$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/iVhfSi-ooTDfp189_w2Fz58c8AM.roa File: iVhfSi-ooTDfp189_w2Fz58c8AM.roa (raw, json) Hash identifier: VmWlfT7ulQOscQSOzJHcoSZVvoUOzrRV94N7IXGH2c0= Subject key identifier: 89:58:5F:4A:2F:A8:A1:30:DF:A7:5F:3D:FF:0D:85:CF:9F:1C:F0:03 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 42 Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/iVhfSi-ooTDfp189_w2Fz58c8AM.roa Signing time: Sun 30 Jun 2024 01:28:56 +0000 ROA not before: Sun 30 Jun 2024 01:28:56 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 2515 IP address blocks: 211.120.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Jun 30 01:28:56 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=89585F4A2FA8A130DFA75F3DFF0D85CF9F1CF003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:01:c7:06:9e:30:63:4c:1a:d6:ca:7e:97: 02:1c:06:af:6b:15:b8:57:e8:5f:60:dc:ba:53:e1: 00:80:33:b3:8b:0e:1c:a0:83:9f:0d:9c:09:a0:49: 73:8f:ad:2e:ac:20:96:c0:ab:ad:a6:c1:83:81:e6: 2c:3d:db:d6:bb:6f:fa:34:27:8a:7b:35:d9:c7:23: 87:a4:3e:61:dd:a5:c4:ac:0c:78:5c:fa:3b:f9:95: f1:a2:18:2d:a1:36:24:36:39:af:00:27:76:50:19: b6:5f:56:5d:ee:0f:af:3b:3f:58:f5:f6:29:be:7c: 61:b4:dc:f2:f2:d4:ca:cf:fa:77:36:15:f7:7f:b3: 7c:c5:8d:82:df:be:21:9f:2c:d7:98:c9:8e:a4:71: 87:6d:98:15:33:0a:bd:8e:2b:7a:3a:06:d4:e0:cf: 7a:01:91:a9:c0:60:68:ed:19:c3:84:af:c4:b5:ab: 1d:7f:b8:d8:2d:13:23:2a:cc:f3:2c:ca:d0:da:4b: 93:06:0e:35:43:65:85:75:81:49:af:a0:c2:ee:0f: 72:05:17:b9:67:86:68:cd:36:e0:06:51:6b:7c:08: c4:1b:8d:28:63:2d:14:a7:e0:5c:47:fa:98:0e:ef: 08:40:7b:2e:94:94:a8:fc:85:88:1e:3d:8e:74:2b: 24:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:58:5F:4A:2F:A8:A1:30:DF:A7:5F:3D:FF:0D:85:CF:9F:1C:F0:03 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/iVhfSi-ooTDfp189_w2Fz58c8AM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.240.0/21 Signature Algorithm: sha256WithRSAEncryption 1c:30:a8:8d:76:75:c4:a7:d5:c7:09:fa:7d:0c:35:fd:5b:10: d0:51:33:2f:e1:28:58:12:ee:7a:1c:8d:1a:ef:c3:d9:9d:a6: 87:65:d2:ec:ca:49:df:67:c7:7d:f3:64:46:05:f9:59:c7:09: a9:45:fd:0b:27:73:2f:52:15:bb:55:40:f0:00:66:aa:a9:27: a4:43:cf:73:5f:04:83:90:5e:c4:bd:0e:3e:8d:bd:a1:b9:18: 3c:55:ec:07:6c:48:5d:c5:2c:1b:5d:8b:5e:e9:4c:e5:7c:85: 42:bd:44:2e:fe:eb:fb:24:96:82:84:4a:0f:22:12:18:1d:29: 93:00:aa:1e:f9:ed:1e:d1:44:b9:05:ac:14:c2:64:ab:fe:be: 22:ba:d2:5e:3c:da:5c:92:09:90:1e:6e:57:86:3c:c5:1d:71: 4c:22:9b:7c:c1:d2:55:f1:1d:8d:f2:f5:75:29:a5:f3:e7:91: 22:85:e0:a0:e6:d7:ce:e5:94:b5:65:32:48:2e:5a:7a:9e:d6: b3:07:4a:54:1b:fc:c4:77:76:33:84:46:7a:02:c3:78:42:40: 5f:3d:a2:09:85:0c:60:24:b3:0e:9c:fb:be:28:60:0c:98:75: 61:7d:ef:0a:55:7d:1e:da:f7:f6:e6:37:29:14:1c:40:bd:4e: 57:04:5e:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI0MDYzMDAx Mjg1NloXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoODk1ODVGNEEyRkE4QTEz MERGQTc1RjNERkYwRDg1Q0Y5RjFDRjAwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANJUAccGnjBjTBrWyn6XAhwGr2sVuFfoX2DculPhAIAzs4sOHKCD nw2cCaBJc4+tLqwglsCrrabBg4HmLD3b1rtv+jQnins12ccjh6Q+Yd2lxKwMeFz6 O/mV8aIYLaE2JDY5rwAndlAZtl9WXe4Przs/WPX2Kb58YbTc8vLUys/6dzYV93+z fMWNgt++IZ8s15jJjqRxh22YFTMKvY4rejoG1ODPegGRqcBgaO0Zw4SvxLWrHX+4 2C0TIyrM8yzK0NpLkwYONUNlhXWBSa+gwu4PcgUXuWeGaM024AZRa3wIxBuNKGMt FKfgXEf6mA7vCEB7LpSUqPyFiB49jnQrJCsCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSJWF9KL6ihMN+nXz3/DYXPnxzwAzAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny9pVmhmU2ktb29URGZwMTg5X3cyRno1OGM4QU0ucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQD03jwMA0GCSqGSIb3DQEBCwUAA4IBAQAcMKiNdnXEp9XHCfp9DDX9WxDQ UTMv4ShYEu56HI0a78PZnaaHZdLsyknfZ8d982RGBflZxwmpRf0LJ3MvUhW7VUDw AGaqqSekQ89zXwSDkF7EvQ4+jb2huRg8VewHbEhdxSwbXYte6UzlfIVCvUQu/uv7 JJaChEoPIhIYHSmTAKoe+e0e0US5BawUwmSr/r4iutJePNpckgmQHm5XhjzFHXFM Ipt8wdJV8R2N8vV1KaXz55EiheCg5tfO5ZS1ZTJILlp6ntazB0pUG/zEd3YzhEZ6 AsN4QkBfPaIJhQxgJLMOnPu+KGAMmHVhfe8KVX0e2vf25jcpFBxAvU5XBF5V -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org