$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/kNnYQFLSwm39q1b_rueoUguiqkA.roa File: kNnYQFLSwm39q1b_rueoUguiqkA.roa (raw, json) Hash identifier: KnM6EdEJnwBaJJwiCLCtXVyerGkCAqPT8oWQNOf9L6o= Subject key identifier: 90:D9:D8:40:52:D2:C2:6D:FD:AB:56:FF:AE:E7:A8:52:0B:A2:AA:40 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 27 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/kNnYQFLSwm39q1b_rueoUguiqkA.roa Signing time: Mon 20 May 2024 06:56:00 +0000 ROA not before: Mon 20 May 2024 06:56:00 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7672 IP address blocks: 218.223.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 20 06:56:00 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=90D9D84052D2C26DFDAB56FFAEE7A8520BA2AA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:94:fc:de:e6:39:01:81:37:8a:3c:49:45: 9f:9d:aa:23:fe:09:d0:d8:fa:41:45:dc:7b:bc:05: 0f:24:88:4e:b3:b9:d6:f9:4a:47:3e:61:fc:1b:04: 0f:58:3a:5b:b3:ae:89:89:b8:11:28:7c:30:93:71: ec:d0:d8:01:5b:89:81:ca:d9:39:d1:86:d8:cb:c8: 29:07:76:8b:bb:e4:82:97:4f:d8:d7:b5:94:31:eb: 6b:81:3c:65:55:8c:22:de:1b:38:58:28:9e:67:ba: 34:6f:1f:19:ae:25:ac:5c:18:9e:66:74:2d:b6:f1: 56:6b:49:b5:58:25:6f:82:6b:34:7d:80:6d:b4:cd: c4:d6:71:3d:76:ba:8a:31:ad:df:c8:d6:e9:e0:c5: bc:67:ce:97:db:0c:c7:21:91:be:08:70:f1:81:1e: bb:10:74:c9:e3:26:27:9a:c1:4e:93:20:d3:55:e5: 9b:bc:c1:52:ea:9a:cf:4c:b7:f3:fe:ee:eb:f4:67: a7:00:67:4b:5d:5b:9c:8f:f1:c1:5c:08:52:18:42: 6e:4c:18:92:35:e5:31:a1:d0:b7:38:a8:9c:9b:d8: 2b:76:7e:80:9f:14:b3:95:bf:64:e5:31:60:d1:93: 48:7c:2b:be:f6:85:1a:f5:a6:f5:0b:4b:47:57:be: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D9:D8:40:52:D2:C2:6D:FD:AB:56:FF:AE:E7:A8:52:0B:A2:AA:40 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/kNnYQFLSwm39q1b_rueoUguiqkA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.223.208.0/20 Signature Algorithm: sha256WithRSAEncryption 87:49:f9:8d:66:dd:b9:d5:28:36:d8:9f:97:d7:85:44:3b:a0: 1e:b4:a5:5e:d8:19:77:15:36:fd:0a:46:48:4c:3a:35:92:26: bb:28:ac:0a:df:aa:22:2f:81:ba:4f:5f:34:1a:e7:6e:5b:76: c8:50:51:9d:8e:04:6f:02:e2:8a:08:7e:75:69:27:3b:5e:c8: 3f:e7:28:aa:15:34:63:63:b1:53:69:df:fc:cd:50:06:10:de: 09:29:7b:2b:20:ee:2c:d8:6a:7b:49:cd:a6:29:e0:2a:32:ae: f7:b7:f5:e2:00:21:04:25:3b:fa:79:4a:fc:67:c9:20:39:41: bb:c7:0a:48:a6:a1:ec:2e:7b:d3:5b:15:64:6b:30:b8:81:3a: 41:ae:4b:02:e6:c3:27:b6:8e:44:94:a2:65:81:4b:ca:57:4f: 67:c4:ef:fc:44:98:d5:1b:df:b6:4a:44:de:64:96:92:71:2d: 8e:ca:43:25:71:67:49:e5:0a:8a:c3:91:5c:49:88:9e:ad:1c: 9f:ee:f1:4e:32:50:fa:b3:33:0c:d8:6a:bf:39:73:3b:87:15: f1:83:d0:ec:c8:92:c6:f9:56:95:24:e7:cb:ec:38:b8:7a:60: 26:f4:d7:21:9d:7b:4e:47:12:b4:f8:39:ed:45:de:e2:ff:71: fd:31:ee:e6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI0MDUyMDA2 NTYwMFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoOTBEOUQ4NDA1MkQyQzI2 REZEQUI1NkZGQUVFN0E4NTIwQkEyQUE0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKrllPze5jkBgTeKPElFn52qI/4J0Nj6QUXce7wFDySITrO51vlK Rz5h/BsED1g6W7OuiYm4ESh8MJNx7NDYAVuJgcrZOdGG2MvIKQd2i7vkgpdP2Ne1 lDHra4E8ZVWMIt4bOFgonme6NG8fGa4lrFwYnmZ0LbbxVmtJtVglb4JrNH2AbbTN xNZxPXa6ijGt38jW6eDFvGfOl9sMxyGRvghw8YEeuxB0yeMmJ5rBTpMg01Xlm7zB Uuqaz0y38/7u6/RnpwBnS11bnI/xwVwIUhhCbkwYkjXlMaHQtzionJvYK3Z+gJ8U s5W/ZOUxYNGTSHwrvvaFGvWm9QtLR1e+3IsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSQ2dhAUtLCbf2rVv+u56hSC6KqQDAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIva05uWVFGTFN3bTM5cTFiX3J1ZW9VZ3VpcWtBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNrf0DANBgkqhkiG9w0BAQsFAAOCAQEAh0n5jWbdudUoNtifl9eFRDugHrSl XtgZdxU2/QpGSEw6NZImuyisCt+qIi+Buk9fNBrnblt2yFBRnY4EbwLiigh+dWkn O17IP+coqhU0Y2OxU2nf/M1QBhDeCSl7KyDuLNhqe0nNpingKjKu97f14gAhBCU7 +nlK/GfJIDlBu8cKSKah7C5701sVZGswuIE6Qa5LAubDJ7aORJSiZYFLyldPZ8Tv /ESY1RvftkpE3mSWknEtjspDJXFnSeUKisORXEmInq0cn+7xTjJQ+rMzDNhqvzlz O4cV8YPQ7MiSxvlWlSTny+w4uHpgJvTXIZ17TkcStPg57UXe4v9x/THu5g== -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org