$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5648/QFurrkJMiqyu4AZ6naGBTo7JYZU.roa File: QFurrkJMiqyu4AZ6naGBTo7JYZU.roa (raw, json) Hash identifier: s7Ck7xstQzcVlkYr1oUKJmbeSng+pHsrZ+3c8iA8Qjg= Subject key identifier: 40:5B:AB:AE:42:4C:8A:AC:AE:E0:06:7A:9D:A1:81:4E:8E:C9:61:95 Certificate issuer: /CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27 Certificate serial: 02 Authority key identifier: 81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/QFurrkJMiqyu4AZ6naGBTo7JYZU.roa Signing time: Thu 02 Nov 2023 09:45:02 +0000 ROA not before: Thu 02 Nov 2023 09:45:02 +0000 ROA not after: Fri 01 Nov 2024 09:38:09 +0000 asID: 63806 IP address blocks: 43.228.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27 Validity Not Before: Nov 2 09:45:02 2023 GMT Not After : Nov 1 09:38:09 2024 GMT Subject: CN=405BABAE424C8AACAEE0067A9DA1814E8EC96195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:69:57:7b:47:e4:cd:ce:b8:00:04:71:f8: 8d:9e:a1:ab:0a:f7:96:60:5c:e7:d1:fc:ef:b1:40: a6:22:59:a9:27:e2:2e:dc:81:0d:4d:44:00:c2:db: 49:1a:90:1d:39:28:01:71:28:3f:79:b6:5d:62:d1: 8f:09:28:fa:74:21:94:cf:b8:73:8e:fc:79:1f:1d: 32:07:92:4f:56:c5:7e:25:34:82:4a:1d:03:83:b5: e7:59:71:57:0b:d7:ee:c3:f0:a0:b1:09:11:45:ac: 2c:8d:41:df:78:cd:21:56:87:75:d7:be:e3:a9:d6: ff:02:62:e2:e3:16:0a:5b:ed:cf:9e:42:31:34:b4: e5:27:a7:1b:77:0e:18:42:99:c7:56:b0:58:cb:ba: 41:fe:6f:d6:e1:77:2b:92:11:d5:b9:b8:43:f7:b3: 9b:6c:9c:fe:c5:62:84:91:da:10:39:4d:ab:9c:47: 2c:88:b4:f9:0c:be:1c:56:0d:80:7e:a0:e5:03:78: 9d:2a:82:f7:7f:0a:f0:88:80:10:f1:25:fd:63:08: 32:a6:f7:ae:8f:67:1a:90:81:eb:5f:5a:85:e9:79: 7f:e7:ce:be:62:40:41:86:c3:89:73:55:07:2e:a3: c0:f5:e1:e4:00:69:b8:bd:5a:e6:a1:85:6a:02:b8: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:AB:AE:42:4C:8A:AC:AE:E0:06:7A:9D:A1:81:4E:8E:C9:61:95 X509v3 Authority Key Identifier: keyid:81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/QFurrkJMiqyu4AZ6naGBTo7JYZU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.174.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:28:5c:c6:33:62:f5:42:3e:6e:3d:81:af:3d:be:dd:56:cf: 09:49:ae:51:79:3e:70:15:13:39:10:b7:8c:db:46:44:ee:2e: a2:aa:6b:0d:f7:17:74:ba:66:81:3f:07:78:e3:4e:e7:48:e5: f5:2a:10:60:6e:94:f3:9d:c0:70:f6:b0:4a:29:c8:7b:1c:91: ab:75:78:61:a3:a9:c6:ca:00:23:ff:99:92:14:d2:0d:00:5d: 69:9f:6e:5d:1d:7e:9e:e6:78:d4:23:3a:7d:b4:f0:23:8a:d9: d7:4e:00:9e:35:41:8d:f7:06:82:2b:7a:b9:2a:7b:01:a7:f8: 94:b3:24:13:24:89:4f:12:2d:c3:77:6e:3c:62:93:88:f6:d0: 0f:0a:03:8e:ef:e8:0b:89:d4:7f:f3:f0:74:2e:e5:24:74:95: 66:ec:3d:d3:1a:6b:f9:29:18:f7:31:0d:26:7e:cd:06:fc:11: 7d:d8:33:54:80:07:52:aa:5a:4c:0e:6b:eb:2d:b5:8b:e1:69: 0f:15:37:b5:a8:49:c6:05:b8:bb:7e:5b:df:54:3d:39:20:95: 9c:30:d6:b7:75:ff:9e:f2:5d:ea:77:aa:70:e6:4a:ce:63:1f: e3:96:ca:bd:03:e4:1a:63:11:f0:f0:d0:a0:be:61:d2:46:ac: 8a:40:a6:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MUYz ODIyNUY5RUU1RUY0QUVFRTFFOENDQjNCNjY2QzFCRjE2RDI3MB4XDTIzMTEwMjA5 NDUwMloXDTI0MTEwMTA5MzgwOVowMzExMC8GA1UEAxMoNDA1QkFCQUU0MjRDOEFB Q0FFRTAwNjdBOURBMTgxNEU4RUM5NjE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKMhaVd7R+TNzrgABHH4jZ6hqwr3lmBc59H877FApiJZqSfiLtyB DU1EAMLbSRqQHTkoAXEoP3m2XWLRjwko+nQhlM+4c478eR8dMgeST1bFfiU0gkod A4O151lxVwvX7sPwoLEJEUWsLI1B33jNIVaHdde+46nW/wJi4uMWClvtz55CMTS0 5SenG3cOGEKZx1awWMu6Qf5v1uF3K5IR1bm4Q/ezm2yc/sVihJHaEDlNq5xHLIi0 +Qy+HFYNgH6g5QN4nSqC938K8IiAEPEl/WMIMqb3ro9nGpCB619ahel5f+fOvmJA QYbDiXNVBy6jwPXh5ABpuL1a5qGFagK44gkCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRAW6uuQkyKrK7gBnqdoYFOjslhlTAfBgNVHSMEGDAWgBSB84Il+e5e9K7uHozL O2ZsG/FtJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTY0OC9nZk9DSmZudVh2U3U3aDZNeXp0bWJCdnhiU2MuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9nZk9DSmZudVh2U3U3aDZNeXp0bWJC dnhiU2MuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNTY0OC9RRnVycmtKTWlxeXU0QVo2bmFHQlRvN0pZWlUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAK+SuMA0GCSqGSIb3DQEBCwUAA4IBAQBsKFzGM2L1Qj5uPYGvPb7dVs8J Sa5ReT5wFRM5ELeM20ZE7i6iqmsN9xd0umaBPwd4407nSOX1KhBgbpTzncBw9rBK Kch7HJGrdXhho6nGygAj/5mSFNINAF1pn25dHX6e5njUIzp9tPAjitnXTgCeNUGN 9waCK3q5KnsBp/iUsyQTJIlPEi3Dd248YpOI9tAPCgOO7+gLidR/8/B0LuUkdJVm 7D3TGmv5KRj3MQ0mfs0G/BF92DNUgAdSqlpMDmvrLbWL4WkPFTe1qEnGBbi7flvf VD05IJWcMNa3df+e8l3qd6pw5krOYx/jlsq9A+QaYxHw8NCgvmHSRqyKQKZl -----END CERTIFICATE-----Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org