$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/qfmdwXSeSv3VHaTurnv9YWuCK_k.roa File: qfmdwXSeSv3VHaTurnv9YWuCK_k.roa (raw, json) Hash identifier: 6tC8w5UyBzTSUte3xQbQ24d+sMU7VmPNvxJHV+fnYAI= Subject key identifier: A9:F9:9D:C1:74:9E:4A:FD:D5:1D:A4:EE:AE:7B:FD:61:6B:82:2B:F9 Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Certificate serial: 04DD Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/qfmdwXSeSv3VHaTurnv9YWuCK_k.roa Signing time: Thu 29 Feb 2024 01:35:55 +0000 ROA not before: Thu 29 Feb 2024 01:35:55 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 180.233.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A Validity Not Before: Feb 29 01:35:55 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=A9F99DC1749E4AFDD51DA4EEAE7BFD616B822BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:43:9f:a6:56:69:4b:5b:b5:1b:85:9c:51: 6c:de:6e:40:df:f2:db:c2:d8:20:54:23:bd:0c:db: 50:e3:36:78:70:a9:b1:8b:c0:df:24:8f:81:69:b0: 8e:13:1b:ed:74:bd:9a:c0:b9:30:53:7a:6c:d6:43: 71:99:5d:62:36:59:04:4c:a6:d6:7b:15:d1:6c:1f: 63:73:0b:77:1d:b5:0f:32:87:1d:5a:ef:d9:d9:28: d9:e5:2e:b1:20:6c:4b:77:de:ff:a9:d3:1a:15:a9: 76:cd:38:05:c0:60:05:0f:7a:35:8b:07:ec:62:71: bf:22:96:fe:6d:d9:57:e7:d9:4b:fb:ea:5b:23:8a: da:d9:3e:06:17:dd:9e:9e:9e:86:1a:43:75:97:a9: a8:4f:d7:82:da:98:0b:f5:6f:cc:ea:97:23:b5:46: 8d:9f:c5:61:11:83:2f:06:7f:5e:17:81:aa:f0:f1: 5d:18:53:6d:da:aa:82:be:5e:92:0c:67:74:5a:ae: bc:7b:00:75:6b:de:c2:d3:e1:2e:f9:ba:da:ad:63: 98:d6:ec:a2:8c:77:6e:66:90:3c:02:46:ff:85:01: 34:c5:9b:30:f2:c8:58:dd:46:a9:ec:dd:ae:e2:89: 78:b5:65:96:f2:31:75:86:2f:f8:70:ad:10:a8:fa: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F9:9D:C1:74:9E:4A:FD:D5:1D:A4:EE:AE:7B:FD:61:6B:82:2B:F9 X509v3 Authority Key Identifier: keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/qfmdwXSeSv3VHaTurnv9YWuCK_k.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.233.96.0/20 Signature Algorithm: sha256WithRSAEncryption 35:b0:c3:38:dd:55:a7:92:37:57:e6:79:99:ce:36:a0:06:87: 89:d3:d4:06:5a:67:64:f7:1d:23:4a:2f:ff:f2:e4:18:eb:36: 8e:c8:89:96:29:67:78:87:d1:7c:93:de:2a:b8:4d:03:99:cd: 29:d2:10:95:61:ff:9f:21:58:36:19:13:03:aa:8b:8f:90:a8: a6:58:d9:20:a1:ae:83:70:95:31:7c:e3:d7:ee:b0:86:1f:53: 67:0b:fc:00:d3:4b:96:eb:1d:04:ed:07:05:bc:c2:c4:36:3a: 2b:37:df:01:a8:c9:ea:04:be:46:f9:8a:a0:99:f5:02:96:35: 60:09:44:bb:c5:50:9c:d2:06:0c:fc:dc:04:41:78:a8:68:05: 23:28:b7:3b:aa:12:1e:27:d6:46:7e:ec:07:d4:8b:8f:e4:21: 69:c8:50:70:6c:04:82:6f:5e:01:4e:47:66:fc:d0:b6:b1:cd: 82:32:0e:0b:55:22:d3:5e:af:91:21:12:5b:d0:14:71:08:bc: ff:fb:82:a9:b2:94:2a:bc:5f:2a:d8:59:73:cb:5c:b5:8a:c3: 64:6a:e4:7e:08:38:a0:13:56:bc:e5:7c:07:23:e3:56:1c:a9: 7e:6c:6d:f9:85:8d:12:de:96:59:e2:55:ad:96:a3:04:a0:c4: f9:90:ba:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw MTM1NTVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEE5Rjk5REMxNzQ5RTRB RkRENTFEQTRFRUFFN0JGRDYxNkI4MjJCRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKMUOfplZpS1u1G4WcUWzebkDf8tvC2CBUI70M21DjNnhwqbGL wN8kj4FpsI4TG+10vZrAuTBTemzWQ3GZXWI2WQRMptZ7FdFsH2NzC3cdtQ8yhx1a 79nZKNnlLrEgbEt33v+p0xoVqXbNOAXAYAUPejWLB+xicb8ilv5t2Vfn2Uv76lsj itrZPgYX3Z6enoYaQ3WXqahP14LamAv1b8zqlyO1Ro2fxWERgy8Gf14Xgarw8V0Y U23aqoK+XpIMZ3Rarrx7AHVr3sLT4S75utqtY5jW7KKMd25mkDwCRv+FATTFmzDy yFjdRqns3a7iiXi1ZZbyMXWGL/hwrRCo+pL5AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqfmdwXSeSv3VHaTurnv9YWuCK/kwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTQ1L3FmbWR3WFNlU3YzVkhhVHVybnY5WVd1Q0tfay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAS06WAwDQYJKoZIhvcNAQELBQADggEBADWwwzjdVaeSN1fmeZnONqAGh4nT 1AZaZ2T3HSNKL//y5BjrNo7IiZYpZ3iH0XyT3iq4TQOZzSnSEJVh/58hWDYZEwOq i4+QqKZY2SChroNwlTF849fusIYfU2cL/ADTS5brHQTtBwW8wsQ2Ois33wGoyeoE vkb5iqCZ9QKWNWAJRLvFUJzSBgz83ARBeKhoBSMotzuqEh4n1kZ+7AfUi4/kIWnI UHBsBIJvXgFOR2b80LaxzYIyDgtVItNer5EhElvQFHEIvP/7gqmylCq8XyrYWXPL XLWKw2Rq5H4IOKATVrzlfAcj41YcqX5sbfmFjRLellniVa2WowSgxPmQuhI= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org