$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nEpW6g8khvo8ph91r96HqrhoRlo.roa File: nEpW6g8khvo8ph91r96HqrhoRlo.roa (raw, json) Hash identifier: P3/n853DVBnJ1hxkT2bLx29QfVjjVDO1U2OLutIFTpw= Subject key identifier: 9C:4A:56:EA:0F:24:86:FA:3C:A6:1F:75:AF:DE:87:AA:B8:68:46:5A Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0321 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nEpW6g8khvo8ph91r96HqrhoRlo.roa Signing time: Thu 24 Oct 2024 01:27:58 +0000 ROA not before: Thu 24 Oct 2024 01:27:58 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 10013 IP address blocks: 210.159.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Oct 24 01:27:58 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=9C4A56EA0F2486FA3CA61F75AFDE87AAB868465A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:87:66:1e:c9:c4:94:9f:a7:c1:6c:7b:70: cd:69:5e:33:c5:5b:45:31:8d:26:1b:ed:06:c7:bd: ee:64:05:5e:85:93:28:13:01:d9:78:b1:4e:a6:8e: c3:af:6a:18:d6:24:74:ff:91:2b:81:e0:96:33:d1: eb:cb:7d:3b:73:3e:1e:25:83:25:e9:e1:4b:65:38: be:57:e1:c2:8c:6d:ef:fb:12:69:f8:5b:73:09:0a: 25:8e:b4:20:ec:f9:0e:5d:e0:59:04:28:b5:48:cd: 0f:8e:ae:a7:61:3f:9f:76:9b:6f:3e:77:fc:6f:c5: 36:13:95:c7:e3:aa:48:e3:c9:c5:42:6f:8e:f6:b8: c4:09:7c:9b:c4:7a:cc:d5:45:d9:44:1d:8c:41:f9: 1c:77:da:da:da:57:1d:10:b3:60:1d:fd:47:98:30: 61:c2:50:36:0d:15:b7:12:29:f1:2c:a5:48:aa:84: 10:56:09:ba:b5:6f:67:de:3f:ce:3a:5c:f8:2d:49: 1a:1e:b9:52:a7:b9:d6:ea:e0:b7:03:75:32:82:79: df:c8:50:42:90:02:d9:1e:f6:14:e2:fd:d9:88:e2: 2f:10:43:10:55:db:7e:85:e4:bc:0c:dc:10:8f:67: 07:64:77:d6:11:94:66:91:47:d2:3a:cc:c7:f5:1c: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:56:EA:0F:24:86:FA:3C:A6:1F:75:AF:DE:87:AA:B8:68:46:5A X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nEpW6g8khvo8ph91r96HqrhoRlo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.159.160.0/20 Signature Algorithm: sha256WithRSAEncryption 18:7c:46:50:33:61:db:e1:f8:aa:92:c5:c2:15:6a:a5:b9:26: ee:0b:1b:23:be:f9:30:e3:a0:bf:9d:be:30:24:c8:d1:55:05: 00:8a:56:2a:89:e1:c1:e4:d8:7f:4d:7b:d1:c7:9e:47:05:e4: 5f:7d:ba:fb:ab:2d:60:46:9c:c9:14:eb:de:2f:26:83:6f:af: 49:20:44:f4:d6:68:d5:33:dd:ff:58:e7:9f:03:b1:47:14:7b: b2:26:e2:10:d1:e9:ef:4a:0f:e0:e4:ab:c2:0e:5b:2c:3b:27: 61:7b:40:7b:25:d6:9c:fe:18:dd:14:3c:bb:8d:71:77:1a:0e: 94:73:a2:14:72:93:72:c2:ee:3a:2e:75:f8:63:24:a8:9d:32: a6:a4:73:bb:21:7f:98:91:a1:7f:31:5a:ce:bb:2c:6c:d9:48: 18:18:f9:16:de:07:cd:ce:94:b4:d0:8f:9d:f3:b4:02:51:71: a3:a9:1c:b4:0b:51:ff:1a:cd:c3:42:95:a7:cc:d8:fb:20:4c: 47:8d:6a:ad:e9:6b:df:64:0a:1e:36:0b:43:38:0d:9d:fb:68: a3:e6:f8:68:5d:95:10:b1:5c:4a:57:77:5d:56:5b:96:81:e1: dd:d0:2c:7a:5e:9e:0c:f5:14:d2:dd:1a:1e:ce:52:7b:88:f9: 6c:7b:54:c1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMjQw MTI3NThaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDNEE1NkVBMEYyNDg2 RkEzQ0E2MUY3NUFGREU4N0FBQjg2ODQ2NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7fodmHsnElJ+nwWx7cM1pXjPFW0UxjSYb7QbHve5kBV6FkygT Adl4sU6mjsOvahjWJHT/kSuB4JYz0evLfTtzPh4lgyXp4UtlOL5X4cKMbe/7Emn4 W3MJCiWOtCDs+Q5d4FkEKLVIzQ+OrqdhP592m28+d/xvxTYTlcfjqkjjycVCb472 uMQJfJvEeszVRdlEHYxB+Rx32traVx0Qs2Ad/UeYMGHCUDYNFbcSKfEspUiqhBBW Cbq1b2feP846XPgtSRoeuVKnudbq4LcDdTKCed/IUEKQAtke9hTi/dmI4i8QQxBV 236F5LwM3BCPZwdkd9YRlGaRR9I6zMf1HKlBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnEpW6g8khvo8ph91r96HqrhoRlowHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L25FcFc2ZzhraHZvOHBoOTFyOTZIcXJob1Jsby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATSn6AwDQYJKoZIhvcNAQELBQADggEBABh8RlAzYdvh+KqSxcIVaqW5Ju4L GyO++TDjoL+dvjAkyNFVBQCKViqJ4cHk2H9Ne9HHnkcF5F99uvurLWBGnMkU694v JoNvr0kgRPTWaNUz3f9Y558DsUcUe7Im4hDR6e9KD+Dkq8IOWyw7J2F7QHsl1pz+ GN0UPLuNcXcaDpRzohRyk3LC7joudfhjJKidMqakc7shf5iRoX8xWs67LGzZSBgY +RbeB83OlLTQj53ztAJRcaOpHLQLUf8azcNClafM2PsgTEeNaq3pa99kCh42C0M4 DZ37aKPm+GhdlRCxXEpXd11WW5aB4d3QLHpengz1FNLdGh7OUnuI+Wx7VME= -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:21 2024 by rpki-client on console-fra.rpki-client.org