$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa File: qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa (raw, json) Hash identifier: WTNqN5l1k9P9FVb7YkJHNYFb832gcDOYxTrlNDhoirU= Subject key identifier: AA:B2:2A:A5:99:51:B2:24:0B:E2:BD:BF:47:9F:DF:AA:56:18:62:D4 Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Certificate serial: 71 Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa Signing time: Fri 01 Dec 2023 01:30:12 +0000 ROA not before: Fri 01 Dec 2023 01:30:12 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 207.65.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA Validity Not Before: Dec 1 01:30:12 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=AAB22AA59951B2240BE2BDBF479FDFAA561862D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:0f:d9:de:3e:c1:39:f1:d8:a8:eb:6e:e1: 17:d6:41:dc:13:7b:e7:96:81:57:ad:a8:ac:d2:76: d9:94:b8:7d:1a:08:8b:ca:51:90:b8:92:72:db:81: ef:30:cb:e1:78:54:d2:4e:7f:2e:b1:ab:0a:8f:a3: 6f:76:b8:a4:58:1c:ea:0e:30:d4:d1:e3:28:31:f8: 47:8e:ef:96:3b:c9:75:ea:db:d6:4a:39:38:63:6e: d3:7a:9a:9b:cc:71:cb:af:e9:bb:14:ca:8c:25:3c: a5:63:e1:22:f4:95:27:8f:0b:95:58:09:67:40:81: 49:31:df:c3:6f:07:7c:52:92:7e:2a:d0:67:13:65: e7:71:cb:00:55:47:45:4f:9c:62:6a:24:3c:ca:1b: 2e:ab:f9:ac:5f:ed:e7:cd:4a:e2:61:f6:05:4d:9a: 8f:0e:e3:e1:af:21:6c:75:01:14:46:09:50:ac:60: de:d5:a3:d4:35:e8:b0:ab:d0:52:e1:c9:c5:23:a9: 25:37:4a:43:33:5a:41:0d:6c:28:47:b8:df:a1:54: 3f:e6:77:07:df:22:39:6e:dd:ab:dd:91:a4:44:8d: 1c:8b:75:7d:0d:0e:1e:a2:d1:8a:d0:57:5f:17:d2: dc:17:df:e2:32:ac:9a:fa:af:4b:49:b1:a2:7a:a6: 16:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:2A:A5:99:51:B2:24:0B:E2:BD:BF:47:9F:DF:AA:56:18:62:D4 X509v3 Authority Key Identifier: keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qrIqpZlRsiQL4r2_R5_fqlYYYtQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 207.65.128.0/17 Signature Algorithm: sha256WithRSAEncryption 05:b9:b1:82:6f:24:d0:c2:49:43:69:fa:d3:a7:c2:91:54:36: 1e:6b:29:fa:51:9c:9d:18:ee:8c:69:26:5c:4d:5b:2e:3b:fe: d2:42:e0:e2:75:a3:d6:cc:e1:7a:b2:82:d9:ea:86:00:9e:2e: 95:91:f1:55:53:7d:3d:c1:3e:72:4e:2e:87:1f:90:b2:7b:5e: 81:1f:ec:71:c7:07:38:2a:15:19:b7:75:27:4a:bd:cd:8c:c8: 56:6f:3d:84:72:a6:e0:cd:bf:35:79:ea:aa:e6:ab:ca:3f:e1: 20:71:a6:42:63:1f:c3:45:8f:bb:f2:2a:a5:62:24:23:dd:38: 03:b0:a1:83:88:df:0c:fb:53:dc:67:be:65:97:4c:b9:de:83: c0:ac:70:cb:64:56:36:68:d9:5d:ac:31:fd:77:02:1b:a4:cb: 20:17:f9:12:99:84:a9:1e:eb:41:1b:b5:a4:59:f6:52:34:2c: fd:dc:14:8f:c2:86:1e:7f:83:3e:06:f2:a3:83:2f:79:cc:a2: d8:2f:50:9b:43:14:ef:aa:da:ad:2a:aa:bc:29:b0:67:06:3e: e1:1a:73:5b:09:e4:a2:1e:3b:91:d8:b2:f9:47:e1:c4:65:3b: 93:7e:ed:c0:e4:56:48:2e:0f:ec:5d:55:c4:f6:eb:62:4e:24: 64:ab:4c:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIzMTIwMTAx MzAxMloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQUFCMjJBQTU5OTUxQjIy NDBCRTJCREJGNDc5RkRGQUE1NjE4NjJENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN3zD9nePsE58dio627hF9ZB3BN755aBV62orNJ22ZS4fRoIi8pR kLiSctuB7zDL4XhU0k5/LrGrCo+jb3a4pFgc6g4w1NHjKDH4R47vljvJderb1ko5 OGNu03qam8xxy6/puxTKjCU8pWPhIvSVJ48LlVgJZ0CBSTHfw28HfFKSfirQZxNl 53HLAFVHRU+cYmokPMobLqv5rF/t581K4mH2BU2ajw7j4a8hbHUBFEYJUKxg3tWj 1DXosKvQUuHJxSOpJTdKQzNaQQ1sKEe436FUP+Z3B98iOW7dq92RpESNHIt1fQ0O HqLRitBXXxfS3Bff4jKsmvqvS0mxonqmFl0CAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSqsiqlmVGyJAvivb9Hn9+qVhhi1DAfBgNVHSMEGDAWgBQEyn81rxqPUldan+// IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzQzL3FySXFwWmxSc2lRTDRyMl9SNV9mcWxZWVl0US5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAfPQYAwDQYJKoZIhvcNAQELBQADggEBAAW5sYJvJNDCSUNp+tOnwpFUNh5rKfpR nJ0Y7oxpJlxNWy47/tJC4OJ1o9bM4XqygtnqhgCeLpWR8VVTfT3BPnJOLocfkLJ7 XoEf7HHHBzgqFRm3dSdKvc2MyFZvPYRypuDNvzV56qrmq8o/4SBxpkJjH8NFj7vy KqViJCPdOAOwoYOI3wz7U9xnvmWXTLneg8CscMtkVjZo2V2sMf13AhukyyAX+RKZ hKke60EbtaRZ9lI0LP3cFI/Chh5/gz4G8qODL3nMotgvUJtDFO+q2q0qqrwpsGcG PuEac1sJ5KIeO5HYsvlH4cRlO5N+7cDkVkguD+xdVcT262JOJGSrTII= -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org