$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/0e9gmORFAL4FPm8Tapt6M_zKikU.roa File: 0e9gmORFAL4FPm8Tapt6M_zKikU.roa (raw, json) Hash identifier: vP4iP6vEBFhmbP1a9azS01hD+jM8JcIPuClNlPHOMs4= Subject key identifier: D1:EF:60:98:E4:45:00:BE:05:3E:6F:13:6A:9B:7A:33:FC:CA:8A:45 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 04 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/0e9gmORFAL4FPm8Tapt6M_zKikU.roa Signing time: Fri 27 Sep 2024 00:07:54 +0000 ROA not before: Fri 27 Sep 2024 00:07:54 +0000 ROA not after: Fri 26 Sep 2025 07:28:48 +0000 asID: 2907 IP address blocks: 192.153.96.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 27 00:07:54 2024 GMT Not After : Sep 26 07:28:48 2025 GMT Subject: CN=D1EF6098E44500BE053E6F136A9B7A33FCCA8A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:5b:00:ea:ed:d1:77:f1:58:b4:28:54:05: fa:8a:dd:9f:59:2b:c3:76:e2:11:ec:19:56:d0:19: 7e:a5:35:2a:c3:04:b6:4f:c9:07:ee:a3:0a:85:80: b0:34:cd:af:2b:a7:3c:97:fd:36:92:61:01:61:57: 4c:d3:ca:87:b3:84:d9:c1:b0:0f:fc:b9:e1:7a:31: 32:c0:4c:d3:86:65:2e:c8:60:ab:9f:60:08:a6:be: 29:ea:fd:67:dd:42:93:89:28:85:95:a5:ba:c6:dd: 2b:2c:1f:db:51:82:ab:2e:31:80:ee:f6:f1:b7:70: ad:df:0c:f8:1b:23:c3:64:2b:f7:5e:1a:2b:12:72: d9:4f:80:cf:d2:f6:34:e1:e0:91:e8:f1:5d:0c:bf: f9:80:64:4a:37:81:b1:f8:57:e7:b8:90:87:66:2b: f8:7e:64:db:2f:66:fb:c7:4d:32:77:54:32:f2:51: fd:d3:30:5e:a1:c4:dc:9c:e4:ec:a2:32:50:80:c4: 97:2c:9a:7c:da:bd:22:8f:10:f2:6c:d2:ba:ae:18: b4:80:e0:41:e8:d3:99:52:e2:63:c2:f6:62:bf:9c: 00:c7:d8:4f:5a:d1:0d:1a:09:cc:21:d6:34:e1:62: ba:43:99:f5:d4:85:83:c5:0c:d1:3e:7e:a5:f5:5e: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EF:60:98:E4:45:00:BE:05:3E:6F:13:6A:9B:7A:33:FC:CA:8A:45 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/0e9gmORFAL4FPm8Tapt6M_zKikU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.153.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:fb:d8:43:27:be:36:3e:89:e3:aa:3f:09:a5:33:09:e3:77: 6c:3a:45:f2:65:d9:0f:8e:80:56:c5:d9:e1:e3:30:a7:e8:bf: c6:3b:67:7c:c4:d1:e2:08:73:17:fb:ad:6f:c5:70:22:ad:db: 6a:02:92:f5:e7:ed:88:a0:c0:b4:dc:f5:a6:7e:32:a7:96:6f: 1e:c7:cf:ae:2b:3a:80:0e:32:ec:c7:ca:2d:67:f2:23:41:68: 56:ec:32:30:d4:41:ac:75:0d:83:05:f7:1b:bc:7f:b5:bf:68: b7:69:fb:1d:ca:12:d5:76:e4:e5:35:c7:3d:b2:5d:d9:04:ab: 9e:75:64:00:73:31:89:e6:b6:32:e1:d8:1a:d2:b9:8b:2b:e1: 35:d8:dc:05:bc:00:ca:8d:17:93:1e:a4:e4:5a:22:d0:5f:4e: da:70:7c:88:74:c2:fe:bb:67:42:70:01:82:b1:28:70:9d:07: 66:bb:e7:f4:fa:5d:3b:87:26:8d:39:22:37:96:ab:8b:71:11: ca:1b:58:1d:9c:ae:30:26:4a:80:6e:f0:89:4b:2b:3b:46:fa: 45:d6:a5:fb:b0:70:7e:25:3f:0e:53:5b:3c:82:6f:d9:95:d9: 7d:c6:f5:2f:1a:9a:88:74:dc:d8:50:20:ad:d0:cc:a8:ff:1b: d2:ca:19:96 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI0MDkyNzAw MDc1NFoXDTI1MDkyNjA3Mjg0OFowMzExMC8GA1UEAxMoRDFFRjYwOThFNDQ1MDBC RTA1M0U2RjEzNkE5QjdBMzNGQ0NBOEE0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANkzWwDq7dF38Vi0KFQF+ordn1krw3biEewZVtAZfqU1KsMEtk/J B+6jCoWAsDTNryunPJf9NpJhAWFXTNPKh7OE2cGwD/y54XoxMsBM04ZlLshgq59g CKa+Ker9Z91Ck4kohZWlusbdKywf21GCqy4xgO728bdwrd8M+Bsjw2Qr914aKxJy 2U+Az9L2NOHgkejxXQy/+YBkSjeBsfhX57iQh2Yr+H5k2y9m+8dNMndUMvJR/dMw XqHE3Jzk7KIyUIDElyyafNq9Io8Q8mzSuq4YtIDgQejTmVLiY8L2Yr+cAMfYT1rR DRoJzCHWNOFiukOZ9dSFg8UM0T5+pfVebRcCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTR72CY5EUAvgU+bxNqm3oz/MqKRTAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni8wZTlnbU9SRkFMNEZQbThUYXB0Nk1fektpa1Uucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQDwJlgMA0GCSqGSIb3DQEBCwUAA4IBAQB++9hDJ742Ponjqj8JpTMJ43ds OkXyZdkPjoBWxdnh4zCn6L/GO2d8xNHiCHMX+61vxXAirdtqApL15+2IoMC03PWm fjKnlm8ex8+uKzqADjLsx8otZ/IjQWhW7DIw1EGsdQ2DBfcbvH+1v2i3afsdyhLV duTlNcc9sl3ZBKuedWQAczGJ5rYy4dga0rmLK+E12NwFvADKjReTHqTkWiLQX07a cHyIdML+u2dCcAGCsShwnQdmu+f0+l07hyaNOSI3lquLcRHKG1gdnK4wJkqAbvCJ Sys7RvpF1qX7sHB+JT8OU1s8gm/Zldl9xvUvGpqIdNzYUCCt0Myo/xvSyhmW -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org