$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/54npcoA2fmxxUZDtpErloBewOEM.roa File: 54npcoA2fmxxUZDtpErloBewOEM.roa (raw, json) Hash identifier: n9+qoTKdwh6GHchZ47xFPvnicpRh0WG6Suo0wuReisQ= Subject key identifier: E7:89:E9:72:80:36:7E:6C:71:51:90:ED:A4:4A:E5:A0:17:B0:38:43 Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Certificate serial: 2F Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/54npcoA2fmxxUZDtpErloBewOEM.roa Signing time: Sat 01 Jun 2024 06:45:18 +0000 ROA not before: Sat 01 Jun 2024 06:45:18 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 131965 IP address blocks: 202.233.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Validity Not Before: Jun 1 06:45:18 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=E789E97280367E6C715190EDA44AE5A017B03843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:ba:89:ab:2e:51:90:e4:95:55:cb:5b:f9: 71:11:58:87:e2:2c:13:96:dd:c7:9a:c8:37:c6:f5: fc:26:fb:c1:23:2f:d9:f0:b4:60:e3:bb:c5:aa:68: 36:4a:2f:a2:a2:01:70:41:cd:b1:4b:27:2a:c1:7f: 29:b7:23:dc:e6:85:34:7d:90:e3:fd:0b:4e:ae:4a: 18:9e:6e:22:77:77:b5:f8:f3:23:6f:42:bb:95:e2: ed:6e:19:b4:d5:b2:2f:d8:8e:d3:7d:77:ed:be:1f: 4b:c3:90:65:18:cb:66:d2:79:bd:20:eb:62:58:e5: b2:c3:c3:d3:de:77:cf:ee:8c:12:0e:78:23:ad:ab: 88:d9:c1:9c:7b:76:49:3e:c8:d3:3d:df:35:b8:26: 3f:35:0d:f3:5c:6f:e9:07:bb:50:3e:a8:67:8c:39: 0c:d1:c7:10:47:3d:2d:d2:b9:2c:0d:f1:70:f3:b9: 6a:f1:8b:b7:ff:94:bf:23:90:6c:73:e0:d6:4c:6b: d2:36:98:4c:67:8d:36:05:96:6f:49:ac:61:c9:83: 32:5a:0a:bc:da:60:a3:11:d8:81:89:34:a9:61:0c: 9f:86:0c:59:46:a0:e6:a9:fd:2e:20:a6:6e:3e:c4: a3:12:89:0b:00:4d:9e:c8:a7:12:94:85:74:5b:6f: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:E9:72:80:36:7E:6C:71:51:90:ED:A4:4A:E5:A0:17:B0:38:43 X509v3 Authority Key Identifier: keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/54npcoA2fmxxUZDtpErloBewOEM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.233.64.0/22 Signature Algorithm: sha256WithRSAEncryption 21:05:6b:8b:97:2b:b3:ec:81:2e:b7:b9:f4:9e:60:86:00:cf: 15:24:6d:c8:fe:ca:81:ff:27:ea:a5:c7:6f:e0:32:09:96:3d: 17:95:03:0a:fd:9d:01:96:3f:3b:9b:60:5d:ce:54:06:c2:f7: dd:b4:84:a5:31:13:0e:78:73:49:61:4f:4c:6b:e4:8e:bb:29: 70:3b:a2:b5:f3:de:f4:81:c1:b3:54:80:60:fb:60:7c:40:38: 6b:f9:65:52:0d:5d:85:cf:7b:fe:62:0b:97:db:71:7d:16:36: 16:b6:d3:cc:73:35:aa:44:92:1e:cb:f6:fa:46:f3:0b:9e:9f: a3:08:c4:d3:10:34:ec:a5:78:c0:89:58:93:bc:f7:fe:b3:9a: 3e:d6:cb:e2:49:e7:79:f0:3c:8d:eb:73:74:70:dd:c3:1d:68: 06:df:22:39:72:2a:8c:e9:79:44:d1:75:5c:16:78:b5:ec:99: 0f:e6:f7:f2:2f:92:5e:cb:ab:c6:a7:c7:f4:48:ff:ee:cf:34: 21:ce:18:58:70:f9:f6:60:52:6e:8b:50:68:d9:2b:8e:d7:75: 2a:a8:58:77:89:a9:b9:74:30:00:57:8b:41:fb:16:b5:3c:0f: dd:55:1b:d9:35:a8:4e:44:19:bb:6a:fe:c8:f3:70:43:c6:f1: 3c:66:07:ed -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI0MDYwMTA2 NDUxOFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRTc4OUU5NzI4MDM2N0U2 QzcxNTE5MEVEQTQ0QUU1QTAxN0IwMzg0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALFtuomrLlGQ5JVVy1v5cRFYh+IsE5bdx5rIN8b1/Cb7wSMv2fC0 YOO7xapoNkovoqIBcEHNsUsnKsF/Kbcj3OaFNH2Q4/0LTq5KGJ5uInd3tfjzI29C u5Xi7W4ZtNWyL9iO03137b4fS8OQZRjLZtJ5vSDrYljlssPD0953z+6MEg54I62r iNnBnHt2ST7I0z3fNbgmPzUN81xv6Qe7UD6oZ4w5DNHHEEc9LdK5LA3xcPO5avGL t/+UvyOQbHPg1kxr0jaYTGeNNgWWb0msYcmDMloKvNpgoxHYgYk0qWEMn4YMWUag 5qn9LiCmbj7EoxKJCwBNnsinEpSFdFtvX6UCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTnielygDZ+bHFRkO2kSuWgF7A4QzAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127 DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvNTRucGNvQTJmbXh4VVpEdHBFcmxvQmV3T0VNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAsrpQDANBgkqhkiG9w0BAQsFAAOCAQEAIQVri5crs+yBLre59J5ghgDPFSRt yP7Kgf8n6qXHb+AyCZY9F5UDCv2dAZY/O5tgXc5UBsL33bSEpTETDnhzSWFPTGvk jrspcDuitfPe9IHBs1SAYPtgfEA4a/llUg1dhc97/mILl9txfRY2FrbTzHM1qkSS Hsv2+kbzC56fowjE0xA07KV4wIlYk7z3/rOaPtbL4knnefA8jetzdHDdwx1oBt8i OXIqjOl5RNF1XBZ4teyZD+b38i+SXsurxqfH9Ej/7s80Ic4YWHD59mBSbotQaNkr jtd1KqhYd4mpuXQwAFeLQfsWtTwP3VUb2TWoTkQZu2r+yPNwQ8bxPGYH7Q== -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:18 2024 by rpki-client on console-fra.rpki-client.org