$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa File: QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa (raw, json) Hash identifier: hWTfxkZgNUEisHcxOzzTo6z4/OmQ0pm46UB0C+tmYhs= Subject key identifier: 40:E8:78:8F:6C:5F:C6:CA:AA:E3:41:60:EA:BE:28:F3:3C:DF:D1:15 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 017B Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa Signing time: Wed 31 Jul 2024 01:34:21 +0000 ROA not before: Wed 31 Jul 2024 01:34:21 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 2497 IP address blocks: 210.138.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 31 01:34:21 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=40E8788F6C5FC6CAAAE34160EABE28F33CDFD115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:2f:4f:03:87:82:cd:d4:56:a2:0a:f1:36: 69:34:7a:c7:be:d1:17:b2:4c:13:14:9a:e0:6c:bd: 35:f2:c2:60:b2:ce:60:f5:68:4e:4e:9c:6c:63:74: d6:ce:ef:0c:72:1f:61:fa:a0:fa:cb:a2:55:cb:b3: 4e:3c:3f:f5:ed:ba:76:e8:f3:07:58:fa:db:2a:58: 6f:b9:1f:96:34:4b:7e:64:ef:a1:32:c0:fe:4d:5c: 66:db:2c:f0:a6:85:93:6d:07:c8:0a:44:2c:09:81: 69:17:ce:a4:30:40:a0:47:75:d7:6c:e1:0c:ff:21: 13:9e:8f:0c:fc:6f:db:80:f1:b6:04:4c:27:e9:83: fe:70:a5:33:32:2f:fc:31:5a:fa:44:1e:37:41:2f: 6f:f1:b5:08:1f:ac:1d:b0:43:d8:64:5b:fa:3c:48: d0:ec:a2:86:d5:2e:f1:c9:7d:2a:db:d7:8b:2a:c3: 44:5f:86:d4:ef:e1:7a:1b:30:29:01:3c:16:e2:ea: 71:5b:1f:ef:b2:a5:6b:7f:de:a1:54:83:71:38:28: 0b:ed:49:50:35:05:cd:f3:0b:f8:63:89:b6:bf:09: 02:6e:d0:7c:58:d8:6b:87:67:77:66:6a:13:71:f5: b7:b3:db:d0:ba:cf:a3:00:ad:37:09:b6:14:b8:17: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E8:78:8F:6C:5F:C6:CA:AA:E3:41:60:EA:BE:28:F3:3C:DF:D1:15 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QOh4j2xfxsqq40Fg6r4o8zzf0RU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.138.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:9b:45:b0:13:76:88:c4:dd:f1:7f:f0:cd:c1:93:ca:22:82: 2a:04:10:b6:15:63:b5:f4:89:0a:1f:a5:9d:57:81:58:70:a6: 4d:e4:0c:67:ff:cd:5f:7a:5e:c8:30:0d:79:12:51:ea:ac:41: 2c:d2:9a:97:84:3c:d5:1a:3d:b4:a2:69:cf:f5:f8:91:80:bb: 21:ce:2d:53:36:d7:f2:58:0d:c6:fe:3b:f3:89:17:14:44:16: 51:cb:86:db:06:b0:33:f3:d4:c2:7b:a1:fa:03:c7:03:ec:97: b0:19:78:eb:4b:ef:7c:03:a3:ed:40:cc:58:eb:0d:14:bd:64: 8c:18:e2:9b:6b:c0:36:3b:b6:0b:a1:67:4d:92:b3:3f:31:cc: d0:1a:e7:2d:2a:f1:0b:64:8c:de:e9:c7:d4:64:56:84:b2:31: bb:0d:3e:a3:4c:0d:77:0e:57:35:e0:e2:c8:c4:29:44:7d:8e: 91:8c:7b:85:79:92:f7:54:74:3d:ad:bb:3f:93:a8:41:3b:67: 32:5a:99:d0:3b:8b:74:af:fb:8f:24:2f:20:8a:b2:f3:a3:63: ff:b0:3d:6c:e8:e3:40:33:f3:20:26:70:a5:7b:e2:d8:a9:da: 92:d4:03:f6:7d:a3:9a:63:7a:bc:d0:31:b1:5a:a3:4f:a1:18: a7:15:d0:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw MTM0MjFaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQwRTg3ODhGNkM1RkM2 Q0FBQUUzNDE2MEVBQkUyOEYzM0NERkQxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDROC9PA4eCzdRWogrxNmk0ese+0ReyTBMUmuBsvTXywmCyzmD1 aE5OnGxjdNbO7wxyH2H6oPrLolXLs048P/Xtunbo8wdY+tsqWG+5H5Y0S35k76Ey wP5NXGbbLPCmhZNtB8gKRCwJgWkXzqQwQKBHddds4Qz/IROejwz8b9uA8bYETCfp g/5wpTMyL/wxWvpEHjdBL2/xtQgfrB2wQ9hkW/o8SNDsoobVLvHJfSrb14sqw0Rf htTv4XobMCkBPBbi6nFbH++ypWt/3qFUg3E4KAvtSVA1Bc3zC/hjiba/CQJu0HxY 2GuHZ3dmahNx9bez29C6z6MArTcJthS4F5zjAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUQOh4j2xfxsqq40Fg6r4o8zzf0RUwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvUU9oNGoyeGZ4c3FxNDBGZzZyNG84enpmMFJVLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANKKMA0GCSqGSIb3DQEBCwUAA4IBAQBUm0WwE3aIxN3xf/DNwZPKIoIqBBC2FWO1 9IkKH6WdV4FYcKZN5Axn/81fel7IMA15ElHqrEEs0pqXhDzVGj20omnP9fiRgLsh zi1TNtfyWA3G/jvziRcURBZRy4bbBrAz89TCe6H6A8cD7JewGXjrS+98A6PtQMxY 6w0UvWSMGOKba8A2O7YLoWdNkrM/MczQGuctKvELZIze6cfUZFaEsjG7DT6jTA13 Dlc14OLIxClEfY6RjHuFeZL3VHQ9rbs/k6hBO2cyWpnQO4t0r/uPJC8girLzo2P/ sD1s6ONAM/MgJnCle+LYqdqS1AP2faOaY3q80DGxWqNPoRinFdDQ -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org