$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QClOhhiocuaGq5QN34UO7PISWTE.roa File: QClOhhiocuaGq5QN34UO7PISWTE.roa (raw, json) Hash identifier: I1n5Cz3K3SLPv8/hmyVxrinIcq5yV4J3vfePwwZHS24= Subject key identifier: 40:29:4E:86:18:A8:72:E6:86:AB:94:0D:DF:85:0E:EC:F2:12:59:31 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 087C Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QClOhhiocuaGq5QN34UO7PISWTE.roa Signing time: Tue 30 Apr 2024 02:18:37 +0000 ROA not before: Tue 30 Apr 2024 02:18:37 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 1.78.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:18:37 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=40294E8618A872E686AB940DDF850EECF2125931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ed:8e:30:ee:ed:d7:9d:95:5a:a2:9a:a2:a9: 74:1d:f6:4f:b0:f9:10:32:4d:ee:ee:c5:f7:60:fa: aa:f5:8c:b4:3a:39:5c:14:9c:ce:41:37:98:b5:40: 39:72:84:a0:1d:4f:ee:85:1d:13:a0:d6:31:0d:9c: b6:0a:28:ce:c1:16:22:1e:32:90:67:79:04:11:0d: 43:2d:df:18:6c:f2:6f:7c:6a:1e:04:ee:1d:2a:11: 51:0d:d4:99:14:14:29:d2:e2:3e:3c:dc:df:2a:0f: 21:b6:97:51:53:4d:5b:2b:72:21:80:5e:a9:6e:c2: eb:4a:70:4f:e2:ba:f5:87:d6:ef:db:ef:1f:2a:60: df:2b:d7:13:ea:b4:6a:1c:68:0d:93:0a:ab:1c:55: 1c:6c:48:1d:4c:f4:95:99:09:ae:60:b1:ad:fc:a2: 64:89:76:2b:fc:0e:04:78:86:03:e6:0b:53:fb:8c: 13:a2:69:17:a5:66:39:d2:c8:d4:2a:63:de:b6:ea: 6d:96:f2:53:64:2d:b1:73:a3:c3:9f:8d:47:a3:1e: fe:c8:eb:33:71:52:c6:1d:bb:2b:68:11:88:47:7d: e8:39:e7:95:8d:c0:e3:96:74:30:10:b3:56:0c:42: 51:f7:49:4c:5d:37:e7:7c:bd:70:20:6e:90:4b:8a: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:4E:86:18:A8:72:E6:86:AB:94:0D:DF:85:0E:EC:F2:12:59:31 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QClOhhiocuaGq5QN34UO7PISWTE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.78.44.0/22 Signature Algorithm: sha256WithRSAEncryption 04:63:3c:2a:d2:41:50:10:08:88:63:08:55:f9:3d:e1:9c:90: c4:66:8c:6f:d6:40:55:38:be:87:69:9c:a9:d7:9b:2a:6f:6a: df:ca:2b:e2:2f:64:00:02:80:ee:16:be:fb:0c:a5:40:33:05: cf:15:65:dc:27:73:3d:84:ca:2d:cc:5f:4f:89:08:39:6f:d3: a3:67:d1:8f:6a:56:8d:8c:bc:46:c6:83:8b:d5:6d:f6:3f:02: d1:17:9c:39:fd:e0:9f:29:0b:5e:57:bc:ba:79:4f:87:16:09: 36:5b:3a:fd:50:b6:a7:b3:2c:17:98:fe:06:6f:15:d4:39:6f: bf:df:a5:39:0a:61:91:48:da:e6:d4:c0:ef:25:38:b7:73:f8: 4f:a6:d9:62:16:26:21:fc:8f:40:57:27:62:b1:a2:56:a8:d3: 5e:83:03:7a:b3:37:41:e3:8f:e6:99:d0:d5:6e:7e:61:4f:9f: 1b:11:ef:6f:75:5a:2f:81:91:6a:50:88:a1:51:3d:99:3f:37: 5f:74:1a:e2:25:aa:a8:9c:e5:cd:b8:93:a8:45:c8:aa:04:25: 5c:f8:06:1c:4b:13:94:38:e4:16:52:78:9a:e6:db:1b:19:8e: 9b:ca:95:12:ac:c6:5e:31:ec:a6:69:fb:c7:19:57:6a:d9:02: a5:2b:74:52 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjE4MzdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwMjk0RTg2MThBODcy RTY4NkFCOTQwRERGODUwRUVDRjIxMjU5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZ7Y4w7u3XnZVaopqiqXQd9k+w+RAyTe7uxfdg+qr1jLQ6OVwU nM5BN5i1QDlyhKAdT+6FHROg1jENnLYKKM7BFiIeMpBneQQRDUMt3xhs8m98ah4E 7h0qEVEN1JkUFCnS4j483N8qDyG2l1FTTVsrciGAXqluwutKcE/iuvWH1u/b7x8q YN8r1xPqtGocaA2TCqscVRxsSB1M9JWZCa5gsa38omSJdiv8DgR4hgPmC1P7jBOi aRelZjnSyNQqY9626m2W8lNkLbFzo8OfjUejHv7I6zNxUsYduytoEYhHfeg555WN wOOWdDAQs1YMQlH3SUxdN+d8vXAgbpBLivIPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQClOhhiocuaGq5QN34UO7PISWTEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FDbE9oaGlvY3VhR3E1UU4zNFVPN1BJU1dURS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBTiwwDQYJKoZIhvcNAQELBQADggEBAARjPCrSQVAQCIhjCFX5PeGckMRm jG/WQFU4vodpnKnXmypvat/KK+IvZAACgO4WvvsMpUAzBc8VZdwncz2Eyi3MX0+J CDlv06Nn0Y9qVo2MvEbGg4vVbfY/AtEXnDn94J8pC15XvLp5T4cWCTZbOv1Qtqez LBeY/gZvFdQ5b7/fpTkKYZFI2ubUwO8lOLdz+E+m2WIWJiH8j0BXJ2Kxolao016D A3qzN0Hjj+aZ0NVufmFPnxsR7291Wi+BkWpQiKFRPZk/N190GuIlqqic5c24k6hF yKoEJVz4BhxLE5Q45BZSeJrm2xsZjpvKlRKsxl4x7KZp+8cZV2rZAqUrdFI= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org