$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/QcYGcsLGskA3pAJTdePxq7Y7SJM.roa File: QcYGcsLGskA3pAJTdePxq7Y7SJM.roa (raw, json) Hash identifier: ybksQi+cTxAxu7IYoH5DVqvwGY0dtvcoBlrbf3DJPsk= Subject key identifier: 41:C6:06:72:C2:C6:B2:40:37:A4:02:53:75:E3:F1:AB:B6:3B:48:93 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0222 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QcYGcsLGskA3pAJTdePxq7Y7SJM.roa Signing time: Fri 31 May 2024 01:33:05 +0000 ROA not before: Fri 31 May 2024 01:33:05 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 10013 IP address blocks: 36.52.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 31 01:33:05 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=41C60672C2C6B24037A4025375E3F1ABB63B4893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:fd:af:e2:0d:6e:5b:bd:d6:6b:54:68:38: be:67:dc:56:ca:29:63:c4:b4:5a:8f:6b:c7:77:23: f5:19:c3:52:5a:16:46:14:ea:de:3d:64:ea:a0:91: cf:ad:33:b8:db:a2:07:b1:fe:95:74:dc:a0:1a:4f: 3a:3e:ae:46:1b:53:4f:12:83:c8:5a:9a:43:52:dc: 84:8c:80:ae:3f:06:aa:c6:12:15:8d:0f:4d:e0:40: f4:5a:9b:bd:17:2a:d6:39:6e:ec:e2:cf:69:4d:2a: 0b:8b:3d:51:e8:2a:fc:96:c8:e4:a2:a0:8d:37:7b: 2f:42:8a:1d:2a:18:04:7e:6b:8e:23:8f:e7:d8:02: c5:5a:33:e3:bc:c2:60:b8:d6:82:e6:43:b5:14:ff: 6e:7f:70:95:28:64:8b:4d:b2:f7:14:3a:01:df:43: c0:54:09:b4:37:ed:be:30:d3:4d:da:7b:eb:a5:a0: dc:df:b6:86:01:b0:dc:89:c9:c6:53:d3:d0:73:f7: c6:5a:cd:23:59:31:73:63:bb:7b:1c:e7:bb:43:bb: 0a:4a:b7:bd:fa:65:2b:ad:ec:44:0f:cc:7b:2c:2a: af:56:7b:85:d1:30:21:91:03:43:35:be:0c:c7:7e: 89:1c:d9:44:3b:63:22:3a:bb:72:09:0b:e3:74:bf: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C6:06:72:C2:C6:B2:40:37:A4:02:53:75:E3:F1:AB:B6:3B:48:93 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/QcYGcsLGskA3pAJTdePxq7Y7SJM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.238.0/23 Signature Algorithm: sha256WithRSAEncryption 53:5a:18:95:5f:10:67:b9:0f:2b:bd:3f:9f:c1:63:46:a2:ff: 39:27:56:43:da:a5:58:22:41:8c:f5:ae:35:63:39:8e:99:da: 81:d9:99:e7:54:21:32:22:64:66:a8:b5:d6:84:0d:bc:23:6b: 70:7a:bd:f0:63:43:77:f7:e0:c1:a1:59:7c:06:16:2e:57:38: 53:a6:4b:e5:c1:4f:81:63:ef:7e:39:e8:72:b3:cb:4d:3c:fa: 22:f4:ce:f3:ec:7b:76:4c:0a:8c:dd:8e:30:ac:77:24:5c:b2: 8f:27:da:54:cf:cd:02:00:e8:64:f9:fc:57:64:ec:16:14:d4: 9d:eb:d5:ec:09:49:91:84:00:eb:0d:80:94:0c:0e:77:93:e6: 1b:58:07:50:fb:3d:f3:16:91:f3:4b:ca:af:48:38:e4:22:d8: fb:91:52:9f:f2:07:69:41:9d:6e:36:5e:c2:79:00:fd:04:f1: 24:72:70:40:c9:ee:47:91:c9:1d:d3:2d:70:60:2d:7d:41:f0: 25:a5:25:65:e0:7d:da:ed:ba:15:b8:67:f0:33:d1:e6:5a:a3: 71:ca:4b:84:2c:41:c0:eb:92:fc:05:38:11:a1:4c:d1:a2:63: 04:6c:b9:d1:b0:68:fa:24:a5:78:fb:3b:c5:91:b7:ca:eb:c2: 26:a6:f9:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw MTMzMDVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQxQzYwNjcyQzJDNkIy NDAzN0E0MDI1Mzc1RTNGMUFCQjYzQjQ4OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHIv2v4g1uW73Wa1RoOL5n3FbKKWPEtFqPa8d3I/UZw1JaFkYU 6t49ZOqgkc+tM7jbogex/pV03KAaTzo+rkYbU08Sg8hamkNS3ISMgK4/BqrGEhWN D03gQPRam70XKtY5buziz2lNKguLPVHoKvyWyOSioI03ey9Cih0qGAR+a44jj+fY AsVaM+O8wmC41oLmQ7UU/25/cJUoZItNsvcUOgHfQ8BUCbQ37b4w003ae+uloNzf toYBsNyJycZT09Bz98ZazSNZMXNju3sc57tDuwpKt736ZSut7EQPzHssKq9We4XR MCGRA0M1vgzHfokc2UQ7YyI6u3IJC+N0v2CHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQcYGcsLGskA3pAJTdePxq7Y7SJMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L1FjWUdjc0xHc2tBM3BBSlRkZVB4cTdZN1NKTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEkNO4wDQYJKoZIhvcNAQELBQADggEBAFNaGJVfEGe5Dyu9P5/BY0ai/zkn VkPapVgiQYz1rjVjOY6Z2oHZmedUITIiZGaotdaEDbwja3B6vfBjQ3f34MGhWXwG Fi5XOFOmS+XBT4Fj73456HKzy008+iL0zvPse3ZMCozdjjCsdyRcso8n2lTPzQIA 6GT5/Fdk7BYU1J3r1ewJSZGEAOsNgJQMDneT5htYB1D7PfMWkfNLyq9IOOQi2PuR Up/yB2lBnW42XsJ5AP0E8SRycEDJ7keRyR3TLXBgLX1B8CWlJWXgfdrtuhW4Z/Az 0eZao3HKS4QsQcDrkvwFOBGhTNGiYwRsudGwaPokpXj7O8WRt8rrwiam+dM= -----END CERTIFICATE-----Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org