$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/SSNTgBs9rx97f3piNhBDtI8LWaA.roa File: SSNTgBs9rx97f3piNhBDtI8LWaA.roa (raw, json) Hash identifier: 2zK8MIJ+mK+455iyltRAwB8HBbZHiypEb0eoBfdYW18= Subject key identifier: 49:23:53:80:1B:3D:AF:1F:7B:7F:7A:62:36:10:43:B4:8F:0B:59:A0 Certificate issuer: /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Certificate serial: 46 Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/SSNTgBs9rx97f3piNhBDtI8LWaA.roa Signing time: Sat 31 Aug 2024 01:30:21 +0000 ROA not before: Sat 31 Aug 2024 01:30:21 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 23805 IP address blocks: 103.42.168.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0 Validity Not Before: Aug 31 01:30:21 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=492353801B3DAF1F7B7F7A62361043B48F0B59A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:21:67:8c:a5:83:bc:b9:df:6d:84:81:7d: d6:8e:c4:47:a3:da:a3:54:c6:6a:13:8d:41:73:62: 31:76:43:6e:d2:11:9b:79:c9:6b:44:a8:ba:fd:64: 95:4b:78:3f:4f:e5:be:8c:1c:79:73:7f:2d:fb:b2: 59:cf:d6:54:cb:46:c4:9c:51:b3:55:71:28:99:9d: 71:29:22:91:b4:ef:df:08:b7:46:cd:16:d7:3f:7d: 57:22:06:9e:7e:53:e9:3e:de:49:81:4c:0a:1e:a9: 29:b3:e0:6a:0f:92:16:e3:40:5d:35:1d:a4:5a:cb: 46:97:56:bd:ab:b1:fc:a1:2b:af:72:cc:c3:05:4e: b5:95:2a:a8:02:3f:1b:29:3d:3e:a8:66:50:1c:8b: f0:83:20:cb:ea:68:1f:d8:25:0a:b7:14:63:4b:99: 35:5b:e5:ac:0e:b7:19:51:59:d8:6b:43:a0:0a:32: 3c:04:47:5b:c6:a4:ef:ec:8e:07:84:85:73:56:95: 91:0f:7f:c6:56:76:0d:ae:01:8e:d0:88:12:79:df: 0f:58:77:08:2f:e6:8a:18:18:61:5d:f0:ed:24:2b: 9a:60:52:b1:3a:1d:a9:14:ef:5d:ea:02:74:f1:77: 06:2e:d2:cd:ec:c5:78:55:a1:2d:3a:e9:64:0f:48: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:53:80:1B:3D:AF:1F:7B:7F:7A:62:36:10:43:B4:8F:0B:59:A0 X509v3 Authority Key Identifier: keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/SSNTgBs9rx97f3piNhBDtI8LWaA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.168.0/22 Signature Algorithm: sha256WithRSAEncryption cb:32:a7:7e:ca:91:e2:ec:8d:bf:11:f2:09:34:0b:21:69:13: 65:20:a1:88:01:d5:0c:c1:a7:31:96:59:ae:dd:87:03:4c:2f: 40:05:27:fc:05:90:2d:7b:4e:ab:e5:72:48:b7:6b:42:76:cb: 68:98:6f:f6:74:1c:04:66:bf:bc:79:7c:bb:c3:54:b6:dd:27: 5c:fb:5f:45:08:d7:3c:ad:a4:59:19:86:ba:94:f6:cf:f7:bc: ce:0f:cd:26:e5:c7:d5:29:cc:bd:99:cf:a6:9c:54:df:c6:a9: 57:70:34:a8:cf:ce:04:41:a7:a5:14:c0:a6:4a:04:fa:30:9a: 44:da:49:f4:a0:bd:12:32:15:ff:03:7c:cd:a0:98:f6:50:11: 37:3e:f9:ee:dc:b2:54:ca:e5:86:15:67:2a:ad:69:76:ad:4c: 20:89:e6:96:af:b2:fa:56:71:3a:3f:ce:35:b8:bd:16:bb:73: 19:4d:fb:8e:dc:24:1c:8a:28:3f:85:11:39:92:ae:c9:4a:4c: d4:61:54:1c:fd:7a:85:f1:72:1a:ef:11:f7:4c:ee:b0:6f:f8: 1f:92:08:b9:46:28:c3:54:82:28:2c:c1:88:44:22:c0:5f:45: 40:3d:ad:08:11:c8:d6:22:90:4e:e7:63:1b:91:9e:f5:ca:b5: b6:8e:ad:b6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTI0MDgzMTAx MzAyMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDkyMzUzODAxQjNEQUYx RjdCN0Y3QTYyMzYxMDQzQjQ4RjBCNTlBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMZdIWeMpYO8ud9thIF91o7ER6Pao1TGahONQXNiMXZDbtIRm3nJ a0Souv1klUt4P0/lvowceXN/LfuyWc/WVMtGxJxRs1VxKJmdcSkikbTv3wi3Rs0W 1z99VyIGnn5T6T7eSYFMCh6pKbPgag+SFuNAXTUdpFrLRpdWvaux/KErr3LMwwVO tZUqqAI/Gyk9PqhmUByL8IMgy+poH9glCrcUY0uZNVvlrA63GVFZ2GtDoAoyPARH W8ak7+yOB4SFc1aVkQ9/xlZ2Da4BjtCIEnnfD1h3CC/mihgYYV3w7SQrmmBSsTod qRTvXeoCdPF3Bi7SzezFeFWhLTrpZA9IHBcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRJI1OAGz2vH3t/emI2EEO0jwtZoDAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j 3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1 ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODEvU1NOVGdCczlyeDk3ZjNwaU5oQkR0SThMV2FBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcqqDANBgkqhkiG9w0BAQsFAAOCAQEAyzKnfsqR4uyNvxHyCTQLIWkTZSCh iAHVDMGnMZZZrt2HA0wvQAUn/AWQLXtOq+VySLdrQnbLaJhv9nQcBGa/vHl8u8NU tt0nXPtfRQjXPK2kWRmGupT2z/e8zg/NJuXH1SnMvZnPppxU38apV3A0qM/OBEGn pRTApkoE+jCaRNpJ9KC9EjIV/wN8zaCY9lARNz757tyyVMrlhhVnKq1pdq1MIInm lq+y+lZxOj/ONbi9FrtzGU37jtwkHIooP4UROZKuyUpM1GFUHP16hfFyGu8R90zu sG/4H5IIuUYow1SCKCzBiEQiwF9FQD2tCBHI1iKQTudjG5Ge9cq1to6ttg== -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org