$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/QxpV7jTN4EZEGdGAkP6sgGDCFY8.roa File: QxpV7jTN4EZEGdGAkP6sgGDCFY8.roa (raw, json) Hash identifier: R3coTVKwYHiUmk1ysMqM41IfsWp9JKzfY9+6eNHRXnI= Subject key identifier: 43:1A:55:EE:34:CD:E0:46:44:19:D1:80:90:FE:AC:80:60:C2:15:8F Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Certificate serial: 14 Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/QxpV7jTN4EZEGdGAkP6sgGDCFY8.roa Signing time: Tue 28 Nov 2023 05:11:28 +0000 ROA not before: Tue 28 Nov 2023 05:11:28 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2516 IP address blocks: 106.72.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Validity Not Before: Nov 28 05:11:28 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=431A55EE34CDE0464419D18090FEAC8060C2158F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:9a:d6:92:d6:91:38:6c:02:c3:ba:69:47: 50:83:1e:99:c2:a5:71:9e:fe:05:61:2a:de:0a:d1: 8e:a1:79:fa:c8:0e:e4:03:e5:8e:85:46:d6:5b:b6: 28:9a:be:2f:08:8c:33:a2:a2:64:a9:e7:2f:e2:92: 6a:03:ec:3c:0a:32:5d:51:cd:cd:63:fe:10:dd:24: 7f:d7:2e:68:ab:80:c3:98:ec:ab:09:86:77:df:7d: d9:f1:62:07:f6:f1:09:39:c7:dd:91:4b:db:25:d4: 89:80:31:8b:6e:fe:f6:e7:c4:6d:05:bd:d5:1a:d3: cb:c7:e0:de:3b:05:41:1b:94:55:e7:83:a6:a7:66: 03:cb:21:20:2e:15:ee:d9:94:50:56:6c:64:2e:c8: 05:8b:69:e4:ba:87:2e:54:83:13:df:f1:86:0f:a8: ad:53:12:21:1c:5d:fc:6f:f5:ba:79:4e:15:db:97: 0e:b5:87:7f:cf:7e:0b:a4:6e:7e:a0:72:9e:a9:2c: 80:33:e0:d2:4d:df:ec:dc:90:de:e1:87:11:0a:05: 65:5a:02:a3:71:d5:4c:bc:ee:f3:35:0b:17:7f:61: cc:63:71:93:84:6c:3b:6b:c2:cd:4e:b8:6c:e4:82: a0:9b:89:76:81:bd:7e:cc:96:8d:67:7f:92:bf:d9: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1A:55:EE:34:CD:E0:46:44:19:D1:80:90:FE:AC:80:60:C2:15:8F X509v3 Authority Key Identifier: keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/QxpV7jTN4EZEGdGAkP6sgGDCFY8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 106.72.0.0/15 Signature Algorithm: sha256WithRSAEncryption a2:fb:a1:55:50:28:e5:29:53:0e:8d:06:1d:92:21:c1:4a:2e: 6c:fc:0d:65:df:c1:6e:f8:c3:56:5d:db:ec:6c:ea:8d:04:e7: 33:5e:15:e5:c0:a9:0e:b1:45:fd:e4:20:c5:4d:66:17:ee:97: 1a:d4:7a:70:17:40:53:77:74:ca:ac:b4:d5:b0:cb:fa:4a:56: b7:d5:00:7f:ae:f1:a4:2d:00:c6:6a:5a:ca:3f:61:a3:a7:4a: 24:e1:40:85:43:04:70:00:8f:ed:d3:aa:b8:24:8c:ec:5f:b8: 5e:ff:88:e4:63:fd:6d:eb:0b:24:80:65:ab:cb:36:5e:f6:de: a4:fe:2c:83:ff:98:87:50:23:46:9f:eb:3c:53:6c:f2:fe:33: 9e:06:9a:f3:db:8c:d6:24:a5:49:b0:3d:e2:ce:7a:4b:ec:33: 30:f8:7e:65:05:18:0c:16:6d:d2:28:00:80:ea:3c:09:3c:37: 7d:35:a0:3b:d5:da:8f:00:66:fe:bb:1f:af:1f:02:3f:f5:3d: 63:b5:fa:b3:62:a9:0f:c6:54:39:c5:d0:58:b2:11:89:ee:c2: 02:23:4e:68:df:e2:b3:ed:d5:57:e6:b5:13:8a:bc:ce:98:73: 63:dd:97:8a:f1:6e:c6:b6:3d:a6:4e:de:96:fc:0b:0f:97:35: 75:6f:5d:a8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTIzMTEyODA1 MTEyOFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNDMxQTU1RUUzNENERTA0 NjQ0MTlEMTgwOTBGRUFDODA2MEMyMTU4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALcsmtaS1pE4bALDumlHUIMemcKlcZ7+BWEq3grRjqF5+sgO5APl joVG1lu2KJq+LwiMM6KiZKnnL+KSagPsPAoyXVHNzWP+EN0kf9cuaKuAw5jsqwmG d9992fFiB/bxCTnH3ZFL2yXUiYAxi27+9ufEbQW91RrTy8fg3jsFQRuUVeeDpqdm A8shIC4V7tmUUFZsZC7IBYtp5LqHLlSDE9/xhg+orVMSIRxd/G/1unlOFduXDrWH f89+C6RufqBynqksgDPg0k3f7NyQ3uGHEQoFZVoCo3HVTLzu8zULF39hzGNxk4Rs O2vCzU64bOSCoJuJdoG9fsyWjWd/kr/ZR30CAwEAAaOCAiMwggIfMB0GA1UdDgQW BBRDGlXuNM3gRkQZ0YCQ/qyAYMIVjzAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0 AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MjQvUXhwVjdqVE40RVpFR2RHQWtQNnNnR0RDRlk4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAWpIMA0GCSqGSIb3DQEBCwUAA4IBAQCi+6FVUCjlKVMOjQYdkiHBSi5s/A1l 38Fu+MNWXdvsbOqNBOczXhXlwKkOsUX95CDFTWYX7pca1HpwF0BTd3TKrLTVsMv6 Sla31QB/rvGkLQDGalrKP2Gjp0ok4UCFQwRwAI/t06q4JIzsX7he/4jkY/1t6wsk gGWryzZe9t6k/iyD/5iHUCNGn+s8U2zy/jOeBprz24zWJKVJsD3iznpL7DMw+H5l BRgMFm3SKACA6jwJPDd9NaA71dqPAGb+ux+vHwI/9T1jtfqzYqkPxlQ5xdBYshGJ 7sICI05o3+Kz7dVX5rUTirzOmHNj3ZeK8W7Gtj2mTt6W/AsPlzV1b12o -----END CERTIFICATE-----Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org