$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa File: pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa (raw, json) Hash identifier: LCNTlBchbUJtH2bQAPOBVzQc2LS6foVHHR/gMRz49Sk= Subject key identifier: A6:AF:F9:84:53:EE:73:ED:43:87:88:EF:81:CA:31:0D:85:72:68:BD Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 22 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa Signing time: Tue 26 Sep 2023 06:41:16 +0000 ROA not before: Tue 26 Sep 2023 06:41:16 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 17941 IP address blocks: 115.30.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Sep 26 06:41:16 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=A6AFF98453EE73ED438788EF81CA310D857268BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6d:75:59:fd:04:40:a3:5a:ea:a1:06:1c:62: e8:8e:6e:d6:b1:96:2d:48:e3:92:85:41:75:30:fa: ac:00:7f:d6:d2:dd:dc:83:98:15:6d:6f:68:d4:66: d6:63:66:b1:f7:16:be:6f:d4:06:4c:7a:2d:5d:2c: 8c:b7:90:d5:dc:bd:f0:39:58:f7:fc:b3:c0:2e:52: 82:0c:ce:0c:4e:68:3a:60:d6:c3:20:a0:1c:6c:21: be:b9:3e:8c:44:10:3e:2c:9f:fd:ec:26:fb:9f:b4: df:60:8a:87:eb:af:38:34:95:21:2f:7b:7c:6c:35: 0f:ac:68:0f:1d:b6:2f:66:ca:2b:d8:56:9d:8a:48: 01:18:a4:06:d7:56:a3:fd:e2:9e:79:46:9b:66:4f: d0:5d:62:1f:4f:0b:05:6c:39:5e:8d:3b:36:5e:3f: 7b:e5:b1:07:9d:54:23:4e:0a:8c:16:1c:9a:c5:60: a7:05:49:1a:1d:0e:29:ae:bd:cf:41:f7:91:6e:10: 7d:7a:95:2d:eb:6a:0d:f9:8e:ac:db:5e:4c:2e:7e: 20:65:d3:3d:cf:86:1a:61:a0:db:a2:58:8a:ee:cd: 1a:7c:98:32:7f:96:94:0f:63:56:96:e9:dd:46:d4: 3d:27:40:ea:a7:49:0b:5d:04:ea:24:1e:f4:30:12: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AF:F9:84:53:EE:73:ED:43:87:88:EF:81:CA:31:0D:85:72:68:BD X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pq_5hFPuc-1Dh4jvgcoxDYVyaL0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.30.0.0/19 Signature Algorithm: sha256WithRSAEncryption 17:49:46:09:10:f7:f5:9c:a7:f7:b5:88:3c:93:5d:9c:d8:92: 31:21:2a:db:56:b6:d8:96:9d:d1:54:a6:00:e0:91:c8:b4:4b: 13:af:6e:50:3a:a7:51:87:91:0c:bf:b1:55:dc:f1:bf:64:c8: 80:15:19:11:e1:b6:86:f5:97:68:18:0d:73:6f:ca:ab:d8:24: 4f:c1:7b:bd:04:48:cd:5e:d5:01:e7:6e:10:13:58:f1:23:bd: d0:68:a9:cb:c6:50:95:2e:bb:30:4d:f4:32:2e:92:73:7c:e9: a3:ff:39:38:af:06:24:d2:79:e5:58:aa:55:e2:d0:30:e2:0d: 6c:63:24:d4:c9:85:56:94:15:e6:a8:d8:89:d6:69:2f:0e:d7: 95:ee:76:c8:e0:ac:06:2a:df:fe:99:58:8b:a6:f6:9e:fd:dc: e7:69:ad:51:38:9e:8b:1e:d2:86:de:21:eb:8c:e2:bf:61:16: 4d:0c:9a:59:89:0a:b1:02:eb:7c:d2:16:cb:a9:fe:5f:e7:5c: dd:fb:2c:ae:ea:55:11:a1:7a:89:eb:ac:9f:14:70:92:d8:66: 89:74:e4:e4:b5:44:4c:7c:9b:fd:f7:60:f7:03:a6:12:66:d8: 60:4c:59:e5:a1:89:56:9e:11:9c:14:51:78:b1:79:cd:65:46: 42:bc:ef:94 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTIzMDkyNjA2 NDExNloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQTZBRkY5ODQ1M0VFNzNF RDQzODc4OEVGODFDQTMxMEQ4NTcyNjhCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOltdVn9BECjWuqhBhxi6I5u1rGWLUjjkoVBdTD6rAB/1tLd3IOY FW1vaNRm1mNmsfcWvm/UBkx6LV0sjLeQ1dy98DlY9/yzwC5SggzODE5oOmDWwyCg HGwhvrk+jEQQPiyf/ewm+5+032CKh+uvODSVIS97fGw1D6xoDx22L2bKK9hWnYpI ARikBtdWo/3innlGm2ZP0F1iH08LBWw5Xo07Nl4/e+WxB51UI04KjBYcmsVgpwVJ Gh0OKa69z0H3kW4QfXqVLetqDfmOrNteTC5+IGXTPc+GGmGg26JYiu7NGnyYMn+W lA9jVpbp3UbUPSdA6qdJC10E6iQe9DAShf8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBSmr/mEU+5z7UOHiO+ByjENhXJovTAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit 6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5 M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQyL3BxXzVoRlB1Yy0xRGg0anZnY294RFlWeWFMMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAVzHgAwDQYJKoZIhvcNAQELBQADggEBABdJRgkQ9/Wcp/e1iDyTXZzY kjEhKttWttiWndFUpgDgkci0SxOvblA6p1GHkQy/sVXc8b9kyIAVGRHhtob1l2gY DXNvyqvYJE/Be70ESM1e1QHnbhATWPEjvdBoqcvGUJUuuzBN9DIuknN86aP/OTiv BiTSeeVYqlXi0DDiDWxjJNTJhVaUFeao2InWaS8O15XudsjgrAYq3/6ZWIum9p79 3OdprVE4nose0obeIeuM4r9hFk0MmlmJCrEC63zSFsup/l/nXN37LK7qVRGheonr rJ8UcJLYZol05OS1REx8m/33YPcDphJm2GBMWeWhiVaeEZwUUXixec1lRkK875Q= -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:17 2024 by rpki-client on console-fra.rpki-client.org