$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/RfSDl3pqw1bFXTISsS5zUSk5ODE.roa File: RfSDl3pqw1bFXTISsS5zUSk5ODE.roa (raw, json) Hash identifier: IoqZ0cGXNYuvbXwedvMm2el/83o2eLQLPgyAkeVfiMc= Subject key identifier: 45:F4:83:97:7A:6A:C3:56:C5:5D:32:12:B1:2E:73:51:29:39:38:31 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: E9 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/RfSDl3pqw1bFXTISsS5zUSk5ODE.roa Signing time: Thu 19 Oct 2023 09:24:15 +0000 ROA not before: Thu 19 Oct 2023 09:24:15 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 10021 IP address blocks: 117.55.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 19 09:24:15 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=45F483977A6AC356C55D3212B12E735129393831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:8f:da:6a:12:28:8c:c7:0e:36:c3:97:21: 18:8e:76:91:00:11:d4:be:90:de:0b:ec:76:eb:fc: eb:df:94:63:64:0e:5a:8f:a7:28:98:f3:49:5e:21: cb:a9:fc:6d:c8:a8:2d:d1:97:67:22:a9:68:c1:64: f0:49:23:aa:38:b8:ba:27:55:a3:91:1d:a2:05:ae: 9b:4c:35:4a:47:b2:f5:c8:0b:b3:57:8e:89:43:4d: ba:3d:fc:94:74:86:e3:af:78:ca:02:e1:c5:72:b6: 30:81:7e:96:da:a4:f6:db:77:3e:af:8f:c1:99:3d: 32:76:ae:fe:a3:48:94:91:ee:d7:fe:9e:b9:0e:9f: 98:1b:67:34:39:a2:67:42:c1:61:8f:b9:72:33:d9: 10:6f:78:d1:5d:c9:35:88:95:b2:a7:fb:ee:c1:31: d1:14:5b:52:93:b6:85:3b:99:f0:71:b5:2d:f7:ca: 34:25:aa:72:c3:3d:71:99:b6:50:4a:dd:40:61:1c: 76:bc:82:04:d4:94:93:6a:b7:4b:28:a2:cd:a9:62: 3b:57:f4:cd:ff:66:14:0a:0c:66:7f:e3:94:88:cb: 8d:ca:46:b5:1a:38:4e:a8:e3:de:60:53:cb:15:c9: 91:2a:e5:cf:4d:49:90:04:3e:09:8a:05:d1:48:5c: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F4:83:97:7A:6A:C3:56:C5:5D:32:12:B1:2E:73:51:29:39:38:31 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/RfSDl3pqw1bFXTISsS5zUSk5ODE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.55.208.0/20 Signature Algorithm: sha256WithRSAEncryption c7:f6:53:f8:df:bc:96:62:ab:85:42:e8:17:69:e8:da:50:04: 61:b0:7d:ab:7e:b0:44:6b:15:63:73:43:ab:39:e8:44:57:52: d3:ed:e7:2e:63:29:bb:00:fd:ea:84:78:9d:1a:7c:18:47:54: 4a:4a:e6:dd:e3:f8:b3:67:f1:e5:4a:fb:a2:c0:c8:5b:39:09: b0:8a:fd:4c:df:dd:fa:93:cf:9b:78:8f:5c:db:3c:b4:13:de: 89:1f:3f:d8:b9:45:71:01:46:7e:d1:e3:36:e3:1e:f2:00:63: 01:1e:72:0a:9b:76:62:f2:ec:1d:45:6b:b5:5e:87:e4:71:d6: 4b:52:6d:30:e9:22:c4:af:7c:c3:d5:9c:f1:74:66:cb:41:8f: fc:1e:f9:14:66:2c:6c:8a:f9:12:77:c3:f9:d5:fc:2f:a5:a9: 7d:79:d9:d1:fe:3e:40:b9:66:8c:16:99:62:c0:f1:f5:10:05: 87:e4:9f:00:24:0d:ce:c5:d1:b6:af:bf:7b:a2:7e:91:55:2d: cf:03:e2:4c:90:8f:52:71:1f:64:f1:a8:21:d9:42:68:07:79: 98:13:16:73:da:67:f5:16:31:02:e1:d0:50:f5:9c:6b:41:df: 4b:55:13:aa:89:ab:da:36:46:89:15:bc:a7:3c:6c:ff:3e:6b: a3:63:75:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEwMTkw OTI0MTVaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQ1RjQ4Mzk3N0E2QUMz NTZDNTVEMzIxMkIxMkU3MzUxMjkzOTM4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC28o/aahIojMcONsOXIRiOdpEAEdS+kN4L7Hbr/OvflGNkDlqP pyiY80leIcup/G3IqC3Rl2ciqWjBZPBJI6o4uLonVaORHaIFrptMNUpHsvXIC7NX jolDTbo9/JR0huOveMoC4cVytjCBfpbapPbbdz6vj8GZPTJ2rv6jSJSR7tf+nrkO n5gbZzQ5omdCwWGPuXIz2RBveNFdyTWIlbKn++7BMdEUW1KTtoU7mfBxtS33yjQl qnLDPXGZtlBK3UBhHHa8ggTUlJNqt0soos2pYjtX9M3/ZhQKDGZ/45SIy43KRrUa OE6o495gU8sVyZEq5c9NSZAEPgmKBdFIXIZJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQURfSDl3pqw1bFXTISsS5zUSk5ODEwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L1JmU0RsM3BxdzFiRlhUSVNzUzV6VVNrNU9ERS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR1N9AwDQYJKoZIhvcNAQELBQADggEBAMf2U/jfvJZiq4VC6Bdp6NpQBGGw fat+sERrFWNzQ6s56ERXUtPt5y5jKbsA/eqEeJ0afBhHVEpK5t3j+LNn8eVK+6LA yFs5CbCK/Uzf3fqTz5t4j1zbPLQT3okfP9i5RXEBRn7R4zbjHvIAYwEecgqbdmLy 7B1Fa7Veh+Rx1ktSbTDpIsSvfMPVnPF0ZstBj/we+RRmLGyK+RJ3w/nV/C+lqX15 2dH+PkC5ZowWmWLA8fUQBYfknwAkDc7F0bavv3uifpFVLc8D4kyQj1JxH2TxqCHZ QmgHeZgTFnPaZ/UWMQLh0FD1nGtB30tVE6qJq9o2RokVvKc8bP8+a6Njdcg= -----END CERTIFICATE-----Generated at Mon May 20 02:36:37 2024 by rpki-client on console-ams.rpki-client.org