$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa File: 1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa (raw, json) Hash identifier: hwHJ89xldC2ghQlkBCMU/uc5ZOyQN34wBs/+aN32qgc= Subject key identifier: D4:A6:99:8F:3E:20:27:A7:DB:66:91:8E:C3:A9:53:67:D9:1A:8C:07 Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Certificate serial: 08 Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa Signing time: Fri 01 Dec 2023 09:20:51 +0000 ROA not before: Fri 01 Dec 2023 09:20:51 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 59125 IP address blocks: 2401:4d40::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Validity Not Before: Dec 1 09:20:51 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=D4A6998F3E2027A7DB66918EC3A95367D91A8C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:18:e1:9f:17:45:ac:3f:9b:4b:ad:fd:25: ef:36:90:4d:cd:39:36:59:3e:28:6f:b4:67:f4:ec: a9:9e:1e:40:a2:e6:b1:d4:d5:86:49:2d:ac:dc:bc: 49:25:d8:de:27:a9:3d:c2:d2:1a:ec:38:aa:39:13: d0:8b:66:84:19:c9:60:26:66:4e:98:53:29:86:d7: 22:5d:68:91:f1:53:d0:1c:84:44:e8:bd:41:b4:4b: 88:7b:54:55:02:be:7f:8a:f3:06:92:4e:40:08:11: 7d:76:a2:53:44:fc:55:81:26:13:96:4b:2f:cb:2d: 74:1d:4a:17:ea:c5:2f:7e:b8:54:e6:8f:88:1f:02: ef:3c:07:9a:9a:e5:40:f9:42:16:a9:d3:e2:ab:9d: 5c:b4:c9:08:18:99:35:e6:74:0a:b7:67:50:2c:37: 1f:50:7e:47:81:f0:67:ee:12:83:30:61:b3:df:34: b1:32:36:51:3e:6c:6b:ac:8f:f1:41:3c:cb:51:79: 4e:1b:1e:f9:1c:ca:dd:47:96:30:f2:8a:3f:61:c1: ae:13:c0:02:34:c2:6a:cc:a5:f7:2c:26:bf:33:02: 7b:db:75:38:ed:a2:8c:83:dc:df:6f:f1:fa:96:08: bb:1f:61:ce:00:75:25:b6:69:b0:07:a4:cf:ef:f5: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:99:8F:3E:20:27:A7:DB:66:91:8E:C3:A9:53:67:D9:1A:8C:07 X509v3 Authority Key Identifier: keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/1KaZjz4gJ6fbZpGOw6lTZ9kajAc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:4d40::/30 Signature Algorithm: sha256WithRSAEncryption 7b:ba:21:ad:ba:45:a5:0c:c1:65:eb:43:1f:7d:da:72:9d:e0: fe:26:73:96:99:e4:9c:6f:20:ca:80:05:39:ef:5a:e2:ca:89: 23:8b:e5:6f:01:6e:6a:5e:4b:e5:e8:54:df:f3:ee:b9:b5:bc: 88:5e:1b:ee:51:4f:69:75:3c:d2:a9:56:e4:99:9e:d1:13:3d: d8:9f:62:b7:f7:68:b9:b3:5a:f3:35:d4:47:a7:c8:13:b5:73: 49:18:5b:f3:68:67:98:74:ca:ff:2e:06:7f:e2:97:f6:7d:83: b3:99:72:0b:be:77:35:30:4f:57:00:71:29:32:34:80:3b:ed: 18:ea:7e:bf:79:b5:bf:c8:c3:26:ae:8e:47:89:79:dc:b4:1e: a5:31:a0:da:9a:b0:7e:55:cd:09:77:08:db:bc:41:e8:44:51: 0e:f6:f9:7e:ef:3f:46:bf:e3:e0:00:b1:a6:24:fe:f8:27:4d: 6d:0d:48:ec:64:aa:11:d1:a1:35:59:d2:e1:b5:60:13:6f:45: c0:3b:56:1a:8a:c0:2a:51:76:02:6d:1c:49:20:1a:89:4a:d4: 1e:69:d2:1b:90:a9:3e:7d:15:ea:e8:69:db:53:70:44:66:5b: 2d:eb:b7:7d:60:55:34:d3:4d:c4:cc:e4:66:f1:18:16:13:8c: f2:e2:3e:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2 MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTIzMTIwMTA5 MjA1MVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoRDRBNjk5OEYzRTIwMjdB N0RCNjY5MThFQzNBOTUzNjdEOTFBOEMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ0yGOGfF0WsP5tLrf0l7zaQTc05Nlk+KG+0Z/TsqZ4eQKLmsdTV hkktrNy8SSXY3iepPcLSGuw4qjkT0ItmhBnJYCZmTphTKYbXIl1okfFT0ByEROi9 QbRLiHtUVQK+f4rzBpJOQAgRfXaiU0T8VYEmE5ZLL8stdB1KF+rFL364VOaPiB8C 7zwHmprlQPlCFqnT4qudXLTJCBiZNeZ0CrdnUCw3H1B+R4HwZ+4SgzBhs980sTI2 UT5sa6yP8UE8y1F5Thse+RzK3UeWMPKKP2HBrhPAAjTCasyl9ywmvzMCe9t1OO2i jIPc32/x+pYIux9hzgB1JbZpsAekz+/1pKkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTUppmPPiAnp9tmkY7DqVNn2RqMBzAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjkxLzFLYVpqejRnSjZmYlpwR093NmxUWjlrYWpBYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQIkAU1AMA0GCSqGSIb3DQEBCwUAA4IBAQB7uiGtukWlDMFl60Mffdpy neD+JnOWmeScbyDKgAU571riyokji+VvAW5qXkvl6FTf8+65tbyIXhvuUU9pdTzS qVbkmZ7REz3Yn2K392i5s1rzNdRHp8gTtXNJGFvzaGeYdMr/LgZ/4pf2fYOzmXIL vnc1ME9XAHEpMjSAO+0Y6n6/ebW/yMMmro5HiXnctB6lMaDamrB+Vc0JdwjbvEHo RFEO9vl+7z9Gv+PgALGmJP74J01tDUjsZKoR0aE1WdLhtWATb0XAO1YaisAqUXYC bRxJIBqJStQeadIbkKk+fRXq6GnbU3BEZlst67d9YFU0003EzORm8RgWE4zy4j4F -----END CERTIFICATE-----Generated at Sun Jun 30 15:03:06 2024 by rpki-client on console-fra.rpki-client.org