$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39058/qVOSvWIr4rCjB0xKLCBAqxLIEfA.roa File: qVOSvWIr4rCjB0xKLCBAqxLIEfA.roa (raw, json) Hash identifier: iWmxhiB51l2Qp7yLH36gU1BIzktgcyPyMj6AHtiI0FE= Subject key identifier: A9:53:92:BD:62:2B:E2:B0:A3:07:4C:4A:2C:20:40:AB:12:C8:11:F0 Certificate issuer: /CN=3F5C5224228F98356B2CE939C6EA06012251FA3A Certificate serial: 02 Authority key identifier: 3F:5C:52:24:22:8F:98:35:6B:2C:E9:39:C6:EA:06:01:22:51:FA:3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/qVOSvWIr4rCjB0xKLCBAqxLIEfA.roa Signing time: Wed 27 Nov 2024 07:14:45 +0000 ROA not before: Wed 27 Nov 2024 07:14:45 +0000 ROA not after: Thu 27 Nov 2025 07:05:38 +0000 asID: 45679 IP address blocks: 2001:df6:a680::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F5C5224228F98356B2CE939C6EA06012251FA3A Validity Not Before: Nov 27 07:14:45 2024 GMT Not After : Nov 27 07:05:38 2025 GMT Subject: CN=A95392BD622BE2B0A3074C4A2C2040AB12C811F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:83:97:05:1e:16:6e:80:82:b6:75:86:25: 1b:7c:b8:c0:60:ad:e0:0c:2c:4c:44:0e:b7:a8:56: 78:b4:35:03:e6:e6:d9:44:19:bb:f4:3e:5a:ae:2b: 29:4e:f6:5a:3f:a6:02:67:0b:c7:d4:11:bf:ae:5b: 9b:a2:f5:02:23:bf:9d:84:3c:cb:24:da:0e:1e:ce: 9d:43:2c:1b:88:8f:a8:74:50:80:fb:14:8f:7e:79: dc:7a:c7:34:ac:cc:d3:0a:c8:92:59:06:3b:1d:6e: 59:5c:a6:d4:b1:ef:c3:39:29:d7:0b:a1:29:d5:78: 92:02:50:54:a8:97:8a:4a:01:8b:df:ab:a8:e3:e6: 04:8c:7f:75:1f:15:49:8f:09:7e:4f:75:0c:37:5f: 88:da:96:ba:e3:51:9a:93:fa:ab:f8:6e:cb:4a:9c: 3a:b1:72:9a:2f:f4:5c:fc:45:47:b6:ee:61:a2:43: 40:1c:69:82:71:55:a1:2c:9e:94:b4:cc:82:ff:9d: e3:67:8d:d8:4f:dc:16:9d:61:d1:04:19:56:3e:10: 5d:4b:68:4a:a1:4e:04:8c:0b:8d:48:50:ee:e6:9d: de:93:52:1f:4b:ab:e8:e0:44:e0:a5:8c:e0:fa:ce: d3:f4:e8:b5:4f:1e:36:db:ab:d1:5d:ab:ed:2b:84: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:53:92:BD:62:2B:E2:B0:A3:07:4C:4A:2C:20:40:AB:12:C8:11:F0 X509v3 Authority Key Identifier: keyid:3F:5C:52:24:22:8F:98:35:6B:2C:E9:39:C6:EA:06:01:22:51:FA:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/qVOSvWIr4rCjB0xKLCBAqxLIEfA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:a680::/48 Signature Algorithm: sha256WithRSAEncryption af:a2:9b:48:40:e6:d4:d6:69:73:14:bb:ac:c0:c9:96:e0:3d: 19:1a:d2:d5:2e:34:32:9a:0e:d4:e2:63:9b:d5:8f:65:61:3f: d0:b3:3b:6f:c3:27:54:e2:ee:28:a4:da:0b:da:63:2a:c7:03: 94:2c:64:cf:f6:d1:4b:74:12:4f:36:8f:90:e0:80:ca:3c:0d: a3:06:75:45:8f:27:74:54:d2:d9:38:2b:35:28:dc:15:2d:74: 58:8f:f0:55:99:f0:69:b2:36:00:8d:21:bf:45:4c:96:44:51: a9:f0:6b:5f:de:f0:da:0a:85:38:ae:01:dc:b7:48:6c:8e:e1: 0d:51:78:98:81:67:c7:3b:70:5a:cf:c1:d8:2b:00:62:c2:32: 31:34:75:ac:42:5f:84:8d:fc:04:14:50:25:66:a9:64:a2:5d: 9e:06:e3:0e:00:ea:c3:36:32:09:bc:95:47:ad:5b:1f:73:88: 76:85:1b:1e:2c:b1:df:dc:e6:d1:98:3f:fa:63:a0:9d:46:dd: 57:98:d5:7b:94:96:60:3c:fc:a9:83:3d:1a:89:e0:fc:32:13: fa:1c:8f:db:15:a3:5c:f4:6e:a7:61:46:39:70:2a:4b:24:6c: 2c:77:e1:2d:05:e1:13:e8:2d:93:9e:68:2d:c8:75:2c:75:f1: 34:b7:af:5e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjVD NTIyNDIyOEY5ODM1NkIyQ0U5MzlDNkVBMDYwMTIyNTFGQTNBMB4XDTI0MTEyNzA3 MTQ0NVoXDTI1MTEyNzA3MDUzOFowMzExMC8GA1UEAxMoQTk1MzkyQkQ2MjJCRTJC MEEzMDc0QzRBMkMyMDQwQUIxMkM4MTFGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKpxg5cFHhZugIK2dYYlG3y4wGCt4AwsTEQOt6hWeLQ1A+bm2UQZ u/Q+Wq4rKU72Wj+mAmcLx9QRv65bm6L1AiO/nYQ8yyTaDh7OnUMsG4iPqHRQgPsU j3553HrHNKzM0wrIklkGOx1uWVym1LHvwzkp1wuhKdV4kgJQVKiXikoBi9+rqOPm BIx/dR8VSY8Jfk91DDdfiNqWuuNRmpP6q/huy0qcOrFymi/0XPxFR7buYaJDQBxp gnFVoSyelLTMgv+d42eN2E/cFp1h0QQZVj4QXUtoSqFOBIwLjUhQ7uad3pNSH0ur 6OBE4KWM4PrO0/TotU8eNtur0V2r7SuE5VMCAwEAAaOCAiswggInMB0GA1UdDgQW BBSpU5K9YivisKMHTEosIECrEsgR8DAfBgNVHSMEGDAWgBQ/XFIkIo+YNWss6TnG 6gYBIlH6OjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkwNTgvUDF4U0pDS1BtRFZyTE9rNXh1b0dBU0pSLWpvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUDF4U0pDS1BtRFZyTE9rNXh1b0dB U0pSLWpvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzM5MDU4L3FWT1N2V0lyNHJDakIweEtMQ0JBcXhMSUVmQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ32poAwDQYJKoZIhvcNAQELBQADggEBAK+im0hA5tTWaXMUu6zA yZbgPRka0tUuNDKaDtTiY5vVj2VhP9CzO2/DJ1Ti7iik2gvaYyrHA5QsZM/20Ut0 Ek82j5DggMo8DaMGdUWPJ3RU0tk4KzUo3BUtdFiP8FWZ8GmyNgCNIb9FTJZEUanw a1/e8NoKhTiuAdy3SGyO4Q1ReJiBZ8c7cFrPwdgrAGLCMjE0daxCX4SN/AQUUCVm qWSiXZ4G4w4A6sM2Mgm8lUetWx9ziHaFGx4ssd/c5tGYP/pjoJ1G3VeY1XuUlmA8 /KmDPRqJ4PwyE/ocj9sVo1z0bqdhRjlwKkskbCx34S0F4RPoLZOeaC3IdSx18TS3 r14= -----END CERTIFICATE-----Generated at Sun Apr 6 05:43:28 2025 by rpki-client