$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/UQJQqxit6lILFUUkDozpMGMGldg.roa File: UQJQqxit6lILFUUkDozpMGMGldg.roa (raw, json) Hash identifier: esxES+opeQrE0qhd6M2Tg95R9caSSQcOGK1RCSD5rVE= Subject key identifier: 51:02:50:AB:18:AD:EA:52:0B:15:45:24:0E:8C:E9:30:63:06:95:D8 Certificate issuer: /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Certificate serial: 20 Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/UQJQqxit6lILFUUkDozpMGMGldg.roa Signing time: Mon 20 May 2024 03:25:44 +0000 ROA not before: Mon 20 May 2024 03:25:44 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 131965 IP address blocks: 220.158.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31 Validity Not Before: May 20 03:25:44 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=510250AB18ADEA520B1545240E8CE930630695D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:1b:3b:8f:50:c2:e0:3e:34:27:61:d0:82: 5d:5d:b6:05:85:29:da:96:50:42:5f:07:9e:ba:00: 9c:af:7a:8c:72:ea:51:cc:32:ac:f7:1d:c6:a1:84: 5b:fa:7b:30:6c:cb:d2:28:2b:04:5f:fe:64:e8:72: 28:10:48:4e:3b:d9:49:72:06:b0:27:af:2d:a1:25: 97:a9:fa:9d:e3:11:fa:86:ca:12:76:89:52:2b:e3: a7:06:3f:cf:1d:76:7d:6b:2e:d9:d4:d7:48:ca:10: e6:ce:aa:0f:14:89:e1:af:c6:97:9b:78:11:24:fb: 32:24:c9:e5:bc:56:51:8e:7c:a7:dc:33:0f:d1:13: 15:8f:8c:42:0f:71:31:c4:08:39:07:42:61:ea:f8: 16:72:68:0c:5b:50:f3:3a:8f:85:b2:cf:b9:00:9f: e2:61:80:1a:80:da:29:39:d2:4b:31:0e:d9:d0:6c: 80:5d:ad:6e:31:54:ae:a7:97:8e:7b:84:3e:1d:33: 4b:b3:d6:d8:2a:8f:44:62:d9:4b:94:33:43:57:ad: 0c:be:0a:79:82:0a:c9:44:bd:4a:9c:68:9c:46:01: 93:30:16:54:3e:88:79:aa:e1:8c:41:8f:fb:45:4e: 23:09:9d:66:89:eb:d2:b8:80:a6:30:1d:2b:3e:47: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:02:50:AB:18:AD:EA:52:0B:15:45:24:0E:8C:E9:30:63:06:95:D8 X509v3 Authority Key Identifier: keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/UQJQqxit6lILFUUkDozpMGMGldg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.16.0/20 Signature Algorithm: sha256WithRSAEncryption 12:ca:e2:ed:a2:f5:d3:95:13:ca:df:69:7d:7d:41:0f:24:a7: d0:6b:d1:ed:4d:b4:75:a0:19:9c:c2:1e:43:1c:d1:a1:e5:51: 74:78:98:50:08:f7:34:e0:35:80:58:8a:44:ac:64:cf:6a:28: 5b:42:17:01:a5:90:b6:7d:85:7e:9b:ca:fd:c4:f1:9e:88:1f: c8:98:b0:9d:ce:56:7b:42:c8:06:1a:c8:b3:70:19:34:a1:2a: 45:a5:0d:ce:f0:03:ee:78:58:2b:47:1c:ed:a7:f6:78:d9:e6: b4:7c:17:32:d5:8f:dc:71:fc:74:e6:f6:19:62:eb:4c:87:05: 83:1c:22:0f:82:f3:7d:16:d5:6a:04:35:55:ca:a7:33:3b:ee: 07:d9:06:bc:e5:dd:71:54:55:c3:97:15:8e:2e:1d:06:20:c0: 2f:70:45:a6:54:81:5c:45:63:0f:e9:d0:2e:e4:3b:89:c9:4e: b3:d4:68:ef:95:ca:ba:1c:8a:19:a1:31:1a:b1:56:b5:2c:ea: 9a:95:c8:0d:a6:b1:62:44:5a:75:d5:08:34:34:75:d5:ad:4f: 0c:02:ef:75:b6:d5:cf:5c:0e:c6:bd:6d:9f:31:7d:c2:3a:21: 2d:08:88:09:8b:d5:7b:a8:e9:45:71:57:34:3b:c6:59:91:5b: fd:f3:0e:ea -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI0MDUyMDAz MjU0NFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNTEwMjUwQUIxOEFERUE1 MjBCMTU0NTI0MEU4Q0U5MzA2MzA2OTVEODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALkUGzuPUMLgPjQnYdCCXV22BYUp2pZQQl8HnroAnK96jHLqUcwy rPcdxqGEW/p7MGzL0igrBF/+ZOhyKBBITjvZSXIGsCevLaEll6n6neMR+obKEnaJ UivjpwY/zx12fWsu2dTXSMoQ5s6qDxSJ4a/Gl5t4EST7MiTJ5bxWUY58p9wzD9ET FY+MQg9xMcQIOQdCYer4FnJoDFtQ8zqPhbLPuQCf4mGAGoDaKTnSSzEO2dBsgF2t bjFUrqeXjnuEPh0zS7PW2CqPRGLZS5QzQ1etDL4KeYIKyUS9SpxonEYBkzAWVD6I earhjEGP+0VOIwmdZonr0riApjAdKz5HP/ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRRAlCrGK3qUgsVRSQOjOkwYwaV2DAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127 DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTAvVVFKUXF4aXQ2bElMRlVVa0RvenBNR01HbGRnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNyeEDANBgkqhkiG9w0BAQsFAAOCAQEAEsri7aL105UTyt9pfX1BDySn0GvR 7U20daAZnMIeQxzRoeVRdHiYUAj3NOA1gFiKRKxkz2ooW0IXAaWQtn2FfpvK/cTx nogfyJiwnc5We0LIBhrIs3AZNKEqRaUNzvAD7nhYK0cc7af2eNnmtHwXMtWP3HH8 dOb2GWLrTIcFgxwiD4LzfRbVagQ1VcqnMzvuB9kGvOXdcVRVw5cVji4dBiDAL3BF plSBXEVjD+nQLuQ7iclOs9Ro75XKuhyKGaExGrFWtSzqmpXIDaaxYkRaddUINDR1 1a1PDALvdbbVz1wOxr1tnzF9wjohLQiICYvVe6jpRXFXNDvGWZFb/fMO6g== -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:22 2024 by rpki-client on console-ams.rpki-client.org