$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/m3jKPIwdA8r20rLQE6VmFJ8xOWs.roa File: m3jKPIwdA8r20rLQE6VmFJ8xOWs.roa (raw, json) Hash identifier: g8oMXFMdEcTb9jKcKKQPX8yxFmuDoqdvoEZ+HoJDbNg= Subject key identifier: 9B:78:CA:3C:8C:1D:03:CA:F6:D2:B2:D0:13:A5:66:14:9F:31:39:6B Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: E6 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/m3jKPIwdA8r20rLQE6VmFJ8xOWs.roa Signing time: Sun 01 Oct 2023 01:28:57 +0000 ROA not before: Sun 01 Oct 2023 01:28:57 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 8220 IP address blocks: 202.7.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 1 01:28:57 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=9B78CA3C8C1D03CAF6D2B2D013A566149F31396B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:c5:7a:bb:2e:3a:4b:0d:77:f4:c7:3b:14: 66:50:a0:ca:b3:a2:66:de:eb:3b:44:9b:62:74:2f: f0:40:de:de:29:24:d7:ac:c1:73:03:a2:7e:d9:38: 92:53:de:8f:d4:26:c0:df:4c:cc:2f:4b:f8:bd:d8: 68:c4:3f:09:65:29:c6:a1:2e:3f:6e:97:05:64:2d: ba:58:3f:20:21:b7:3c:77:6c:7a:b6:fb:74:04:ca: 38:bb:de:91:30:53:f6:d4:54:20:35:db:34:ef:17: e6:ea:78:fe:ff:44:e6:4a:fd:a6:44:7a:fd:3d:9e: 63:ff:42:1d:b4:16:b3:7f:8e:5a:bd:d6:37:66:59: 17:8a:57:a5:35:e2:9a:3b:d4:db:2e:2f:f0:7b:8c: a2:b4:4c:95:34:d8:e8:15:bf:1f:53:aa:7b:6e:b1: af:a4:8c:29:46:d4:73:89:26:0a:61:cc:5c:54:cb: 88:59:a4:85:f8:c3:49:3a:d5:5a:07:41:bc:dd:db: ea:5f:8c:87:ae:2e:9d:50:80:db:37:ea:49:72:6e: e8:85:1b:2f:61:19:bd:ba:89:5e:e5:4f:8c:c3:5c: 81:8d:56:8b:a9:5a:2b:2f:b1:45:4e:cc:6a:c9:d6: 77:29:b1:8d:c1:dd:8e:17:80:c1:5e:e6:f6:b6:36: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:CA:3C:8C:1D:03:CA:F6:D2:B2:D0:13:A5:66:14:9F:31:39:6B X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/m3jKPIwdA8r20rLQE6VmFJ8xOWs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.7.104.0/24 Signature Algorithm: sha256WithRSAEncryption ac:55:cd:80:3d:58:45:d0:bd:0e:44:da:03:09:e9:e0:f6:42: 39:8b:9c:84:6f:2f:f3:c3:b5:28:86:93:41:9d:25:09:6b:21: 7c:36:62:88:54:b7:e0:64:76:15:9b:7d:b9:f4:d5:a0:0a:e0: 5e:e9:7c:ed:a8:07:c0:de:55:66:ee:b3:41:5b:67:ad:ce:fc: ac:0e:f7:84:39:d6:aa:53:f9:93:73:9e:df:8d:b4:ae:97:25: 2f:04:10:f4:1e:c7:10:55:0f:23:e0:e4:37:b7:a2:90:ad:d2: 5e:96:2e:44:1d:35:73:79:82:9f:c0:32:d7:57:b4:f1:a2:dd: ed:02:2d:00:7a:e5:e2:cb:87:0b:12:28:77:46:69:43:75:b4: 57:17:1c:96:71:f9:95:94:5c:8b:d8:68:19:d3:be:5c:eb:81: 33:42:47:aa:0e:6e:c5:a4:65:23:eb:3b:71:dd:e7:25:98:68: 98:1d:5d:69:cf:ab:bb:92:b5:3b:e8:a0:2a:f6:2c:b7:d7:d5: 18:f1:fe:77:59:29:cb:b0:cd:59:2f:ee:38:5f:29:59:16:bc: 1f:0d:e8:19:33:95:a1:30:06:d6:bf:a1:0e:26:40:5d:8b:c7: 37:3f:55:ef:7f:68:1b:05:18:8b:89:56:a5:d5:9f:75:b8:e6: b5:27:c8:2a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEwMDEw MTI4NTdaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlCNzhDQTNDOEMxRDAz Q0FGNkQyQjJEMDEzQTU2NjE0OUYzMTM5NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlzMV6uy46Sw139Mc7FGZQoMqzombe6ztEm2J0L/BA3t4pJNes wXMDon7ZOJJT3o/UJsDfTMwvS/i92GjEPwllKcahLj9ulwVkLbpYPyAhtzx3bHq2 +3QEyji73pEwU/bUVCA12zTvF+bqeP7/ROZK/aZEev09nmP/Qh20FrN/jlq91jdm WReKV6U14po71NsuL/B7jKK0TJU02OgVvx9Tqntusa+kjClG1HOJJgphzFxUy4hZ pIX4w0k61VoHQbzd2+pfjIeuLp1QgNs36klybuiFGy9hGb26iV7lT4zDXIGNVoup WisvsUVOzGrJ1ncpsY3B3Y4XgMFe5va2NrvdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUm3jKPIwdA8r20rLQE6VmFJ8xOWswHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L20zaktQSXdkQThyMjByTFFFNlZtRko4eE9Xcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKB2gwDQYJKoZIhvcNAQELBQADggEBAKxVzYA9WEXQvQ5E2gMJ6eD2QjmL nIRvL/PDtSiGk0GdJQlrIXw2YohUt+BkdhWbfbn01aAK4F7pfO2oB8DeVWbus0Fb Z63O/KwO94Q51qpT+ZNznt+NtK6XJS8EEPQexxBVDyPg5De3opCt0l6WLkQdNXN5 gp/AMtdXtPGi3e0CLQB65eLLhwsSKHdGaUN1tFcXHJZx+ZWUXIvYaBnTvlzrgTNC R6oObsWkZSPrO3Hd5yWYaJgdXWnPq7uStTvooCr2LLfX1Rjx/ndZKcuwzVkv7jhf KVkWvB8N6BkzlaEwBta/oQ4mQF2Lxzc/Ve9/aBsFGIuJVqXVn3W45rUnyCo= -----END CERTIFICATE-----Generated at Tue Jun 4 02:07:51 2024 by rpki-client on console-fra.rpki-client.org