$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/zQm77Ptv0bUAXQIq2EVRo0twXCE.roa File: zQm77Ptv0bUAXQIq2EVRo0twXCE.roa (raw, json) Hash identifier: s9Q+JVYdY4MxYcm0SdVqSkZrL6BPtJB439TFGuFdnf8= Subject key identifier: CD:09:BB:EC:FB:6F:D1:B5:00:5D:02:2A:D8:45:51:A3:4B:70:5C:21 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 010B Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zQm77Ptv0bUAXQIq2EVRo0twXCE.roa Signing time: Fri 01 Sep 2023 01:29:01 +0000 ROA not before: Fri 01 Sep 2023 01:29:01 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 2497 IP address blocks: 121.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Sep 1 01:29:01 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=CD09BBECFB6FD1B5005D022AD84551A34B705C21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:21:ff:ea:11:e6:ac:6a:2f:2d:ea:f2:94: 05:e7:a9:42:b4:53:d4:17:30:d1:d7:39:9f:a7:73: 8a:a1:ec:4f:89:39:29:14:72:17:f9:7b:7d:08:7e: 3d:8e:91:ed:07:a3:06:82:ce:04:e0:77:29:ed:69: c0:6a:92:a2:fc:d6:ed:07:32:5d:9f:a5:e7:a1:7d: be:65:58:b6:05:66:18:84:d1:c6:59:2a:14:fb:04: de:80:04:d6:0c:a2:2b:c8:cc:02:4a:70:29:53:68: 8a:35:31:d1:72:2e:95:89:66:cd:b3:80:1a:3b:3e: 1e:21:7b:13:37:18:0b:67:c9:30:4b:39:cf:46:30: 03:2c:38:fe:ab:c6:f9:f0:c9:3b:69:b4:46:ad:05: 82:1d:fd:48:8d:7e:e8:7b:86:ed:c7:d0:d4:79:2c: 8b:ba:8e:2f:cc:d9:78:1e:84:83:ea:24:02:58:a3: 82:ca:f8:5d:77:a7:37:3a:28:60:90:10:39:a2:38: b3:7e:94:60:cf:bb:0e:44:46:2c:0b:1f:65:c9:8f: 10:fb:4a:6d:30:1b:e6:74:70:94:b6:68:ed:06:a5: 32:9f:0b:f0:5b:35:11:16:2a:31:1f:5c:93:ea:98: 32:ec:4d:fe:f6:be:d5:54:26:af:0b:e3:fd:4d:6a: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:09:BB:EC:FB:6F:D1:B5:00:5D:02:2A:D8:45:51:A3:4B:70:5C:21 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/zQm77Ptv0bUAXQIq2EVRo0twXCE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:db:9f:9e:1c:0b:50:87:1e:13:e5:13:c6:dc:54:3a:72:b6: 40:be:68:a9:5e:47:b9:75:87:b2:15:c9:1e:4d:12:1f:2c:a0: fd:c0:cf:9b:c1:63:85:1d:21:31:2d:f7:b0:d3:3d:13:b3:45: 84:ef:20:f6:1d:d4:c9:4f:0b:69:f9:dd:5c:8b:8c:2d:d9:5c: 32:77:13:d5:3f:9f:6b:b7:b8:62:2c:11:2e:01:77:29:93:30: 3f:30:f8:40:a3:a6:0e:91:aa:90:72:88:af:26:d9:e6:82:c6: a2:84:be:7f:60:de:b0:b8:06:b6:49:29:46:b2:b1:9b:66:08: 62:0e:d9:4e:1b:88:7e:7b:c0:7f:bc:3b:f4:b5:bf:10:d1:58: b6:0a:21:58:82:55:82:46:45:b2:93:49:89:8e:c1:d8:92:56: aa:33:c2:7a:0b:c9:a4:a2:d4:b2:1b:99:06:1e:94:61:af:fd: 42:f2:3d:90:43:c5:45:89:27:2a:7a:c8:74:2c:fe:c4:fc:d5: 18:83:9d:c9:50:b6:0f:a1:d7:da:11:5a:ce:a2:22:6b:76:04: ac:f4:7d:42:59:39:5b:8f:79:f5:96:1c:d1:ba:b6:12:25:40: a1:61:fa:41:49:f2:b2:af:e0:7e:78:e6:1b:ab:43:10:59:d0: d8:61:a3:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw MTI5MDFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKENEMDlCQkVDRkI2RkQx QjUwMDVEMDIyQUQ4NDU1MUEzNEI3MDVDMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhcSH/6hHmrGovLerylAXnqUK0U9QXMNHXOZ+nc4qh7E+JOSkU chf5e30Ifj2Oke0HowaCzgTgdyntacBqkqL81u0HMl2fpeehfb5lWLYFZhiE0cZZ KhT7BN6ABNYMoivIzAJKcClTaIo1MdFyLpWJZs2zgBo7Ph4hexM3GAtnyTBLOc9G MAMsOP6rxvnwyTtptEatBYId/UiNfuh7hu3H0NR5LIu6ji/M2XgehIPqJAJYo4LK +F13pzc6KGCQEDmiOLN+lGDPuw5ERiwLH2XJjxD7Sm0wG+Z0cJS2aO0GpTKfC/Bb NREWKjEfXJPqmDLsTf72vtVUJq8L4/1NaisLAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUzQm77Ptv0bUAXQIq2EVRo0twXCEwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvelFtNzdQdHYwYlVBWFFJcTJFVlJvMHR3WENFLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AHlmMA0GCSqGSIb3DQEBCwUAA4IBAQA925+eHAtQhx4T5RPG3FQ6crZAvmipXke5 dYeyFckeTRIfLKD9wM+bwWOFHSExLfew0z0Ts0WE7yD2HdTJTwtp+d1ci4wt2Vwy dxPVP59rt7hiLBEuAXcpkzA/MPhAo6YOkaqQcoivJtnmgsaihL5/YN6wuAa2SSlG srGbZghiDtlOG4h+e8B/vDv0tb8Q0Vi2CiFYglWCRkWyk0mJjsHYklaqM8J6C8mk otSyG5kGHpRhr/1C8j2QQ8VFiScqesh0LP7E/NUYg53JULYPodfaEVrOoiJrdgSs 9H1CWTlbj3n1lhzRurYSJUChYfpBSfKyr+B+eOYbq0MQWdDYYaM6 -----END CERTIFICATE-----Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org