$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/GuKJnuKlkmnI0ZmMuD5JQ8AzXOg.roa File: GuKJnuKlkmnI0ZmMuD5JQ8AzXOg.roa (raw, json) Hash identifier: SGr5wZswpnpoczUxThmDfK4D4wIKLcXx3JlAegsGEtE= Subject key identifier: 1A:E2:89:9E:E2:A5:92:69:C8:D1:99:8C:B8:3E:49:43:C0:33:5C:E8 Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 19 Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/GuKJnuKlkmnI0ZmMuD5JQ8AzXOg.roa Signing time: Thu 25 Apr 2024 07:53:05 +0000 ROA not before: Thu 25 Apr 2024 07:53:05 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 63800 IP address blocks: 2401:d20:1020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 06:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: Apr 25 07:53:05 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=1AE2899EE2A59269C8D1998CB83E4943C0335CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:a6:cb:91:14:98:74:b1:5a:0e:28:26:51: ca:81:7b:24:15:06:e9:a1:74:71:22:02:63:3d:7b: 9e:be:a1:05:6c:18:15:4e:f1:bb:9d:51:b4:3b:57: 65:15:22:4f:1e:cd:b2:53:91:67:21:ff:73:17:d6: ed:d0:27:18:3a:b4:a8:1d:c5:07:6f:52:78:f9:d5: 76:fa:fe:e6:d6:e5:94:b1:48:6b:92:22:54:f5:91: 81:9e:53:d2:83:2b:21:72:b6:58:9e:a5:8a:52:c4: 8b:94:2b:9a:bc:96:62:8e:99:48:3a:ac:8b:52:93: 9b:50:de:0e:c1:94:f5:ee:d2:6b:0e:62:47:5f:ef: d6:b5:2f:f7:51:63:40:16:c7:ce:85:a6:6e:23:0d: cb:46:db:7f:45:b7:de:3f:4b:d1:17:63:72:58:a5: 65:5c:20:69:e5:f7:fa:89:6d:e0:f9:0a:df:68:e4: 35:46:c9:64:de:fc:3a:10:15:e6:a6:43:b5:d3:79: 3e:37:33:ab:75:06:26:85:6e:4c:90:45:d8:c0:f0: 80:df:d7:1e:cf:c5:fe:40:d4:8c:79:d3:d3:66:23: 09:f5:ba:ec:e6:55:5f:3f:fd:7b:b0:a9:ac:e9:c7: 03:b0:ce:7a:4f:ea:c5:c3:c8:dd:61:52:fc:f0:ed: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:89:9E:E2:A5:92:69:C8:D1:99:8C:B8:3E:49:43:C0:33:5C:E8 X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/GuKJnuKlkmnI0ZmMuD5JQ8AzXOg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d20:1020::/44 Signature Algorithm: sha256WithRSAEncryption 81:60:fe:f7:b0:97:75:12:f7:96:e5:8f:96:4e:f3:09:1f:bc: bf:64:e9:2a:e5:1c:99:2f:59:a6:16:4a:13:46:6e:5c:59:8e: 8e:7e:e1:a7:21:01:75:9e:dd:ed:7d:c5:a7:73:56:1f:ca:ca: 85:7a:77:6b:cc:78:9b:11:ef:d6:d0:27:18:a4:c6:45:c3:3c: f9:44:c2:d8:1b:b8:48:3d:61:43:92:6c:03:80:00:d6:1e:88: 12:e5:e0:dd:77:5c:77:ab:c4:d2:2e:af:54:11:62:d4:ad:9c: 12:c6:a6:d9:b8:a5:87:a7:07:df:3e:6a:2a:7e:ce:1f:62:e8: 97:f7:25:fb:da:f9:4f:99:d4:c3:86:88:7d:ca:02:7a:11:10: a2:ec:ca:77:4c:e8:56:75:bf:9b:be:4f:20:31:b3:f7:bc:00: 97:ed:c7:52:34:95:e9:41:dc:3b:bd:56:b0:35:8a:ac:39:46: 26:88:3e:72:83:da:b2:69:35:ee:37:9a:ca:20:e0:21:3b:ca: ff:1f:94:cd:bd:a1:72:a2:e6:0e:66:db:a7:00:b5:12:3b:6f: e5:21:9a:0a:e8:84:3e:aa:96:0d:68:c1:b8:05:53:f4:9f:54: fa:23:7a:62:7d:48:6f:82:4e:60:fe:d8:b6:ba:32:0f:83:52: 27:57:62:24 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI0MDQyNTA3 NTMwNVoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMUFFMjg5OUVFMkE1OTI2 OUM4RDE5OThDQjgzRTQ5NDNDMDMzNUNFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANohpsuRFJh0sVoOKCZRyoF7JBUG6aF0cSICYz17nr6hBWwYFU7x u51RtDtXZRUiTx7NslORZyH/cxfW7dAnGDq0qB3FB29SePnVdvr+5tbllLFIa5Ii VPWRgZ5T0oMrIXK2WJ6lilLEi5QrmryWYo6ZSDqsi1KTm1DeDsGU9e7Saw5iR1/v 1rUv91FjQBbHzoWmbiMNy0bbf0W33j9L0RdjclilZVwgaeX3+olt4PkK32jkNUbJ ZN78OhAV5qZDtdN5Pjczq3UGJoVuTJBF2MDwgN/XHs/F/kDUjHnT02YjCfW67OZV Xz/9e7CprOnHA7DOek/qxcPI3WFS/PDtswMCAwEAAaOCAiswggInMB0GA1UdDgQW BBQa4ome4qWSacjRmYy4PklDwDNc6DAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIzL0d1S0pudUtsa21uSTBabU11RDVKUThBelhPZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQkAQ0gECAwDQYJKoZIhvcNAQELBQADggEBAIFg/vewl3US95blj5ZO 8wkfvL9k6SrlHJkvWaYWShNGblxZjo5+4achAXWe3e19xadzVh/KyoV6d2vMeJsR 79bQJxikxkXDPPlEwtgbuEg9YUOSbAOAANYeiBLl4N13XHerxNIur1QRYtStnBLG ptm4pYenB98+aip+zh9i6Jf3Jfva+U+Z1MOGiH3KAnoREKLsyndM6FZ1v5u+TyAx s/e8AJftx1I0lelB3Du9VrA1iqw5RiaIPnKD2rJpNe43msog4CE7yv8flM29oXKi 5g5m26cAtRI7b+UhmgrohD6qlg1owbgFU/SfVPojemJ9SG+CTmD+2La6Mg+DUidX YiQ= -----END CERTIFICATE-----Generated at Sat Jun 22 13:59:02 2024 by rpki-client on console-fra.rpki-client.org