$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/judwM3NwROcRKvnvTyAaeIP8FCg.roa File: judwM3NwROcRKvnvTyAaeIP8FCg.roa (raw, json) Hash identifier: 1uxE1UPNZtGhSm+AOH954IirzTEbsU7WkCdH5m7dWVs= Subject key identifier: 8E:E7:70:33:73:70:44:E7:11:2A:F9:EF:4F:20:1A:78:83:FC:14:28 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 56 Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/judwM3NwROcRKvnvTyAaeIP8FCg.roa Signing time: Sun 31 Mar 2024 01:30:05 +0000 ROA not before: Sun 31 Mar 2024 01:30:05 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 10019 IP address blocks: 219.105.176.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Mar 31 01:30:05 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=8EE77033737044E7112AF9EF4F201A7883FC1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:05:4a:cd:9c:a7:cb:0c:f4:55:6d:48:c5:a7: 42:29:dc:cd:54:4d:f1:42:32:b0:6a:93:43:df:fd: 75:8c:a8:8b:68:95:5e:5a:9a:d3:ba:a7:d1:56:b4: 72:84:44:89:bb:c7:7a:31:d2:14:6b:61:00:9d:57: 26:e6:3d:f4:b9:88:d9:0c:86:77:3a:5c:99:2b:50: 2c:8b:ad:cf:b8:bc:47:02:0d:a7:69:c5:09:21:85: 9d:7f:cf:22:01:9c:a1:72:17:ce:b4:76:d2:91:37: f5:0b:e6:81:d5:ce:a4:41:d3:1e:78:dd:b7:17:9d: a3:16:75:30:ee:2f:57:62:59:ff:f2:b5:33:66:de: 19:f3:0e:d1:b9:32:fd:8c:d2:27:d9:92:d4:06:1c: d9:8a:f4:6a:20:9f:97:c2:d8:4b:fa:1e:d5:ca:51: 1b:f2:c0:25:e8:f2:f2:37:47:a8:37:15:45:61:75: 8a:c3:6e:a7:36:d8:45:1f:bf:0b:8a:60:11:5b:2b: 49:c9:15:8b:6d:7a:c0:2b:df:ee:b1:47:7d:a0:a1: 16:54:27:a4:c2:19:f2:0b:51:fa:63:0f:8a:47:10: 58:bf:63:70:80:0a:ed:c3:f0:6d:e3:ec:f7:51:d6: 35:71:81:3d:0b:ec:3a:f9:86:8e:5a:46:16:3e:bc: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:70:33:73:70:44:E7:11:2A:F9:EF:4F:20:1A:78:83:FC:14:28 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/judwM3NwROcRKvnvTyAaeIP8FCg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.105.176.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:a5:f0:4a:80:ba:e8:9b:8d:6a:6b:14:7c:03:1e:90:4c:c3: ee:7c:cd:3c:4b:a0:c6:0f:98:74:b9:d1:f0:76:cd:05:af:9b: 33:e0:d0:02:45:f0:2d:78:60:7e:9a:97:29:8b:63:56:74:f3: c4:18:04:43:b6:fa:fb:d6:43:bf:39:51:12:20:5b:ae:73:3a: 1f:1d:2b:8a:c1:c7:4d:42:6d:1a:29:a1:e7:91:5d:89:cb:9d: 67:30:02:2a:00:5c:e8:0a:89:ef:00:56:1f:63:f1:fe:71:83: 18:37:d2:e6:b1:1d:b1:41:0c:23:6a:7d:45:32:6e:9c:56:85: ab:96:72:95:7c:c2:17:5b:1a:f4:03:42:f2:44:67:41:6c:e9: 09:4f:c4:ca:20:ed:3d:17:c0:c4:ae:a7:b9:ce:df:fa:e5:ce: 21:bf:ad:10:0a:b2:dd:7f:8b:72:10:a7:63:5d:fc:3c:62:46: 3b:b2:c1:f0:9b:e0:72:c3:58:17:84:eb:25:9d:5d:1d:12:fa: 28:af:1a:4d:e0:e4:09:18:80:26:b9:12:d1:d6:53:6d:a6:b5: 13:21:27:e1:a6:c0:76:ee:5e:3d:bc:b6:7c:90:2a:13:9a:ff: 53:bf:6f:f3:c1:42:0a:8e:de:88:8d:ba:70:56:fd:89:e0:4b: d3:2d:c8:1c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI0MDMzMTAx MzAwNVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEVFNzcwMzM3MzcwNDRF NzExMkFGOUVGNEYyMDFBNzg4M0ZDMTQyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPgFSs2cp8sM9FVtSMWnQinczVRN8UIysGqTQ9/9dYyoi2iVXlqa 07qn0Va0coREibvHejHSFGthAJ1XJuY99LmI2QyGdzpcmStQLIutz7i8RwINp2nF CSGFnX/PIgGcoXIXzrR20pE39QvmgdXOpEHTHnjdtxedoxZ1MO4vV2JZ//K1M2be GfMO0bky/YzSJ9mS1AYc2Yr0aiCfl8LYS/oe1cpRG/LAJejy8jdHqDcVRWF1isNu pzbYRR+/C4pgEVsrSckVi216wCvf7rFHfaChFlQnpMIZ8gtR+mMPikcQWL9jcIAK 7cPwbePs91HWNXGBPQvsOvmGjlpGFj68M+UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSO53Azc3BE5xEq+e9PIBp4g/wUKDAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIvanVkd00zTndST2NSS3ZudlR5QWFlSVA4RkNnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNtpsDANBgkqhkiG9w0BAQsFAAOCAQEAHKXwSoC66JuNamsUfAMekEzD7nzN PEugxg+YdLnR8HbNBa+bM+DQAkXwLXhgfpqXKYtjVnTzxBgEQ7b6+9ZDvzlREiBb rnM6Hx0risHHTUJtGimh55FdicudZzACKgBc6AqJ7wBWH2Px/nGDGDfS5rEdsUEM I2p9RTJunFaFq5ZylXzCF1sa9ANC8kRnQWzpCU/EyiDtPRfAxK6nuc7f+uXOIb+t EAqy3X+LchCnY138PGJGO7LB8JvgcsNYF4TrJZ1dHRL6KK8aTeDkCRiAJrkS0dZT baa1EyEn4abAdu5ePby2fJAqE5r/U79v88FCCo7eiI26cFb9ieBL0y3IHA== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org