$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KM_K-IUlrskzdP7KyX6M3btA5-o.roa File: KM_K-IUlrskzdP7KyX6M3btA5-o.roa (raw, json) Hash identifier: 1WBeG3DF9c4DKIMzb2OD7ZN0anaDixg11Oy9BoF1bfQ= Subject key identifier: 28:CF:CA:F8:85:25:AE:C9:33:74:FE:CA:C9:7E:8C:DD:BB:40:E7:EA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0778 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KM_K-IUlrskzdP7KyX6M3btA5-o.roa Signing time: Tue 30 Apr 2024 02:04:37 +0000 ROA not before: Tue 30 Apr 2024 02:04:37 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.79.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:04:37 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=28CFCAF88525AEC93374FECAC97E8CDDBB40E7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:c4:4b:08:db:3c:03:5a:93:65:98:9e:24: ef:60:e7:2d:7c:46:19:a6:da:c3:1e:e2:97:61:06: 4c:60:61:2b:e4:1b:b5:36:4d:7b:76:73:77:1d:7c: 67:5b:18:5f:fb:aa:34:bf:ba:e4:12:5f:91:0a:ea: 17:d5:49:b9:dd:a4:cb:07:6a:04:20:be:9e:eb:95: b4:39:8d:82:30:2f:8f:88:be:da:d2:e0:93:f3:f8: 2f:6c:57:e3:a9:8c:b2:7e:2e:b5:f5:74:04:59:93: 14:8d:a6:9a:a8:f3:5e:58:40:40:83:57:77:dc:69: 0d:01:85:07:99:5d:cd:5f:c8:85:17:fd:c1:b9:c8: 46:f9:4b:81:6a:be:57:78:08:f8:ba:b5:a0:52:17: a4:29:0b:83:6d:77:00:20:92:0a:e5:ed:27:2a:81: 84:74:31:a0:91:bf:6e:c3:f2:84:53:2d:1d:11:ac: 23:e6:b2:96:e7:01:54:31:53:e0:87:43:60:2b:17: 91:55:40:c0:15:ad:a2:40:01:0a:33:e7:93:95:7b: 12:af:29:16:6c:3f:57:a5:db:7c:0b:2a:ed:09:68: c7:f9:ef:a8:b4:49:bd:48:89:9d:97:f2:bd:48:14: 4c:30:52:86:03:f9:f3:ea:c6:f3:22:0a:26:8e:40: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:CA:F8:85:25:AE:C9:33:74:FE:CA:C9:7E:8C:DD:BB:40:E7:EA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KM_K-IUlrskzdP7KyX6M3btA5-o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.79.172.0/22 Signature Algorithm: sha256WithRSAEncryption 54:c8:12:77:35:7f:26:11:52:68:7a:c3:fc:d3:97:73:2d:19: bc:a1:0d:5b:46:9a:63:e6:35:20:cc:ec:8e:de:df:4d:28:3c: 5a:e7:9f:63:17:55:7d:77:e5:f1:a3:ae:cc:01:3d:bd:5b:cb: 68:08:98:5e:e7:f8:f8:f1:98:88:38:6b:a5:67:b3:af:e8:8e: bd:cb:6a:1b:76:db:4f:19:98:21:69:56:82:20:3f:ea:46:c0: 76:0e:72:e8:37:3e:17:af:5f:61:1f:18:60:8b:eb:b3:36:90: 6b:8b:7a:6b:c0:8c:a9:ae:2e:4e:5c:f4:3c:f0:f8:c2:14:83: b4:48:a5:9c:ed:54:da:97:af:66:a7:0a:1b:a1:4f:80:ff:17: 43:87:ac:7e:f2:22:dd:e5:86:1f:93:3b:d8:bf:94:75:6c:52: 97:2f:59:64:19:88:37:ea:9b:bf:fc:b9:0d:56:3e:d7:ba:35: d1:07:c1:3d:cb:cb:95:bf:25:61:9c:88:e3:78:06:07:e3:f4: 3c:4f:7f:e0:f3:cd:e2:14:7c:ef:d0:a3:3f:d8:11:b2:ea:c6: bd:df:2d:14:3c:ee:d6:b1:b8:47:1d:90:35:de:71:a6:b9:53: dc:b6:1e:04:20:ad:ff:f3:98:d1:64:b0:9e:be:2b:66:34:82: fe:f6:c1:1b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjA0MzdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4Q0ZDQUY4ODUyNUFF QzkzMzc0RkVDQUM5N0U4Q0REQkI0MEU3RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChtcRLCNs8A1qTZZieJO9g5y18Rhmm2sMe4pdhBkxgYSvkG7U2 TXt2c3cdfGdbGF/7qjS/uuQSX5EK6hfVSbndpMsHagQgvp7rlbQ5jYIwL4+IvtrS 4JPz+C9sV+OpjLJ+LrX1dARZkxSNppqo815YQECDV3fcaQ0BhQeZXc1fyIUX/cG5 yEb5S4Fqvld4CPi6taBSF6QpC4NtdwAgkgrl7ScqgYR0MaCRv27D8oRTLR0RrCPm spbnAVQxU+CHQ2ArF5FVQMAVraJAAQoz55OVexKvKRZsP1el23wLKu0JaMf576i0 Sb1IiZ2X8r1IFEwwUoYD+fPqxvMiCiaOQHrdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKM/K+IUlrskzdP7KyX6M3btA5+owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0tNX0stSVVscnNremRQN0t5WDZNM2J0QTUtby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBT6wwDQYJKoZIhvcNAQELBQADggEBAFTIEnc1fyYRUmh6w/zTl3MtGbyh DVtGmmPmNSDM7I7e300oPFrnn2MXVX135fGjrswBPb1by2gImF7n+PjxmIg4a6Vn s6/ojr3Laht2208ZmCFpVoIgP+pGwHYOcug3PhevX2EfGGCL67M2kGuLemvAjKmu Lk5c9Dzw+MIUg7RIpZztVNqXr2anChuhT4D/F0OHrH7yIt3lhh+TO9i/lHVsUpcv WWQZiDfqm7/8uQ1WPte6NdEHwT3Ly5W/JWGciON4Bgfj9DxPf+DzzeIUfO/Qoz/Y EbLqxr3fLRQ87taxuEcdkDXecaa5U9y2HgQgrf/zmNFksJ6+K2Y0gv72wRs= -----END CERTIFICATE-----Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org