$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/TG4n1KXDoH_jOO-cfGpKmwhl6N8.roa File: TG4n1KXDoH_jOO-cfGpKmwhl6N8.roa (raw, json) Hash identifier: +Q/FrkbiZDbFpDi9t6GZtykResWq1l8wa5wfm4VfNNU= Subject key identifier: 4C:6E:27:D4:A5:C3:A0:7F:E3:38:EF:9C:7C:6A:4A:9B:08:65:E8:DF Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0247 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/TG4n1KXDoH_jOO-cfGpKmwhl6N8.roa Signing time: Sat 31 Aug 2024 01:33:34 +0000 ROA not before: Sat 31 Aug 2024 01:33:34 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 9824 IP address blocks: 219.112.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 31 01:33:34 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=4C6E27D4A5C3A07FE338EF9C7C6A4A9B0865E8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:0e:75:1f:70:e5:02:6e:3b:4d:17:d8:95: de:dd:4e:10:d5:20:4d:0d:bf:6b:45:07:9a:4e:e6: 8b:db:e0:95:75:5d:ad:4e:7c:ce:72:78:b0:34:56: f2:3b:6e:2c:b8:62:77:5f:69:94:f9:67:f8:a8:bf: 4e:9f:1d:d6:7c:e3:7b:fe:41:1e:33:08:01:85:26: 37:32:02:93:5e:ec:83:39:3b:da:ed:fb:8b:0d:5d: d9:e5:a4:52:49:80:ad:c6:dc:30:b4:d7:55:20:f5: 84:c4:6e:8f:5c:9d:c4:b9:04:18:bf:65:be:44:d9: 49:af:6a:c2:50:c7:df:9a:68:4e:6a:74:63:9c:fb: 5a:f2:30:04:42:31:76:93:96:e9:e5:79:79:9e:24: 0f:91:a7:58:eb:00:c1:b4:af:3d:ae:09:5e:95:40: 8c:4a:62:58:3e:3b:f1:96:2d:c9:91:e9:d7:62:3e: df:78:7c:2f:75:6d:18:de:55:6a:44:15:30:af:53: 4b:c2:9d:85:eb:86:43:0a:9d:06:69:4f:35:ad:84: de:5c:73:82:f7:72:01:22:de:89:2e:57:a6:ab:63: 9a:80:a7:40:9a:14:fb:0a:0a:2d:5c:c2:0c:46:ef: 30:e1:43:0f:18:02:ce:05:03:10:4f:d6:84:67:7c: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6E:27:D4:A5:C3:A0:7F:E3:38:EF:9C:7C:6A:4A:9B:08:65:E8:DF X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/TG4n1KXDoH_jOO-cfGpKmwhl6N8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.112.128.0/19 Signature Algorithm: sha256WithRSAEncryption 35:2b:7a:8f:5c:cb:32:a3:51:54:67:46:f5:b0:7c:a8:87:83: 9b:af:77:25:77:03:82:05:73:45:08:63:a7:40:ca:9a:58:d4: f7:51:62:b3:b5:b3:3d:4d:a8:33:8e:d8:0a:0c:03:7c:82:f3: 65:ff:ea:a4:d6:58:e4:42:17:da:0b:4c:a8:38:de:b0:0e:61: 91:f5:fc:09:4b:4d:67:66:02:e7:2f:68:ed:c4:08:cb:2e:d2: 28:a5:04:ed:fd:8c:b2:fc:c3:c9:d1:7a:e9:65:82:21:ba:e9: 06:be:86:bd:7e:f3:19:86:16:a6:21:3b:9e:df:d3:95:24:96: 14:47:73:8b:66:55:a8:59:9e:48:11:d5:a9:d2:2e:d5:e3:bf: 59:d2:55:fc:52:cb:8b:8c:f0:a5:63:6b:50:01:db:95:2b:ff: cf:f7:7e:0e:20:88:a8:32:13:0e:5b:c1:13:32:04:71:59:12: 1d:c3:f7:cc:fc:c7:af:d0:cd:8c:d3:5c:84:2d:c8:09:66:6b: 13:7e:df:99:7e:d3:1d:eb:e7:5c:5a:fc:54:c0:07:47:b5:51: 46:cc:4e:da:97:a7:5c:64:71:42:70:5a:99:87:fc:50:c0:91: dc:39:ee:18:a7:eb:57:38:b8:08:b1:6a:16:9b:51:af:a2:45: 00:9e:66:c1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw MTMzMzRaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDNkUyN0Q0QTVDM0Ew N0ZFMzM4RUY5QzdDNkE0QTlCMDg2NUU4REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtkA51H3DlAm47TRfYld7dThDVIE0Nv2tFB5pO5ovb4JV1Xa1O fM5yeLA0VvI7biy4YndfaZT5Z/iov06fHdZ843v+QR4zCAGFJjcyApNe7IM5O9rt +4sNXdnlpFJJgK3G3DC011Ug9YTEbo9cncS5BBi/Zb5E2UmvasJQx9+aaE5qdGOc +1ryMARCMXaTlunleXmeJA+Rp1jrAMG0rz2uCV6VQIxKYlg+O/GWLcmR6ddiPt94 fC91bRjeVWpEFTCvU0vCnYXrhkMKnQZpTzWthN5cc4L3cgEi3okuV6arY5qAp0Ca FPsKCi1cwgxG7zDhQw8YAs4FAxBP1oRnfOT7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUTG4n1KXDoH/jOO+cfGpKmwhl6N8wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1RHNG4xS1hEb0hfak9PLWNmR3BLbXdobDZOOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXbcIAwDQYJKoZIhvcNAQELBQADggEBADUreo9cyzKjUVRnRvWwfKiHg5uv dyV3A4IFc0UIY6dAyppY1PdRYrO1sz1NqDOO2AoMA3yC82X/6qTWWORCF9oLTKg4 3rAOYZH1/AlLTWdmAucvaO3ECMsu0iilBO39jLL8w8nReullgiG66Qa+hr1+8xmG FqYhO57f05UklhRHc4tmVahZnkgR1anSLtXjv1nSVfxSy4uM8KVja1AB25Ur/8/3 fg4giKgyEw5bwRMyBHFZEh3D98z8x6/QzYzTXIQtyAlmaxN+35l+0x3r51xa/FTA B0e1UUbMTtqXp1xkcUJwWpmH/FDAkdw57hin61c4uAixahabUa+iRQCeZsE= -----END CERTIFICATE-----Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org