$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1L0K--uEjagMXGzg9a25cDxkDQc.roa File: 1L0K--uEjagMXGzg9a25cDxkDQc.roa (raw, json) Hash identifier: eGYY9D0ST6wnIMN9BQUAdLSbTLNowAPKDsvtYnL3S6E= Subject key identifier: D4:BD:0A:FB:EB:84:8D:A8:0C:5C:6C:E0:F5:AD:B9:70:3C:64:0D:07 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01D7 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1L0K--uEjagMXGzg9a25cDxkDQc.roa Signing time: Wed 01 Nov 2023 01:31:23 +0000 ROA not before: Wed 01 Nov 2023 01:31:23 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 7684 IP address blocks: 49.212.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Nov 1 01:31:23 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=D4BD0AFBEB848DA80C5C6CE0F5ADB9703C640D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:65:cb:13:7e:14:61:95:88:0e:5e:6e:d7: d2:a1:6d:84:8c:27:23:8a:ed:ca:26:92:63:6b:b5: 49:0a:3a:b2:4f:6f:9a:08:bf:3b:77:76:0a:c0:8b: 37:fd:ef:c9:10:e1:6e:27:75:32:0f:81:0a:3b:f6: b7:50:ec:d3:92:67:d5:de:72:12:b4:7d:cc:1d:6a: 64:c8:42:a1:47:c0:33:54:02:34:01:f2:f1:b2:99: 3a:21:67:62:17:4f:3c:b3:3d:b2:af:a2:2e:57:63: be:b4:3e:1b:1c:4e:6c:d1:8a:59:9d:bd:30:40:a3: e7:4e:d0:79:99:74:43:6c:25:fb:41:52:bd:db:f6: b2:d1:22:b0:1e:df:97:d5:7e:f4:a8:39:5e:3e:4b: fc:85:a7:7e:86:74:3e:1b:88:78:26:fd:09:47:39: f5:71:26:df:fe:a1:c2:3e:a5:14:45:34:fa:dc:8a: 50:b3:ec:7a:88:91:7d:20:e9:38:5c:6d:a6:97:c3: 23:04:95:60:41:aa:b9:c8:4e:fa:ea:74:88:17:99: 9b:e0:c9:ee:cb:21:3d:4e:6d:84:57:52:93:ff:35: cd:42:63:9f:f4:62:87:5d:b5:cb:9a:46:a5:3c:9b: 6b:5f:ca:7e:e1:8e:f9:94:6e:63:5a:9f:ad:d3:29: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BD:0A:FB:EB:84:8D:A8:0C:5C:6C:E0:F5:AD:B9:70:3C:64:0D:07 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1L0K--uEjagMXGzg9a25cDxkDQc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.72.0/24 Signature Algorithm: sha256WithRSAEncryption 81:91:54:7e:4b:13:c7:6b:8e:fb:1f:17:64:1f:d7:a6:ca:16: d7:ab:72:6b:b1:21:02:e7:ec:6c:db:d1:f5:2a:51:5c:6d:46: 77:49:b4:aa:f7:89:20:0d:42:18:e1:d1:66:73:e1:25:a1:92: 47:17:49:5d:ed:f4:68:6a:dd:77:8e:7e:1e:d9:fe:e9:28:42: 16:13:e9:a0:07:03:0f:b4:9f:67:d5:d8:1e:7b:5b:4b:61:ed: ae:ef:ff:15:36:92:39:a5:e3:82:8a:6c:01:fd:65:65:54:0c: 55:4b:db:9a:f5:f8:01:06:8a:b4:71:5e:9a:d3:b7:df:c3:4c: ae:13:fa:fe:03:1b:0e:80:61:42:f2:91:19:7b:a0:4b:90:db: 5f:eb:bc:da:79:32:34:b6:bc:84:b7:9a:2c:ef:f2:e4:f1:53: 06:80:42:2c:a8:22:29:16:a3:45:49:e9:78:87:fb:e0:b7:72: fe:90:8d:33:61:ea:a8:48:4f:49:0d:bf:57:f3:29:51:69:b5: c0:c6:58:49:4e:58:00:67:e5:0b:93:d3:55:1a:65:d1:ed:11: 5a:45:14:48:9f:22:d8:d4:8f:62:1b:64:14:2f:d6:ac:d2:35: f9:99:72:1a:4e:86:1f:21:d8:44:47:7d:96:45:b9:05:0f:3d: c8:82:cf:85 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw MTMxMjNaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ0QkQwQUZCRUI4NDhE QTgwQzVDNkNFMEY1QURCOTcwM0M2NDBEMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCYGXLE34UYZWIDl5u19KhbYSMJyOK7comkmNrtUkKOrJPb5oI vzt3dgrAizf978kQ4W4ndTIPgQo79rdQ7NOSZ9XechK0fcwdamTIQqFHwDNUAjQB 8vGymTohZ2IXTzyzPbKvoi5XY760PhscTmzRilmdvTBAo+dO0HmZdENsJftBUr3b 9rLRIrAe35fVfvSoOV4+S/yFp36GdD4biHgm/QlHOfVxJt/+ocI+pRRFNPrcilCz 7HqIkX0g6ThcbaaXwyMElWBBqrnITvrqdIgXmZvgye7LIT1ObYRXUpP/Nc1CY5/0 YoddtcuaRqU8m2tfyn7hjvmUbmNan63TKUXDAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU1L0K++uEjagMXGzg9a25cDxkDQcwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny8xTDBLLS11RWphZ01YR3pnOWEyNWNEeGtEUWMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdRIMA0GCSqGSIb3DQEBCwUAA4IBAQCBkVR+SxPHa477HxdkH9em yhbXq3JrsSEC5+xs29H1KlFcbUZ3SbSq94kgDUIY4dFmc+EloZJHF0ld7fRoat13 jn4e2f7pKEIWE+mgBwMPtJ9n1dgee1tLYe2u7/8VNpI5peOCimwB/WVlVAxVS9ua 9fgBBoq0cV6a07ffw0yuE/r+AxsOgGFC8pEZe6BLkNtf67zaeTI0tryEt5os7/Lk 8VMGgEIsqCIpFqNFSel4h/vgt3L+kI0zYeqoSE9JDb9X8ylRabXAxlhJTlgAZ+UL k9NVGmXR7RFaRRRInyLY1I9iG2QUL9as0jX5mXIaToYfIdhER32WRbkFDz3Igs+F -----END CERTIFICATE-----Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org