$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/d9xnt9cMDC0_le4V1ncC5wUzmaA.roa File: d9xnt9cMDC0_le4V1ncC5wUzmaA.roa (raw, json) Hash identifier: 3h5P9LmU1/pYGvzqSDgwWyM9IhkLUlQISFeKkd3NqBM= Subject key identifier: 77:DC:67:B7:D7:0C:0C:2D:3F:95:EE:15:D6:77:02:E7:05:33:99:A0 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 030A Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/d9xnt9cMDC0_le4V1ncC5wUzmaA.roa Signing time: Mon 21 Oct 2024 01:08:37 +0000 ROA not before: Mon 21 Oct 2024 01:08:37 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 119.150.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 21 01:08:37 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=77DC67B7D70C0C2D3F95EE15D67702E7053399A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f1:95:58:cf:b9:a3:56:f2:30:04:6d:0b:b1: 48:55:85:0c:a3:0e:c6:11:97:a6:dd:2d:ca:c3:19: f5:a4:0c:79:5a:79:22:10:f2:c3:b6:5e:60:c0:a7: 8b:18:7d:98:03:ee:0d:2a:f0:29:47:0b:91:21:89: 7c:7b:93:c4:75:8f:aa:62:10:70:ed:bf:e5:66:48: 40:28:da:fb:16:65:36:39:5d:4f:33:3f:7e:df:45: 22:79:ee:12:77:8d:74:c4:84:ce:e3:94:d9:c9:7e: e8:b9:fc:28:bb:f7:03:85:16:ac:03:24:72:72:14: fd:0e:2c:a2:c6:e6:a6:50:e0:cd:1a:b9:d7:38:2a: e8:0d:af:93:27:52:85:d3:48:62:46:29:fb:76:d6: 27:2c:fa:da:c7:2c:8a:e0:02:bd:37:de:70:2f:f5: ed:3a:13:35:f0:60:82:34:df:fd:7e:c7:1b:1b:9d: 4d:fb:d3:73:e8:24:85:d8:68:b0:5b:a1:1f:c7:ef: 82:28:1c:5e:90:39:90:a9:cb:4a:40:38:6a:8d:89: 19:be:2b:02:a3:65:94:3b:f7:ce:50:ea:82:20:f3: a4:8c:1d:30:ef:8d:e5:9d:b1:28:cc:64:66:ae:b6: 97:e6:b2:a8:03:8d:73:9d:47:81:82:87:7c:40:e6: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DC:67:B7:D7:0C:0C:2D:3F:95:EE:15:D6:77:02:E7:05:33:99:A0 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/d9xnt9cMDC0_le4V1ncC5wUzmaA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.150.224.0/22 Signature Algorithm: sha256WithRSAEncryption 56:d1:71:1c:44:d1:27:c1:50:d6:97:18:8a:29:08:99:8e:84: ba:3c:5f:4e:7e:2e:fd:06:a1:10:db:a7:f9:3c:45:d8:56:83: 5b:03:14:cf:85:16:3b:e2:13:55:26:c0:cf:97:07:67:75:ac: 13:1e:81:c6:ba:a2:45:2f:7a:9a:14:9f:15:3c:29:8b:61:7a: 17:7a:55:bf:b3:db:48:18:b5:f6:8c:b4:95:1d:bb:f5:43:90: 57:91:3b:47:22:18:0c:dd:57:82:98:bd:59:ae:eb:17:55:99: a7:c3:e7:2e:b3:c4:60:87:16:94:7e:70:22:ee:f6:88:bb:58: 51:7c:ec:f3:e4:52:c3:82:c0:cc:fa:4d:41:e5:08:ec:ed:e3: 31:5e:ae:aa:94:f8:23:ed:31:da:73:fd:fc:6a:9e:94:ba:be: 6c:99:27:57:b3:4c:c5:26:30:74:df:dc:69:94:75:dc:57:e3: 2f:a4:0a:88:07:0f:91:da:26:0e:b8:bd:f5:45:71:7a:df:ff: e9:7d:f8:c4:c2:c8:f1:b3:77:57:90:d0:02:0b:38:58:ac:db: f9:da:0e:96:2a:42:84:f1:a5:47:d9:6d:b9:32:b6:3d:c3:cc: 6c:33:95:58:db:15:6f:52:e2:9f:4b:56:ff:a5:29:40:ab:2b: 58:77:71:0c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjEw MTA4MzdaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc3REM2N0I3RDcwQzBD MkQzRjk1RUUxNUQ2NzcwMkU3MDUzMzk5QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf8ZVYz7mjVvIwBG0LsUhVhQyjDsYRl6bdLcrDGfWkDHlaeSIQ 8sO2XmDAp4sYfZgD7g0q8ClHC5EhiXx7k8R1j6piEHDtv+VmSEAo2vsWZTY5XU8z P37fRSJ57hJ3jXTEhM7jlNnJfui5/Ci79wOFFqwDJHJyFP0OLKLG5qZQ4M0audc4 KugNr5MnUoXTSGJGKft21ics+trHLIrgAr033nAv9e06EzXwYII03/1+xxsbnU37 03PoJIXYaLBboR/H74IoHF6QOZCpy0pAOGqNiRm+KwKjZZQ7985Q6oIg86SMHTDv jeWdsSjMZGautpfmsqgDjXOdR4GCh3xA5mzzAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUd9xnt9cMDC0/le4V1ncC5wUzmaAwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2Q5eG50OWNNREMwX2xlNFYxbmNDNXdVem1hQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJ3luAwDQYJKoZIhvcNAQELBQADggEBAFbRcRxE0SfBUNaXGIopCJmOhLo8 X05+Lv0GoRDbp/k8RdhWg1sDFM+FFjviE1UmwM+XB2d1rBMegca6okUvepoUnxU8 KYthehd6Vb+z20gYtfaMtJUdu/VDkFeRO0ciGAzdV4KYvVmu6xdVmafD5y6zxGCH FpR+cCLu9oi7WFF87PPkUsOCwMz6TUHlCOzt4zFerqqU+CPtMdpz/fxqnpS6vmyZ J1ezTMUmMHTf3GmUddxX4y+kCogHD5HaJg64vfVFcXrf/+l9+MTCyPGzd1eQ0AIL OFis2/naDpYqQoTxpUfZbbkytj3DzGwzlVjbFW9S4p9LVv+lKUCrK1h3cQw= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org