$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/INDGOpRVKLTkuMRSxfDZRx-KB1I.roa File: INDGOpRVKLTkuMRSxfDZRx-KB1I.roa (raw, json) Hash identifier: zvWaHY8ezMJnNhXsn24XvnZeVG4lkaSaiXPo9Y0XbOQ= Subject key identifier: 20:D0:C6:3A:94:55:28:B4:E4:B8:C4:52:C5:F0:D9:47:1F:8A:07:52 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 021A Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/INDGOpRVKLTkuMRSxfDZRx-KB1I.roa Signing time: Wed 31 Jul 2024 01:29:14 +0000 ROA not before: Wed 31 Jul 2024 01:29:14 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 18134 IP address blocks: 203.217.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 31 01:29:14 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=20D0C63A945528B4E4B8C452C5F0D9471F8A0752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:7f:65:2a:d1:15:d2:f9:c3:c4:dd:e1:58: 04:4b:e6:51:da:c8:56:9b:c2:03:b2:20:49:9f:b3: 44:5e:54:dd:49:ba:95:0d:5e:e1:ae:38:d2:3c:90: 9f:42:f6:db:d8:05:d7:86:59:6a:f9:cd:cb:1a:e3: 0e:87:7e:fe:b2:3e:0b:2c:eb:92:20:3e:4d:7b:3e: d5:69:65:b6:70:e1:3c:9d:90:26:94:f3:83:13:14: 3b:9e:06:38:94:c8:5f:e6:31:d2:99:b4:78:8b:7e: a6:24:b9:ed:c5:0d:49:fc:5c:dc:7d:e3:02:94:51: 7d:86:fa:0c:2b:c4:da:a1:26:e8:0a:80:53:3e:fb: 6a:20:c5:9a:ab:8e:ae:df:01:38:07:b1:f5:c8:3b: c1:d2:15:59:31:fb:f3:fd:d1:d4:ae:6c:00:15:b9: 21:a2:ea:59:64:15:86:af:7b:84:00:e5:7d:ed:4a: 8e:13:c1:ca:12:8f:19:b4:dd:44:f5:af:fe:62:0a: b5:3c:da:20:b6:df:ed:92:f3:58:88:5f:f4:94:c9: bb:61:d2:c3:3e:a2:d8:e4:bb:5c:ba:26:cd:f1:e3: d0:ef:8f:37:9b:6d:36:5c:5f:cf:a6:62:7e:32:fb: 00:3d:52:fd:42:77:e8:11:6b:59:3d:c4:41:bb:17: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D0:C6:3A:94:55:28:B4:E4:B8:C4:52:C5:F0:D9:47:1F:8A:07:52 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/INDGOpRVKLTkuMRSxfDZRx-KB1I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.217.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:bb:f0:1b:ef:14:2e:60:fc:6d:70:68:93:32:14:de:09:d2: 0a:c1:9a:ef:a2:0a:fe:dd:74:da:e5:e1:18:e4:39:2e:14:77: 80:b9:bb:d4:de:7c:25:68:66:ee:0b:93:9b:3a:18:90:b4:e0: 5a:d5:9e:85:9f:3d:f3:f5:5f:5d:ad:11:8f:a1:ac:c8:2e:33: 24:56:ae:22:fd:19:d9:e4:76:bc:50:8b:ad:4c:92:ec:7a:06: 70:52:50:f0:bb:30:f5:fb:98:23:d0:4d:5c:95:e6:b7:37:5a: 0c:51:de:22:c7:1e:59:5e:37:d7:69:29:b9:3a:3a:37:e1:dd: c0:b1:96:f7:8c:63:cd:d0:d1:04:c2:4e:e9:72:7b:0c:41:1d: e5:68:51:c9:91:c8:7b:1b:89:fd:45:ce:08:a7:50:29:86:26: 13:34:34:83:bb:29:13:59:7b:fe:d4:2d:27:71:d5:a2:59:39: 1a:ca:e6:1e:49:f2:50:18:3c:02:8d:89:d4:d8:50:9d:73:ae: 1d:f8:73:58:df:e1:0d:df:e9:97:9e:eb:95:23:a0:06:bd:f3: 94:b7:6e:3c:f6:63:27:ad:6e:f7:c6:19:7e:92:0e:53:91:be: 0b:b2:f4:ee:17:dd:9c:3a:17:ab:2d:47:00:8c:08:a8:5d:bb: c8:ab:73:05 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw MTI5MTRaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwRDBDNjNBOTQ1NTI4 QjRFNEI4QzQ1MkM1RjBEOTQ3MUY4QTA3NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgPH9lKtEV0vnDxN3hWARL5lHayFabwgOyIEmfs0ReVN1JupUN XuGuONI8kJ9C9tvYBdeGWWr5zcsa4w6Hfv6yPgss65IgPk17PtVpZbZw4TydkCaU 84MTFDueBjiUyF/mMdKZtHiLfqYkue3FDUn8XNx94wKUUX2G+gwrxNqhJugKgFM+ +2ogxZqrjq7fATgHsfXIO8HSFVkx+/P90dSubAAVuSGi6llkFYave4QA5X3tSo4T wcoSjxm03UT1r/5iCrU82iC23+2S81iIX/SUybth0sM+otjku1y6Js3x49Dvjzeb bTZcX8+mYn4y+wA9Uv1Cd+gRa1k9xEG7FyPfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUINDGOpRVKLTkuMRSxfDZRx+KB1IwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0lOREdPcFJWS0xUa3VNUlN4ZkRaUngtS0IxSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALL2bQwDQYJKoZIhvcNAQELBQADggEBAE+78BvvFC5g/G1waJMyFN4J0grB mu+iCv7ddNrl4RjkOS4Ud4C5u9TefCVoZu4Lk5s6GJC04FrVnoWfPfP1X12tEY+h rMguMyRWriL9GdnkdrxQi61Mkux6BnBSUPC7MPX7mCPQTVyV5rc3WgxR3iLHHlle N9dpKbk6Ojfh3cCxlveMY83Q0QTCTulyewxBHeVoUcmRyHsbif1FzginUCmGJhM0 NIO7KRNZe/7ULSdx1aJZORrK5h5J8lAYPAKNidTYUJ1zrh34c1jf4Q3f6Zee65Uj oAa985S3bjz2YyetbvfGGX6SDlORvguy9O4X3Zw6F6stRwCMCKhdu8ircwU= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org