$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/nU4v0vkI3iMmarcDiLfENNQvX6Y.roa File: nU4v0vkI3iMmarcDiLfENNQvX6Y.roa (raw, json) Hash identifier: vu8Hsc7vEv4xC16Vm71sHdQTyvxWg0bszhlHty3m9UM= Subject key identifier: 9D:4E:2F:D2:F9:08:DE:23:26:6A:B7:03:88:B7:C4:34:D4:2F:5F:A6 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: FD Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nU4v0vkI3iMmarcDiLfENNQvX6Y.roa Signing time: Fri 01 Dec 2023 01:29:48 +0000 ROA not before: Fri 01 Dec 2023 01:29:48 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 10021 IP address blocks: 203.167.32.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 01:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Dec 1 01:29:48 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=9D4E2FD2F908DE23266AB70388B7C434D42F5FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:7a:50:12:1b:da:05:8f:b7:c0:30:1c:74: 64:d0:9f:6c:34:27:84:91:c8:a2:03:9b:3f:9d:58: a1:53:dd:03:85:98:14:0e:ef:04:0e:92:6a:5b:be: c8:12:f9:c5:51:53:bb:5c:4a:72:80:4a:b7:48:73: 3a:90:9d:7e:7f:4f:28:31:46:ae:21:75:60:b5:cc: a3:15:d7:1c:63:32:be:27:c6:68:bf:31:a8:e7:88: a3:ee:47:b0:26:88:3d:13:eb:26:44:44:7b:88:79: b2:2e:2a:5b:3a:57:31:76:71:16:68:ee:98:f6:68: ba:63:77:51:ca:d5:c6:36:05:ce:9e:df:5c:f1:0c: 74:fa:1b:33:eb:92:17:6e:9d:e4:b3:c6:f5:dc:34: 94:ce:92:a0:97:df:65:8a:52:4b:9a:51:db:09:68: 17:77:e2:03:10:4d:91:8a:cc:c4:18:04:5f:6e:a2: 4a:18:a2:0b:8a:18:32:91:02:6c:10:24:d9:ea:02: 79:39:2f:12:e9:88:33:c6:73:dc:e0:c7:31:ba:57: 19:0a:1f:06:61:ff:b8:d0:95:1c:f5:4d:77:e6:2d: 18:5f:8e:9c:35:c8:16:52:0b:e5:ab:f1:b3:ca:58: bf:e5:2d:9d:36:9a:26:5b:b9:ef:76:f2:68:b0:bd: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4E:2F:D2:F9:08:DE:23:26:6A:B7:03:88:B7:C4:34:D4:2F:5F:A6 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/nU4v0vkI3iMmarcDiLfENNQvX6Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.167.32.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:c5:10:9b:51:0f:f1:e9:f2:fd:2d:fc:04:a0:4a:78:1d:01: a5:98:3c:09:32:5a:56:3c:ea:bc:65:f9:a5:4c:06:97:aa:3a: ea:3f:61:06:aa:42:a4:18:e4:34:fd:89:a4:80:b8:76:5d:6a: b8:dc:77:4a:8f:44:d5:27:b5:16:22:b4:07:36:56:7c:80:e2: 2d:d1:f8:77:e8:88:bd:31:de:09:b9:20:cf:70:1f:fc:84:86: 86:29:56:ba:42:54:cd:e0:ac:6b:ec:93:16:0c:21:38:82:8c: a7:4f:9e:a2:6a:a7:5b:43:2e:9f:76:dd:ab:4b:24:45:99:0d: 80:4f:56:fc:c4:b6:0c:48:da:0a:ff:1b:46:e8:18:7f:5a:8b: e7:92:c0:05:49:60:b7:81:79:79:e8:8d:66:5d:38:33:64:88: b8:46:76:ca:9d:f9:1b:44:5c:a9:53:ac:dd:00:d0:9a:70:d9: 19:9a:09:ff:de:a7:58:ac:c1:b9:5b:07:6b:9a:03:2c:a1:ab: 4f:55:ee:1f:37:ee:a0:d5:b8:04:4e:e1:23:24:36:ca:24:36: 33:2d:18:1f:1c:9b:af:40:4c:35:fb:c5:09:3f:b8:a0:c3:96: eb:1f:7a:19:bf:fe:72:4a:24:ac:d8:66:38:3d:aa:46:a3:75: 4f:02:2e:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEyMDEw MTI5NDhaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlENEUyRkQyRjkwOERF MjMyNjZBQjcwMzg4QjdDNDM0RDQyRjVGQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjonpQEhvaBY+3wDAcdGTQn2w0J4SRyKIDmz+dWKFT3QOFmBQO 7wQOkmpbvsgS+cVRU7tcSnKASrdIczqQnX5/TygxRq4hdWC1zKMV1xxjMr4nxmi/ MajniKPuR7AmiD0T6yZERHuIebIuKls6VzF2cRZo7pj2aLpjd1HK1cY2Bc6e31zx DHT6GzPrkhduneSzxvXcNJTOkqCX32WKUkuaUdsJaBd34gMQTZGKzMQYBF9uokoY oguKGDKRAmwQJNnqAnk5LxLpiDPGc9zgxzG6VxkKHwZh/7jQlRz1TXfmLRhfjpw1 yBZSC+Wr8bPKWL/lLZ02miZbue928miwvYObAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUnU4v0vkI3iMmarcDiLfENNQvX6YwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L25VNHYwdmtJM2lNbWFyY0RpTGZFTk5Rdlg2WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATLpyAwDQYJKoZIhvcNAQELBQADggEBAJ3FEJtRD/Hp8v0t/ASgSngdAaWY PAkyWlY86rxl+aVMBpeqOuo/YQaqQqQY5DT9iaSAuHZdarjcd0qPRNUntRYitAc2 VnyA4i3R+HfoiL0x3gm5IM9wH/yEhoYpVrpCVM3grGvskxYMITiCjKdPnqJqp1tD Lp923atLJEWZDYBPVvzEtgxI2gr/G0boGH9ai+eSwAVJYLeBeXnojWZdODNkiLhG dsqd+RtEXKlTrN0A0Jpw2RmaCf/ep1iswblbB2uaAyyhq09V7h837qDVuARO4SMk NsokNjMtGB8cm69ATDX7xQk/uKDDlusfehm//nJKJKzYZjg9qkajdU8CLvI= -----END CERTIFICATE-----Generated at Mon May 20 02:36:37 2024 by rpki-client on console-ams.rpki-client.org