$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30152/oEVmMOuAlusZCkg-4K7U9OHiurw.roa File: oEVmMOuAlusZCkg-4K7U9OHiurw.roa (raw, json) Hash identifier: 2yTldoaCdlS/3fkGIcSPvSUTq4QasXDnJPxBbmCbWDE= Subject key identifier: A0:45:66:30:EB:80:96:EB:19:0A:48:3E:E0:AE:D4:F4:E1:E2:BA:BC Certificate issuer: /CN=32A9405644783B786C8DDF2454BB5BDF511983B4 Certificate serial: 02 Authority key identifier: 32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/oEVmMOuAlusZCkg-4K7U9OHiurw.roa Signing time: Fri 01 Sep 2023 05:51:59 +0000 ROA not before: Fri 01 Sep 2023 05:51:59 +0000 ROA not after: Sat 31 Aug 2024 05:43:56 +0000 asID: 18121 IP address blocks: 2404:a00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A9405644783B786C8DDF2454BB5BDF511983B4 Validity Not Before: Sep 1 05:51:59 2023 GMT Not After : Aug 31 05:43:56 2024 GMT Subject: CN=A0456630EB8096EB190A483EE0AED4F4E1E2BABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:de:bb:fe:98:cc:b8:46:94:64:40:55:57: 2f:56:93:cd:4d:bc:fd:53:a4:c6:b9:e3:d4:f1:2a: fe:6e:82:55:34:f6:80:33:c4:a0:53:5f:de:d6:fb: 01:cb:a4:56:f7:5a:f2:a5:35:4c:e3:0c:65:71:0c: a7:0e:9a:58:f4:8e:2a:9b:5d:25:2e:78:38:e9:fc: fd:42:4d:4f:a2:6d:42:1a:79:17:89:73:ae:af:7f: a8:cf:05:30:2c:e8:de:ba:ee:fb:41:b2:ef:65:88: 79:cd:61:82:40:c6:13:be:e2:cb:0e:e1:2e:71:d7: e8:4c:ea:49:94:04:b0:c0:2b:c0:f1:4a:a5:96:45: 31:d4:15:54:65:4c:0c:3d:9d:1a:e1:0f:ca:a5:df: db:d3:76:cb:09:b3:58:60:89:f6:57:7d:bc:60:0b: 63:ad:c6:2e:7a:b1:cd:4f:1a:96:c1:15:5b:10:89: b6:de:7d:9d:70:2f:25:c1:2f:70:1b:e8:7b:19:2b: 2d:44:6e:6a:71:e1:63:bb:1d:33:e9:7d:28:d9:9f: 70:1e:d1:7b:88:a5:eb:ff:76:94:4f:5f:96:5a:1b: 51:96:76:c3:b9:22:3d:c8:90:c8:7c:c4:d7:d1:e2: 8c:fc:e4:77:36:44:33:93:9b:c8:1c:fe:fb:37:8a: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:45:66:30:EB:80:96:EB:19:0A:48:3E:E0:AE:D4:F4:E1:E2:BA:BC X509v3 Authority Key Identifier: keyid:32:A9:40:56:44:78:3B:78:6C:8D:DF:24:54:BB:5B:DF:51:19:83:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/MqlAVkR4O3hsjd8kVLtb31EZg7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MqlAVkR4O3hsjd8kVLtb31EZg7Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30152/oEVmMOuAlusZCkg-4K7U9OHiurw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:a00::/32 Signature Algorithm: sha256WithRSAEncryption 81:63:73:d2:72:9c:11:3f:01:8e:b2:31:27:66:cc:68:84:c4: e5:f1:fc:c4:3f:c6:f2:23:0a:13:44:38:46:20:9e:85:3d:1c: dd:ef:ec:d3:8f:1b:1b:fe:c3:b9:96:48:5c:01:2e:a6:31:c4: 6e:27:0f:6b:0a:80:82:f9:52:eb:2f:47:f8:1e:2c:8d:d2:45: 83:4f:53:0c:e5:36:80:82:09:60:a2:60:2b:40:e9:2e:70:b3: 6b:95:39:83:22:9f:7f:84:23:26:96:35:4d:32:a0:a4:36:e2: 64:ab:63:76:b2:13:fd:35:82:a1:e0:e6:55:5a:93:10:3e:19: c9:2f:79:d9:4d:50:b2:55:73:0f:a5:cc:b0:52:11:55:a7:89: 8a:ac:77:dc:fb:e6:cd:34:6c:a0:d1:ae:09:15:5f:12:aa:e6: e0:c2:8a:84:ab:2f:a5:8a:15:4b:23:c7:3e:bd:3e:b1:a0:83: 01:51:b5:2c:8c:61:d5:5a:c7:de:99:35:c9:c6:55:25:e9:19: 76:0b:f1:59:8e:2d:1f:e6:48:3b:a5:d4:30:27:05:c5:a2:59: 43:5f:28:28:55:18:4b:d0:48:e5:34:5d:0b:72:a8:ea:fb:fb: 6b:27:6c:59:42:42:a4:05:de:1b:ca:40:56:4b:79:da:b1:d5: c2:41:28:d6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMkE5 NDA1NjQ0NzgzQjc4NkM4RERGMjQ1NEJCNUJERjUxMTk4M0I0MB4XDTIzMDkwMTA1 NTE1OVoXDTI0MDgzMTA1NDM1NlowMzExMC8GA1UEAxMoQTA0NTY2MzBFQjgwOTZF QjE5MEE0ODNFRTBBRUQ0RjRFMUUyQkFCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALWe3rv+mMy4RpRkQFVXL1aTzU28/VOkxrnj1PEq/m6CVTT2gDPE oFNf3tb7AcukVvda8qU1TOMMZXEMpw6aWPSOKptdJS54OOn8/UJNT6JtQhp5F4lz rq9/qM8FMCzo3rru+0Gy72WIec1hgkDGE77iyw7hLnHX6EzqSZQEsMArwPFKpZZF MdQVVGVMDD2dGuEPyqXf29N2ywmzWGCJ9ld9vGALY63GLnqxzU8alsEVWxCJtt59 nXAvJcEvcBvoexkrLURuanHhY7sdM+l9KNmfcB7Re4il6/92lE9fllobUZZ2w7ki PciQyHzE19HijPzkdzZEM5ObyBz++zeKcHECAwEAAaOCAikwggIlMB0GA1UdDgQW BBSgRWYw64CW6xkKSD7grtT04eK6vDAfBgNVHSMEGDAWgBQyqUBWRHg7eGyN3yRU u1vfURmDtDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNTIvTXFsQVZrUjRPM2hzamQ4a1ZMdGIzMUVaZzdRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTXFsQVZrUjRPM2hzamQ4a1ZMdGIz MUVaZzdRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTUyL29FVm1NT3VBbHVzWkNrZy00SzdVOU9IaXVydy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBAoAMA0GCSqGSIb3DQEBCwUAA4IBAQCBY3PScpwRPwGOsjEnZsxo hMTl8fzEP8byIwoTRDhGIJ6FPRzd7+zTjxsb/sO5lkhcAS6mMcRuJw9rCoCC+VLr L0f4HiyN0kWDT1MM5TaAgglgomArQOkucLNrlTmDIp9/hCMmljVNMqCkNuJkq2N2 shP9NYKh4OZVWpMQPhnJL3nZTVCyVXMPpcywUhFVp4mKrHfc++bNNGyg0a4JFV8S qubgwoqEqy+lihVLI8c+vT6xoIMBUbUsjGHVWsfemTXJxlUl6Rl2C/FZji0f5kg7 pdQwJwXFollDXygoVRhL0EjlNF0Lcqjq+/trJ2xZQkKkBd4bykBWS3nasdXCQSjW -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:22 2024 by rpki-client on console-fra.rpki-client.org