f4:3e:88:7f: 01:27:9c:ae:3c:87:ff:31:e7:5e:ff:de:a1:15:48: 76:91:4b:84:c9:09:c3:0f:dd:24:73:c7:5e:5d:a1: 8a:19:c3:19:91:9c:a7:4a:61:96:94:4a:bc:28:c8: 99:b0:e4:cb:12:b3:5a:fa:9c:ee:32:d3:bb:37:30: 90:6e:38:91:16:c2:19:3b:5e:17:92:36:5a:63:89: cb:bb:36:8a:1a:86:af:9d:e8:54:ac:a4:e1:76:1a: 3c:0a:4b:e1:a5:bf:f0:90:58:30:c7:e7:1b:77:93: f0:58:8e:14:06:9f:14:38:b2:97:a2:80:90:f1:1c: 83:57:8b:c3:21:ab:d4:71:20:26:69:7a:d3:ed:8a: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:3B:D5:24:4D:00:94:5F:75:CA:05:1C:62:56:91:A4:6C:09:E4 X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/kAQ71SRNAJRfdcoFHGJWkaRsCeQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.239.0.0/20 Signature Algorithm: sha256WithRSAEncryption 87:f2:f1:6f:55:7b:d4:ba:71:f2:6d:b1:8d:d2:cc:4a:c4:22: 35:d4:fb:c6:09:9c:13:3d:c2:35:28:83:29:05:d2:54:05:ff: 0a:85:2b:b0:e6:25:69:02:ed:72:a3:0b:fd:5d:b8:0c:f8:75: 30:04:06:60:fc:81:92:db:c0:c4:ba:0d:75:1b:19:0d:bc:ce: a0:ce:77:7b:bc:a9:b6:9d:af:db:23:e1:e5:04:a7:6e:05:55: ad:e4:d6:1b:8b:00:51:66:1c:39:9b:06:00:1f:28:44:ed:51: 27:0b:7e:15:03:b7:fa:c9:20:19:5c:dc:4a:1d:94:d1:06:d1: e1:29:ef:1c:89:66:1e:5b:8e:0e:fa:12:4b:56:d9:6d:33:5c: d3:c5:0a:49:f7:ea:ab:3d:20:cd:47:8c:92:83:1f:4f:22:b4: 89:1b:a3:f4:7d:9a:dd:fe:20:49:1e:13:38:50:dc:cb:66:a7: 81:79:e5:92:55:da:03:1e:89:a6:ed:58:9a:c7:95:b2:f2:bb: 4e:20:8e:ad:37:d9:c5:9a:60:e6:64:7c:56:da:90:7c:40:50: 12:bf:4f:68:7d:5c:77:1c:63:2e:80:08:53:8c:09:56:78:72: c1:44:31:cc:ba:a4:8f:c8:f1:37:66:1e:fe:41:8e:d6:33:6a: e4:86:c5:ee -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDYzMDAx MzEzOVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoOTAwNDNCRDUyNDREMDA5 NDVGNzVDQTA1MUM2MjU2OTFBNDZDMDlFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2TFpe4mObuNJhdjsHNizuJ9mjgVg5S/YXrlVliWwn5rm0b9dTU mpkTkGEm2zUV8mvajEzmxIuDfwrCaKQge21onIMN51AVWLef6uW7omF/on/u3MQA UN41l3qbUtuTdwA32lv+r2sJQjQv25h0eK1L+hb0Poh/ASecrjyH/zHnXv/eoRVI dpFLhMkJww/dJHPHXl2hihnDGZGcp0phlpRKvCjImbDkyxKzWvqc7jLTuzcwkG44 kRbCGTteF5I2WmOJy7s2ihqGr53oVKyk4XYaPApL4aW/8JBYMMfnG3eT8FiOFAaf FDiyl6KAkPEcg1eLwyGr1HEgJml60+2KDJ0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSQBDvVJE0AlF91ygUcYlaRpGwJ5DAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTE2L2tBUTcxU1JOQUpSZmRjb0ZIR0pXa2FSc0NlUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATK7wAwDQYJKoZIhvcNAQELBQADggEBAIfy8W9Ve9S6cfJtsY3SzErE IjXU+8YJnBM9wjUogykF0lQF/wqFK7DmJWkC7XKjC/1duAz4dTAEBmD8gZLbwMS6 DXUbGQ28zqDOd3u8qbadr9sj4eUEp24FVa3k1huLAFFmHDmbBgAfKETtUScLfhUD t/rJIBlc3EodlNEG0eEp7xyJZh5bjg76EktW2W0zXNPFCkn36qs9IM1HjJKDH08i tIkbo/R9mt3+IEkeEzhQ3Mtmp4F55ZJV2gMeiabtWJrHlbLyu04gjq032cWaYOZk fFbakHxAUBK/T2h9XHccYy6ACFOMCVZ4csFEMcy6pI/I8TdmHv5BjtYzauSGxe4= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org