$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qLhIz1SRo-xG1kqLY-KWMcnFDHU.roa File: qLhIz1SRo-xG1kqLY-KWMcnFDHU.roa (raw, json) Hash identifier: BGaFK8D7CiuJsa91FZ04xBb4twS5AiJOeJ4AJpXI1ac= Subject key identifier: A8:B8:48:CF:54:91:A3:EC:46:D6:4A:8B:63:E2:96:31:C9:C5:0C:75 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 32 Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qLhIz1SRo-xG1kqLY-KWMcnFDHU.roa Signing time: Tue 01 Aug 2023 01:28:05 +0000 ROA not before: Tue 01 Aug 2023 01:28:05 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 2515 IP address blocks: 211.120.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jul 2024 02:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Aug 1 01:28:05 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=A8B848CF5491A3EC46D64A8B63E29631C9C50C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:c6:ce:15:c7:cf:21:54:44:54:41:9e:be: 31:5f:67:89:b8:c0:e3:da:94:25:0e:4b:c6:8d:05: e9:d2:94:49:3c:9f:d4:b2:39:91:cf:80:61:0c:4e: 6f:18:f9:51:ca:62:ca:c9:3e:c2:a3:8f:ad:d7:64: 81:45:4d:74:c9:cd:e0:27:c9:04:1e:51:3b:50:fb: 31:51:06:96:37:36:67:fc:f3:82:96:db:94:8d:86: 5a:a4:14:b9:a1:73:29:94:d0:93:6a:c2:c7:b8:bb: c3:81:2a:26:82:97:1f:6b:3c:0f:45:ed:3b:64:31: 0e:be:78:9f:ef:0d:2d:9e:37:48:5a:27:ac:f1:8d: 43:44:c5:85:60:cf:e3:30:93:54:d6:b4:b6:0c:c1: b1:c3:51:b4:6d:99:89:b7:db:72:5e:1d:c0:4a:74: ef:ff:32:6a:4a:e6:5d:96:19:ae:e2:68:73:85:f3: 23:2f:e5:0e:75:fa:c8:9a:21:14:5c:4c:08:c9:0f: 0f:19:15:56:b9:ca:00:75:26:87:ef:84:82:b6:18: 46:c7:87:f1:a1:27:25:cd:aa:2d:a8:9f:b0:92:54: bf:aa:0c:89:7b:9e:fc:57:02:51:3c:a0:42:a2:58: 58:e6:02:4c:13:fb:05:15:9f:23:e3:21:17:e1:72: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B8:48:CF:54:91:A3:EC:46:D6:4A:8B:63:E2:96:31:C9:C5:0C:75 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qLhIz1SRo-xG1kqLY-KWMcnFDHU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.240.0/21 Signature Algorithm: sha256WithRSAEncryption be:bc:ae:4d:2b:42:92:92:27:27:9e:ce:c1:d8:e8:b4:1d:f6: de:b9:72:c0:a4:4e:0e:7a:a2:ad:29:32:bb:f0:8b:55:c6:33: c8:9a:b5:7d:11:b0:43:20:91:80:2b:80:58:0d:2a:54:d1:c3: 57:5d:c8:04:c2:85:02:ca:4f:70:00:d0:d1:7e:96:56:4f:f6: f4:98:9f:03:be:b0:ac:1d:5a:5a:d7:b6:83:2e:58:32:b6:24: cd:3b:5c:f4:c6:ee:91:00:e5:1c:cc:9e:a5:0b:d3:4d:0f:65: bd:ef:ab:ae:2d:2a:2c:cd:e1:67:cd:7b:0a:38:c8:95:1d:6a: 58:6b:ea:c6:bf:00:ed:3d:e0:a9:de:33:1c:fb:9c:20:63:0a: 2c:e6:74:d0:ff:7a:50:75:d0:50:f1:15:65:dc:37:94:65:b8: 90:98:e5:18:d2:16:f8:a8:aa:46:36:a9:e8:de:8e:b3:d4:77: dd:d5:83:cd:d6:1c:43:a4:8c:2a:80:25:d8:61:02:61:38:03: 37:fd:f2:2d:a4:05:be:6a:10:e0:5b:00:cd:e9:55:89:a2:e2: ba:a0:b1:5b:40:35:38:d6:f6:86:b8:42:7d:4e:67:e4:54:c8: 07:b9:a2:17:7e:d2:6a:81:d3:53:5d:0b:c1:19:0f:5b:15:b9: 7b:09:a2:d7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTIzMDgwMTAx MjgwNVoXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoQThCODQ4Q0Y1NDkxQTNF QzQ2RDY0QThCNjNFMjk2MzFDOUM1MEM3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALvyxs4Vx88hVERUQZ6+MV9nibjA49qUJQ5Lxo0F6dKUSTyf1LI5 kc+AYQxObxj5Ucpiysk+wqOPrddkgUVNdMnN4CfJBB5RO1D7MVEGljc2Z/zzgpbb lI2GWqQUuaFzKZTQk2rCx7i7w4EqJoKXH2s8D0XtO2QxDr54n+8NLZ43SFonrPGN Q0TFhWDP4zCTVNa0tgzBscNRtG2Zibfbcl4dwEp07/8yakrmXZYZruJoc4XzIy/l DnX6yJohFFxMCMkPDxkVVrnKAHUmh++EgrYYRseH8aEnJc2qLaifsJJUv6oMiXue /FcCUTygQqJYWOYCTBP7BRWfI+MhF+FyLD0CAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSouEjPVJGj7EbWSotj4pYxycUMdTAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny9xTGhJejFTUm8teEcxa3FMWS1LV01jbkZESFUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQD03jwMA0GCSqGSIb3DQEBCwUAA4IBAQC+vK5NK0KSkicnns7B2Oi0Hfbe uXLApE4OeqKtKTK78ItVxjPImrV9EbBDIJGAK4BYDSpU0cNXXcgEwoUCyk9wANDR fpZWT/b0mJ8DvrCsHVpa17aDLlgytiTNO1z0xu6RAOUczJ6lC9NND2W976uuLSos zeFnzXsKOMiVHWpYa+rGvwDtPeCp3jMc+5wgYwos5nTQ/3pQddBQ8RVl3DeUZbiQ mOUY0hb4qKpGNqno3o6z1Hfd1YPN1hxDpIwqgCXYYQJhOAM3/fItpAW+ahDgWwDN 6VWJouK6oLFbQDU41vaGuEJ9TmfkVMgHuaIXftJqgdNTXQvBGQ9bFbl7CaLX -----END CERTIFICATE-----Generated at Fri Jun 28 05:29:06 2024 by rpki-client on console-ams.rpki-client.org