$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/RommgNcwEOrYuYrD89KJZD2XNgQ.roa File: RommgNcwEOrYuYrD89KJZD2XNgQ.roa (raw, json) Hash identifier: eOecmGjucH+1JGffUi1yZQu1h6ikhnyB7AdEwm3arf8= Subject key identifier: 46:89:A6:80:D7:30:10:EA:D8:B9:8A:C3:F3:D2:89:64:3D:97:36:04 Certificate issuer: /CN=E844878F21313FDD05A9C3456FFF489885DCAA65 Certificate serial: 02 Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/RommgNcwEOrYuYrD89KJZD2XNgQ.roa Signing time: Mon 06 May 2024 02:24:33 +0000 ROA not before: Mon 06 May 2024 02:24:33 +0000 ROA not after: Tue 06 May 2025 02:08:42 +0000 asID: 58645 IP address blocks: 2400:8120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jul 2024 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65 Validity Not Before: May 6 02:24:33 2024 GMT Not After : May 6 02:08:42 2025 GMT Subject: CN=4689A680D73010EAD8B98AC3F3D289643D973604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3c:fc:0b:f9:9f:26:1f:b3:0f:3b:7f:ea:fc: b6:8b:45:bb:a9:2e:c6:8c:83:87:2d:0b:97:f4:64: 4c:e0:41:46:ad:30:46:0c:5c:72:fe:51:26:75:a0: d2:d5:ac:48:f2:9b:36:87:03:a7:9e:c8:8e:a2:c1: 8c:e4:f8:40:02:5d:2c:07:b6:e9:b8:94:1c:9c:c8: 63:bc:2b:c1:13:7d:d5:cb:d4:ec:3d:d2:14:77:2a: 69:1c:1b:5b:76:ca:4f:f8:b9:ba:0b:1d:d8:55:d6: a7:84:04:91:9d:01:9d:8c:a2:ab:be:47:a3:3a:0b: 4e:33:22:7b:b3:b2:8f:63:6f:10:2e:f9:56:4a:15: f3:6f:ca:f8:3d:ab:59:00:1c:7d:06:50:de:b1:2f: 39:57:b1:00:3d:d1:5a:40:ca:80:8e:7c:f4:39:cd: 11:71:f7:61:be:74:7c:19:97:e1:11:b5:61:d9:e1: 5e:2c:12:df:2c:e8:79:e0:6d:98:b7:21:4f:0b:06: bb:a1:0b:60:31:c0:b3:3e:da:51:8f:8e:42:fc:51: 31:7d:97:3e:e7:80:5f:b0:aa:38:f3:5d:4f:f7:99: ef:84:53:ff:2b:51:e9:27:61:3e:f2:4f:f4:68:f7: 02:49:6c:38:d3:a3:1d:43:46:27:50:2f:23:ad:da: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:89:A6:80:D7:30:10:EA:D8:B9:8A:C3:F3:D2:89:64:3D:97:36:04 X509v3 Authority Key Identifier: keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/RommgNcwEOrYuYrD89KJZD2XNgQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8120::/32 Signature Algorithm: sha256WithRSAEncryption 0a:d8:d2:95:3e:9b:da:1f:88:a0:ff:a1:81:8c:cb:c7:a8:01: c1:af:c0:62:c1:52:f9:c1:7f:06:13:41:af:8a:09:24:01:25: 61:a4:cd:5b:fb:83:48:0f:5f:f3:fb:2a:26:66:e8:a3:40:ba: c5:03:5e:ae:b3:85:7e:a8:94:f1:4d:22:79:01:84:1e:35:30: 9c:d9:6b:65:ac:1a:d4:a7:63:76:a7:53:64:d9:8a:c3:eb:0c: 1c:44:51:23:2a:6c:fd:ed:d6:9c:0e:a7:1c:c7:48:61:06:39: 2a:82:a6:0f:fb:10:39:3f:9d:f8:e4:ca:25:d8:48:a9:c9:5f: c8:2f:86:d0:18:48:4b:3c:4a:a2:2d:1b:0e:f1:be:81:24:a6: 6f:46:d2:ad:be:23:1d:94:bb:0c:02:5b:70:7b:c6:e6:a6:e0: 15:22:58:fc:71:78:17:bd:82:97:95:80:21:f5:0c:d8:14:77: 64:89:62:e6:d9:f4:71:39:a2:15:09:ef:99:f0:a9:22:0b:9f: f4:8f:07:fa:e4:ec:0b:8b:2a:5e:14:36:ab:78:cb:a8:d9:e4: 2b:ef:68:a5:7b:a1:6b:f0:d2:c2:20:c5:ab:77:a0:50:c9:a3: 27:9d:4a:23:18:ed:2f:51:90:76:89:f4:44:49:92:44:db:3f: db:d6:6c:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFODQ0 ODc4RjIxMzEzRkREMDVBOUMzNDU2RkZGNDg5ODg1RENBQTY1MB4XDTI0MDUwNjAy MjQzM1oXDTI1MDUwNjAyMDg0MlowMzExMC8GA1UEAxMoNDY4OUE2ODBENzMwMTBF QUQ4Qjk4QUMzRjNEMjg5NjQzRDk3MzYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOo8/Av5nyYfsw87f+r8totFu6kuxoyDhy0Ll/RkTOBBRq0wRgxc cv5RJnWg0tWsSPKbNocDp57IjqLBjOT4QAJdLAe26biUHJzIY7wrwRN91cvU7D3S FHcqaRwbW3bKT/i5ugsd2FXWp4QEkZ0BnYyiq75HozoLTjMie7Oyj2NvEC75VkoV 82/K+D2rWQAcfQZQ3rEvOVexAD3RWkDKgI589DnNEXH3Yb50fBmX4RG1YdnhXiwS 3yzoeeBtmLchTwsGu6ELYDHAsz7aUY+OQvxRMX2XPueAX7CqOPNdT/eZ74RT/ytR 6SdhPvJP9Gj3AklsONOjHUNGJ1AvI63aUjsCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRGiaaA1zAQ6ti5isPz0olkPZc2BDAfBgNVHSMEGDAWgBToRIePITE/3QWpw0Vv /0iYhdyqZTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDMvNkVTSGp5RXhQOTBGcWNORmJfOUltSVhjcW1VLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNkVTSGp5RXhQOTBGcWNORmJfOUlt SVhjcW1VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDAzL1JvbW1nTmN3RU9yWXVZckQ4OUtKWkQyWE5nUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAIEgMA0GCSqGSIb3DQEBCwUAA4IBAQAK2NKVPpvaH4ig/6GBjMvH qAHBr8BiwVL5wX8GE0GvigkkASVhpM1b+4NID1/z+yomZuijQLrFA16us4V+qJTx TSJ5AYQeNTCc2WtlrBrUp2N2p1Nk2YrD6wwcRFEjKmz97dacDqccx0hhBjkqgqYP +xA5P5345Mol2EipyV/IL4bQGEhLPEqiLRsO8b6BJKZvRtKtviMdlLsMAltwe8bm puAVIlj8cXgXvYKXlYAh9QzYFHdkiWLm2fRxOaIVCe+Z8KkiC5/0jwf65OwLiype FDareMuo2eQr72ile6Fr8NLCIMWrd6BQyaMnnUojGO0vUZB2ifRESZJE2z/b1mw+ -----END CERTIFICATE-----Generated at Wed Jun 26 08:12:49 2024 by rpki-client on console-ams.rpki-client.org