$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/KaD6KsyGB6y3wkYtKRU0-dmOWAA.roa File: KaD6KsyGB6y3wkYtKRU0-dmOWAA.roa (raw, json) Hash identifier: dg2HYI3nZR4an1uy65cGc0GzP2ZoY768e2pVYU0TL6s= Subject key identifier: 29:A0:FA:2A:CC:86:07:AC:B7:C2:46:2D:29:15:34:F9:D9:8E:58:00 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 2B Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/KaD6KsyGB6y3wkYtKRU0-dmOWAA.roa Signing time: Thu 31 Oct 2024 01:32:12 +0000 ROA not before: Thu 31 Oct 2024 01:32:12 +0000 ROA not after: Wed 15 Oct 2025 01:30:02 +0000 asID: 18266 IP address blocks: 210.143.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 31 01:32:12 2024 GMT Not After : Oct 15 01:30:02 2025 GMT Subject: CN=29A0FA2ACC8607ACB7C2462D291534F9D98E5800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1f:8a:88:ef:08:63:98:ab:38:fa:96:c8:60: 41:50:51:f1:5b:6a:2d:ea:74:54:a0:38:c0:85:a8: f5:c5:c7:da:1e:8f:a4:2a:10:45:b9:02:36:fa:9a: f0:e2:0d:e9:a9:6f:28:18:01:3f:9c:f7:2d:50:3b: 5e:76:f5:61:ac:ae:8f:3b:87:2c:3d:f5:26:73:3e: 6d:61:13:a0:ba:cf:96:05:ef:42:21:77:14:de:9c: 6f:31:da:71:df:3d:ad:86:d5:a7:15:d1:f6:85:97: 89:71:74:ef:e3:f4:f2:2a:99:2a:56:8e:84:07:36: dc:9c:0f:73:c3:4f:74:d7:f1:32:62:f7:b4:1a:6b: 53:e5:37:58:fb:d3:99:37:97:08:5e:2f:eb:7a:e2: 61:10:82:04:a1:49:38:13:81:a2:c6:5d:05:04:66: c4:da:ca:ac:c4:b8:96:e1:dd:da:94:f2:de:67:9f: c2:8f:bf:65:6b:ea:85:2f:dd:ec:aa:d2:95:cd:80: 98:19:5d:3b:c1:cb:70:a7:22:ae:1f:00:7a:b9:ec: 7f:e4:68:79:7d:dc:8f:f5:62:2b:cc:4e:30:17:1f: 18:10:1c:97:77:b5:ed:52:24:ed:0b:7f:29:c6:3d: 33:6d:b1:59:96:ed:e3:14:37:6b:e6:cd:4d:21:0e: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A0:FA:2A:CC:86:07:AC:B7:C2:46:2D:29:15:34:F9:D9:8E:58:00 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/KaD6KsyGB6y3wkYtKRU0-dmOWAA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.143.112.0/20 Signature Algorithm: sha256WithRSAEncryption ab:a8:40:b2:22:9b:d5:5f:7a:69:35:ff:1b:17:5a:3f:07:7a: db:7f:8a:45:49:fc:c8:c2:cf:07:f4:4b:4e:3f:5d:19:39:ae: b9:8d:75:6e:73:ee:77:c9:8f:1b:5e:a2:6f:55:94:6b:3a:cb: 5d:3f:6b:a4:32:df:c0:6a:d8:d0:18:81:bb:5b:1b:2d:44:59: c4:e9:8a:26:78:cc:32:d1:cb:0f:36:18:d0:7d:43:81:b7:33: 2b:b1:37:49:21:94:fc:01:ea:68:06:4f:da:41:af:60:5a:08: 71:aa:55:2c:52:16:47:fb:1f:c6:d2:62:6c:a2:8b:fc:5a:ca: 77:e3:99:fb:6a:16:aa:64:9d:ed:5c:ea:63:ec:ec:bc:4f:81: 08:21:5f:ae:92:07:de:ad:6d:ae:a3:c6:b3:ef:e8:9a:e7:37: 3b:21:4e:a5:a1:1a:ad:bc:82:49:43:a0:67:57:19:14:05:c7: d6:fd:1e:d1:58:a1:23:02:77:2b:a0:01:42:0d:70:5f:d7:34: 84:91:3b:fd:be:00:e0:46:c6:ab:a2:c5:20:db:50:36:60:73: 22:8e:ad:4c:27:82:0e:d3:1a:07:72:73:37:d6:0e:e8:a7:18: 17:84:a0:5b:30:8b:25:78:c0:87:8e:97:87:c0:3c:0d:e3:5c: 7c:22:25:da -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI0MTAzMTAx MzIxMloXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMjlBMEZBMkFDQzg2MDdB Q0I3QzI0NjJEMjkxNTM0RjlEOThFNTgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOsfiojvCGOYqzj6lshgQVBR8VtqLep0VKA4wIWo9cXH2h6PpCoQ RbkCNvqa8OIN6alvKBgBP5z3LVA7Xnb1YayujzuHLD31JnM+bWEToLrPlgXvQiF3 FN6cbzHacd89rYbVpxXR9oWXiXF07+P08iqZKlaOhAc23JwPc8NPdNfxMmL3tBpr U+U3WPvTmTeXCF4v63riYRCCBKFJOBOBosZdBQRmxNrKrMS4luHd2pTy3mefwo+/ ZWvqhS/d7KrSlc2AmBldO8HLcKcirh8Aernsf+RoeX3cj/ViK8xOMBcfGBAcl3e1 7VIk7Qt/KcY9M22xWZbt4xQ3a+bNTSEO/L0CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQpoPoqzIYHrLfCRi0pFTT52Y5YADAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvS2FENktzeUdCNnkzd2tZdEtSVTAtZG1PV0FBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNKPcDANBgkqhkiG9w0BAQsFAAOCAQEAq6hAsiKb1V96aTX/GxdaPwd623+K RUn8yMLPB/RLTj9dGTmuuY11bnPud8mPG16ib1WUazrLXT9rpDLfwGrY0BiBu1sb LURZxOmKJnjMMtHLDzYY0H1DgbczK7E3SSGU/AHqaAZP2kGvYFoIcapVLFIWR/sf xtJibKKL/FrKd+OZ+2oWqmSd7VzqY+zsvE+BCCFfrpIH3q1trqPGs+/omuc3OyFO paEarbyCSUOgZ1cZFAXH1v0e0VihIwJ3K6ABQg1wX9c0hJE7/b4A4EbGq6LFINtQ NmBzIo6tTCeCDtMaB3JzN9YO6KcYF4SgWzCLJXjAh46Xh8A8DeNcfCIl2g== -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:16 2024 by rpki-client on console-fra.rpki-client.org