$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/qhCCgH-7hej0_LeHOTf28Xt0VvI.roa File: qhCCgH-7hej0_LeHOTf28Xt0VvI.roa (raw, json) Hash identifier: KlR0Blto10A2mM0QzOiNOpZyC0gQZtu30WWPCoq1aMo= Subject key identifier: AA:10:82:80:7F:BB:85:E8:F4:FC:B7:87:39:37:F6:F1:7B:74:56:F2 Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Certificate serial: 6A Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/qhCCgH-7hej0_LeHOTf28Xt0VvI.roa Signing time: Fri 31 May 2024 01:31:11 +0000 ROA not before: Fri 31 May 2024 01:31:11 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7684 IP address blocks: 153.120.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 18:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC Validity Not Before: May 31 01:31:11 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=AA1082807FBB85E8F4FCB7873937F6F17B7456F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:7f:68:d1:86:14:d7:af:e3:4c:b6:a4:97: 40:6e:7d:13:85:b8:2c:82:f9:30:05:39:81:c4:71: 01:97:8d:ee:4f:36:70:58:ff:bf:3f:fd:58:af:83: a2:32:c3:4a:e1:47:cd:68:50:08:79:ea:31:ae:93: 11:0b:e2:7e:d7:13:3a:4d:38:43:5b:68:e6:51:f6: 8d:5d:32:5b:22:e3:3a:79:a7:eb:58:7d:d7:2b:c8: 9c:9d:b4:84:18:8e:44:97:9d:d9:0c:bb:1e:31:f3: 96:e8:f0:af:cb:bc:ea:c3:b7:1f:50:8e:75:84:2a: 45:bc:a2:27:d9:35:f4:91:97:65:13:bd:73:a3:6b: 32:65:f1:25:f1:fc:4d:0c:6e:ee:3a:b2:6c:e6:c1: 2f:c6:02:5d:60:b3:46:46:77:b4:6d:1e:fa:d0:ea: b8:0a:fe:a6:52:9b:06:13:f5:ea:42:9e:6d:b2:6c: ff:4f:2a:df:66:11:14:21:3d:a7:b2:f8:06:dd:08: e6:d9:98:0b:38:e1:f3:c9:f5:5f:23:ef:2b:29:0e: e2:07:f5:87:0a:24:3e:e3:a0:3f:c3:94:4e:37:f9: 8d:ae:d7:75:5b:bd:9c:05:99:77:04:e2:16:8a:23: 89:5f:2b:7c:90:7a:0b:74:8e:d4:81:44:3d:36:41: a8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:82:80:7F:BB:85:E8:F4:FC:B7:87:39:37:F6:F1:7B:74:56:F2 X509v3 Authority Key Identifier: keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/qhCCgH-7hej0_LeHOTf28Xt0VvI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 153.120.0.0/17 Signature Algorithm: sha256WithRSAEncryption 2f:b3:de:0b:ff:86:0e:06:35:29:ae:0f:43:54:92:cb:29:bc: 90:d5:97:6b:f1:c5:de:02:c1:09:7f:3d:09:1d:60:11:22:66: 28:a7:7c:e5:db:7e:1c:45:90:9e:23:5b:ac:1b:4e:4e:b1:90: 9d:47:b6:b0:06:01:67:4f:7b:6c:62:ee:3f:5c:64:35:87:37: c6:7c:ce:2c:b1:28:91:5c:3d:30:89:5a:08:a6:b8:e1:2d:51: 38:f7:be:45:7b:c3:68:3b:af:a7:c8:08:4a:64:bb:e1:c0:76: 57:42:00:64:3a:75:56:0e:bf:30:e6:6c:ae:b0:9a:77:01:08: 9e:66:2f:58:8a:90:49:c0:05:ca:3f:b0:1f:74:83:60:b5:ec: f1:c4:6c:b3:6d:9f:02:01:34:a9:90:80:b6:13:f6:34:58:23: 07:ae:a1:d8:c6:7b:e5:b2:70:b2:60:a3:78:56:be:53:bd:28: 1f:e1:e5:1b:2c:2b:c5:70:a3:dd:7c:09:c3:34:4b:8f:e4:b0: 3e:90:3b:16:43:f0:7a:e6:a3:f4:e3:96:45:49:c1:35:74:5e: ea:6f:e7:98:7e:6e:c4:a9:aa:3a:fe:09:48:19:b9:0a:bc:6f: 77:84:70:87:21:cd:e5:66:0d:7d:56:00:0f:08:d2:52:4c:a8: d1:05:d2:8b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTI0MDUzMTAx MzExMVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQUExMDgyODA3RkJCODVF OEY0RkNCNzg3MzkzN0Y2RjE3Qjc0NTZGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOJrf2jRhhTXr+NMtqSXQG59E4W4LIL5MAU5gcRxAZeN7k82cFj/ vz/9WK+DojLDSuFHzWhQCHnqMa6TEQviftcTOk04Q1to5lH2jV0yWyLjOnmn61h9 1yvInJ20hBiORJed2Qy7HjHzlujwr8u86sO3H1COdYQqRbyiJ9k19JGXZRO9c6Nr MmXxJfH8TQxu7jqybObBL8YCXWCzRkZ3tG0e+tDquAr+plKbBhP16kKebbJs/08q 32YRFCE9p7L4Bt0I5tmYCzjh88n1XyPvKykO4gf1hwokPuOgP8OUTjf5ja7XdVu9 nAWZdwTiFoojiV8rfJB6C3SO1IFEPTZBqH0CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSqEIKAf7uF6PT8t4c5N/bxe3RW8jAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L3FoQ0NnSC03aGVqMF9MZUhPVGYyOFh0MFZ2SS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAeZeAAwDQYJKoZIhvcNAQELBQADggEBAC+z3gv/hg4GNSmuD0NUkssp vJDVl2vxxd4CwQl/PQkdYBEiZiinfOXbfhxFkJ4jW6wbTk6xkJ1HtrAGAWdPe2xi 7j9cZDWHN8Z8ziyxKJFcPTCJWgimuOEtUTj3vkV7w2g7r6fICEpku+HAdldCAGQ6 dVYOvzDmbK6wmncBCJ5mL1iKkEnABco/sB90g2C17PHEbLNtnwIBNKmQgLYT9jRY IweuodjGe+WycLJgo3hWvlO9KB/h5RssK8Vwo918CcM0S4/ksD6QOxZD8Hrmo/Tj lkVJwTV0Xupv55h+bsSpqjr+CUgZuQq8b3eEcIchzeVmDX1WAA8I0lJMqNEF0os= -----END CERTIFICATE-----Generated at Mon Nov 25 19:47:47 2024 by rpki-client on console-fra.rpki-client.org