$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa File: QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa (raw, json) Hash identifier: iMmelY8ntT8Sr6kNVWoAgsdA830qIeoJEjt+57b1AW8= Subject key identifier: 42:A3:23:37:82:24:DD:F8:47:D8:68:56:3E:9B:C2:35:4C:69:F2:99 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 05CD Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa Signing time: Thu 29 Feb 2024 01:32:11 +0000 ROA not before: Thu 29 Feb 2024 01:32:11 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9605 IP address blocks: 1.75.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Feb 29 01:32:11 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=42A323378224DDF847D868563E9BC2354C69F299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:b4:a6:ad:ad:4a:c1:87:78:88:40:c4:b2: 15:94:d7:8c:22:5f:6c:e8:1e:b4:dc:f8:0d:ca:7a: cc:eb:42:50:54:0f:f6:40:11:20:4a:0f:9a:80:c9: c3:93:c4:27:c8:d0:b8:71:89:d1:dc:40:ed:1a:2a: 5e:29:57:23:f8:78:b2:a6:18:f2:1e:1f:2b:5d:c6: f9:bb:e2:6f:f8:46:eb:82:dc:88:01:56:4d:6e:33: a7:7b:92:b9:83:e5:1b:df:68:2f:8c:55:9f:32:32: 64:72:33:a7:d7:6e:0d:bf:b5:d8:09:e5:b3:73:ce: 14:a4:45:d6:3f:f3:6c:5a:51:fb:bf:f2:b1:1a:02: 06:a6:03:e8:25:62:4d:96:61:09:80:e1:f1:ec:2c: 72:3f:63:6b:88:f3:c8:8f:25:6f:80:f3:bb:4b:d3: 42:92:88:34:c2:35:35:2f:6b:e8:65:07:0d:15:2a: 79:fe:b2:14:d5:86:9e:5a:9d:4d:ba:94:5d:bc:b6: 1e:a4:ab:0a:bf:93:cc:f4:b7:40:2e:86:22:3e:e1: 94:48:22:50:47:22:bc:e9:42:b0:f5:6e:bf:eb:a2: e8:ee:01:43:3f:bd:0e:9a:a8:8d:57:49:9c:d3:76: f8:b8:1b:8a:8a:5c:fa:80:ae:0a:8e:48:a5:0a:f3: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:23:37:82:24:DD:F8:47:D8:68:56:3E:9B:C2:35:4C:69:F2:99 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QqMjN4Ik3fhH2GhWPpvCNUxp8pk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.75.4.0/23 Signature Algorithm: sha256WithRSAEncryption dc:a7:53:95:e7:46:61:da:39:05:36:e3:f3:da:ec:da:f1:a0: 47:e1:41:2a:1f:4a:2b:ae:7e:6e:0e:c9:33:f1:f5:16:d9:c4: 56:34:13:21:70:9f:19:95:12:ba:76:fd:0b:64:1d:ab:cb:77: 85:3f:f7:0c:b7:cd:1a:dc:79:31:24:da:61:cf:e8:62:5c:81: 0d:49:bf:15:4f:b1:d2:6d:d6:a5:81:3f:be:d8:c6:02:79:5b: 2e:88:be:d0:a3:03:2c:2c:bd:d0:a4:d0:59:8a:46:5e:bd:bf: 8b:ca:36:54:ed:fb:fd:b4:77:88:6d:0a:2b:1d:0f:0e:cf:38: e4:ee:35:a9:ec:ea:82:a0:c5:3d:7d:13:81:d8:d8:eb:61:36: 21:36:ac:96:e9:9a:84:c7:99:93:d5:24:b0:bb:65:cf:87:31: 8f:47:e8:a2:f5:34:4b:fb:21:90:c5:86:fa:89:b6:12:81:d3: df:8a:00:f9:35:a0:14:3a:1d:01:dc:6f:c7:b2:cb:45:10:75: d9:f1:95:4f:f2:c7:7f:fd:5b:0b:a2:b0:88:09:e8:a5:08:6d: ea:bc:02:4f:2b:ef:92:6a:ec:46:7f:a6:16:32:56:d1:c7:ce: e9:87:a9:24:e4:4b:43:87:9c:fb:d5:1f:9c:5d:f6:b1:48:d7: 71:33:0f:3c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDAyMjkw MTMyMTFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQyQTMyMzM3ODIyNERE Rjg0N0Q4Njg1NjNFOUJDMjM1NEM2OUYyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChOLSmra1KwYd4iEDEshWU14wiX2zoHrTc+A3KeszrQlBUD/ZA ESBKD5qAycOTxCfI0LhxidHcQO0aKl4pVyP4eLKmGPIeHytdxvm74m/4RuuC3IgB Vk1uM6d7krmD5RvfaC+MVZ8yMmRyM6fXbg2/tdgJ5bNzzhSkRdY/82xaUfu/8rEa AgamA+glYk2WYQmA4fHsLHI/Y2uI88iPJW+A87tL00KSiDTCNTUva+hlBw0VKnn+ shTVhp5anU26lF28th6kqwq/k8z0t0AuhiI+4ZRIIlBHIrzpQrD1br/roujuAUM/ vQ6aqI1XSZzTdvi4G4qKXPqArgqOSKUK80bNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQqMjN4Ik3fhH2GhWPpvCNUxp8pkwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1FxTWpONElrM2ZoSDJHaFdQcHZDTlV4cDhway5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBSwQwDQYJKoZIhvcNAQELBQADggEBANynU5XnRmHaOQU24/Pa7NrxoEfh QSofSiuufm4OyTPx9RbZxFY0EyFwnxmVErp2/QtkHavLd4U/9wy3zRrceTEk2mHP 6GJcgQ1JvxVPsdJt1qWBP77YxgJ5Wy6IvtCjAywsvdCk0FmKRl69v4vKNlTt+/20 d4htCisdDw7POOTuNans6oKgxT19E4HY2OthNiE2rJbpmoTHmZPVJLC7Zc+HMY9H 6KL1NEv7IZDFhvqJthKB09+KAPk1oBQ6HQHcb8eyy0UQddnxlU/yx3/9WwuisIgJ 6KUIbeq8Ak8r75Jq7EZ/phYyVtHHzumHqSTkS0OHnPvVH5xd9rFI13EzDzw= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:30 2024 by rpki-client on console-ams.rpki-client.org