$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/mW6PuUOC7cYAQwFYFV_THN6MYcQ.roa File: mW6PuUOC7cYAQwFYFV_THN6MYcQ.roa (raw, json) Hash identifier: DWAT4U52vK3TjE4pVzj9kj7XwiyIupUKuWpTetvJsY8= Subject key identifier: 99:6E:8F:B9:43:82:ED:C6:00:43:01:58:15:5F:D3:1C:DE:8C:61:C4 Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3 Certificate serial: 03 Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/mW6PuUOC7cYAQwFYFV_THN6MYcQ.roa Signing time: Fri 27 Sep 2024 00:07:53 +0000 ROA not before: Fri 27 Sep 2024 00:07:53 +0000 ROA not after: Fri 26 Sep 2025 07:28:48 +0000 asID: 2907 IP address blocks: 192.153.95.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA30F686577D6576F647B295455535835130C3 Validity Not Before: Sep 27 00:07:53 2024 GMT Not After : Sep 26 07:28:48 2025 GMT Subject: CN=996E8FB94382EDC600430158155FD31CDE8C61C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:09:94:79:4a:24:d7:a2:d1:bd:8c:09:e1: ce:fb:b9:7a:44:b1:c9:bc:8f:26:c4:e5:26:50:0e: 39:1b:a4:e5:2a:3a:01:9f:2f:7a:87:6c:a7:94:23: 29:a6:14:42:28:6c:71:24:73:6d:c1:ac:e0:25:e1: 87:1e:c0:2b:e0:31:03:81:7e:53:f4:e1:31:5b:2d: 64:7b:05:35:c0:82:d3:5f:e2:25:35:81:e7:5b:42: a9:d1:a7:b5:29:ad:45:d7:46:37:cc:dd:6e:24:3e: f4:0c:40:71:99:03:c6:0c:bc:d9:34:08:97:39:9f: 34:36:81:c1:77:ce:1f:b6:81:68:00:f3:07:1e:c6: c9:5f:39:7e:49:5f:f9:83:35:9d:56:96:ec:bd:f9: 01:36:6a:a6:53:3e:1a:14:51:03:ae:04:d2:2e:76: 1a:58:b0:25:9f:ba:79:73:92:27:e8:33:82:66:90: eb:46:7a:26:e5:7f:e6:eb:ff:6a:f0:5f:fd:37:fc: c4:fd:14:77:16:af:ad:97:cb:6b:76:82:51:8a:8a: 4d:16:68:6f:56:e9:f7:3e:38:74:dc:d8:8b:fe:9a: c7:11:3a:26:11:41:26:68:42:4a:b0:cc:58:21:54: 03:36:9d:95:2d:fd:36:e8:e8:82:2c:40:ef:a0:8b: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6E:8F:B9:43:82:ED:C6:00:43:01:58:15:5F:D3:1C:DE:8C:61:C4 X509v3 Authority Key Identifier: keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/mW6PuUOC7cYAQwFYFV_THN6MYcQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.153.95.0/24 Signature Algorithm: sha256WithRSAEncryption 58:77:7a:8c:54:c6:03:7a:5c:6f:44:d2:f4:58:89:98:4c:5b: f0:91:98:91:44:c4:b6:8e:b2:2b:68:08:be:5b:c6:19:4a:71: 66:3b:4a:89:73:c3:3e:a6:1f:e0:d5:89:b2:05:77:c1:07:3f: ea:e4:a9:5f:dc:64:91:e2:9d:fb:35:e2:8a:2c:1d:87:fc:c0: 1a:1c:de:8c:70:61:b8:4d:6f:48:d8:ee:52:9f:0e:31:a6:d4: dd:c1:6e:af:55:42:ae:d7:bf:7e:05:f1:60:df:6e:56:df:50: 71:36:e3:61:43:04:6d:c2:dd:fa:8d:e3:e5:4a:72:1a:8e:79: a0:b9:78:06:14:08:2c:ea:85:95:a8:bb:f7:ef:c6:71:66:95: c9:d3:b8:f4:15:49:1f:14:28:a0:f6:8f:66:fc:0a:03:24:e7: f1:be:be:b5:a7:a3:c5:fb:74:53:7e:11:c1:f4:aa:4b:a8:a9: de:db:e3:ad:7e:ea:c0:08:8c:6d:76:1d:78:fb:fb:1b:9b:6c: e9:26:4e:54:f0:ba:d3:62:83:b5:68:c0:d1:50:fa:fb:a0:ce: 5a:c3:6c:d8:00:79:7b:02:00:35:16:17:96:a5:9a:59:18:4d: ef:05:46:04:7a:e4:94:ca:41:b9:9e:08:65:4b:40:c7:c1:9b: 40:ab:48:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI0MDkyNzAw MDc1M1oXDTI1MDkyNjA3Mjg0OFowMzExMC8GA1UEAxMoOTk2RThGQjk0MzgyRURD NjAwNDMwMTU4MTU1RkQzMUNERThDNjFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALuCCZR5SiTXotG9jAnhzvu5ekSxybyPJsTlJlAOORuk5So6AZ8v eodsp5QjKaYUQihscSRzbcGs4CXhhx7AK+AxA4F+U/ThMVstZHsFNcCC01/iJTWB 51tCqdGntSmtRddGN8zdbiQ+9AxAcZkDxgy82TQIlzmfNDaBwXfOH7aBaADzBx7G yV85fklf+YM1nVaW7L35ATZqplM+GhRRA64E0i52GliwJZ+6eXOSJ+gzgmaQ60Z6 JuV/5uv/avBf/Tf8xP0UdxavrZfLa3aCUYqKTRZob1bp9z44dNzYi/6axxE6JhFB JmhCSrDMWCFUAzadlS39NujogixA76CL+f0CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSZbo+5Q4LtxgBDAVgVX9Mc3oxhxDAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjE2Ni9tVzZQdVVPQzdjWUFRd0ZZRlZfVEhONk1ZY1Eucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwJlfMA0GCSqGSIb3DQEBCwUAA4IBAQBYd3qMVMYDelxvRNL0WImYTFvw kZiRRMS2jrIraAi+W8YZSnFmO0qJc8M+ph/g1YmyBXfBBz/q5Klf3GSR4p37NeKK LB2H/MAaHN6McGG4TW9I2O5Snw4xptTdwW6vVUKu179+BfFg325W31BxNuNhQwRt wt36jePlSnIajnmguXgGFAgs6oWVqLv378ZxZpXJ07j0FUkfFCig9o9m/AoDJOfx vr61p6PF+3RTfhHB9KpLqKne2+OtfurACIxtdh14+/sbm2zpJk5U8LrTYoO1aMDR UPr7oM5aw2zYAHl7AgA1FheWpZpZGE3vBUYEeuSUykG5nghlS0DHwZtAq0iR -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:11 2024 by rpki-client on console-fra.rpki-client.org