$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/KgG3-6fcVslR6IWeedeKMBtP0XA.roa File: KgG3-6fcVslR6IWeedeKMBtP0XA.roa (raw, json) Hash identifier: b38vvjnOxP5zJo+mxcGo+FuKRTbfqx3FGgiXRjUPHTM= Subject key identifier: 2A:01:B7:FB:A7:DC:56:C9:51:E8:85:9E:79:D7:8A:30:1B:4F:D1:70 Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Certificate serial: 5A Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/KgG3-6fcVslR6IWeedeKMBtP0XA.roa Signing time: Wed 31 Jul 2024 01:08:57 +0000 ROA not before: Wed 31 Jul 2024 01:08:57 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2514 IP address blocks: 160.248.232.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A Validity Not Before: Jul 31 01:08:57 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=2A01B7FBA7DC56C951E8859E79D78A301B4FD170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:61:02:24:80:5a:c2:8b:c8:bb:9a:5b:9c:c4: 6d:e7:68:2d:6a:b5:bd:96:d3:8c:0b:6b:81:e2:71: d0:37:ae:e9:02:73:82:25:94:f2:86:65:c5:29:42: 1d:aa:d5:b8:11:58:09:c2:59:4d:33:79:eb:e9:31: 54:53:3e:5d:72:65:6a:a7:8b:0d:87:2a:3f:9f:f5: 18:5f:9d:28:f3:a0:43:e5:2e:e8:53:a4:e2:ec:68: e7:19:9b:7f:8f:31:fa:4e:5f:ba:ee:b5:84:32:7e: a9:08:02:36:26:0c:db:7b:57:ad:6e:4c:ed:55:6e: 51:27:94:77:f9:12:3e:f2:db:c8:80:00:ba:11:e0: 86:27:36:54:13:42:9e:16:5e:f3:bd:93:f7:55:b8: 44:1b:50:03:8f:ca:6b:af:0c:01:35:33:5d:8c:a6: f7:8f:95:2b:78:48:cf:26:86:5c:94:82:00:9f:78: 1e:a8:48:ab:06:b7:68:d8:e9:d6:9b:1a:3a:58:47: 73:ee:a0:17:0f:8b:45:78:c8:94:7b:1a:21:70:d0: f7:5a:37:72:8f:1e:2d:9a:19:eb:6f:64:f0:08:aa: 5b:32:7c:69:b5:b1:f9:c6:37:cf:f8:b7:d6:60:ac: f9:88:86:86:76:7c:8a:34:4a:6a:a3:7b:62:27:1c: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:B7:FB:A7:DC:56:C9:51:E8:85:9E:79:D7:8A:30:1B:4F:D1:70 X509v3 Authority Key Identifier: keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/KgG3-6fcVslR6IWeedeKMBtP0XA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.248.232.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:a8:d8:ed:0f:1a:5f:32:0f:47:43:ab:92:8f:6b:0b:c4:5b: e0:d4:ac:fe:e5:73:16:99:0e:fa:a0:c8:93:28:98:bb:1d:75: 54:e1:8d:49:41:1f:37:59:9e:cc:79:ac:ab:8c:7a:f1:c7:4a: dc:9c:17:99:d7:24:08:c2:04:27:47:3b:ae:0d:5c:53:1b:14: f7:d9:12:89:75:37:4c:52:dd:97:9a:f9:c7:5a:ab:1e:15:eb: d0:36:c7:bc:ab:56:03:cc:69:84:04:94:e4:1e:07:15:e0:66: dc:a9:58:9a:68:b9:23:1c:f8:ea:05:54:54:82:05:c1:a3:83: 42:dc:6d:2b:a3:d2:5f:b2:27:b5:37:c3:c9:40:19:23:09:11: 89:e3:f9:91:c3:ba:88:78:ec:5f:58:81:fc:2c:69:8e:00:67: 1a:c9:2d:46:50:ef:f0:ef:f6:2b:55:32:42:65:a7:a2:85:03: da:ab:99:a2:c6:3f:e8:fa:8f:9c:1f:38:4a:6b:a2:ab:bc:3a: 29:6c:5b:d1:39:7d:03:a6:56:6a:06:0c:ae:58:a1:59:be:dd: d6:b5:a0:7c:41:8c:6d:11:cb:4b:e4:0e:76:37:4f:fb:bc:ec: d3:36:9a:65:43:e9:e6:c0:c5:ba:99:d8:b8:00:a2:a8:7f:7f: cc:d7:3f:03 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDczMTAx MDg1N1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMkEwMUI3RkJBN0RDNTZD OTUxRTg4NTlFNzlENzhBMzAxQjRGRDE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPBhAiSAWsKLyLuaW5zEbedoLWq1vZbTjAtrgeJx0Deu6QJzgiWU 8oZlxSlCHarVuBFYCcJZTTN56+kxVFM+XXJlaqeLDYcqP5/1GF+dKPOgQ+Uu6FOk 4uxo5xmbf48x+k5fuu61hDJ+qQgCNiYM23tXrW5M7VVuUSeUd/kSPvLbyIAAuhHg hic2VBNCnhZe872T91W4RBtQA4/Ka68MATUzXYym94+VK3hIzyaGXJSCAJ94HqhI qwa3aNjp1psaOlhHc+6gFw+LRXjIlHsaIXDQ91o3co8eLZoZ629k8AiqWzJ8abWx +cY3z/i31mCs+YiGhnZ8ijRKaqN7YiccaGsCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBQqAbf7p9xWyVHohZ5514owG0/RcDAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzI5L0tnRzMtNmZjVnNsUjZJV2VlZGVLTUJ0UDBYQS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAKg+OgwDQYJKoZIhvcNAQELBQADggEBAD+o2O0PGl8yD0dDq5KPawvEW+DUrP7l cxaZDvqgyJMomLsddVThjUlBHzdZnsx5rKuMevHHStycF5nXJAjCBCdHO64NXFMb FPfZEol1N0xS3Zea+cdaqx4V69A2x7yrVgPMaYQElOQeBxXgZtypWJpouSMc+OoF VFSCBcGjg0LcbSuj0l+yJ7U3w8lAGSMJEYnj+ZHDuoh47F9YgfwsaY4AZxrJLUZQ 7/Dv9itVMkJlp6KFA9qrmaLGP+j6j5wfOEproqu8OilsW9E5fQOmVmoGDK5YoVm+ 3da1oHxBjG0Ry0vkDnY3T/u87NM2mmVD6ebAxbqZ2LgAoqh/f8zXPwM= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org