$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/-FBCZU4jMyJlpFLTJmwIdrpwkCI.roa File: -FBCZU4jMyJlpFLTJmwIdrpwkCI.roa (raw, json) Hash identifier: ve+ZgocBtp33QML0oEqSj/wnluK9I6cgc/oFyG8eNXs= Subject key identifier: F8:50:42:65:4E:23:33:22:65:A4:52:D3:26:6C:08:76:BA:70:90:22 Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2 Certificate serial: 66 Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/-FBCZU4jMyJlpFLTJmwIdrpwkCI.roa Signing time: Fri 31 Jan 2025 01:32:23 +0000 ROA not before: Fri 31 Jan 2025 01:32:23 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9370 IP address blocks: 2001:e47::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2 Validity Not Before: Jan 31 01:32:23 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=F85042654E23332265A452D3266C0876BA709022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:95:69:e0:c2:26:8f:9f:b4:cc:73:a8:c0: 6f:4c:59:a0:64:88:c7:ae:ab:ed:c9:66:20:5b:28: 01:a4:e4:89:29:4c:e9:7c:d9:08:12:d3:c2:95:61: 07:55:48:d6:5e:1b:cd:c2:d0:f8:7c:4e:a2:be:74: 6c:70:f5:7a:c6:ab:95:b1:6d:98:f7:16:be:23:11: a0:60:82:07:e3:a6:91:08:0d:14:f9:b2:4c:a3:a2: c5:85:db:de:3a:a7:94:80:10:3d:c9:6b:62:94:ca: 7b:45:2e:f6:eb:48:3f:bd:40:4e:b0:d4:23:60:83: 6b:35:03:44:9f:da:70:fc:67:54:27:bd:69:2b:a6: 8b:de:b4:af:6d:ef:c7:86:ab:1b:4b:62:67:79:56: fb:e5:ac:ea:19:18:1e:b0:82:0b:6c:5a:07:30:64: 85:b5:2b:44:63:a8:40:c2:41:dc:dc:6a:86:5a:24: f9:55:1d:27:4a:1f:54:50:12:84:92:37:5b:62:79: cb:1d:0c:a3:33:27:e2:4b:78:bd:c9:00:df:01:af: 0b:f3:9c:11:32:db:95:a1:f5:c0:39:cd:f6:f9:82: 27:e8:db:7f:0b:ec:b6:b4:23:46:51:e2:b7:29:f8: 8f:76:f0:48:47:6f:07:9f:95:4c:9c:82:26:f1:c3: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:42:65:4E:23:33:22:65:A4:52:D3:26:6C:08:76:BA:70:90:22 X509v3 Authority Key Identifier: keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/-FBCZU4jMyJlpFLTJmwIdrpwkCI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:e47::/32 Signature Algorithm: sha256WithRSAEncryption 29:33:f8:47:bb:d0:6c:0f:23:b7:46:32:97:f8:6c:f3:df:df: b0:aa:74:68:06:8e:61:c3:2a:45:e8:a9:f3:11:37:1c:90:70: 6a:21:f5:de:fa:bb:cc:52:96:a0:17:f3:44:37:0d:bc:91:23: 67:35:ce:77:1d:37:9a:f7:d0:43:28:fb:95:24:8a:77:6c:20: c7:e0:b7:d8:d5:5b:06:68:b9:83:de:e4:52:cb:c8:8d:c6:4b: 05:e4:5b:f8:c7:9b:5f:24:87:e6:51:59:32:db:f7:6b:f7:69: 8f:9d:d7:3d:3a:11:f6:38:0a:b9:31:5f:70:b0:71:c0:56:cc: 8e:92:4e:05:51:a5:d2:ed:2d:c2:fb:40:79:a0:f1:bd:8f:10: f2:5c:f3:b1:6d:c3:fa:1a:e1:ee:a3:73:54:2f:ae:73:8c:ab: 89:bd:88:42:59:4b:e0:d4:46:f7:7d:0a:b6:0d:94:ae:8c:8a: 96:83:74:c0:d6:24:f9:73:4d:fa:ee:fe:1a:28:64:85:a7:93: d2:ca:a2:74:19:e8:2a:40:20:ec:5f:4d:a8:41:85:24:62:a0: 2b:be:f5:0f:9f:2a:8d:7b:98:85:71:f1:2c:34:95:97:6a:20: f1:8d:89:1b:48:98:df:84:5c:a7:b3:1c:67:f7:61:dd:f2:60: be:61:30:52 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTI1MDEzMTAx MzIyM1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRjg1MDQyNjU0RTIzMzMy MjY1QTQ1MkQzMjY2QzA4NzZCQTcwOTAyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK8jlWngwiaPn7TMc6jAb0xZoGSIx66r7clmIFsoAaTkiSlM6XzZ CBLTwpVhB1VI1l4bzcLQ+HxOor50bHD1esarlbFtmPcWviMRoGCCB+OmkQgNFPmy TKOixYXb3jqnlIAQPclrYpTKe0Uu9utIP71ATrDUI2CDazUDRJ/acPxnVCe9aSum i960r23vx4arG0tiZ3lW++Ws6hkYHrCCC2xaBzBkhbUrRGOoQMJB3Nxqhlok+VUd J0ofVFAShJI3W2J5yx0MozMn4kt4vckA3wGvC/OcETLblaH1wDnN9vmCJ+jbfwvs trQjRlHityn4j3bwSEdvB5+VTJyCJvHDc7UCAwEAAaOCAikwggIlMB0GA1UdDgQW BBT4UEJlTiMzImWkUtMmbAh2unCQIjAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ 7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDY4Ly1GQkNaVTRqTXlKbHBGTFRKbXdJZHJwd2tDSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQ5HMA0GCSqGSIb3DQEBCwUAA4IBAQApM/hHu9BsDyO3RjKX+Gzz 39+wqnRoBo5hwypF6KnzETcckHBqIfXe+rvMUpagF/NENw28kSNnNc53HTea99BD KPuVJIp3bCDH4LfY1VsGaLmD3uRSy8iNxksF5Fv4x5tfJIfmUVky2/dr92mPndc9 OhH2OAq5MV9wsHHAVsyOkk4FUaXS7S3C+0B5oPG9jxDyXPOxbcP6GuHuo3NUL65z jKuJvYhCWUvg1Eb3fQq2DZSujIqWg3TA1iT5c0367v4aKGSFp5PSyqJ0GegqQCDs X02oQYUkYqArvvUPnyqNe5iFcfEsNJWXaiDxjYkbSJjfhFynsxxn92Hd8mC+YTBS -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:50 2025 by rpki-client