$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa File: QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa (raw, json) Hash identifier: 35I02TXsGz8iZK1qfPGPt4GXbt58EkYMJjqJojxcxFQ= Subject key identifier: 40:CF:E3:62:7B:11:7F:77:EE:C3:6D:C1:4D:A4:53:B3:67:F9:AC:34 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0163 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa Signing time: Sun 01 Oct 2023 01:33:06 +0000 ROA not before: Sun 01 Oct 2023 01:33:06 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 9824 IP address blocks: 202.148.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Oct 1 01:33:06 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=40CFE3627B117F77EEC36DC14DA453B367F9AC34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:db:c6:b7:b5:54:db:d2:14:cd:8e:11:2f: e3:57:28:cb:8e:e6:18:ba:4d:21:67:05:9b:b9:25: 9f:54:be:e5:b1:13:80:7f:9d:d2:0b:3f:87:c4:99: c2:97:e9:00:2a:0b:77:31:df:92:15:d4:64:81:da: 15:41:87:03:ef:ae:78:e2:0e:1c:7e:e8:b8:a3:7b: 19:00:8b:e1:18:cf:21:d9:9c:02:a5:8d:67:4c:36: 1f:dd:b0:a7:6b:38:0f:42:a3:47:4f:5f:20:51:18: 3b:b5:56:e0:95:e6:71:5d:db:1c:77:fb:d7:08:d5: 3f:62:ce:03:0c:0d:5e:c0:80:4b:bf:64:c3:fb:27: 29:a3:fe:40:01:58:a6:b9:f8:1e:7e:9f:52:10:c2: 28:b7:88:fe:90:d8:ac:64:76:c1:8b:0c:d7:d9:6c: 8b:83:84:29:ed:21:32:ec:c6:67:77:b4:3d:46:28: 31:89:35:97:9c:54:73:7c:18:14:55:3f:ae:cd:8b: 89:e5:03:69:56:ee:0f:5b:fa:48:fb:58:5e:4a:0a: d1:03:fd:f3:16:d1:73:be:0e:29:a1:e1:9c:e1:9c: 00:1f:b5:f0:bb:b4:ae:2f:e2:90:d2:3c:40:f7:0e: b2:3a:0f:19:9e:41:e3:5e:9d:e4:5c:c4:52:57:21: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:E3:62:7B:11:7F:77:EE:C3:6D:C1:4D:A4:53:B3:67:F9:AC:34 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QM_jYnsRf3fuw23BTaRTs2f5rDQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.148.240.0/20 Signature Algorithm: sha256WithRSAEncryption d1:c1:da:f5:d2:84:40:83:f7:c1:8d:aa:09:a4:72:56:fe:ab: 84:72:5d:62:d0:a1:0a:95:f7:98:04:92:cc:55:4c:e5:c4:8a: 0c:a5:98:52:81:6e:26:6d:47:8a:ee:55:38:bd:4b:3d:97:ef: eb:27:8a:ed:79:44:8e:63:19:a3:38:de:51:af:15:48:4e:52: 4f:d3:98:bf:12:fe:cd:e6:3e:de:b5:86:f6:66:fb:ab:2b:25: a0:32:eb:aa:be:85:b8:77:4a:0a:4f:39:86:24:88:f4:23:4a: 90:d0:8e:98:e9:e9:9a:62:1f:c0:71:cd:66:fb:a9:ee:79:b2: 17:98:83:2d:af:a7:ad:ee:10:bd:e7:f9:22:1a:15:3e:dd:d3: a7:3e:f7:ad:ba:62:00:b0:f1:37:95:9e:1e:9c:2f:8c:bd:86: c5:ed:a7:f0:c0:2d:39:e1:cf:f1:51:44:e7:45:2d:05:7f:4b: 44:a4:db:81:7c:b1:b2:f5:34:24:b4:9e:39:7e:ef:a3:4a:41: f7:5d:39:21:5c:d7:ba:c9:97:59:a1:e8:8f:41:71:59:10:f7: 64:2c:ee:e4:95:2e:45:06:f0:ba:1b:f7:40:3b:08:ca:a1:9d: d8:2e:a6:9a:46:ff:77:29:14:03:04:13:65:13:51:df:ac:e4: c2:2f:75:1c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw MTMzMDZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQwQ0ZFMzYyN0IxMTdG NzdFRUMzNkRDMTREQTQ1M0IzNjdGOUFDMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzF9vGt7VU29IUzY4RL+NXKMuO5hi6TSFnBZu5JZ9UvuWxE4B/ ndILP4fEmcKX6QAqC3cx35IV1GSB2hVBhwPvrnjiDhx+6LijexkAi+EYzyHZnAKl jWdMNh/dsKdrOA9Co0dPXyBRGDu1VuCV5nFd2xx3+9cI1T9izgMMDV7AgEu/ZMP7 Jymj/kABWKa5+B5+n1IQwii3iP6Q2KxkdsGLDNfZbIuDhCntITLsxmd3tD1GKDGJ NZecVHN8GBRVP67Ni4nlA2lW7g9b+kj7WF5KCtED/fMW0XO+Dimh4ZzhnAAftfC7 tK4v4pDSPED3DrI6DxmeQeNeneRcxFJXIR+LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUQM/jYnsRf3fuw23BTaRTs2f5rDQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1FNX2pZbnNSZjNmdXcyM0JUYVJUczJmNXJEUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKlPAwDQYJKoZIhvcNAQELBQADggEBANHB2vXShECD98GNqgmkclb+q4Ry XWLQoQqV95gEksxVTOXEigylmFKBbiZtR4ruVTi9Sz2X7+sniu15RI5jGaM43lGv FUhOUk/TmL8S/s3mPt61hvZm+6srJaAy66q+hbh3SgpPOYYkiPQjSpDQjpjp6Zpi H8BxzWb7qe55sheYgy2vp63uEL3n+SIaFT7d06c+9626YgCw8TeVnh6cL4y9hsXt p/DALTnhz/FRROdFLQV/S0Sk24F8sbL1NCS0njl+76NKQfddOSFc17rJl1mh6I9B cVkQ92Qs7uSVLkUG8Lob90A7CMqhndgupppG/3cpFAMEE2UTUd+s5MIvdRw= -----END CERTIFICATE-----Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org