$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nR8g4qgNrLXgxAgI3cL2YWo2xBg.roa File: nR8g4qgNrLXgxAgI3cL2YWo2xBg.roa (raw, json) Hash identifier: Gu0hGuUbA9+opMHycGE0MF3HXqG2hRkczozQDYoXuWM= Subject key identifier: 9D:1F:20:E2:A8:0D:AC:B5:E0:C4:08:08:DD:C2:F6:61:6A:36:C4:18 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0213 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nR8g4qgNrLXgxAgI3cL2YWo2xBg.roa Signing time: Mon 30 Sep 2024 01:30:06 +0000 ROA not before: Mon 30 Sep 2024 01:30:06 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 9371 IP address blocks: 112.78.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 30 01:30:06 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=9D1F20E2A80DACB5E0C40808DDC2F6616A36C418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:6c:e5:96:20:39:f2:a3:9f:a7:99:4d:66: c1:0d:37:c8:aa:61:5c:40:2b:3b:fe:b5:a6:9f:9c: f8:5b:d5:9f:ca:80:82:36:e3:bc:6a:55:4e:6e:e1: 5e:f0:c8:a0:03:2b:34:bf:ec:20:41:af:f7:8c:80: 30:7f:9b:5a:89:8d:79:3a:27:ad:15:b6:70:5d:3c: d9:4d:89:83:ac:7c:2c:4d:8c:45:41:e3:83:22:59: 96:90:bb:79:75:b1:e5:a3:a9:ab:51:0f:e9:8d:bc: c5:35:d1:26:a9:64:f0:d0:69:1e:87:14:95:52:e3: 76:bd:74:77:c1:7e:8d:bc:11:cc:b7:24:52:e8:7e: 12:75:6e:79:31:14:b6:49:1f:3d:03:16:21:89:59: aa:1f:e2:6e:18:95:2c:d4:53:23:ae:38:5f:f9:2a: 82:fc:41:7c:36:86:f6:f3:c1:55:56:e9:22:fd:f1: 78:ad:b1:20:a3:a0:51:40:c9:ac:a7:7d:9d:c5:fb: f4:e2:60:d5:6b:d2:01:16:e1:fd:5b:fc:36:5a:46: 6b:f8:64:66:eb:e7:a3:fd:36:1e:23:95:d3:56:e0: 7b:74:b6:98:12:c8:57:4f:60:5b:11:93:45:93:de: ec:1d:37:17:4a:fa:d8:27:14:f7:72:7d:d9:aa:97: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1F:20:E2:A8:0D:AC:B5:E0:C4:08:08:DD:C2:F6:61:6A:36:C4:18 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nR8g4qgNrLXgxAgI3cL2YWo2xBg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.78.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:31:3d:c7:e2:cb:a3:b7:d2:15:50:5f:65:c5:26:d9:81:32: 40:ac:19:02:01:27:cf:df:16:d6:3d:47:ee:b9:9e:bd:67:6c: ad:57:02:a2:68:c2:e1:78:72:85:cb:ea:9e:d6:a6:d1:73:ea: 4b:a1:ca:f7:e2:33:a0:29:b5:68:8f:22:cd:76:82:8e:a8:f8: 2d:6e:ae:0a:47:4a:42:d2:f1:be:7a:6f:fe:87:c0:d3:50:1c: 23:79:39:04:d3:1a:3f:c2:68:bc:90:4b:5e:6f:9c:71:57:4c: 84:81:5a:17:a3:50:ac:dd:7a:a8:7d:1b:fb:05:7d:73:d6:7c: 4d:13:7b:b4:29:ac:62:9e:0b:54:38:92:97:82:00:2c:d3:38: 8c:3d:9c:ad:a7:ee:bd:a1:a3:b0:36:e0:b4:f5:7b:b1:48:ec: b1:f8:97:16:81:b9:00:2c:5b:2a:4d:07:27:62:27:9f:78:b4: 16:a2:e1:07:ad:76:e3:ba:a7:4a:08:98:d5:64:f8:f1:41:39: b4:3a:15:09:5e:27:3d:e2:69:38:34:37:06:de:a2:15:53:f7: d5:fd:2f:58:be:6c:f1:9f:3e:44:9b:ff:f6:52:10:4a:f6:35: 7a:da:fd:0d:23:0d:d1:27:cb:4d:db:1c:42:f7:57:62:4a:c5: 4a:c8:e1:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw MTMwMDZaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlEMUYyMEUyQTgwREFD QjVFMEM0MDgwOEREQzJGNjYxNkEzNkM0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVV2zlliA58qOfp5lNZsENN8iqYVxAKzv+taafnPhb1Z/KgII2 47xqVU5u4V7wyKADKzS/7CBBr/eMgDB/m1qJjXk6J60VtnBdPNlNiYOsfCxNjEVB 44MiWZaQu3l1seWjqatRD+mNvMU10SapZPDQaR6HFJVS43a9dHfBfo28Ecy3JFLo fhJ1bnkxFLZJHz0DFiGJWaof4m4YlSzUUyOuOF/5KoL8QXw2hvbzwVVW6SL98Xit sSCjoFFAyaynfZ3F+/TiYNVr0gEW4f1b/DZaRmv4ZGbr56P9Nh4jldNW4Ht0tpgS yFdPYFsRk0WT3uwdNxdK+tgnFPdyfdmqlzpHAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUnR8g4qgNrLXgxAgI3cL2YWo2xBgwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9uUjhnNHFnTnJMWGd4QWdJM2NMMllXbzJ4Qmcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAcE7dMA0GCSqGSIb3DQEBCwUAA4IBAQA7MT3H4sujt9IVUF9lxSbZ gTJArBkCASfP3xbWPUfuuZ69Z2ytVwKiaMLheHKFy+qe1qbRc+pLocr34jOgKbVo jyLNdoKOqPgtbq4KR0pC0vG+em/+h8DTUBwjeTkE0xo/wmi8kEteb5xxV0yEgVoX o1Cs3XqofRv7BX1z1nxNE3u0KaxingtUOJKXggAs0ziMPZytp+69oaOwNuC09Xux SOyx+JcWgbkALFsqTQcnYiefeLQWouEHrXbjuqdKCJjVZPjxQTm0OhUJXic94mk4 NDcG3qIVU/fV/S9Yvmzxnz5Em//2UhBK9jV62v0NIw3RJ8tN2xxC91diSsVKyOHU -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org