$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k36KtEY8EntZQDiEit-F6tVtMa0.roa File: k36KtEY8EntZQDiEit-F6tVtMa0.roa (raw, json) Hash identifier: KSSNxIioUWywozLM92YDe4sQcrXthHPADG3oGBp39Lw= Subject key identifier: 93:7E:8A:B4:46:3C:12:7B:59:40:38:84:8A:DF:85:EA:D5:6D:31:AD Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Certificate serial: 4A Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k36KtEY8EntZQDiEit-F6tVtMa0.roa Signing time: Sun 30 Jun 2024 01:40:24 +0000 ROA not before: Sun 30 Jun 2024 01:40:24 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 158.199.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 13:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E Validity Not Before: Jun 30 01:40:24 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=937E8AB4463C127B594038848ADF85EAD56D31AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:7b:74:b4:79:e5:d3:fd:4c:91:fc:f6:2b: 95:08:6d:ea:cc:ca:a7:cd:65:d5:ee:2f:09:99:04: 6c:52:63:27:40:a1:b3:d9:49:e1:d0:76:7c:76:e6: 40:1b:bf:9e:40:6e:2e:51:18:d7:41:54:24:00:38: a8:44:01:94:5b:f6:a2:cd:58:cc:14:39:8c:e7:bb: 19:0a:43:60:84:96:c0:13:0b:8d:53:38:6c:01:76: 7d:16:1c:ac:ab:fd:31:75:ea:ae:a9:52:74:2a:d1: ba:71:c6:66:56:c3:77:21:50:5f:f0:17:8d:f7:64: 77:ad:15:af:aa:c5:6c:80:d1:c2:6f:90:50:c1:98: a2:c6:35:8e:9f:ce:d4:59:5a:5f:9d:fe:be:85:1f: ec:08:69:50:c3:a2:49:21:91:f6:e1:57:1c:fc:29: 44:4f:00:f6:94:1c:be:08:dd:2a:72:03:87:04:f2: 0d:09:07:f6:c2:ae:8c:f0:18:a3:ef:b1:66:ab:94: 41:6a:a5:aa:37:fa:73:f7:2a:36:19:75:33:42:74: 85:a9:1b:3c:28:e5:35:67:f1:80:f4:8c:18:19:ef: 31:7d:65:6c:94:08:1d:53:6b:5e:f5:40:99:52:83: 80:29:88:3f:4b:48:0e:e5:31:0e:32:84:45:d7:cd: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7E:8A:B4:46:3C:12:7B:59:40:38:84:8A:DF:85:EA:D5:6D:31:AD X509v3 Authority Key Identifier: keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k36KtEY8EntZQDiEit-F6tVtMa0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.199.32.0/20 Signature Algorithm: sha256WithRSAEncryption 92:5b:27:ce:57:f4:95:10:71:7d:83:47:19:d1:f2:6f:29:8b: c0:37:9f:69:50:1c:2b:63:c7:71:56:f2:59:61:f7:05:c5:27: 06:35:04:ca:1a:a1:68:f8:29:c1:24:fa:6f:56:a9:46:a9:dc: 72:c2:44:a0:7b:ed:e7:14:95:4f:65:8b:5b:34:97:f2:6a:18: b5:0e:49:9b:a0:94:30:b4:f8:f6:7a:77:87:f5:95:7a:cc:8a: c1:13:46:50:15:80:1b:6b:1f:03:c0:da:d5:eb:05:9c:5c:24: 2a:3d:a5:67:aa:8e:4c:fb:88:c7:d2:6a:ae:02:fd:83:6f:28: 42:33:a9:3a:26:94:ea:22:aa:66:3a:6c:02:a1:bd:f2:30:8c: 4a:6f:5f:97:ce:5b:3b:1b:88:ad:f6:f8:3b:4b:b0:a9:f3:fa: 89:0c:e7:c4:a9:3a:9e:b0:b5:7a:6e:0f:4c:44:c9:37:22:fd: 27:e7:9f:73:ad:13:18:ad:09:fe:ac:bf:78:ae:68:08:99:50: 84:6c:b7:93:1a:f9:4b:ce:31:30:a5:ab:fd:3d:5e:43:6e:16: 38:1f:34:69:5d:fd:b5:2d:5d:5c:64:cb:79:7d:ca:e6:f1:49: e2:93:39:b8:29:97:f9:ea:54:cd:10:92:24:e2:40:a0:c4:73: e2:95:d1:6d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDYzMDAx NDAyNFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoOTM3RThBQjQ0NjNDMTI3 QjU5NDAzODg0OEFERjg1RUFENTZEMzFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKrje3S0eeXT/UyR/PYrlQht6szKp81l1e4vCZkEbFJjJ0Chs9lJ 4dB2fHbmQBu/nkBuLlEY10FUJAA4qEQBlFv2os1YzBQ5jOe7GQpDYISWwBMLjVM4 bAF2fRYcrKv9MXXqrqlSdCrRunHGZlbDdyFQX/AXjfdkd60Vr6rFbIDRwm+QUMGY osY1jp/O1FlaX53+voUf7AhpUMOiSSGR9uFXHPwpRE8A9pQcvgjdKnIDhwTyDQkH 9sKujPAYo++xZquUQWqlqjf6c/cqNhl1M0J0hakbPCjlNWfxgPSMGBnvMX1lbJQI HVNrXvVAmVKDgCmIP0tIDuUxDjKERdfNk+cCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSTfoq0RjwSe1lAOISK34Xq1W0xrTAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDkvazM2S3RFWThFbnRaUURpRWl0LUY2dFZ0TWEwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJ7HIDANBgkqhkiG9w0BAQsFAAOCAQEAklsnzlf0lRBxfYNHGdHybymLwDef aVAcK2PHcVbyWWH3BcUnBjUEyhqhaPgpwST6b1apRqnccsJEoHvt5xSVT2WLWzSX 8moYtQ5Jm6CUMLT49np3h/WVesyKwRNGUBWAG2sfA8Da1esFnFwkKj2lZ6qOTPuI x9JqrgL9g28oQjOpOiaU6iKqZjpsAqG98jCMSm9fl85bOxuIrfb4O0uwqfP6iQzn xKk6nrC1em4PTETJNyL9J+efc60TGK0J/qy/eK5oCJlQhGy3kxr5S84xMKWr/T1e Q24WOB80aV39tS1dXGTLeX3K5vFJ4pM5uCmX+epUzRCSJOJAoMRz4pXRbQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:24 2024 by rpki-client on console-ams.rpki-client.org