$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/3moMyhCahE15S_emTxx-wwaSJck.roa File: 3moMyhCahE15S_emTxx-wwaSJck.roa (raw, json) Hash identifier: M4eHSELEHmTKA3seXnxy5zV0MuhZC/tR4sBY2YqRxQg= Subject key identifier: DE:6A:0C:CA:10:9A:84:4D:79:4B:F7:A6:4F:1C:7E:C3:06:92:25:C9 Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4 Certificate serial: 6A Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/3moMyhCahE15S_emTxx-wwaSJck.roa Signing time: Wed 31 Jul 2024 01:31:15 +0000 ROA not before: Wed 31 Jul 2024 01:31:15 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2497 IP address blocks: 157.65.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4 Validity Not Before: Jul 31 01:31:15 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=DE6A0CCA109A844D794BF7A64F1C7EC3069225C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:08:cc:d5:58:09:aa:40:1b:92:3b:55:f0: 57:5d:0e:3f:fb:22:67:28:9a:9f:6d:aa:f4:db:07: b4:4b:61:54:be:89:c8:47:6d:5f:6a:01:7f:29:a3: 1e:a2:04:f7:1b:67:30:4e:ba:74:cd:e7:30:9d:d0: 24:65:28:a5:af:5d:3a:a7:38:37:9c:da:e2:1e:cf: 7a:c3:22:db:24:5f:77:02:2b:16:69:09:57:5c:1e: 86:9b:6c:99:1f:18:9a:5e:53:14:f7:7f:35:4b:da: 24:42:1b:86:e6:dc:57:f9:b3:ac:e7:d8:68:39:5d: ad:3b:d2:3d:23:06:78:9f:d8:c8:2f:8d:c4:54:e8: f3:84:68:fa:d0:5f:11:4b:5c:83:e3:e8:5c:80:fe: fd:fc:fe:c5:fd:9b:1f:ea:bc:b9:40:80:f7:ea:f8: 73:41:5b:5f:b0:61:c0:e1:e0:68:51:b4:4c:71:65: 99:3d:3d:e2:59:92:36:39:2b:27:98:15:f2:3d:d9: ff:f7:4c:8d:eb:5e:49:6a:96:fd:46:60:34:6e:8d: 2e:3c:a4:04:8c:ea:ad:ea:bd:d0:25:49:67:f8:d5: 33:88:36:ab:ce:f6:ad:b0:5a:9e:a2:26:9d:7b:c6: b1:6b:87:5f:e1:c1:dc:d9:84:33:de:01:05:e7:3a: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6A:0C:CA:10:9A:84:4D:79:4B:F7:A6:4F:1C:7E:C3:06:92:25:C9 X509v3 Authority Key Identifier: keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/3moMyhCahE15S_emTxx-wwaSJck.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.65.216.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:e1:2a:e1:18:bc:1b:8e:a6:77:e1:d4:fe:fd:48:8e:1e:2a: 71:b8:22:d8:02:81:7d:0d:6e:ab:6c:41:f8:4d:79:78:81:2d: ff:6e:3e:cc:ac:5d:3f:3a:07:13:14:b8:6f:20:f2:65:a5:a9: bc:57:21:d8:3b:e4:e5:c0:81:ac:97:46:e9:77:0e:26:a1:b1: fd:ad:eb:29:9e:67:ae:bf:71:12:87:4b:2f:ad:2b:91:3b:3c: 57:e5:c5:2a:9f:c0:32:33:8e:51:c4:7d:e4:b7:f4:38:50:72: 1c:25:c4:7b:05:a2:35:6d:a9:d4:27:dd:b0:f3:c8:d6:77:7f: 15:2e:7d:53:16:82:77:a3:25:d4:9c:55:fb:42:fd:0b:fb:72: 8f:68:76:46:d4:1c:1a:70:75:38:b2:3f:f3:38:fe:25:f3:3f: b2:5f:5c:35:e6:b1:f2:38:ff:bf:fb:7c:9a:37:44:c6:46:2b: 08:ba:7e:42:73:60:d1:8a:ad:e4:d3:47:99:1c:3b:f1:16:96: 42:83:7c:83:70:9c:89:b9:2d:0c:2e:cc:7a:24:70:ef:6f:c9: 31:bc:78:5b:00:0b:4f:f0:3a:ca:6c:08:91:bb:a0:6f:20:73: 08:10:45:5a:31:f0:73:e9:31:32:ff:6f:2a:22:da:28:ce:61: 44:14:7c:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTY5 NjZERDcyMEMzMDU3NUY2MkQ4RkQ0MTQ5NDU4QTkwQUFDQUE0MB4XDTI0MDczMTAx MzExNVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoREU2QTBDQ0ExMDlBODQ0 RDc5NEJGN0E2NEYxQzdFQzMwNjkyMjVDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMPrCMzVWAmqQBuSO1XwV10OP/siZyian22q9NsHtEthVL6JyEdt X2oBfymjHqIE9xtnME66dM3nMJ3QJGUopa9dOqc4N5za4h7PesMi2yRfdwIrFmkJ V1wehptsmR8Yml5TFPd/NUvaJEIbhubcV/mzrOfYaDldrTvSPSMGeJ/YyC+NxFTo 84Ro+tBfEUtcg+PoXID+/fz+xf2bH+q8uUCA9+r4c0FbX7BhwOHgaFG0THFlmT09 4lmSNjkrJ5gV8j3Z//dMjeteSWqW/UZgNG6NLjykBIzqreq90CVJZ/jVM4g2q872 rbBanqImnXvGsWuHX+HB3NmEM94BBec6ElMCAwEAAaOCAiAwggIcMB0GA1UdDgQW BBTeagzKEJqETXlL96ZPHH7DBpIlyTAfBgNVHSMEGDAWgBQpaWbdcgwwV19i2P1B SUWKkKrKpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNi9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5cVEuY3JsMG0GCCsGAQUF BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LV2xtM1hJTU1GZGZZdGo5UVVsRmlwQ3F5 cVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuQYIKwYBBQUHAQsEgawwgakwXwYIKwYB BQUHMAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvNi8zbW9NeWhDYWhFMTVTX2VtVHh4LXd3YVNKY2sucm9hMEYGCCsG AQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9h cC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD nUHYMA0GCSqGSIb3DQEBCwUAA4IBAQB94SrhGLwbjqZ34dT+/UiOHipxuCLYAoF9 DW6rbEH4TXl4gS3/bj7MrF0/OgcTFLhvIPJlpam8VyHYO+TlwIGsl0bpdw4mobH9 respnmeuv3ESh0svrSuROzxX5cUqn8AyM45RxH3kt/Q4UHIcJcR7BaI1banUJ92w 88jWd38VLn1TFoJ3oyXUnFX7Qv0L+3KPaHZG1BwacHU4sj/zOP4l8z+yX1w15rHy OP+/+3yaN0TGRisIun5Cc2DRiq3k00eZHDvxFpZCg3yDcJyJuS0MLsx6JHDvb8kx vHhbAAtP8DrKbAiRu6BvIHMIEEVaMfBz6TEy/28qItoozmFEFHxn -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org