$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa File: Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa (raw, json) Hash identifier: hFugvZ+R/qNlXLr6vnnu45ENmzJ0xK80INNnvJVX+6k= Subject key identifier: 0E:ED:6C:9A:55:A4:52:A9:52:9F:3F:5A:F4:73:DD:4A:78:7F:C1:94 Certificate issuer: /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279 Certificate serial: 4E Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa Signing time: Thu 29 Feb 2024 01:29:25 +0000 ROA not before: Thu 29 Feb 2024 01:29:25 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 0 IP address blocks: 2001:7fa:0:3::/64 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279 Validity Not Before: Feb 29 01:29:25 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=0EED6C9A55A452A9529F3F5AF473DD4A787FC194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:ef:eb:b0:74:57:ca:be:2d:2f:85:03:9f: 84:85:7f:cc:a6:27:b5:5e:66:fd:5f:8d:6e:1e:12: 7c:ec:3a:e9:f3:e1:46:5b:a4:0a:80:6e:85:64:97: 02:12:20:eb:bd:d4:15:96:9a:89:23:2e:b8:cb:2d: e9:3d:81:1c:6e:e7:fc:e3:05:ce:45:69:7f:b3:9d: 1f:fe:78:24:46:d8:01:ea:76:a7:e0:58:25:f2:e1: 7f:bc:32:46:75:2e:93:a1:15:86:80:c8:1e:f2:7d: ae:24:8e:e0:fb:b0:7b:b9:2f:63:3c:e2:2a:56:5d: b0:92:1e:28:31:4e:03:4d:27:e2:93:dc:83:79:08: 03:2b:91:fb:e8:07:29:8e:66:92:9e:87:48:5c:ff: 0c:64:8b:25:82:32:13:e8:45:2a:44:3a:cb:d4:94: 5b:42:78:f4:11:f3:6b:bb:9d:ca:45:72:56:38:4b: 33:d3:c5:a8:b6:ef:f9:59:6f:2b:1e:20:b1:c5:3b: e5:06:85:1f:3f:d2:5f:7f:de:78:6f:ab:4f:80:96: 8b:bc:53:34:ae:a8:bb:45:6e:84:65:bb:de:2d:31: 2e:7e:77:34:7b:3e:03:83:1f:da:e7:08:43:4e:49: 40:d4:62:27:db:28:0e:19:e0:75:d6:ee:67:e2:53: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:6C:9A:55:A4:52:A9:52:9F:3F:5A:F4:73:DD:4A:78:7F:C1:94 X509v3 Authority Key Identifier: keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:7fa:0:3::/64 Signature Algorithm: sha256WithRSAEncryption 92:35:ad:1d:bd:cf:7f:c5:91:4a:db:8d:db:48:03:24:49:1e: 79:98:e1:1d:af:3d:f5:8c:42:cf:fc:d8:65:ad:8d:66:0a:7c: d7:60:9d:e6:a4:30:53:9b:ef:12:4d:20:fd:70:a0:ab:d2:21: 78:53:b1:e2:98:5c:a1:34:96:68:ca:4c:95:81:80:f7:a4:83: 0f:25:59:91:82:b3:13:0d:6a:42:61:c2:62:2b:39:08:fd:f1: ca:9d:cc:29:96:f0:cb:ae:b6:40:f1:45:22:ee:db:11:ed:18: 6d:8a:03:08:71:1f:f1:0a:3a:50:25:4c:bd:ef:da:dd:08:18: ce:a6:e2:55:9e:36:de:0f:76:85:4c:8f:dc:9c:d3:51:76:eb: db:22:51:fc:2a:e8:44:52:91:dd:e3:69:9d:63:0a:f7:f7:ad: 75:fe:5b:ee:74:b2:9c:6f:64:47:fa:a2:d1:f3:76:49:a6:43: b7:8d:e9:60:4c:4c:4b:63:39:69:42:f5:c4:68:e9:a3:53:83: 4a:c9:7b:ab:63:7f:51:88:d3:3a:07:02:1f:99:72:2e:60:65: c3:59:e3:c1:c6:74:b9:41:9c:d0:42:bf:30:5b:85:80:91:3e: 81:16:76:bc:18:d4:f7:7d:37:9d:b7:54:1b:bb:09:46:b2:8c: d5:a3:ff:a8 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQTZC NDlCMDc1MkFEM0JFM0RENjgzQjhBRUVBMjIwNUY1QUZEMjc5MB4XDTI0MDIyOTAx MjkyNVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMEVFRDZDOUE1NUE0NTJB OTUyOUYzRjVBRjQ3M0RENEE3ODdGQzE5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALwg7+uwdFfKvi0vhQOfhIV/zKYntV5m/V+Nbh4SfOw66fPhRluk CoBuhWSXAhIg673UFZaaiSMuuMst6T2BHG7n/OMFzkVpf7OdH/54JEbYAep2p+BY JfLhf7wyRnUuk6EVhoDIHvJ9riSO4Puwe7kvYzziKlZdsJIeKDFOA00n4pPcg3kI AyuR++gHKY5mkp6HSFz/DGSLJYIyE+hFKkQ6y9SUW0J49BHza7udykVyVjhLM9PF qLbv+VlvKx4gscU75QaFHz/SX3/eeG+rT4CWi7xTNK6ou0VuhGW73i0xLn53NHs+ A4Mf2ucIQ05JQNRiJ9soDhngddbuZ+JTqx8CAwEAAaOCAi0wggIpMB0GA1UdDgQW BBQO7WyaVaRSqVKfP1r0c91KeH/BlDAfBgNVHSMEGDAWgBTqa0mwdSrTvj3Wg7iu 6iIF9a/SeTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMDMvNm10SnNIVXEwNzQ5MW9PNHJ1b2lCZld2MG5rLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNm10SnNIVXEwNzQ5MW9PNHJ1b2lC Zld2MG5rLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDAzL0R1MXNtbFdrVXFsU256OWE5SFBkU25oX3daUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8EFTATMBEE AgACMAsDCQAgAQf6AAAAAzANBgkqhkiG9w0BAQsFAAOCAQEAkjWtHb3Pf8WRStuN 20gDJEkeeZjhHa899YxCz/zYZa2NZgp812Cd5qQwU5vvEk0g/XCgq9IheFOx4phc oTSWaMpMlYGA96SDDyVZkYKzEw1qQmHCYis5CP3xyp3MKZbwy662QPFFIu7bEe0Y bYoDCHEf8Qo6UCVMve/a3QgYzqbiVZ423g92hUyP3JzTUXbr2yJR/CroRFKR3eNp nWMK9/etdf5b7nSynG9kR/qi0fN2SaZDt43pYExMS2M5aUL1xGjpo1ODSsl7q2N/ UYjTOgcCH5lyLmBlw1njwcZ0uUGc0EK/MFuFgJE+gRZ2vBjU9303nbdUG7sJRrKM 1aP/qA== -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:51 2024 by rpki-client on console-ams.rpki-client.org