$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/xeme3BjouB2YfWRAX4w2OaMVu9s.roa File: xeme3BjouB2YfWRAX4w2OaMVu9s.roa (raw, json) Hash identifier: Dr80ty9tv0jYQMWoMSiWyNybSRV483MJ3mrnDSljb2s= Subject key identifier: C5:E9:9E:DC:18:E8:B8:1D:98:7D:64:40:5F:8C:36:39:A3:15:BB:DB Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 28 Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/xeme3BjouB2YfWRAX4w2OaMVu9s.roa Signing time: Sat 31 Aug 2024 01:32:00 +0000 ROA not before: Sat 31 Aug 2024 01:32:00 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 59127 IP address blocks: 113.213.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Aug 31 01:32:00 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=C5E99EDC18E8B81D987D64405F8C3639A315BBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:91:35:07:db:cc:bf:1b:af:4f:87:a5:74: 75:f8:ec:c7:60:e4:ec:7f:b2:8f:67:de:79:02:98: d6:34:73:21:29:72:20:17:0e:49:8b:6f:43:e0:79: 2a:d7:68:20:ab:17:09:0d:ad:96:a6:5b:da:95:02: 95:58:c7:a2:94:68:91:06:15:41:22:da:21:16:86: f4:4c:b2:1d:6e:26:5f:dd:9e:4c:97:e6:b2:fd:94: 3c:e2:f1:09:2d:b7:fd:22:16:29:5d:47:e8:05:ad: aa:c2:19:10:b0:ef:73:d8:42:62:51:c3:3d:8f:67: a8:9a:92:29:03:62:4e:cd:65:df:ab:d4:a2:e9:22: 62:db:b8:42:d6:79:4d:f2:7e:94:ea:05:ae:bf:c2: 1d:48:46:2e:50:91:6e:dc:fc:fe:f9:52:3b:70:bd: 75:8d:f9:51:7d:07:18:50:95:56:66:76:4b:02:22: d9:7d:2a:b8:70:54:4e:d5:c4:c0:36:57:83:42:cc: 78:e5:2a:a2:33:3a:3e:0a:ae:ef:7a:16:b1:cf:64: 69:d2:8e:10:ff:ad:05:62:4f:41:28:d5:61:d8:9f: da:f9:cc:59:26:6a:42:dd:df:70:5f:9e:c9:59:a5: 8b:10:cc:6b:ef:bc:f7:10:4e:21:82:5a:ca:3e:6c: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:9E:DC:18:E8:B8:1D:98:7D:64:40:5F:8C:36:39:A3:15:BB:DB X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/xeme3BjouB2YfWRAX4w2OaMVu9s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.213.192.0/19 Signature Algorithm: sha256WithRSAEncryption e2:b3:e8:0e:5e:3c:ee:f8:d4:5a:56:ea:a6:5b:71:80:b5:1e: 2e:00:ff:71:82:b1:98:8a:5c:8e:8b:af:05:9c:29:1d:6f:70: e4:ca:dc:0d:64:63:f3:8d:f3:9f:72:24:76:b5:33:1b:1f:8b: 49:cb:1f:cd:d3:97:db:e9:e2:c5:03:23:2b:f0:a8:7d:39:cf: a3:08:2d:44:af:17:1f:e9:a1:a7:bc:e4:ce:1c:09:47:38:9d: f9:bc:1b:69:fa:23:f9:43:d6:2d:8c:65:90:b1:70:1b:00:18: 56:1f:43:bd:03:ac:be:4d:95:bf:78:16:b4:ce:30:ae:41:cc: 7e:26:16:13:61:76:d5:40:fc:6a:04:b0:75:87:89:c3:cd:2e: 79:2b:32:60:d3:93:87:a1:db:cc:60:a5:32:10:0b:7b:bf:0b: 61:81:aa:a4:0f:2c:f4:00:45:31:39:61:02:a8:49:fc:c3:67: a9:05:3c:12:e3:36:91:55:f5:7c:7a:2f:85:cd:a8:88:59:a0: 09:80:73:d8:f3:f0:af:77:75:29:43:a1:8f:d8:ab:1b:07:92: 15:c4:95:9d:d5:10:dc:d5:5e:92:7e:b4:56:1b:ae:01:fc:80: fd:ad:10:9e:3b:75:06:0b:5f:6e:2c:ce:3a:09:22:69:48:be: 55:38:fc:c2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI0MDgzMTAx MzIwMFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzVFOTlFREMxOEU4Qjgx RDk4N0Q2NDQwNUY4QzM2MzlBMzE1QkJEQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALO8kTUH28y/G69Ph6V0dfjsx2Dk7H+yj2feeQKY1jRzISlyIBcO SYtvQ+B5KtdoIKsXCQ2tlqZb2pUClVjHopRokQYVQSLaIRaG9EyyHW4mX92eTJfm sv2UPOLxCS23/SIWKV1H6AWtqsIZELDvc9hCYlHDPY9nqJqSKQNiTs1l36vUouki Ytu4QtZ5TfJ+lOoFrr/CHUhGLlCRbtz8/vlSO3C9dY35UX0HGFCVVmZ2SwIi2X0q uHBUTtXEwDZXg0LMeOUqojM6Pgqu73oWsc9kadKOEP+tBWJPQSjVYdif2vnMWSZq Qt3fcF+eyVmlixDMa++89xBOIYJayj5s3xkCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTF6Z7cGOi4HZh9ZEBfjDY5oxW72zAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIveGVtZTNCam91QjJZZldSQVg0dzJPYU1WdTlzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXHVwDANBgkqhkiG9w0BAQsFAAOCAQEA4rPoDl487vjUWlbqpltxgLUeLgD/ cYKxmIpcjouvBZwpHW9w5MrcDWRj843zn3IkdrUzGx+LScsfzdOX2+nixQMjK/Co fTnPowgtRK8XH+mhp7zkzhwJRzid+bwbafoj+UPWLYxlkLFwGwAYVh9DvQOsvk2V v3gWtM4wrkHMfiYWE2F21UD8agSwdYeJw80ueSsyYNOTh6HbzGClMhALe78LYYGq pA8s9ABFMTlhAqhJ/MNnqQU8EuM2kVX1fHovhc2oiFmgCYBz2PPwr3d1KUOhj9ir GweSFcSVndUQ3NVekn60VhuuAfyA/a0Qnjt1BgtfbizOOgkiaUi+VTj8wg== -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org