$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/qUUWBtYyU3T2CVq3mu3xKjm1h4s.roa File: qUUWBtYyU3T2CVq3mu3xKjm1h4s.roa (raw, json) Hash identifier: YNqHAfsy0oOfib3jkno2UuiLubNz+gvsnxvuKE6Y3ig= Subject key identifier: A9:45:16:06:D6:32:53:74:F6:09:5A:B7:9A:ED:F1:2A:39:B5:87:8B Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Certificate serial: 21 Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/qUUWBtYyU3T2CVq3mu3xKjm1h4s.roa Signing time: Fri 31 May 2024 01:29:05 +0000 ROA not before: Fri 31 May 2024 01:29:05 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 23808 IP address blocks: 202.140.192.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Validity Not Before: May 31 01:29:05 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=A9451606D6325374F6095AB79AEDF12A39B5878B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:a4:b8:24:81:5c:23:da:60:80:f1:56:1c: 9b:dd:22:c7:c1:54:57:8c:b8:49:10:98:27:d3:bc: e0:fd:43:5b:b8:06:22:06:ca:f7:d0:67:ea:6d:82: 2d:af:8d:ca:0d:0c:59:c4:27:b8:b8:52:f4:95:01: ac:92:74:0e:bc:41:46:f5:51:fb:9b:04:bc:5e:30: 49:dd:fa:09:23:99:bb:7a:78:b0:a8:71:93:0b:ec: 98:58:bd:a2:0e:14:5b:38:89:ad:b4:88:de:f4:16: d9:95:ca:9c:b3:8b:04:15:ab:a6:d8:a9:5f:cd:85: 90:b3:4f:04:0a:c8:fc:44:66:7a:83:fc:d1:b5:93: 03:0f:62:90:14:ae:77:24:7b:dd:77:02:f9:10:4e: bf:00:6e:70:2e:8f:50:c1:59:5c:41:96:06:54:60: e8:92:8c:d9:8e:bc:a5:df:4f:1e:ba:0d:6a:41:46: 70:79:48:3f:fe:8e:bd:b9:e3:f9:e7:3f:68:4e:7f: ea:c8:d0:42:a4:15:11:2d:43:26:1f:6c:46:b9:a8: 74:fc:ad:0f:6e:48:7c:ba:2e:45:3f:54:7f:06:85: 20:02:2d:f1:fc:ef:ab:fc:19:95:7d:53:5b:e7:cf: 82:6a:87:fb:06:0f:f4:5c:98:8b:96:fc:6d:a4:00: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:45:16:06:D6:32:53:74:F6:09:5A:B7:9A:ED:F1:2A:39:B5:87:8B X509v3 Authority Key Identifier: keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/qUUWBtYyU3T2CVq3mu3xKjm1h4s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.140.192.0/19 Signature Algorithm: sha256WithRSAEncryption 22:af:53:a3:66:f8:7b:a4:c4:8e:9b:96:5f:fc:68:98:2b:77: 96:95:06:c7:28:d8:f3:d1:62:0b:f6:14:3b:8d:03:71:b0:9d: f1:37:35:58:d4:70:31:2c:a3:4f:d8:ec:ca:43:3f:ef:c8:b6: 56:c3:fb:48:84:e1:33:82:ac:d2:9b:63:36:0b:76:52:c0:44: 81:2e:cf:2c:3b:37:fb:5d:d3:ff:d4:2d:01:b1:ed:2d:0b:c6: 09:33:c4:00:39:32:b6:04:41:74:50:8b:10:6e:09:67:0d:ca: dc:6e:b9:ed:82:bf:6a:6b:e7:c0:6c:00:52:e0:ae:72:13:cc: 55:0a:7e:9b:f1:2e:e1:7d:53:0a:b1:a1:d4:f2:6d:16:25:db: 08:d4:6c:38:5d:72:37:20:42:23:ff:c8:5f:89:88:95:6c:c6: 6d:ca:19:ac:7d:48:da:db:04:5c:95:07:3c:66:17:c2:4c:57: 7d:14:24:34:c3:c0:9a:d1:48:64:c2:fb:f8:e0:a3:0f:7e:6b: f5:4c:70:f1:6c:f9:9b:23:1c:90:b6:a2:0f:37:37:76:90:b6: c7:5f:80:44:66:0a:55:b9:e4:2e:cd:d7:25:e6:b0:f8:02:4d: 54:29:f4:21:f9:93:04:c6:85:c0:ce:68:0c:c2:a0:15:4d:cd: d3:56:bc:24 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUY0 MjBGMTkyMDBFMTFCRTRBRThEOTE0RUJBMkFDQjQyOTE3QjZFMB4XDTI0MDUzMTAx MjkwNVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQTk0NTE2MDZENjMyNTM3 NEY2MDk1QUI3OUFFREYxMkEzOUI1ODc4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALtqpLgkgVwj2mCA8VYcm90ix8FUV4y4SRCYJ9O84P1DW7gGIgbK 99Bn6m2CLa+Nyg0MWcQnuLhS9JUBrJJ0DrxBRvVR+5sEvF4wSd36CSOZu3p4sKhx kwvsmFi9og4UWziJrbSI3vQW2ZXKnLOLBBWrptipX82FkLNPBArI/ERmeoP80bWT Aw9ikBSudyR73XcC+RBOvwBucC6PUMFZXEGWBlRg6JKM2Y68pd9PHroNakFGcHlI P/6Ovbnj+ec/aE5/6sjQQqQVES1DJh9sRrmodPytD25IfLouRT9UfwaFIAIt8fzv q/wZlX1TW+fPgmqH+wYP9FyYi5b8baQAr9ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSpRRYG1jJTdPYJWrea7fEqObWHizAfBgNVHSMEGDAWgBSK9CDxkgDhG+SujZFO uirLQpF7bjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODg0L2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBLUmUyNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBL UmUyNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODQvcVVVV0J0WXlVM1QyQ1ZxM211M3hLam0xaDRzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBcqMwDANBgkqhkiG9w0BAQsFAAOCAQEAIq9To2b4e6TEjpuWX/xomCt3lpUG xyjY89FiC/YUO40DcbCd8Tc1WNRwMSyjT9jsykM/78i2VsP7SIThM4Ks0ptjNgt2 UsBEgS7PLDs3+13T/9QtAbHtLQvGCTPEADkytgRBdFCLEG4JZw3K3G657YK/amvn wGwAUuCuchPMVQp+m/Eu4X1TCrGh1PJtFiXbCNRsOF1yNyBCI//IX4mIlWzGbcoZ rH1I2tsEXJUHPGYXwkxXfRQkNMPAmtFIZML7+OCjD35r9Uxw8Wz5myMckLaiDzc3 dpC2x1+ARGYKVbnkLs3XJeaw+AJNVCn0IfmTBMaFwM5oDMKgFU3N01a8JA== -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:21 2024 by rpki-client on console-ams.rpki-client.org