$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/QLMQgXsb79aATcgOWY6EBpN_hJ8.roa File: QLMQgXsb79aATcgOWY6EBpN_hJ8.roa (raw, json) Hash identifier: 2WYNrF5aCk0J5Sn+LFdLWdhWn+A5QbLbRnUAt6lXZ+g= Subject key identifier: 40:B3:10:81:7B:1B:EF:D6:80:4D:C8:0E:59:8E:84:06:93:7F:84:9F Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Certificate serial: 02 Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/QLMQgXsb79aATcgOWY6EBpN_hJ8.roa Signing time: Mon 21 Oct 2024 01:34:58 +0000 ROA not before: Mon 21 Oct 2024 01:34:58 +0000 ROA not after: Tue 21 Oct 2025 01:23:02 +0000 asID: 9354 IP address blocks: 223.252.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A Validity Not Before: Oct 21 01:34:58 2024 GMT Not After : Oct 21 01:23:02 2025 GMT Subject: CN=40B310817B1BEFD6804DC80E598E8406937F849F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:24:af:92:f0:a1:03:ac:48:f8:e8:e8:01: e0:44:ee:77:39:44:f7:de:34:f6:1a:b7:d0:63:7b: c7:a3:8c:ca:32:a2:42:99:7c:2c:93:f2:ce:ea:3e: a2:ba:b5:e8:44:11:7c:17:8a:8e:ba:2e:aa:ac:5e: 46:fc:48:87:42:a3:e6:47:99:f4:6e:1c:5f:e4:df: 5d:36:ae:ef:11:a6:97:06:2d:b5:b3:10:db:f3:5b: 76:56:11:45:2e:85:2a:9c:47:56:b9:ed:1f:55:e1: 34:47:3d:ad:e0:ee:46:90:ad:fc:f0:c1:a6:da:bc: b5:9d:67:ff:c1:37:e5:53:22:af:2c:a9:d6:e8:b8: 63:39:34:35:5b:67:fa:7a:f5:f5:b3:d3:05:0f:fd: 44:1a:3c:cb:84:dd:f7:fd:48:7e:97:89:99:8a:03: 99:f3:d0:54:d2:34:c0:a5:f8:6f:ea:15:48:63:95: 5c:50:62:c2:16:4e:91:2e:87:8f:90:5b:93:56:15: 62:86:cd:8d:12:83:ef:e8:b4:cd:df:4d:1c:89:46: ee:1e:72:aa:dd:96:5d:9d:c5:08:69:6b:aa:39:d3: 1e:c7:49:da:b6:99:02:4c:9a:ac:83:8a:67:27:bd: 0b:82:7f:8c:7d:26:a6:7d:ec:8d:80:e4:06:89:fd: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B3:10:81:7B:1B:EF:D6:80:4D:C8:0E:59:8E:84:06:93:7F:84:9F X509v3 Authority Key Identifier: keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/QLMQgXsb79aATcgOWY6EBpN_hJ8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.252.64.0/20 Signature Algorithm: sha256WithRSAEncryption 31:63:2f:f4:a6:c5:f8:d9:82:ce:38:1d:cf:30:d5:36:13:2d: bc:d6:b0:b4:59:68:ae:0a:ef:78:b5:9d:a4:c6:a7:96:5c:13: 93:55:44:24:cb:c8:8c:29:0f:92:97:f8:20:a1:99:db:fd:57: 4d:a8:37:a8:65:c3:ea:e8:cb:dd:7e:a4:a5:e4:f1:7d:dd:cb: b1:17:fd:12:5f:63:91:b4:d4:6c:85:7c:4e:84:17:97:35:0e: 34:46:1b:b2:ab:6e:a9:60:18:ec:de:19:98:6a:6a:bd:95:81: 02:5d:cf:45:77:c1:e2:20:79:3f:62:7f:2e:49:e9:6b:b3:7a: 9d:3d:c5:fb:f8:d6:91:a0:b1:18:96:2f:7f:f3:e3:8e:8b:25: 4e:fa:df:bc:a1:f7:f6:7b:e7:c2:e8:59:86:8b:ab:a4:4a:0f: 6b:22:00:33:96:58:d2:82:12:4f:77:d1:66:5c:31:1f:06:27: 4b:91:61:10:cd:04:84:b3:1d:af:7b:92:87:6f:f2:db:25:96: b3:9b:2a:4c:65:4c:e3:1d:86:64:6b:11:06:ab:b7:4c:f4:93: 13:51:b5:1a:08:85:8b:12:87:cd:8f:1d:ce:ed:ce:88:76:1d: 20:b3:c5:8e:5c:c7:c6:28:e7:ed:85:f8:07:f8:90:4a:3a:d6: a3:9a:8b:07 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4 NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI0MTAyMTAx MzQ1OFoXDTI1MTAyMTAxMjMwMlowMzExMC8GA1UEAxMoNDBCMzEwODE3QjFCRUZE NjgwNERDODBFNTk4RTg0MDY5MzdGODQ5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMgKJK+S8KEDrEj46OgB4ETudzlE99409hq30GN7x6OMyjKiQpl8 LJPyzuo+orq16EQRfBeKjrouqqxeRvxIh0Kj5keZ9G4cX+TfXTau7xGmlwYttbMQ 2/NbdlYRRS6FKpxHVrntH1XhNEc9reDuRpCt/PDBptq8tZ1n/8E35VMiryyp1ui4 Yzk0NVtn+nr19bPTBQ/9RBo8y4Td9/1IfpeJmYoDmfPQVNI0wKX4b+oVSGOVXFBi whZOkS6Hj5Bbk1YVYobNjRKD7+i0zd9NHIlG7h5yqt2WXZ3FCGlrqjnTHsdJ2raZ AkyarIOKZye9C4J/jH0mpn3sjYDkBon9hPcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRAsxCBexvv1oBNyA5ZjoQGk3+EnzAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80ODQvUUxNUWdYc2I3OWFBVGNnT1dZNkVCcE5faEo4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBN/8QDANBgkqhkiG9w0BAQsFAAOCAQEAMWMv9KbF+NmCzjgdzzDVNhMtvNaw tFlorgrveLWdpManllwTk1VEJMvIjCkPkpf4IKGZ2/1XTag3qGXD6ujL3X6kpeTx fd3LsRf9El9jkbTUbIV8ToQXlzUONEYbsqtuqWAY7N4ZmGpqvZWBAl3PRXfB4iB5 P2J/Lknpa7N6nT3F+/jWkaCxGJYvf/PjjoslTvrfvKH39nvnwuhZhourpEoPayIA M5ZY0oIST3fRZlwxHwYnS5FhEM0EhLMdr3uSh2/y2yWWs5sqTGVM4x2GZGsRBqu3 TPSTE1G1GgiFixKHzY8dzu3OiHYdILPFjlzHxijn7YX4B/iQSjrWo5qLBw== -----END CERTIFICATE-----Generated at Sun Feb 16 22:06:05 2025 by rpki-client