$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa File: QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa (raw, json) Hash identifier: tAL+VUvzlj94jvGN9FRSC6cDn8Lp0Qi81GJfJLv1AL8= Subject key identifier: 41:4E:71:CD:ED:BA:26:6D:43:2E:14:B9:4D:D6:78:80:4B:77:32:E4 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: EB Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa Signing time: Thu 19 Oct 2023 09:26:12 +0000 ROA not before: Thu 19 Oct 2023 09:26:12 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 10021 IP address blocks: 27.110.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 19 09:26:12 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=414E71CDEDBA266D432E14B94DD678804B7732E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:99:47:30:2a:c2:52:cc:e9:4b:a4:3a:57: f5:0d:bf:35:22:dc:63:46:c9:03:4f:0c:20:e1:a3: 90:00:4d:6b:4b:0c:4c:40:ce:83:8c:23:a1:d8:bf: d6:4f:ee:b4:3a:23:1c:91:c6:8d:65:6d:d7:80:51: 99:72:a9:88:16:3d:ba:46:b2:c2:f1:2b:b5:f8:21: fb:d1:5d:65:45:e3:7a:5e:d0:62:63:00:95:17:c3: d7:22:c8:3d:db:fc:7e:33:42:dd:51:ef:0c:43:ab: 83:1f:1a:14:fc:ad:cd:f9:05:64:b3:a3:17:f6:1b: c9:8b:42:87:5e:85:53:f4:c3:98:9f:9c:08:9f:b4: ac:8a:87:4b:25:0d:2d:aa:81:b6:b9:31:8e:2f:99: b0:e9:4e:02:3c:ce:5f:1b:89:1c:a9:ad:f3:ac:85: 52:77:ca:d8:17:2b:aa:58:80:04:7c:4c:6a:d6:52: 2f:2d:ee:76:30:c7:cd:d1:7d:94:0a:18:24:c4:2f: 9c:29:1f:25:fc:ee:ec:8a:4e:9a:8c:90:bd:73:bd: 40:d5:6e:74:c6:fc:a9:cf:5c:fb:48:4f:74:5a:69: e2:c4:ba:aa:7f:a5:32:eb:9f:ce:b9:90:af:e9:82: 78:cc:10:03:28:b1:bd:eb:0f:93:ff:23:a3:f8:6d: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:71:CD:ED:BA:26:6D:43:2E:14:B9:4D:D6:78:80:4B:77:32:E4 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QU5xze26Jm1DLhS5TdZ4gEt3MuQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.24.0/21 Signature Algorithm: sha256WithRSAEncryption 52:57:a8:c0:97:c9:48:1f:d1:8f:e2:10:cf:96:66:c2:cc:5e: be:4d:f5:9c:64:c2:b6:0e:20:c2:eb:81:5c:d8:17:f4:6b:ed: 16:e9:24:df:0b:39:fa:7c:31:4c:ba:32:5c:f7:50:23:28:ac: c7:bc:5d:89:62:cd:6b:ca:76:87:db:d1:88:fd:49:ed:4c:6a: a3:be:f8:3d:78:92:7e:ae:ca:c3:d2:8f:f8:f1:b0:31:dc:65: 2f:10:b5:56:f2:68:80:19:1e:a2:2f:3a:82:2f:27:33:53:a4: 0b:b2:02:79:19:cc:15:96:46:13:01:d8:86:7c:5b:ce:07:a7: bd:92:da:81:7d:0b:b4:80:36:cc:a9:0a:6b:55:15:bd:f3:cd: 3f:78:d0:e1:fb:3d:45:d8:01:68:4b:ed:a2:b7:bf:03:fc:e1: c0:1d:7b:ee:42:bb:db:7b:d4:5c:3a:41:87:d7:b3:f1:df:b9: ce:1f:3f:28:24:65:02:9c:2d:3d:ea:0a:57:73:a6:ff:87:f5: f4:68:65:bd:e1:0a:71:1c:ec:19:12:98:d5:58:99:a9:a5:26: c5:8d:7d:67:ee:1c:f8:28:9a:44:b1:4d:be:37:96:91:9b:97: 84:6a:1f:24:94:5c:fa:5c:05:56:77:25:5b:f8:c4:de:54:51: 2b:5f:d5:f1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEwMTkw OTI2MTJaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQxNEU3MUNERURCQTI2 NkQ0MzJFMTRCOTRERDY3ODgwNEI3NzMyRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKkJlHMCrCUszpS6Q6V/UNvzUi3GNGyQNPDCDho5AATWtLDExA zoOMI6HYv9ZP7rQ6IxyRxo1lbdeAUZlyqYgWPbpGssLxK7X4IfvRXWVF43pe0GJj AJUXw9ciyD3b/H4zQt1R7wxDq4MfGhT8rc35BWSzoxf2G8mLQodehVP0w5ifnAif tKyKh0slDS2qgba5MY4vmbDpTgI8zl8biRyprfOshVJ3ytgXK6pYgAR8TGrWUi8t 7nYwx83RfZQKGCTEL5wpHyX87uyKTpqMkL1zvUDVbnTG/KnPXPtIT3RaaeLEuqp/ pTLrn865kK/pgnjMEAMosb3rD5P/I6P4bY8HAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQU5xze26Jm1DLhS5TdZ4gEt3MuQwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L1FVNXh6ZTI2Sm0xRExoUzVUZFo0Z0V0M011US5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMbbhgwDQYJKoZIhvcNAQELBQADggEBAFJXqMCXyUgf0Y/iEM+WZsLMXr5N 9ZxkwrYOIMLrgVzYF/Rr7RbpJN8LOfp8MUy6Mlz3UCMorMe8XYlizWvKdofb0Yj9 Se1MaqO++D14kn6uysPSj/jxsDHcZS8QtVbyaIAZHqIvOoIvJzNTpAuyAnkZzBWW RhMB2IZ8W84Hp72S2oF9C7SANsypCmtVFb3zzT940OH7PUXYAWhL7aK3vwP84cAd e+5Cu9t71Fw6QYfXs/Hfuc4fPygkZQKcLT3qCldzpv+H9fRoZb3hCnEc7BkSmNVY mamlJsWNfWfuHPgomkSxTb43lpGbl4RqHySUXPpcBVZ3JVv4xN5UUStf1fE= -----END CERTIFICATE-----Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org