$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/qkflhTp65NltWsAytxeij8-4oWM.roa File: qkflhTp65NltWsAytxeij8-4oWM.roa (raw, json) Hash identifier: CesjyHYnPbrx32LOFJVeVNk2GAQ6r/7vuZGLtPoWMXQ= Subject key identifier: AA:47:E5:85:3A:7A:E4:D9:6D:5A:C0:32:B7:17:A2:8F:CF:B8:A1:63 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 056D Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qkflhTp65NltWsAytxeij8-4oWM.roa Signing time: Thu 27 Jul 2023 16:56:22 +0000 ROA not before: Thu 27 Jul 2023 16:56:22 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 220.210.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1389 (0x56d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jul 27 16:56:22 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=AA47E5853A7AE4D96D5AC032B717A28FCFB8A163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:21:85:47:96:d7:d8:2e:ac:dc:a6:7d:81: e4:ad:e4:5c:b7:bd:4a:6f:8c:bc:91:50:a1:af:07: cd:b8:2d:30:e3:c1:e9:2a:b3:aa:79:c5:1e:2f:50: ef:4e:e9:60:0d:72:cd:bb:b4:6a:1d:ce:d4:08:68: 43:67:d3:81:79:0d:4b:90:24:b6:ba:83:c4:74:9d: b0:a5:ef:76:89:36:a3:bc:62:d4:ab:ba:5a:8b:7c: f1:04:f2:1d:4f:7c:e3:b2:ce:f0:4d:4b:9c:6c:0f: 25:70:5f:0b:0f:d5:8d:b3:74:dd:d5:87:45:27:a9: 3d:89:3f:67:b8:16:2d:d3:12:3a:69:ed:13:ad:43: 5b:78:eb:a8:5c:b2:89:cf:71:74:8c:f5:e5:6e:f6: 31:60:87:fd:9b:df:2e:69:c2:4f:ac:12:d5:81:3a: b8:f4:c0:e1:38:b8:9b:85:0e:81:09:8f:2d:55:9b: f7:64:f7:6b:ff:1d:98:cb:96:a0:f0:9e:b7:98:0f: 5e:54:fb:d4:59:6f:b8:94:d2:f7:03:dc:60:22:2e: 22:a8:a6:a1:6e:55:74:fa:c2:7b:80:0a:0b:9c:cd: 7f:a1:6c:97:37:46:c4:e8:3d:99:9c:2a:c1:0e:8b: ae:50:7b:43:a1:28:09:10:58:e5:e2:44:ff:9b:ce: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:47:E5:85:3A:7A:E4:D9:6D:5A:C0:32:B7:17:A2:8F:CF:B8:A1:63 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/qkflhTp65NltWsAytxeij8-4oWM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.96.0/22 Signature Algorithm: sha256WithRSAEncryption 57:ed:d8:48:b6:67:fd:10:2b:05:b4:d1:ab:f8:e0:ce:9c:1a: 39:08:46:c6:c2:b4:74:6b:82:bf:26:d0:d5:1d:52:b5:61:da: a3:c0:1c:fa:d2:19:e8:82:5f:56:30:06:4f:81:92:2d:13:84: dd:bc:d6:bd:76:af:0c:83:d0:e2:db:69:91:2d:51:4f:85:53: d6:89:b4:b0:7b:e1:9e:3e:fe:e6:19:1f:83:2e:a4:85:ab:e4: c1:97:7e:4f:af:cd:04:96:7b:01:88:69:c2:ae:b1:2a:30:c7: 40:98:74:a1:50:0f:c6:79:47:80:55:70:77:60:29:5c:dc:19: cd:97:93:4d:09:ec:95:00:86:45:30:20:42:f8:88:21:13:c4: e8:6f:df:ee:fa:60:0d:66:5e:a6:bb:1c:93:01:9a:72:36:c8: af:44:d1:d0:18:3f:68:42:f4:7f:06:74:3d:4f:f5:5a:3b:4f: 67:96:46:f2:1a:ec:cb:e3:de:fd:ae:6e:7c:92:c2:cf:dd:fa: cc:36:be:f6:a6:c1:41:fd:41:2f:be:d6:ca:2f:bb:1c:99:3d: 0e:89:64:cf:6c:b1:45:d0:3a:a4:e9:cf:22:f9:56:71:03:48: 2b:be:b4:de:37:3f:75:a6:5b:0f:65:14:00:e1:40:4a:0e:c8: 78:00:f7:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA3Mjcx NjU2MjJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFBNDdFNTg1M0E3QUU0 RDk2RDVBQzAzMkI3MTdBMjhGQ0ZCOEExNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIuyGFR5bX2C6s3KZ9geSt5Fy3vUpvjLyRUKGvB824LTDjwekq s6p5xR4vUO9O6WANcs27tGodztQIaENn04F5DUuQJLa6g8R0nbCl73aJNqO8YtSr ulqLfPEE8h1PfOOyzvBNS5xsDyVwXwsP1Y2zdN3Vh0UnqT2JP2e4Fi3TEjpp7ROt Q1t466hcsonPcXSM9eVu9jFgh/2b3y5pwk+sEtWBOrj0wOE4uJuFDoEJjy1Vm/dk 92v/HZjLlqDwnreYD15U+9RZb7iU0vcD3GAiLiKopqFuVXT6wnuACguczX+hbJc3 RsToPZmcKsEOi65Qe0OhKAkQWOXiRP+bziHnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqkflhTp65NltWsAytxeij8+4oWMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3FrZmxoVHA2NU5sdFdzQXl0eGVpajgtNG9XTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALc0mAwDQYJKoZIhvcNAQELBQADggEBAFft2Ei2Z/0QKwW00av44M6cGjkI RsbCtHRrgr8m0NUdUrVh2qPAHPrSGeiCX1YwBk+Bki0ThN281r12rwyD0OLbaZEt UU+FU9aJtLB74Z4+/uYZH4MupIWr5MGXfk+vzQSWewGIacKusSowx0CYdKFQD8Z5 R4BVcHdgKVzcGc2Xk00J7JUAhkUwIEL4iCETxOhv3+76YA1mXqa7HJMBmnI2yK9E 0dAYP2hC9H8GdD1P9Vo7T2eWRvIa7Mvj3v2ubnySws/d+sw2vvamwUH9QS++1sov uxyZPQ6JZM9ssUXQOqTpzyL5VnEDSCu+tN43P3WmWw9lFADhQEoOyHgA9yE= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:32 2024 by rpki-client on console-ams.rpki-client.org