$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa File: Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa (raw, json) Hash identifier: g0mZH8dRlgheszzxLiKF+5j7f5z/UbAjEFoe5b+5fbg= Subject key identifier: 2A:9D:FB:5E:41:BA:1D:A2:75:65:1D:8F:15:9D:9D:E3:6E:A9:53:B6 Certificate issuer: /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Certificate serial: 22 Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa Signing time: Sun 01 Oct 2023 01:30:05 +0000 ROA not before: Sun 01 Oct 2023 01:30:05 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 131921 IP address blocks: 2406:a1c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 06:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Validity Not Before: Oct 1 01:30:05 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=2A9DFB5E41BA1DA275651D8F159D9DE36EA953B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:fb:95:38:e9:61:00:cc:a8:35:79:20:bf: 81:fc:2b:9b:b8:7d:f6:6a:fc:0b:f2:99:bd:dc:0c: 4d:30:3f:c4:a6:1b:89:ae:bd:28:77:09:b7:40:9b: 91:43:57:b4:fb:06:64:65:8d:a8:ae:16:b6:5a:29: b9:be:12:fd:6c:de:4b:eb:a4:e9:0c:e0:37:22:86: 2d:a0:9c:e9:ef:f5:de:ae:ef:5e:d7:29:6a:e3:1a: 26:5d:63:c6:a2:2b:d4:2d:d4:e5:00:3f:6d:e4:30: 37:26:d7:47:44:df:22:b0:f9:33:1e:52:67:73:7c: 0b:a4:5d:12:d2:ec:c1:96:13:47:8d:54:cf:5c:09: 45:18:db:07:65:e4:dd:75:4a:b9:6b:79:e9:a5:87: c3:d3:bf:d0:8d:9a:35:2c:6a:84:b9:e6:6f:8c:12: a1:c3:91:15:f3:f5:fe:36:ae:3d:60:40:cc:31:db: aa:b5:62:81:2f:2a:35:f0:25:7d:b5:cb:f2:10:2e: b8:54:8f:f4:a3:ca:28:a0:ad:49:b9:93:fb:4a:5d: ed:65:b2:ab:d7:33:a2:0e:d5:1e:28:44:34:20:66: b8:74:31:f5:a0:6a:34:4c:13:cf:f5:6f:30:3f:f8: fa:51:b8:48:3b:dc:a3:7d:cd:f6:9f:86:ad:b2:6a: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9D:FB:5E:41:BA:1D:A2:75:65:1D:8F:15:9D:9D:E3:6E:A9:53:B6 X509v3 Authority Key Identifier: keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/Kp37XkG6HaJ1ZR2PFZ2d426pU7Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:a1c0:2::/48 Signature Algorithm: sha256WithRSAEncryption cb:3f:bd:c1:99:91:76:4f:34:bb:39:d4:f5:8b:a4:12:01:1e: 46:3e:e6:74:51:44:94:7c:58:a8:85:2a:04:0f:cf:3c:61:7c: f0:ca:7f:0b:c0:ec:da:16:3b:04:86:1a:33:60:cc:7b:af:9c: b4:dd:9b:c3:38:52:3d:e1:b6:04:ce:a7:2e:3b:8e:03:c6:b5: e3:be:86:65:a7:a2:33:de:87:8d:91:e1:f3:2c:a7:6e:87:36: e0:2b:90:38:49:93:4d:79:b7:5b:ab:b1:ae:c8:2d:ac:c2:c2: 53:4c:98:fa:d9:fa:db:17:ff:dd:f1:98:e3:88:e4:a9:11:33: 69:15:a1:c4:1e:ae:5c:0d:b2:f5:a3:bc:ea:1d:9f:01:51:ae: d2:79:79:88:24:b5:1b:27:89:3e:c9:e1:ff:00:fa:a5:3c:03: a0:27:12:cc:4a:39:37:6a:1f:61:39:6a:d3:4f:2b:68:dc:a5: 13:67:ff:b0:40:9a:2c:5f:c5:3b:b1:3d:84:aa:9f:16:e5:ba: 87:1d:17:50:09:40:af:06:19:25:49:b6:3e:9f:dc:d3:e1:83: 0f:ab:be:1a:8f:7d:20:f2:25:6c:74:c1:1d:4d:a5:c9:7e:e2: c6:79:40:54:3b:82:86:27:c8:8a:59:9c:b1:6e:43:2f:90:61: 31:89:ef:86 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1 QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTIzMTAwMTAx MzAwNVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMkE5REZCNUU0MUJBMURB Mjc1NjUxRDhGMTU5RDlERTM2RUE5NTNCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKs/+5U46WEAzKg1eSC/gfwrm7h99mr8C/KZvdwMTTA/xKYbia69 KHcJt0CbkUNXtPsGZGWNqK4Wtlopub4S/WzeS+uk6QzgNyKGLaCc6e/13q7vXtcp auMaJl1jxqIr1C3U5QA/beQwNybXR0TfIrD5Mx5SZ3N8C6RdEtLswZYTR41Uz1wJ RRjbB2Xk3XVKuWt56aWHw9O/0I2aNSxqhLnmb4wSocORFfP1/jauPWBAzDHbqrVi gS8qNfAlfbXL8hAuuFSP9KPKKKCtSbmT+0pd7WWyq9czog7VHihENCBmuHQx9aBq NEwTz/VvMD/4+lG4SDvco33N9p+GrbJq3QUCAwEAAaOCAiswggInMB0GA1UdDgQW BBQqnfteQbodonVlHY8VnZ3jbqlTtjAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF 37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzY3L0twMzdYa0c2SGFKMVpSMlBGWjJkNDI2cFU3WS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBqHAAAIwDQYJKoZIhvcNAQELBQADggEBAMs/vcGZkXZPNLs51PWL pBIBHkY+5nRRRJR8WKiFKgQPzzxhfPDKfwvA7NoWOwSGGjNgzHuvnLTdm8M4Uj3h tgTOpy47jgPGteO+hmWnojPeh42R4fMsp26HNuArkDhJk015t1ursa7ILazCwlNM mPrZ+tsX/93xmOOI5KkRM2kVocQerlwNsvWjvOodnwFRrtJ5eYgktRsniT7J4f8A +qU8A6AnEsxKOTdqH2E5atNPK2jcpRNn/7BAmixfxTuxPYSqnxbluocdF1AJQK8G GSVJtj6f3NPhgw+rvhqPfSDyJWx0wR1Npcl+4sZ5QFQ7goYnyIpZnLFuQy+QYTGJ 74Y= -----END CERTIFICATE-----Generated at Mon Jun 24 23:50:22 2024 by rpki-client on console-fra.rpki-client.org