$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/NXnX206RoUI89iJCfXSwvil_hrw.roa File: NXnX206RoUI89iJCfXSwvil_hrw.roa (raw, json) Hash identifier: 9MoBosalUndd4OEgfBX4AGlPMf19mHVhWZKtH3XP6IM= Subject key identifier: 35:79:D7:DB:4E:91:A1:42:3C:F6:22:42:7D:74:B0:BE:29:7F:86:BC Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 27 Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/NXnX206RoUI89iJCfXSwvil_hrw.roa Signing time: Sat 31 Aug 2024 01:31:59 +0000 ROA not before: Sat 31 Aug 2024 01:31:59 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 59127 IP address blocks: 116.199.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Aug 31 01:31:59 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=3579D7DB4E91A1423CF622427D74B0BE297F86BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:24:ab:82:71:52:57:0a:bd:d2:ed:63:6a:f0: f5:47:c6:d7:bb:48:82:d3:9f:2f:b8:8d:c7:d4:49: 8b:f7:83:d6:f2:72:1e:f4:2e:af:44:ce:10:51:85: dd:58:e0:00:db:7d:26:74:30:8d:6f:8f:0a:a8:77: ef:77:59:3b:ac:90:7c:11:c3:c0:31:5f:cd:49:ed: 6b:16:41:18:e4:e0:40:31:f8:08:b3:84:86:e5:72: ed:c9:f5:80:4f:96:02:d6:5f:39:e0:ca:aa:8a:72: ee:95:cc:1d:a6:03:24:00:03:6e:b8:bd:95:47:58: ff:2c:d2:d1:d4:ac:d0:44:47:7f:cf:ef:20:33:f4: ee:73:3e:a2:01:c2:a1:c3:18:74:00:59:64:ca:ec: fb:90:09:8d:8f:43:b3:32:95:fb:58:a5:d1:2d:20: c1:85:95:68:96:a8:37:40:f6:7e:95:c7:10:14:14: 06:05:67:c8:2e:cc:88:20:86:a4:3c:e3:c0:01:a0: 16:b7:bb:d4:57:36:3a:04:05:5d:b8:68:33:c0:1d: 44:3f:90:f8:e0:60:0e:a2:18:07:db:3a:1e:54:4a: 3d:ef:51:28:e4:48:11:47:a7:fb:75:83:3e:27:87: 53:78:13:d6:4e:cf:b8:cd:a6:6e:d4:da:93:97:d8: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:D7:DB:4E:91:A1:42:3C:F6:22:42:7D:74:B0:BE:29:7F:86:BC X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/NXnX206RoUI89iJCfXSwvil_hrw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.240.0/20 Signature Algorithm: sha256WithRSAEncryption bb:f0:fa:44:46:e9:b0:96:ad:79:bc:36:33:f8:16:83:94:d2: f4:15:92:81:6b:4d:12:d9:da:b1:86:19:20:09:c8:49:36:5b: c5:de:b7:87:3d:8d:58:5b:2e:08:ac:b6:8b:fc:f0:67:3c:51: 36:1c:a9:5e:4b:f2:47:46:bc:6d:37:9b:ed:3e:c3:16:3b:eb: 9f:c0:d9:d3:e8:0b:10:af:bc:71:e9:dc:85:91:d2:1a:31:9f: 75:82:06:28:e2:1c:ef:63:2a:e6:8b:5b:ad:08:79:cd:9a:8e: b9:c7:50:52:64:00:7f:b7:d8:bb:a6:06:36:7d:4d:61:53:69: 49:8b:0d:e0:0f:4c:40:b8:f2:7f:9c:ac:ef:63:1a:23:b0:ca: d5:2c:31:be:dd:7f:a0:d4:b6:98:1e:b0:5e:20:ff:5e:f7:e4: 18:66:cc:dc:e2:71:35:c9:25:a5:28:2b:ba:56:bb:17:8a:d8: ab:eb:1b:e1:52:d4:06:6b:9d:c9:5e:b0:68:73:b9:41:e5:dc: 6a:bf:dc:cf:9e:58:bf:8e:56:26:a4:8c:a8:b1:94:2a:b3:ca: 80:2b:4f:ba:48:7b:14:3a:f7:3d:54:4d:15:f8:b4:ec:21:7e: d4:d3:a9:f7:e7:68:5f:30:40:79:b6:c3:eb:16:fd:a5:12:fd: 3e:a7:88:85 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI0MDgzMTAx MzE1OVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzU3OUQ3REI0RTkxQTE0 MjNDRjYyMjQyN0Q3NEIwQkUyOTdGODZCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN0kq4JxUlcKvdLtY2rw9UfG17tIgtOfL7iNx9RJi/eD1vJyHvQu r0TOEFGF3VjgANt9JnQwjW+PCqh373dZO6yQfBHDwDFfzUntaxZBGOTgQDH4CLOE huVy7cn1gE+WAtZfOeDKqopy7pXMHaYDJAADbri9lUdY/yzS0dSs0ERHf8/vIDP0 7nM+ogHCocMYdABZZMrs+5AJjY9DszKV+1il0S0gwYWVaJaoN0D2fpXHEBQUBgVn yC7MiCCGpDzjwAGgFre71Fc2OgQFXbhoM8AdRD+Q+OBgDqIYB9s6HlRKPe9RKORI EUen+3WDPieHU3gT1k7PuM2mbtTak5fYCrcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ1edfbTpGhQjz2IkJ9dLC+KX+GvDAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvTlhuWDIwNlJvVUk4OWlKQ2ZYU3d2aWxfaHJ3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHTH8DANBgkqhkiG9w0BAQsFAAOCAQEAu/D6REbpsJatebw2M/gWg5TS9BWS gWtNEtnasYYZIAnISTZbxd63hz2NWFsuCKy2i/zwZzxRNhypXkvyR0a8bTeb7T7D Fjvrn8DZ0+gLEK+8cenchZHSGjGfdYIGKOIc72Mq5otbrQh5zZqOucdQUmQAf7fY u6YGNn1NYVNpSYsN4A9MQLjyf5ys72MaI7DK1Swxvt1/oNS2mB6wXiD/XvfkGGbM 3OJxNcklpSgrula7F4rYq+sb4VLUBmudyV6waHO5QeXcar/cz55Yv45WJqSMqLGU KrPKgCtPukh7FDr3PVRNFfi07CF+1NOp9+doXzBAebbD6xb9pRL9PqeIhQ== -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org