$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa File: EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa (raw, json) Hash identifier: 0YLgqdL0xmeNqvBIlgDD9psVVFiN1lnkz/6GG6in+CM= Subject key identifier: 10:C2:98:DA:77:47:AE:58:0D:BD:5A:9C:9F:75:A4:3F:6C:09:09:43 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0121 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa Signing time: Mon 30 Sep 2024 01:30:27 +0000 ROA not before: Mon 30 Sep 2024 01:30:27 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 10021 IP address blocks: 27.110.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Sep 30 01:30:27 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=10C298DA7747AE580DBD5A9C9F75A43F6C090943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:f1:34:a2:b7:2b:be:6d:e4:dd:d4:b8:be: 1e:6d:3a:f7:29:9c:81:15:f2:0d:e3:cc:04:13:a5: 69:2c:ee:67:63:3d:00:10:ea:fc:ab:90:2c:38:40: 76:ef:2e:85:68:f1:77:a3:1e:6c:79:b8:85:9f:49: b9:5e:39:d6:ef:87:b9:d9:13:b9:72:b4:83:f3:79: 45:25:2f:32:77:de:17:6d:d8:ec:53:8e:63:f1:10: 55:2b:07:89:15:a9:9b:f1:c7:ae:d2:37:0b:71:4c: 09:7a:2e:24:1f:6d:1e:65:97:16:56:b8:3e:63:d9: be:dc:b6:82:55:3e:45:f6:db:0b:16:65:a2:9d:c6: 77:02:df:42:a0:fc:66:13:d8:2b:8d:d0:7d:fb:c3: fa:cb:88:86:84:b4:a2:34:2e:26:67:47:89:1b:d1: b6:f0:93:04:f6:e7:ab:9f:51:c3:77:b7:30:bd:b1: 5f:29:fd:72:52:16:38:f5:ed:13:49:4f:5f:cf:a6: c5:34:e5:eb:99:40:a3:3f:5f:72:b5:9b:13:97:2b: de:ed:90:81:ef:1f:01:bc:3e:71:03:c4:5a:f1:e3: 57:dd:52:81:5b:9c:30:99:4f:c5:eb:d6:50:ff:e7: fd:c5:0b:46:48:87:d8:40:01:5b:dd:f5:f5:76:3b: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:98:DA:77:47:AE:58:0D:BD:5A:9C:9F:75:A4:3F:6C:09:09:43 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.24.0/21 Signature Algorithm: sha256WithRSAEncryption 72:e7:7a:07:41:33:38:62:aa:e1:1b:42:c5:ee:d6:75:a6:5f: 4a:65:21:53:10:7e:a7:4d:c5:98:5f:7c:63:b6:3e:84:10:55: 71:3a:2b:b2:03:a7:7b:ea:79:75:20:37:28:64:8b:8a:9d:ba: da:a5:2f:71:37:3e:57:9c:fe:0a:39:2a:31:8b:39:19:76:89: 91:34:3c:ac:68:b7:97:ae:79:42:bc:e2:83:5b:28:69:b9:87: 49:03:fd:60:a8:60:36:5a:05:0e:1d:e1:76:27:53:26:09:ea: d2:52:27:35:80:79:c6:d0:96:1d:ec:2a:9a:f4:92:9d:45:03: 4b:da:3d:84:33:ce:9b:0d:11:13:1d:00:7c:37:f0:07:f8:fc: 51:00:87:7a:59:fe:61:c1:da:09:a4:07:39:95:3e:f6:11:06: fa:29:e7:25:83:a0:a9:b8:47:a0:52:ee:fc:ab:44:a2:06:ab: 6f:56:e9:59:9b:5b:3a:f1:73:33:f8:96:d3:14:ab:52:58:9a: 88:cc:1d:d1:19:84:12:8f:c6:49:10:6b:df:1d:1d:84:d3:b4: 26:88:99:c2:91:fa:a4:ea:0e:da:a4:36:a1:4b:e2:47:ac:a6: 10:b6:18:2b:2b:d8:c3:52:fa:68:d1:f6:c6:cf:10:66:ee:4d: 99:19:22:01 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNDA5MzAw MTMwMjdaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEwQzI5OERBNzc0N0FF NTgwREJENUE5QzlGNzVBNDNGNkMwOTA5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDuvE0orcrvm3k3dS4vh5tOvcpnIEV8g3jzAQTpWks7mdjPQAQ 6vyrkCw4QHbvLoVo8XejHmx5uIWfSbleOdbvh7nZE7lytIPzeUUlLzJ33hdt2OxT jmPxEFUrB4kVqZvxx67SNwtxTAl6LiQfbR5llxZWuD5j2b7ctoJVPkX22wsWZaKd xncC30Kg/GYT2CuN0H37w/rLiIaEtKI0LiZnR4kb0bbwkwT256ufUcN3tzC9sV8p /XJSFjj17RNJT1/PpsU05euZQKM/X3K1mxOXK97tkIHvHwG8PnEDxFrx41fdUoFb nDCZT8Xr1lD/5/3FC0ZIh9hAAVvd9fV2O/H9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEMKY2ndHrlgNvVqcn3WkP2wJCUMwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L0VNS1kybmRIcmxnTnZWcWNuM1drUDJ3SkNVTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbbhgwDQYJKoZIhvcNAQELBQADggEBAHLnegdBMzhiquEbQsXu1nWmX0pl IVMQfqdNxZhffGO2PoQQVXE6K7IDp3vqeXUgNyhki4qdutqlL3E3Plec/go5KjGL ORl2iZE0PKxot5eueUK84oNbKGm5h0kD/WCoYDZaBQ4d4XYnUyYJ6tJSJzWAecbQ lh3sKpr0kp1FA0vaPYQzzpsNERMdAHw38Af4/FEAh3pZ/mHB2gmkBzmVPvYRBvop 5yWDoKm4R6BS7vyrRKIGq29W6VmbWzrxczP4ltMUq1JYmojMHdEZhBKPxkkQa98d HYTTtCaImcKR+qTqDtqkNqFL4kesphC2GCsr2MNS+mjR9sbPEGbuTZkZIgE= -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org