$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/M9tMDsgcdN-0BOpSa6kqCIZF430.roa File: M9tMDsgcdN-0BOpSa6kqCIZF430.roa (raw, json) Hash identifier: /eA8Z8URK0Mh2qparI7bdD6NQfsS3SjFg/tHS1mhAaE= Subject key identifier: 33:DB:4C:0E:C8:1C:74:DF:B4:04:EA:52:6B:A9:2A:08:86:45:E3:7D Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 02EC Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/M9tMDsgcdN-0BOpSa6kqCIZF430.roa Signing time: Mon 30 Sep 2024 01:28:11 +0000 ROA not before: Mon 30 Sep 2024 01:28:11 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 210.211.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 30 01:28:11 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=33DB4C0EC81C74DFB404EA526BA92A088645E37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:6e:66:79:f8:f1:20:6a:d3:1f:6c:98:ac: 8f:b0:da:b7:06:e3:26:ca:fd:10:61:0f:92:e7:15: e5:ab:d5:cf:b6:ba:c1:9e:70:8a:f9:e8:d7:1a:fc: 7b:2b:9f:c4:01:56:bc:7b:e9:93:f8:d9:fd:be:9e: f6:e5:96:6f:12:6c:ae:72:a8:79:1a:40:ef:8e:ab: 1c:58:8b:04:13:73:d8:88:32:c9:17:54:f7:12:da: 11:01:b2:9c:d3:d8:5e:e1:42:05:2e:88:89:a7:9b: 29:45:ab:dc:38:1d:9d:9e:3c:36:03:86:38:80:01: fe:09:08:0b:83:36:fb:0d:d9:c3:8e:b3:17:55:55: 5a:aa:88:db:3f:80:ec:94:00:e3:60:b8:79:61:fa: 8a:42:f1:b8:bc:7d:a5:e0:36:4c:c4:a4:7c:3a:67: f8:86:6f:73:78:fd:97:db:a8:3b:91:0b:51:90:f9: 91:97:a7:6d:08:0c:2b:04:dd:7e:13:2a:11:18:cd: c7:82:ae:12:b1:d0:3b:fd:1e:1f:b0:69:f4:20:ea: 06:97:6a:76:cb:a7:32:65:80:e0:5f:cc:ff:76:68: 5c:e9:38:32:1b:c9:91:42:24:0d:82:3c:90:bc:00: f1:2d:51:48:1f:03:96:ef:23:0b:e2:85:a2:5f:cd: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:4C:0E:C8:1C:74:DF:B4:04:EA:52:6B:A9:2A:08:86:45:E3:7D X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/M9tMDsgcdN-0BOpSa6kqCIZF430.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.211.32.0/20 Signature Algorithm: sha256WithRSAEncryption 42:f4:db:ed:a8:74:1b:0a:9a:ab:9d:0e:c5:ea:11:91:2e:fa: ee:45:16:e7:96:d1:b8:86:c2:4a:7b:07:9a:e2:82:fa:d4:8a: d0:29:a7:0b:57:14:0d:e3:ea:ec:c2:2b:2c:c0:8b:2f:ef:e8: 4f:bf:ad:ba:d3:32:ca:06:57:2d:2f:cc:ec:24:02:6f:cb:66: 72:ff:f7:ca:82:bf:e8:41:ad:4b:d3:5a:2c:26:c0:8f:67:12: a4:1c:27:ff:91:7a:f0:ba:a6:bb:fd:6e:7d:c5:32:2d:f4:9a: 5f:10:05:06:5b:25:43:c4:94:b5:e2:18:0f:ca:5a:9b:9f:cd: 6d:78:00:18:03:eb:a5:27:57:eb:07:fa:fa:05:40:49:56:30: 58:48:f3:8e:14:f4:2a:53:ee:a3:5c:b9:e8:18:7f:9c:d5:ee: ee:7e:19:db:52:ff:fe:0e:d5:5a:f4:2a:1d:ab:a4:55:28:76: d3:e2:2b:a4:4b:12:f9:c2:62:5d:1b:a6:b2:29:a7:21:f9:f3: 42:bb:a4:52:97:ab:94:12:1b:2c:97:f5:af:cc:dc:d9:d3:87: d4:93:41:d0:0f:a9:ac:c0:50:b9:4f:6b:45:b1:82:db:f9:a8: 7c:54:f8:b3:7a:5b:7d:2e:2a:ed:59:f6:94:8e:02:fc:d4:60: ae:12:b7:a3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA5MzAw MTI4MTFaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMzREI0QzBFQzgxQzc0 REZCNDA0RUE1MjZCQTkyQTA4ODY0NUUzN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYy25mefjxIGrTH2yYrI+w2rcG4ybK/RBhD5LnFeWr1c+2usGe cIr56Nca/Hsrn8QBVrx76ZP42f2+nvbllm8SbK5yqHkaQO+OqxxYiwQTc9iIMskX VPcS2hEBspzT2F7hQgUuiImnmylFq9w4HZ2ePDYDhjiAAf4JCAuDNvsN2cOOsxdV VVqqiNs/gOyUAONguHlh+opC8bi8faXgNkzEpHw6Z/iGb3N4/ZfbqDuRC1GQ+ZGX p20IDCsE3X4TKhEYzceCrhKx0Dv9Hh+wafQg6gaXanbLpzJlgOBfzP92aFzpODIb yZFCJA2CPJC8APEtUUgfA5bvIwvihaJfzeqJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUM9tMDsgcdN+0BOpSa6kqCIZF430wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL005dE1Ec2djZE4tMEJPcFNhNmtxQ0laRjQzMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATS0yAwDQYJKoZIhvcNAQELBQADggEBAEL02+2odBsKmqudDsXqEZEu+u5F FueW0biGwkp7B5rigvrUitAppwtXFA3j6uzCKyzAiy/v6E+/rbrTMsoGVy0vzOwk Am/LZnL/98qCv+hBrUvTWiwmwI9nEqQcJ/+RevC6prv9bn3FMi30ml8QBQZbJUPE lLXiGA/KWpufzW14ABgD66UnV+sH+voFQElWMFhI844U9CpT7qNcuegYf5zV7u5+ GdtS//4O1Vr0Kh2rpFUodtPiK6RLEvnCYl0bprIppyH580K7pFKXq5QSGyyX9a/M 3NnTh9STQdAPqazAULlPa0Wxgtv5qHxU+LN6W30uKu1Z9pSOAvzUYK4St6M= -----END CERTIFICATE-----Generated at Tue Oct 22 15:00:12 2024 by rpki-client on console-fra.rpki-client.org