$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/klgf1igeUWuCOGgaSYq-g2DYiIk.roa File: klgf1igeUWuCOGgaSYq-g2DYiIk.roa (raw, json) Hash identifier: LsGlbmSF/qTOSTKZotVUc7OnGfI7bC2kZoVxsIWmv0o= Subject key identifier: 92:58:1F:D6:28:1E:51:6B:82:38:68:1A:49:8A:BE:83:60:D8:88:89 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 01E9 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/klgf1igeUWuCOGgaSYq-g2DYiIk.roa Signing time: Sun 30 Jun 2024 01:28:59 +0000 ROA not before: Sun 30 Jun 2024 01:28:59 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 7684 IP address blocks: 112.78.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Jun 30 01:28:59 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=92581FD6281E516B8238681A498ABE8360D88889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:b0:8a:ca:47:c8:6b:8b:da:2d:a3:36:7d: 1d:91:2d:93:b9:08:5a:f1:fe:8f:b1:4e:b7:84:11: 83:80:96:b7:ff:20:50:79:1a:37:a7:f6:3b:b5:d5: e6:9d:01:68:df:50:64:8e:bc:42:54:a0:a8:59:26: dd:32:23:7b:a7:36:5b:0d:d2:ae:9f:50:be:42:b8: df:90:b2:3f:be:89:fa:6f:33:e9:81:5b:16:c0:b1: 18:8c:b3:f8:93:dd:d3:e6:aa:c2:21:3d:1b:7a:77: e1:8f:b4:7d:21:e1:ed:8b:38:15:ea:2b:fe:c2:0b: 5c:6e:33:22:a1:c8:be:6b:71:09:65:bb:8e:2b:69: 2c:99:86:29:a6:6c:ad:aa:6e:a3:54:72:f4:81:4e: c6:0d:cd:ff:74:96:71:48:ae:ef:a2:b4:6b:d3:f6: 45:8f:89:fe:60:05:59:a0:e2:4d:4a:9d:1f:43:0a: 45:46:4d:a6:18:9f:d4:38:5b:eb:d2:bf:7c:10:f3: 36:aa:a2:fd:a1:f3:92:c3:58:6d:6c:91:ec:23:ed: 94:d0:e2:a8:d5:c1:d9:8b:b6:9b:18:d1:48:7a:be: 59:e5:a0:2f:ea:25:60:27:98:50:52:79:ef:7d:27: 50:a9:60:51:20:3b:aa:26:df:e0:5a:fe:1d:f1:33: 7c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:58:1F:D6:28:1E:51:6B:82:38:68:1A:49:8A:BE:83:60:D8:88:89 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/klgf1igeUWuCOGgaSYq-g2DYiIk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.78.202.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:4b:bb:fb:e1:3a:cb:6a:31:4d:d0:ba:68:78:d7:85:38:06: 22:02:85:c1:5d:f6:53:9b:c9:bb:1a:37:2f:e6:62:d6:62:e6: 25:d4:0b:62:e8:43:38:6e:70:b9:5c:5d:f9:a3:2a:3c:fe:f7: c9:99:f3:93:4d:a3:f6:81:4e:6c:dd:eb:a4:72:f5:5f:fd:01: 6e:fe:28:d1:ae:a4:24:00:79:2d:b3:02:e1:d0:74:6d:cf:9f: 60:ac:95:cb:0f:e3:9b:08:c0:96:46:56:27:f9:d7:9f:1b:94: 1d:90:fe:7c:ff:0f:e8:ae:6e:fc:ed:66:4c:d1:c7:0f:b0:2d: d5:04:7a:49:0a:dc:3c:3f:d1:47:a7:b0:fc:27:c1:cb:48:c9: 18:c0:da:a5:1a:ff:a5:52:7a:3c:4c:b9:41:48:a2:e5:24:cf: 53:a0:6d:6e:46:ca:dd:e6:a4:93:a2:2d:8e:eb:e2:d2:79:4c: 16:13:d8:4d:2c:37:dd:d4:a1:3f:29:9e:0a:9e:2f:6a:cb:81: 55:82:3d:c1:81:16:31:77:48:6b:92:a5:41:33:74:cd:30:c5: ca:72:51:48:fd:6e:50:b8:63:2c:49:f2:d8:6c:d1:6b:48:b4: db:0b:e5:26:ba:d1:9c:20:9d:70:d6:9b:f9:04:5b:1a:63:3e: 94:56:eb:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA2MzAw MTI4NTlaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDkyNTgxRkQ2MjgxRTUx NkI4MjM4NjgxQTQ5OEFCRTgzNjBEODg4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0urCKykfIa4vaLaM2fR2RLZO5CFrx/o+xTreEEYOAlrf/IFB5 Gjen9ju11eadAWjfUGSOvEJUoKhZJt0yI3unNlsN0q6fUL5CuN+Qsj++ifpvM+mB WxbAsRiMs/iT3dPmqsIhPRt6d+GPtH0h4e2LOBXqK/7CC1xuMyKhyL5rcQllu44r aSyZhimmbK2qbqNUcvSBTsYNzf90lnFIru+itGvT9kWPif5gBVmg4k1KnR9DCkVG TaYYn9Q4W+vSv3wQ8zaqov2h85LDWG1skewj7ZTQ4qjVwdmLtpsY0Uh6vlnloC/q JWAnmFBSee99J1CpYFEgO6om3+Ba/h3xM3zZAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUklgf1igeUWuCOGgaSYq+g2DYiIkwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9rbGdmMWlnZVVXdUNPR2dhU1lxLWcyRFlpSWsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAcE7KMA0GCSqGSIb3DQEBCwUAA4IBAQBLS7v74TrLajFN0LpoeNeF OAYiAoXBXfZTm8m7Gjcv5mLWYuYl1Ati6EM4bnC5XF35oyo8/vfJmfOTTaP2gU5s 3eukcvVf/QFu/ijRrqQkAHktswLh0HRtz59grJXLD+ObCMCWRlYn+defG5QdkP58 /w/orm787WZM0ccPsC3VBHpJCtw8P9FHp7D8J8HLSMkYwNqlGv+lUno8TLlBSKLl JM9ToG1uRsrd5qSToi2O6+LSeUwWE9hNLDfd1KE/KZ4Kni9qy4FVgj3BgRYxd0hr kqVBM3TNMMXKclFI/W5QuGMsSfLYbNFrSLTbC+UmutGcIJ1w1pv5BFsaYz6UVutv -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org