$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q1LNKC3iZ6PlryknZb1akN53CJk.roa File: Q1LNKC3iZ6PlryknZb1akN53CJk.roa (raw, json) Hash identifier: 3nIV6DmEn7OidYJmK1AIH5vXta3EN5588rj7gvjnudU= Subject key identifier: 43:52:CD:28:2D:E2:67:A3:E5:AF:29:27:65:BD:5A:90:DE:77:08:99 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: F6 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q1LNKC3iZ6PlryknZb1akN53CJk.roa Signing time: Fri 01 Sep 2023 01:28:51 +0000 ROA not before: Fri 01 Sep 2023 01:28:51 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 124.41.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:28:51 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=4352CD282DE267A3E5AF292765BD5A90DE770899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:5f:98:97:dc:37:06:b4:7f:c4:77:9a:a6: a6:6d:7e:47:55:cb:69:25:a4:a0:96:87:32:7c:82: d4:20:a0:f4:1f:73:54:1e:5a:25:33:f2:07:3d:1d: d2:f9:58:e5:06:c8:a6:cd:dc:d0:80:bd:1a:22:61: 4a:83:c9:f3:89:a6:a9:bd:68:83:e7:25:b4:b8:67: f3:f2:c6:89:74:12:06:76:97:8f:5b:57:fc:09:05: 15:76:be:42:6e:c5:89:89:b9:f6:8b:f1:ff:f9:04: 05:98:62:c5:8b:72:c7:89:0f:a9:45:e0:fd:45:3a: d5:06:55:13:82:1a:57:e5:4a:96:b7:72:a9:ff:6f: cb:d0:87:16:88:86:62:07:3a:ae:a3:05:87:51:89: 59:56:ca:d5:ce:70:55:a7:97:e4:a0:5a:d0:a3:a0: cb:8d:56:60:0c:f6:fa:f8:5b:8b:5f:84:6b:e4:72: 30:aa:8b:85:a8:0f:4f:1b:76:e8:d4:aa:62:65:d0: 87:0e:ee:b9:ad:e2:e8:c2:6d:16:e6:2f:96:d0:0c: 89:a5:0f:ac:40:85:7e:09:c1:1a:58:02:01:e2:f5: e8:48:18:33:da:51:95:8f:bd:c0:6e:0f:22:16:33: be:c0:a7:6a:36:61:40:2c:fb:d8:3c:78:b3:15:e4: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:CD:28:2D:E2:67:A3:E5:AF:29:27:65:BD:5A:90:DE:77:08:99 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q1LNKC3iZ6PlryknZb1akN53CJk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.41.0.0/17 Signature Algorithm: sha256WithRSAEncryption 95:98:18:a5:3f:38:e8:8e:09:4d:17:56:5e:ff:35:59:6f:ae: 2c:25:b9:b7:72:8e:cd:2c:9d:5b:d5:0c:bf:73:8c:b4:5a:ea: 2d:af:bb:1d:5d:b2:e5:f0:ce:7f:32:e6:be:4d:09:f0:3c:7a: 8b:d7:9e:fd:a8:17:71:71:64:d0:4a:46:50:21:23:de:29:d9: a2:e1:85:ed:0c:aa:d2:62:36:88:96:60:2a:39:b7:f9:20:cb: fa:26:7f:e8:e8:dc:ab:fc:b6:86:5a:8c:4f:88:5e:24:73:32: 49:f5:31:c9:bc:c0:1c:f2:2b:fa:a9:b9:09:ce:4e:a0:f7:04: ff:43:09:68:a0:7d:9c:94:10:ba:a4:07:c2:a1:0a:df:9f:8d: 99:4e:7b:61:70:af:53:5c:ca:49:d2:42:ac:9d:a7:16:6f:5d: 2c:f8:05:97:0b:08:e1:ed:22:53:cd:52:80:0c:6c:79:af:9c: 46:13:18:db:dc:93:cf:94:70:b4:d1:ab:a3:18:ef:69:7f:2b: 38:39:fc:3e:bc:d2:56:e6:14:ed:20:7a:fe:28:ae:f0:df:82: 0d:ad:11:93:d3:dd:35:bb:e6:d7:f0:6f:14:59:0f:0e:28:cb: c6:e5:4f:8c:fa:e9:d0:1b:8e:09:0e:1e:48:a8:b0:96:d1:d5: e8:31:21:19 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTI4NTFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNTJDRDI4MkRFMjY3 QTNFNUFGMjkyNzY1QkQ1QTkwREU3NzA4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvIF+Yl9w3BrR/xHeapqZtfkdVy2klpKCWhzJ8gtQgoPQfc1Qe WiUz8gc9HdL5WOUGyKbN3NCAvRoiYUqDyfOJpqm9aIPnJbS4Z/Pyxol0EgZ2l49b V/wJBRV2vkJuxYmJufaL8f/5BAWYYsWLcseJD6lF4P1FOtUGVROCGlflSpa3cqn/ b8vQhxaIhmIHOq6jBYdRiVlWytXOcFWnl+SgWtCjoMuNVmAM9vr4W4tfhGvkcjCq i4WoD08bdujUqmJl0IcO7rmt4ujCbRbmL5bQDImlD6xAhX4JwRpYAgHi9ehIGDPa UZWPvcBuDyIWM77Ap2o2YUAs+9g8eLMV5MelAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUQ1LNKC3iZ6PlryknZb1akN53CJkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvUTFMTktDM2laNlBscnlrblpiMWFrTjUzQ0prLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B3wpADANBgkqhkiG9w0BAQsFAAOCAQEAlZgYpT846I4JTRdWXv81WW+uLCW5t3KO zSydW9UMv3OMtFrqLa+7HV2y5fDOfzLmvk0J8Dx6i9ee/agXcXFk0EpGUCEj3inZ ouGF7Qyq0mI2iJZgKjm3+SDL+iZ/6Ojcq/y2hlqMT4heJHMySfUxybzAHPIr+qm5 Cc5OoPcE/0MJaKB9nJQQuqQHwqEK35+NmU57YXCvU1zKSdJCrJ2nFm9dLPgFlwsI 4e0iU81SgAxsea+cRhMY29yTz5RwtNGroxjvaX8rODn8PrzSVuYU7SB6/iiu8N+C Da0Rk9PdNbvm1/BvFFkPDijLxuVPjPrp0BuOCQ4eSKiwltHV6DEhGQ== -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org