$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/monn-mf4YDTml9tlGP3IU1-DVxc.roa File: monn-mf4YDTml9tlGP3IU1-DVxc.roa (raw, json) Hash identifier: IJozZ13PP2l81v8TP0KmfWxaiizF+Jf/4Le6nnc0JFk= Subject key identifier: 9A:89:E7:FA:67:F8:60:34:E6:97:DB:65:18:FD:C8:53:5F:83:57:17 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 015E Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/monn-mf4YDTml9tlGP3IU1-DVxc.roa Signing time: Wed 31 Jul 2024 01:31:24 +0000 ROA not before: Wed 31 Jul 2024 01:31:24 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2497 IP address blocks: 150.31.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 31 01:31:24 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=9A89E7FA67F86034E697DB6518FDC8535F835717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:5c:6e:bc:f7:95:de:11:98:a6:6a:dc:19: b4:68:52:e2:a9:1a:95:d5:19:bc:14:ac:cb:19:df: 68:dd:54:d3:bd:a0:2c:d9:f8:3b:20:77:06:6c:a1: bd:80:97:01:bc:6e:aa:29:b3:f6:99:bf:e4:d3:fa: d3:7a:35:2f:97:8d:97:a2:a5:c2:17:ba:d0:ad:81: 88:4a:e5:59:38:a8:37:a9:35:8f:b1:4b:3e:5b:3d: b3:d3:6c:aa:54:36:59:bb:e7:76:51:e2:7d:7b:36: 94:20:a4:a3:13:5e:7d:42:8f:d1:46:b0:77:eb:ce: c2:d3:14:66:9b:2c:e0:6c:db:8c:be:43:c9:c2:58: d9:bd:6e:3a:1d:de:03:f1:e9:8b:4b:6c:b2:b9:20: 8a:83:b5:f9:c8:dc:91:47:57:3f:60:99:f0:d9:9f: 4b:cf:31:90:e9:be:43:e3:b2:1c:eb:6a:36:dd:2b: 5a:03:ec:4f:7b:ff:95:c0:69:ef:3f:0a:81:2c:9c: 80:b5:33:66:18:fa:15:9d:16:9e:be:61:69:38:bd: e3:60:74:82:a4:7c:4a:4f:31:f6:65:1e:7a:1f:9e: cb:8f:be:a9:1b:89:1d:86:cc:47:0e:4d:bb:48:57: 5a:2b:fe:2e:ec:16:c4:6b:c8:15:0a:d5:4e:1b:dc: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:89:E7:FA:67:F8:60:34:E6:97:DB:65:18:FD:C8:53:5F:83:57:17 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/monn-mf4YDTml9tlGP3IU1-DVxc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.31.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:62:98:0a:df:d6:45:7a:d9:fc:3d:94:18:e8:c3:39:5f:a3: ea:1f:f9:26:74:27:02:2d:40:36:c5:9b:df:3f:f6:82:d4:1c: 7b:86:80:0f:dc:4e:2a:0d:49:5e:0f:7e:56:8f:34:d5:b8:26: 9c:d6:a1:3b:24:e6:ac:d0:35:6d:b9:7e:18:e0:74:d2:36:fb: 7b:c2:d5:6a:8d:50:28:a7:24:25:e9:e1:ca:ef:a1:b8:fe:3a: 24:9e:ee:84:2c:d6:15:5b:38:79:e3:8d:ee:66:2a:97:40:5e: 05:d3:ab:65:59:01:75:46:49:ae:77:74:c5:c7:3e:65:46:21: 7a:86:8a:0f:77:fa:c4:6f:71:b9:88:a7:aa:87:ee:4b:96:e8: 9f:e0:e1:86:4d:ae:6b:37:5e:02:5e:c3:dd:81:0a:79:3a:b9: f7:f7:ca:dc:8f:d5:1c:cc:0e:11:80:a0:fd:7a:88:b3:d7:c2: 48:b9:f0:10:b3:c7:90:55:bf:8a:fe:cb:6b:d1:97:98:3b:90: db:b7:55:8a:38:ef:e4:2c:16:14:e0:ea:fb:e3:5b:7f:cf:10: e0:a8:b4:5f:b5:15:f9:3e:ab:1e:c2:b8:2b:b5:06:7c:a5:03: c3:9a:ce:1f:b4:dc:b6:8a:9c:22:51:79:8b:e7:85:de:9c:41: 06:09:61:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw MTMxMjRaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBODlFN0ZBNjdGODYw MzRFNjk3REI2NTE4RkRDODUzNUY4MzU3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8AFxuvPeV3hGYpmrcGbRoUuKpGpXVGbwUrMsZ32jdVNO9oCzZ +DsgdwZsob2AlwG8bqops/aZv+TT+tN6NS+XjZeipcIXutCtgYhK5Vk4qDepNY+x Sz5bPbPTbKpUNlm753ZR4n17NpQgpKMTXn1Cj9FGsHfrzsLTFGabLOBs24y+Q8nC WNm9bjod3gPx6YtLbLK5IIqDtfnI3JFHVz9gmfDZn0vPMZDpvkPjshzrajbdK1oD 7E97/5XAae8/CoEsnIC1M2YY+hWdFp6+YWk4veNgdIKkfEpPMfZlHnofnsuPvqkb iR2GzEcOTbtIV1or/i7sFsRryBUK1U4b3H0TAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUmonn+mf4YDTml9tlGP3IU1+DVxcwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvbW9ubi1tZjRZRFRtbDl0bEdQM0lVMS1EVnhjLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AJYfMA0GCSqGSIb3DQEBCwUAA4IBAQAMYpgK39ZFetn8PZQY6MM5X6PqH/kmdCcC LUA2xZvfP/aC1Bx7hoAP3E4qDUleD35WjzTVuCac1qE7JOas0DVtuX4Y4HTSNvt7 wtVqjVAopyQl6eHK76G4/joknu6ELNYVWzh5443uZiqXQF4F06tlWQF1Rkmud3TF xz5lRiF6hooPd/rEb3G5iKeqh+5Lluif4OGGTa5rN14CXsPdgQp5Orn398rcj9Uc zA4RgKD9eoiz18JIufAQs8eQVb+K/str0ZeYO5Dbt1WKOO/kLBYU4Or741t/zxDg qLRftRX5PqsewrgrtQZ8pQPDms4ftNy2ipwiUXmL54XenEEGCWEX -----END CERTIFICATE-----Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org