$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/1jEi0AeLucIag6fLoUZDK6vXxYk.roa File: 1jEi0AeLucIag6fLoUZDK6vXxYk.roa (raw, json) Hash identifier: zQfFOKZbiWN/vExWDr6iUaZeFD1PggZN9Xs2uT2Qohs= Subject key identifier: D6:31:22:D0:07:8B:B9:C2:1A:83:A7:CB:A1:46:43:2B:AB:D7:C5:89 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 06 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/1jEi0AeLucIag6fLoUZDK6vXxYk.roa Signing time: Fri 27 Sep 2024 00:07:55 +0000 ROA not before: Fri 27 Sep 2024 00:07:55 +0000 ROA not after: Fri 26 Sep 2025 07:28:48 +0000 asID: 2907 IP address blocks: 192.58.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 27 00:07:55 2024 GMT Not After : Sep 26 07:28:48 2025 GMT Subject: CN=D63122D0078BB9C21A83A7CBA146432BABD7C589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:01:74:f4:3c:b2:75:20:24:cb:9b:0a:d9: f5:9c:93:0f:fc:b4:9f:59:e4:f0:68:41:da:64:cf: a0:d9:63:04:40:3b:81:67:4c:d4:0a:e3:94:dc:e4: 29:20:ce:7b:48:68:90:57:5e:1f:f3:19:ed:6f:37: 18:59:17:2b:bb:8d:1a:79:97:c9:02:53:01:6a:57: 56:ef:34:c7:29:f1:8e:bb:89:d9:9d:66:31:ea:0a: 46:68:a4:ec:1a:07:2f:c3:ed:99:51:8a:b9:28:21: 7a:a6:e4:cf:b8:91:b0:c5:85:e1:ba:37:1b:fe:54: 34:55:6d:30:69:3b:14:49:09:dc:fa:59:13:ee:01: a4:dc:74:85:d5:29:d8:01:59:9b:57:f7:bb:0e:79: 4c:a0:b5:b2:be:ff:1b:28:56:7c:c7:12:e9:36:a0: fe:ef:42:5f:e9:e6:fe:0f:7e:c4:2a:9f:de:01:c4: c9:37:0d:8c:7c:45:ea:08:41:f4:43:5d:5d:d2:db: df:f3:7d:9d:5c:f2:d9:18:04:f3:cf:10:07:10:68: 99:fd:36:ca:50:06:59:f6:13:bb:ec:a2:d3:6d:50: bf:e2:21:f4:9c:3a:cf:d1:e4:2a:06:53:d6:91:80: 53:9b:f8:a7:85:bf:95:f4:8d:f9:77:f5:c7:e6:8a: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:31:22:D0:07:8B:B9:C2:1A:83:A7:CB:A1:46:43:2B:AB:D7:C5:89 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/1jEi0AeLucIag6fLoUZDK6vXxYk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.58.9.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:3e:16:e2:36:38:99:58:fc:96:87:e4:23:b3:03:12:4f:d3: d5:c7:ad:be:cb:ed:d0:80:73:c6:7c:d6:e6:10:10:75:9d:c4: 49:19:b6:44:b9:78:05:60:79:8f:28:84:27:f3:c4:55:38:6b: 1c:df:bb:b3:99:71:8e:14:16:55:a8:f8:07:13:59:3c:11:f4: 68:77:50:92:e8:bc:7c:64:4c:e3:82:b2:12:60:9a:3d:ea:28: cf:ac:24:ab:ff:66:67:66:a5:1a:37:a1:4b:bb:c6:e3:7c:12: ae:31:95:49:d5:05:7e:dd:92:05:97:c5:26:3e:32:bb:06:b8: c4:1c:4f:f7:3b:46:c8:c4:83:80:67:87:fc:87:12:b0:2b:fa: 61:4b:4c:16:99:e3:10:32:40:14:77:c0:45:86:ab:75:26:ef: 0d:3a:85:60:94:77:44:ea:d1:cf:db:4c:bc:fc:a9:23:a3:6a: cf:a9:c6:57:0f:ba:a0:b3:f6:86:b9:93:40:1e:1b:2f:7b:e0: e2:64:5d:cb:9e:3f:a7:14:93:3e:9b:35:74:c6:21:fb:ea:d9: ed:d8:8e:50:88:77:54:8c:ed:0f:85:a7:70:25:f6:c0:0d:c7: 53:4d:88:0a:f5:da:83:b1:35:5f:92:54:1a:92:95:2b:16:40: 47:9c:c9:51 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI0MDkyNzAw MDc1NVoXDTI1MDkyNjA3Mjg0OFowMzExMC8GA1UEAxMoRDYzMTIyRDAwNzhCQjlD MjFBODNBN0NCQTE0NjQzMkJBQkQ3QzU4OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM+PAXT0PLJ1ICTLmwrZ9ZyTD/y0n1nk8GhB2mTPoNljBEA7gWdM 1ArjlNzkKSDOe0hokFdeH/MZ7W83GFkXK7uNGnmXyQJTAWpXVu80xynxjruJ2Z1m MeoKRmik7BoHL8PtmVGKuSgheqbkz7iRsMWF4bo3G/5UNFVtMGk7FEkJ3PpZE+4B pNx0hdUp2AFZm1f3uw55TKC1sr7/GyhWfMcS6Tag/u9CX+nm/g9+xCqf3gHEyTcN jHxF6ghB9ENdXdLb3/N9nVzy2RgE888QBxBomf02ylAGWfYTu+yi021Qv+Ih9Jw6 z9HkKgZT1pGAU5v4p4W/lfSN+Xf1x+aKF7MCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTWMSLQB4u5whqDp8uhRkMrq9fFiTAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni8xakVpMEFlTHVjSWFnNmZMb1VaREs2dlh4WWsucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwDoJMA0GCSqGSIb3DQEBCwUAA4IBAQB+PhbiNjiZWPyWh+QjswMST9PV x62+y+3QgHPGfNbmEBB1ncRJGbZEuXgFYHmPKIQn88RVOGsc37uzmXGOFBZVqPgH E1k8EfRod1CS6Lx8ZEzjgrISYJo96ijPrCSr/2ZnZqUaN6FLu8bjfBKuMZVJ1QV+ 3ZIFl8UmPjK7BrjEHE/3O0bIxIOAZ4f8hxKwK/phS0wWmeMQMkAUd8BFhqt1Ju8N OoVglHdE6tHP20y8/Kkjo2rPqcZXD7qgs/aGuZNAHhsve+DiZF3Lnj+nFJM+mzV0 xiH76tnt2I5QiHdUjO0PhadwJfbADcdTTYgK9dqDsTVfklQakpUrFkBHnMlR -----END CERTIFICATE-----Generated at Sun Feb 16 22:29:51 2025 by rpki-client