$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/XUE-CoKQcFEqH5kCtNJhAhtjIvI.roa File: XUE-CoKQcFEqH5kCtNJhAhtjIvI.roa (raw, json) Hash identifier: 8q2xn8TzKddWso61Hb31zBPVvB5JZJ4a/Lm1RLDSbLM= Subject key identifier: 5D:41:3E:0A:82:90:70:51:2A:1F:99:02:B4:D2:61:02:1B:63:22:F2 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 26 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/XUE-CoKQcFEqH5kCtNJhAhtjIvI.roa Signing time: Mon 20 May 2024 06:56:00 +0000 ROA not before: Mon 20 May 2024 06:56:00 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7672 IP address blocks: 211.19.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 20 06:56:00 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=5D413E0A829070512A1F9902B4D261021B6322F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6a:aa:fe:35:2b:1e:ac:ca:b6:a6:d8:bf:90: cc:6d:27:57:91:2d:ee:a1:6b:2e:ec:ec:0d:d2:e8: bc:9c:2a:08:d5:2c:1a:82:8a:cd:13:86:e2:99:ea: ec:4f:8f:15:0e:ea:d4:00:29:50:c6:95:d1:f5:14: cc:2c:6a:81:2b:5d:51:85:63:6f:c4:a7:db:fb:b5: 8b:32:35:c2:a3:ad:f7:b3:49:57:63:f3:d0:02:2e: 7f:43:5f:ab:16:12:0b:1c:e6:96:59:df:12:f0:df: 12:45:c4:c8:4f:dc:9b:3e:71:a8:b4:29:85:71:17: 0e:23:0d:d3:98:a5:8b:7e:5c:a8:1f:8b:55:e4:c8: 25:45:18:9d:17:84:22:a8:6e:b2:77:17:82:4c:91: 28:82:f5:4d:2d:61:79:20:44:4a:d2:b8:15:b4:ee: 3f:2a:2a:19:e6:cc:90:d2:7f:75:74:c9:ca:0f:36: e0:63:6c:32:74:83:b1:97:b0:91:8a:b2:84:e8:4c: 77:6f:ae:f6:e1:10:a1:6b:5b:6b:75:c7:68:44:60: 76:50:3c:e2:16:f1:99:48:6f:dc:7d:1b:0c:da:19: 9b:b5:18:81:00:6a:ab:e6:66:f2:06:23:28:1c:2d: af:d4:0c:31:07:4f:62:0f:bb:4d:4e:a2:7c:9c:6d: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:41:3E:0A:82:90:70:51:2A:1F:99:02:B4:D2:61:02:1B:63:22:F2 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/XUE-CoKQcFEqH5kCtNJhAhtjIvI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.19.192.0/22 Signature Algorithm: sha256WithRSAEncryption 41:3e:e6:7c:69:d9:91:3b:15:c7:70:7b:67:19:32:ae:6d:61: 5e:e9:95:de:6a:0b:ea:6c:8e:12:2c:c0:83:55:73:3f:8d:ba: 5d:ce:b8:71:07:3f:1e:8a:dc:08:df:8e:ef:bc:5d:75:17:35: 4b:3c:01:66:fb:ca:be:05:f9:ed:a4:ea:dd:60:01:7b:94:25: b9:8e:84:cb:9d:9e:d2:31:f3:4f:7b:91:9c:d9:5f:71:ed:fa: 86:79:8c:5a:bf:1c:4d:d0:4d:c7:40:fa:a8:4f:f8:5b:a5:14: a8:49:a4:34:17:10:10:af:cf:a4:5a:79:72:57:55:f6:6a:e4: 72:29:bd:78:62:d9:a6:28:85:6c:01:8f:79:76:9e:14:6e:10: 0e:79:ac:42:e7:35:a1:7b:87:30:e8:39:a0:a2:19:6c:84:49: de:3f:a9:1f:4f:b3:f8:21:0e:e5:01:38:f8:36:7a:8a:63:37: b6:8a:c5:01:34:63:df:c3:fd:e7:88:9f:2a:a2:a4:02:a1:3b: 6c:74:e9:31:d7:6f:20:97:ef:e2:d7:05:df:fa:89:2f:7e:25: 5f:09:6b:c1:ba:65:65:a6:a9:4e:09:c4:80:1a:eb:aa:1b:10: f6:30:79:e8:46:e1:c4:e1:b6:01:80:b8:90:78:2c:6b:e1:68: 6f:e2:2b:c0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI0MDUyMDA2 NTYwMFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNUQ0MTNFMEE4MjkwNzA1 MTJBMUY5OTAyQjREMjYxMDIxQjYzMjJGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOlqqv41Kx6syram2L+QzG0nV5Et7qFrLuzsDdLovJwqCNUsGoKK zROG4pnq7E+PFQ7q1AApUMaV0fUUzCxqgStdUYVjb8Sn2/u1izI1wqOt97NJV2Pz 0AIuf0NfqxYSCxzmllnfEvDfEkXEyE/cmz5xqLQphXEXDiMN05ili35cqB+LVeTI JUUYnReEIqhusncXgkyRKIL1TS1heSBEStK4FbTuPyoqGebMkNJ/dXTJyg824GNs MnSDsZewkYqyhOhMd2+u9uEQoWtba3XHaERgdlA84hbxmUhv3H0bDNoZm7UYgQBq q+Zm8gYjKBwtr9QMMQdPYg+7TU6ifJxtDbUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRdQT4KgpBwUSofmQK00mECG2Mi8jAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvWFVFLUNvS1FjRkVxSDVrQ3ROSmhBaHRqSXZJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAtMTwDANBgkqhkiG9w0BAQsFAAOCAQEAQT7mfGnZkTsVx3B7Zxkyrm1hXumV 3moL6myOEizAg1VzP426Xc64cQc/HorcCN+O77xddRc1SzwBZvvKvgX57aTq3WAB e5QluY6Ey52e0jHzT3uRnNlfce36hnmMWr8cTdBNx0D6qE/4W6UUqEmkNBcQEK/P pFp5cldV9mrkcim9eGLZpiiFbAGPeXaeFG4QDnmsQuc1oXuHMOg5oKIZbIRJ3j+p H0+z+CEO5QE4+DZ6imM3torFATRj38P954ifKqKkAqE7bHTpMddvIJfv4tcF3/qJ L34lXwlrwbplZaapTgnEgBrrqhsQ9jB56EbhxOG2AYC4kHgsa+Fob+IrwA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:03:15 2025 by rpki-client