$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/cqntUeDpJwsx4TXbtSh3l0tFAdc.roa File: cqntUeDpJwsx4TXbtSh3l0tFAdc.roa (raw, json) Hash identifier: 8O+PhaopQsyZWPziZOcqb/8qhHfkwM9FoMx4gc93WEs= Subject key identifier: 72:A9:ED:51:E0:E9:27:0B:31:E1:35:DB:B5:28:77:97:4B:45:01:D7 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 0116 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/cqntUeDpJwsx4TXbtSh3l0tFAdc.roa Signing time: Fri 01 Sep 2023 01:31:37 +0000 ROA not before: Fri 01 Sep 2023 01:31:37 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 210.148.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 07:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:31:37 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=72A9ED51E0E9270B31E135DBB52877974B4501D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:0b:4a:b8:5e:a0:bf:38:18:15:7c:34:af: 0d:f4:03:47:26:fd:12:23:7d:10:86:68:ed:c3:06: 2a:8e:e8:0f:4e:f8:b2:23:bb:53:77:61:4f:7f:8f: 91:82:0c:fe:38:48:df:bc:41:72:75:eb:79:ba:50: 3e:51:60:af:c4:11:87:b3:06:24:f3:34:39:12:ff: e5:78:f3:40:4b:c2:1a:13:30:61:51:a4:21:10:94: b1:f4:1e:86:ba:41:ea:0f:d9:d0:0b:03:fb:51:03: b9:0c:48:f4:3f:9b:65:61:98:48:45:d4:3b:fa:cd: 7c:0d:8a:b6:bf:e3:75:4b:fa:2b:00:1f:69:59:6a: 52:3c:24:8d:b5:ac:b3:0a:84:88:86:6f:c4:d5:04: 25:c1:3d:a0:8f:9d:ef:2e:cc:e2:f5:49:bb:33:a9: ef:77:b4:4a:63:7c:06:a3:8f:0a:5b:4b:cf:1f:1a: 61:f6:78:34:7e:8f:e7:fa:ee:f5:a1:0f:a3:01:33: b6:31:27:65:59:71:d0:33:8b:de:5a:e9:13:c2:72: 55:b3:37:2d:e5:a8:33:3d:4e:1a:d1:f6:9d:e0:09: 1d:e4:61:7e:90:5e:ff:8c:ab:53:01:b6:2b:1e:99: 98:f8:f9:1a:4d:79:7e:c9:df:c5:53:6a:b0:27:fc: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:ED:51:E0:E9:27:0B:31:E1:35:DB:B5:28:77:97:4B:45:01:D7 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/cqntUeDpJwsx4TXbtSh3l0tFAdc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:e6:88:71:c0:61:b8:74:db:b7:6b:d6:45:71:0b:63:a3:44: fc:01:49:60:c2:b7:b5:79:e7:b0:df:75:1a:89:b2:30:d8:c5: e0:81:34:90:26:a6:d4:ed:83:50:01:a0:29:cb:e4:4c:97:4a: d3:1c:34:39:96:71:6c:c0:72:be:3d:aa:8b:7a:25:83:b2:da: 9f:c4:76:6b:d6:c4:2a:ca:ab:18:a0:b9:5f:64:c1:fa:11:a5: 7e:27:26:e3:6f:d2:da:d9:06:66:96:ce:74:63:c9:8d:4d:c7: c2:a2:7f:01:c5:58:e4:87:23:ca:fc:80:7e:b2:ac:1d:d9:cf: f7:f4:51:3e:82:13:67:55:82:d0:2e:b6:96:b0:5b:aa:fd:d3: 60:a9:72:40:7b:19:19:e2:09:56:7b:11:02:04:73:20:28:53: 81:ed:71:da:59:c0:15:9e:10:c5:95:29:e9:23:18:72:ff:9d: d1:af:b0:8b:71:9b:b3:0b:28:d5:96:8d:e1:bb:ee:bd:9b:cb: 91:8f:53:01:f7:cc:44:e1:59:a0:7f:7c:13:3a:e8:c4:92:22: f1:70:fd:54:84:9b:12:67:ae:9e:7c:16:4b:11:68:a2:f0:e4: 20:53:b8:f2:c5:eb:c8:a7:52:98:0e:1e:2c:5e:fd:2e:d1:8e: 1d:6f:d2:a6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICARYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTMxMzdaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDcyQTlFRDUxRTBFOTI3 MEIzMUUxMzVEQkI1Mjg3Nzk3NEI0NTAxRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXzAtKuF6gvzgYFXw0rw30A0cm/RIjfRCGaO3DBiqO6A9O+LIj u1N3YU9/j5GCDP44SN+8QXJ163m6UD5RYK/EEYezBiTzNDkS/+V480BLwhoTMGFR pCEQlLH0Hoa6QeoP2dALA/tRA7kMSPQ/m2VhmEhF1Dv6zXwNira/43VL+isAH2lZ alI8JI21rLMKhIiGb8TVBCXBPaCPne8uzOL1Sbszqe93tEpjfAajjwpbS88fGmH2 eDR+j+f67vWhD6MBM7YxJ2VZcdAzi95a6RPCclWzNy3lqDM9ThrR9p3gCR3kYX6Q Xv+Mq1MBtisemZj4+RpNeX7J38VTarAn/JVzAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUcqntUeDpJwsx4TXbtSh3l0tFAdcwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvY3FudFVlRHBKd3N4NFRYYnRTaDNsMHRGQWRjLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANKUMA0GCSqGSIb3DQEBCwUAA4IBAQCJ5ohxwGG4dNu3a9ZFcQtjo0T8AUlgwre1 eeew33UaibIw2MXggTSQJqbU7YNQAaApy+RMl0rTHDQ5lnFswHK+PaqLeiWDstqf xHZr1sQqyqsYoLlfZMH6EaV+Jybjb9La2QZmls50Y8mNTcfCon8BxVjkhyPK/IB+ sqwd2c/39FE+ghNnVYLQLraWsFuq/dNgqXJAexkZ4glWexECBHMgKFOB7XHaWcAV nhDFlSnpIxhy/53Rr7CLcZuzCyjVlo3hu+69m8uRj1MB98xE4Vmgf3wTOujEkiLx cP1UhJsSZ66efBZLEWii8OQgU7jyxevIp1KYDh4sXv0u0Y4db9Km -----END CERTIFICATE-----Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org