$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/nxulXqZST4ygUFftlBTmU97mGUQ.roa File: nxulXqZST4ygUFftlBTmU97mGUQ.roa (raw, json) Hash identifier: H5LWFPOTGYxFvQbIignDvEet8G/9B5VYCJ/6mN2/pOc= Subject key identifier: 9F:1B:A5:5E:A6:52:4F:8C:A0:50:57:ED:94:14:E6:53:DE:E6:19:44 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04B8 Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nxulXqZST4ygUFftlBTmU97mGUQ.roa Signing time: Thu 29 Feb 2024 01:33:06 +0000 ROA not before: Thu 29 Feb 2024 01:33:06 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 219.112.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:33:06 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=9F1BA55EA6524F8CA05057ED9414E653DEE61944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:ae:89:e5:36:b5:2e:0d:de:09:e2:19:0b: d6:67:6c:2d:68:fd:df:19:b1:7b:4e:fd:e4:45:4e: 30:3e:72:52:ab:5d:9e:8e:0f:22:dd:ec:a3:48:dd: cc:11:1e:ad:19:f6:91:f7:6e:8a:63:49:4c:0a:7d: 0b:31:03:0c:67:93:40:b0:7f:a7:71:b4:89:85:67: 67:1d:3e:94:86:7e:80:ad:78:a9:48:cf:6a:c0:e3: 86:b4:94:66:92:a5:87:e7:4a:b6:d6:8c:a9:bb:60: 09:0c:c5:ec:80:ec:7b:5e:99:f5:68:a2:ea:9f:07: 5f:ec:ac:47:b9:a6:bd:e5:57:aa:f5:9b:00:3e:51: 15:4a:0e:f9:73:16:74:3c:1f:0f:8c:50:e4:b1:6e: 54:6a:20:25:c0:90:29:d9:fc:e3:c7:1b:68:4d:7b: 5f:a6:c4:9d:49:fb:38:0b:78:34:e8:7e:3c:0d:f4: b4:49:92:e0:18:fe:f9:3f:1e:62:ce:c6:e9:10:ef: 44:4d:cc:c7:b1:c4:21:dc:9f:31:a5:27:16:d2:48: e6:48:4f:15:b3:14:08:b9:34:02:e2:fb:77:a9:52: c1:ab:b9:92:95:bb:80:fa:f8:7a:f1:8f:b6:84:e2: 98:c7:48:d9:64:49:56:98:7d:84:3b:38:52:da:41: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1B:A5:5E:A6:52:4F:8C:A0:50:57:ED:94:14:E6:53:DE:E6:19:44 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nxulXqZST4ygUFftlBTmU97mGUQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.112.160.0/19 Signature Algorithm: sha256WithRSAEncryption 09:90:9f:0d:a8:ce:0b:cc:5e:32:e1:b3:79:a3:e9:92:20:00: fd:8c:2d:ba:57:29:c4:41:e8:80:f1:86:f8:17:99:f4:6c:b7: 49:22:a4:04:19:87:25:1e:df:ac:04:03:18:5e:34:d7:f9:99: 33:a3:61:f3:d4:aa:69:9f:74:ff:56:4e:3f:80:9f:c7:d3:44: 4f:c2:e1:51:48:f8:e5:ba:75:6a:97:6a:e6:97:24:e2:b9:37: 02:f2:7a:a5:8b:87:ea:d0:b6:ee:96:23:fa:66:d2:b3:b8:55: 8b:db:90:d6:f2:96:d9:2a:0f:ea:6d:01:d3:46:e5:25:54:dc: c6:a9:bc:39:20:7d:a9:5a:8b:b1:a0:28:2a:a6:0f:e4:99:f2: cf:d9:3a:e0:da:0f:b5:6d:a4:d3:e4:d7:27:b1:7d:a8:6d:a2: 5b:cc:02:43:d2:11:be:cd:03:d4:60:fc:b8:22:d4:88:3c:50: 73:f1:2e:0e:81:3a:1d:6e:93:3b:aa:6e:3d:81:f6:16:e6:3f: c0:e0:00:4d:48:59:e0:75:a2:d8:74:a0:58:60:cb:da:1d:5c: f2:db:53:d0:b1:82:b0:2d:ae:c8:41:64:f4:9e:28:06:d2:cc: b9:49:fa:2a:95:c2:91:6d:4a:67:3f:b8:36:b1:8c:c3:cf:0a: 72:55:ac:ae -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTMzMDZaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlGMUJBNTVFQTY1MjRG OENBMDUwNTdFRDk0MTRFNjUzREVFNjE5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ5a6J5Ta1Lg3eCeIZC9ZnbC1o/d8ZsXtO/eRFTjA+clKrXZ6O DyLd7KNI3cwRHq0Z9pH3bopjSUwKfQsxAwxnk0Cwf6dxtImFZ2cdPpSGfoCteKlI z2rA44a0lGaSpYfnSrbWjKm7YAkMxeyA7HtemfVoouqfB1/srEe5pr3lV6r1mwA+ URVKDvlzFnQ8Hw+MUOSxblRqICXAkCnZ/OPHG2hNe1+mxJ1J+zgLeDTofjwN9LRJ kuAY/vk/HmLOxukQ70RNzMexxCHcnzGlJxbSSOZITxWzFAi5NALi+3epUsGruZKV u4D6+Hrxj7aE4pjHSNlkSVaYfYQ7OFLaQStfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnxulXqZST4ygUFftlBTmU97mGUQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L254dWxYcVpTVDR5Z1VGZnRsQlRtVTk3bUdVUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXbcKAwDQYJKoZIhvcNAQELBQADggEBAAmQnw2ozgvMXjLhs3mj6ZIgAP2M LbpXKcRB6IDxhvgXmfRst0kipAQZhyUe36wEAxheNNf5mTOjYfPUqmmfdP9WTj+A n8fTRE/C4VFI+OW6dWqXauaXJOK5NwLyeqWLh+rQtu6WI/pm0rO4VYvbkNbyltkq D+ptAdNG5SVU3MapvDkgfalai7GgKCqmD+SZ8s/ZOuDaD7VtpNPk1yexfahtolvM AkPSEb7NA9Rg/Lgi1Ig8UHPxLg6BOh1ukzuqbj2B9hbmP8DgAE1IWeB1oth0oFhg y9odXPLbU9CxgrAtrshBZPSeKAbSzLlJ+iqVwpFtSmc/uDaxjMPPCnJVrK4= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org