$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa File: qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa (raw, json) Hash identifier: VKGTRM7Ls6xuZ7fJfjI4zQpo+u3rmo5ROQAZH8TYpXA= Subject key identifier: AA:BE:01:A5:F9:0E:23:BB:10:09:D5:82:35:E2:68:2E:0E:88:B4:5D Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 011C Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa Signing time: Fri 01 Sep 2023 01:30:26 +0000 ROA not before: Fri 01 Sep 2023 01:30:26 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 9824 IP address blocks: 223.165.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:26 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=AABE01A5F90E23BB1009D58235E2682E0E88B45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:74:72:10:ee:f0:55:ba:f7:8b:d9:2a:75:cc: 63:79:1e:ec:0e:5c:0c:e8:b6:ca:0d:83:c8:fb:0a: 26:5a:7d:08:1a:9f:aa:9f:3b:2a:9f:88:7e:30:1c: 89:bc:bf:aa:41:f5:9a:12:33:08:75:49:97:1b:c0: f5:8e:b2:8e:bb:25:31:8e:ff:61:5b:97:d9:2a:3f: b8:38:bd:d9:9f:08:b9:a9:86:5f:d1:be:c9:8e:d3: 88:87:d7:c4:7f:8e:38:31:c7:bb:80:a8:ab:84:70: 01:62:f1:45:34:ad:a0:47:e1:c6:f8:4b:36:c3:73: 12:1c:72:14:82:58:0c:4b:28:97:85:27:95:26:11: 56:be:ff:0f:6e:90:b7:06:43:75:64:05:83:b1:4f: e8:74:11:9e:64:00:27:d7:3a:c3:5b:cf:53:88:84: a0:a3:71:3b:e9:1d:b4:78:52:6a:f1:37:43:c4:37: 27:59:fe:d1:72:0c:b1:4d:c4:90:b9:e6:1d:1b:28: f7:97:92:fc:29:04:ef:42:b3:ee:a1:39:7b:97:af: 5f:df:66:d2:ec:14:62:b8:d5:46:98:1b:c4:d0:16: 0b:41:96:95:68:dc:77:36:20:a5:de:c2:9c:5f:d0: fa:48:55:d3:6f:fa:21:a3:9f:75:69:05:8f:88:c8: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:01:A5:F9:0E:23:BB:10:09:D5:82:35:E2:68:2E:0E:88:B4:5D X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qr4BpfkOI7sQCdWCNeJoLg6ItF0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.165.20.0/22 Signature Algorithm: sha256WithRSAEncryption 61:c2:5e:96:de:07:1d:f4:e7:e3:c0:db:37:09:30:68:6c:e0: cb:10:02:b6:62:53:e5:e4:04:df:96:07:15:f5:38:0b:1c:6f: 59:ae:b6:08:29:aa:96:ad:e2:61:1d:77:f9:2b:b3:bb:92:5d: 3b:ec:95:7d:ec:26:08:e7:c0:4f:01:cc:fb:92:5c:f5:a1:a7: 11:8d:ac:6d:fc:80:ec:f6:39:89:0e:83:db:13:13:19:fc:38: 00:da:e9:c6:b2:d6:29:4a:1d:f2:cf:3d:f7:80:78:e7:64:e0: df:88:00:68:10:98:0f:28:c1:2a:16:40:e0:e7:b0:44:62:33: a4:bf:8d:08:b2:8c:a1:2a:0c:89:6e:7b:f7:fe:2e:9c:d5:85: fa:cb:68:04:c0:ea:05:cc:94:fa:01:6d:93:5f:a3:eb:08:42: ee:24:1d:bc:84:06:a9:65:e8:b6:9e:12:10:a8:2c:06:a6:78: 65:65:01:e1:28:88:c4:e3:9f:e1:ba:71:81:31:f2:3b:41:c3: 0f:76:e5:66:03:02:9b:a9:2e:56:40:cc:56:70:23:1c:2a:58: 61:0a:2c:54:92:70:e8:d2:7b:13:29:36:d4:35:42:95:d5:82: f0:15:ef:bc:14:96:0c:ea:27:03:90:5a:29:2d:02:82:69:87: 79:b4:5d:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw MTMwMjZaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFBQkUwMUE1RjkwRTIz QkIxMDA5RDU4MjM1RTI2ODJFMEU4OEI0NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDidHIQ7vBVuveL2Sp1zGN5HuwOXAzotsoNg8j7CiZafQgan6qf OyqfiH4wHIm8v6pB9ZoSMwh1SZcbwPWOso67JTGO/2Fbl9kqP7g4vdmfCLmphl/R vsmO04iH18R/jjgxx7uAqKuEcAFi8UU0raBH4cb4SzbDcxIcchSCWAxLKJeFJ5Um EVa+/w9ukLcGQ3VkBYOxT+h0EZ5kACfXOsNbz1OIhKCjcTvpHbR4UmrxN0PENydZ /tFyDLFNxJC55h0bKPeXkvwpBO9Cs+6hOXuXr1/fZtLsFGK41UaYG8TQFgtBlpVo 3Hc2IKXewpxf0PpIVdNv+iGjn3VpBY+IyIaFAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUqr4BpfkOI7sQCdWCNeJoLg6ItF0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3FyNEJwZmtPSTdzUUNkV0NOZUpvTGc2SXRGMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALfpRQwDQYJKoZIhvcNAQELBQADggEBAGHCXpbeBx305+PA2zcJMGhs4MsQ ArZiU+XkBN+WBxX1OAscb1mutggpqpat4mEdd/krs7uSXTvslX3sJgjnwE8BzPuS XPWhpxGNrG38gOz2OYkOg9sTExn8OADa6cay1ilKHfLPPfeAeOdk4N+IAGgQmA8o wSoWQODnsERiM6S/jQiyjKEqDIlue/f+LpzVhfrLaATA6gXMlPoBbZNfo+sIQu4k HbyEBqll6LaeEhCoLAameGVlAeEoiMTjn+G6cYEx8jtBww925WYDApupLlZAzFZw IxwqWGEKLFSScOjSexMpNtQ1QpXVgvAV77wUlgzqJwOQWiktAoJph3m0XcY= -----END CERTIFICATE-----Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org