$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/oNELch91mVrp659FXA3taW7FO4k.roa File: oNELch91mVrp659FXA3taW7FO4k.roa (raw, json) Hash identifier: 0a6nekKiKtaDUpQ4xvwVMyz8TWCbny/YzDz6TIzdz2M= Subject key identifier: A0:D1:0B:72:1F:75:99:5A:E9:EB:9F:45:5C:0D:ED:69:6E:C5:3B:89 Certificate issuer: /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF Certificate serial: 03 Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/oNELch91mVrp659FXA3taW7FO4k.roa Signing time: Tue 29 Oct 2024 02:58:31 +0000 ROA not before: Tue 29 Oct 2024 02:58:31 +0000 ROA not after: Wed 29 Oct 2025 02:46:37 +0000 asID: 4694 IP address blocks: 164.46.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF Validity Not Before: Oct 29 02:58:31 2024 GMT Not After : Oct 29 02:46:37 2025 GMT Subject: CN=A0D10B721F75995AE9EB9F455C0DED696EC53B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:04:af:3f:4c:f7:fd:d0:49:70:db:94:24: 6c:35:38:5e:8e:04:7a:49:32:9c:5f:cf:51:d0:e6: 69:96:1f:68:55:ee:13:fb:66:a4:16:b2:a3:3f:05: b3:ed:25:93:42:1f:fc:e2:c7:af:e0:ef:e3:b6:a4: 65:9f:36:01:f6:94:ef:9f:0c:c3:9c:b8:24:90:fc: 44:67:70:86:bd:5d:09:9d:ef:3b:10:68:7b:75:97: 20:f2:b3:37:77:44:bf:97:92:59:0e:e9:85:be:ce: ac:1b:fe:21:98:66:c7:91:27:60:2e:e6:c2:3d:7b: 51:62:00:43:2e:0b:7e:46:8a:19:85:47:3c:c9:d1: 7c:2d:80:d2:cf:ef:87:0a:c8:03:c5:7a:68:92:6c: 3d:92:93:71:b0:e9:5a:f3:1b:de:a9:82:1e:c9:41: 1c:1f:6c:2e:d0:6c:f5:13:26:b4:3b:bc:9f:2a:72: b7:23:6d:0c:1c:be:6c:8d:8a:ad:a4:ad:fe:6b:43: 5d:a0:4f:f7:5c:15:ad:fa:43:58:2e:8b:19:24:bd: d2:09:b1:82:ec:79:8a:e3:d4:f1:f3:2f:06:d0:1a: 62:0d:f3:39:14:a4:7c:9b:e1:a2:90:ae:32:32:fa: 9a:2e:fc:da:62:eb:57:32:68:90:59:46:13:47:06: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D1:0B:72:1F:75:99:5A:E9:EB:9F:45:5C:0D:ED:69:6E:C5:3B:89 X509v3 Authority Key Identifier: keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/oNELch91mVrp659FXA3taW7FO4k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.46.0.0/16 Signature Algorithm: sha256WithRSAEncryption 01:c1:6c:20:99:95:62:a5:b1:5f:2e:7d:58:ef:50:9c:05:3e: 9d:8b:47:2b:3b:6a:c5:11:36:8a:61:dc:71:88:2d:dd:40:c2: b4:67:e9:5d:72:36:b1:f1:ea:e3:1f:a2:71:92:b7:ed:3e:2d: af:20:ef:5f:44:19:42:84:f2:6d:ac:19:1f:89:22:ab:ed:37: 90:96:b9:25:c1:11:c7:64:e3:3f:dd:fb:0c:90:13:76:b1:59: d3:97:33:76:11:06:c9:a9:b3:aa:fc:95:ac:60:fc:f8:36:8a: 46:4c:50:c5:6a:6d:16:ac:c8:e3:61:a0:64:55:5a:a9:ac:1e: 51:5c:8e:90:ff:15:7c:d6:3e:96:f9:c7:42:4c:88:f3:d9:88: c9:46:5a:ea:86:fd:92:d8:3c:1c:55:3d:70:2f:65:bf:1a:a7: bc:0a:97:24:f4:2b:33:f0:de:b8:f1:d4:e2:ba:7d:f0:04:1c: 6d:da:eb:14:5d:a1:b4:d0:1a:21:26:dc:3d:0d:fa:7e:4e:71: ef:06:68:37:c6:46:26:0d:a1:49:46:cd:7f:3b:c3:1c:01:4d: 26:03:ff:59:c8:e4:f4:e9:12:43:6f:31:47:78:09:01:a7:2e: 30:27:55:fa:cc:56:d2:2b:23:00:bf:7a:b0:a8:b3:15:0b:ba: 57:e2:0a:37 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBMzQw MDVCOEVERTY2MzZDNjE5MTFCNkJBOTgxRTQ5RDlFMTIxNkNGMB4XDTI0MTAyOTAy NTgzMVoXDTI1MTAyOTAyNDYzN1owMzExMC8GA1UEAxMoQTBEMTBCNzIxRjc1OTk1 QUU5RUI5RjQ1NUMwREVENjk2RUM1M0I4OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPRBK8/TPf90Elw25QkbDU4Xo4EekkynF/PUdDmaZYfaFXuE/tm pBayoz8Fs+0lk0If/OLHr+Dv47akZZ82AfaU758Mw5y4JJD8RGdwhr1dCZ3vOxBo e3WXIPKzN3dEv5eSWQ7phb7OrBv+IZhmx5EnYC7mwj17UWIAQy4LfkaKGYVHPMnR fC2A0s/vhwrIA8V6aJJsPZKTcbDpWvMb3qmCHslBHB9sLtBs9RMmtDu8nypytyNt DBy+bI2KraSt/mtDXaBP91wVrfpDWC6LGSS90gmxgux5iuPU8fMvBtAaYg3zORSk fJvhopCuMjL6mi782mLrVzJokFlGE0cGzMcCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBSg0QtyH3WZWunrn0VcDe1pbsU7iTAfBgNVHSMEGDAWgBSjQAW47eZjbGGRG2up geSdnhIWzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9vMEFGdU8zbVkyeGhrUnRycVlIa25aNFNGczguY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9vMEFGdU8zbVkyeGhrUnRycVlIa25a NFNGczguY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy9vTkVMY2g5MW1WcnA2NTlGWEEzdGFXN0ZPNGsucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMApC4wDQYJKoZIhvcNAQELBQADggEBAAHBbCCZlWKlsV8ufVjvUJwFPp2L Rys7asURNoph3HGILd1AwrRn6V1yNrHx6uMfonGSt+0+La8g719EGUKE8m2sGR+J IqvtN5CWuSXBEcdk4z/d+wyQE3axWdOXM3YRBsmps6r8laxg/Pg2ikZMUMVqbRas yONhoGRVWqmsHlFcjpD/FXzWPpb5x0JMiPPZiMlGWuqG/ZLYPBxVPXAvZb8ap7wK lyT0KzPw3rjx1OK6ffAEHG3a6xRdobTQGiEm3D0N+n5Oce8GaDfGRiYNoUlGzX87 wxwBTSYD/1nI5PTpEkNvMUd4CQGnLjAnVfrMVtIrIwC/erCosxULulfiCjc= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org