$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/XkNX0El5xzR07FjbNsc0g7PrxFE.roa File: XkNX0El5xzR07FjbNsc0g7PrxFE.roa (raw, json) Hash identifier: 6clNMHm24kJkD6tXfLLjW9b3u9pKnXzVwB29OaxWk2k= Subject key identifier: 5E:43:57:D0:49:79:C7:34:74:EC:58:DB:36:C7:34:83:B3:EB:C4:51 Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6 Certificate serial: 63 Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/XkNX0El5xzR07FjbNsc0g7PrxFE.roa Signing time: Wed 31 Jul 2024 01:30:52 +0000 ROA not before: Wed 31 Jul 2024 01:30:52 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 38644 IP address blocks: 2001:3a0:f006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6 Validity Not Before: Jul 31 01:30:52 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=5E4357D04979C73474EC58DB36C73483B3EBC451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:ab:c1:7c:21:9b:65:07:e7:cf:20:b5:d1: 30:2c:34:68:1b:7c:51:4c:e5:fd:82:13:a2:e2:c0: b1:2a:7e:cb:4c:e2:17:3e:b8:bb:83:ce:de:39:d7: 35:8e:44:6a:68:af:c1:93:66:d8:6c:4a:26:4a:5e: 03:ba:fe:e0:0b:49:d3:72:c0:48:2c:96:a5:20:b5: 03:3b:27:34:74:c9:6f:6c:f4:27:39:3f:2e:ae:e9: 49:0b:d0:53:64:04:94:49:72:47:22:06:24:fd:11: f7:5a:3e:eb:9b:50:91:6a:d0:5a:8b:bd:00:59:85: 40:49:0c:de:fc:a5:06:b5:72:bd:a8:74:cc:d8:0c: 40:86:02:b1:de:ba:94:65:3b:f7:8c:fe:bf:a7:1d: 7a:e9:0f:d5:db:b5:63:12:3d:a0:71:b7:b5:2a:d6: e0:0a:9f:6e:3c:07:d9:22:6c:f9:5d:77:69:d3:ac: 86:17:97:cc:6d:fc:97:97:67:81:e0:4f:ac:e4:b6: 7a:da:a7:a5:61:7a:3b:9c:d4:f7:75:c5:60:78:1d: 1e:a9:00:f7:ee:0f:ea:02:b0:c4:9d:12:61:94:a9: 15:b3:27:1d:61:51:a5:f6:9e:0a:e4:a0:72:94:76: 1a:23:14:34:c7:bc:31:20:b5:5e:03:ad:24:60:b7: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:43:57:D0:49:79:C7:34:74:EC:58:DB:36:C7:34:83:B3:EB:C4:51 X509v3 Authority Key Identifier: keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/XkNX0El5xzR07FjbNsc0g7PrxFE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:3a0:f006::/48 Signature Algorithm: sha256WithRSAEncryption 3f:8b:4e:a6:7b:3f:35:36:6f:3e:40:73:af:14:ce:ed:14:db: 10:5d:3f:69:e6:55:8f:c9:7e:52:65:73:6c:b1:d6:7f:9d:e3: 67:29:2e:48:d6:86:91:b4:f1:ae:7c:95:e1:82:7d:56:f4:c8: bc:47:50:38:2a:be:20:a6:30:d3:80:11:93:36:e7:95:80:70: 1e:25:e3:df:ab:aa:b8:f4:6c:bb:cb:ea:e5:a7:99:fd:07:a6: 64:7c:8c:93:c2:df:c4:ea:60:18:4e:94:c9:6e:12:f0:8c:07: 10:92:ca:33:bf:20:05:f2:4f:6b:ab:09:db:8c:2f:d4:b0:d6: 44:da:5e:c0:db:9c:50:af:d6:8e:f6:91:f9:3e:5e:78:88:2c: 77:88:81:0f:47:5e:a4:bc:8b:75:af:f4:29:79:fa:7e:97:4a: 12:8b:e0:b0:40:fa:60:de:e1:30:62:3b:c5:80:f8:d2:3e:54: b3:94:64:07:d7:5d:30:ab:9c:f2:72:ec:f8:12:04:2a:6c:7e: a9:06:27:be:61:f7:98:4a:08:29:59:83:8a:fb:2f:11:88:d4: ae:44:01:41:e5:ee:75:12:4d:6e:1f:03:82:21:d2:d2:c8:c4: e0:37:f9:22:f5:17:e2:87:2a:77:94:84:3f:02:e4:41:f0:78: 23:c6:8c:68 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDZC MUYzRDY0OUU1QTI1QUExMzQwQzE4QkQ2QTdDMjRDRjM2QUY2MB4XDTI0MDczMTAx MzA1MloXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNUU0MzU3RDA0OTc5Qzcz NDc0RUM1OERCMzZDNzM0ODNCM0VCQzQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMOcq8F8IZtlB+fPILXRMCw0aBt8UUzl/YITouLAsSp+y0ziFz64 u4PO3jnXNY5EamivwZNm2GxKJkpeA7r+4AtJ03LASCyWpSC1AzsnNHTJb2z0Jzk/ Lq7pSQvQU2QElElyRyIGJP0R91o+65tQkWrQWou9AFmFQEkM3vylBrVyvah0zNgM QIYCsd66lGU794z+v6cdeukP1du1YxI9oHG3tSrW4AqfbjwH2SJs+V13adOshheX zG38l5dngeBPrOS2etqnpWF6O5zU93XFYHgdHqkA9+4P6gKwxJ0SYZSpFbMnHWFR pfaeCuSgcpR2GiMUNMe8MSC1XgOtJGC3YTUCAwEAAaOCAiswggInMB0GA1UdDgQW BBReQ1fQSXnHNHTsWNs2xzSDs+vEUTAfBgNVHSMEGDAWgBQQax89ZJ5aJaoTQMGL 1qfCTPNq9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMDMvRUdzZlBXU2VXaVdxRTBEQmk5YW53a3p6YXZZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUdzZlBXU2VXaVdxRTBEQmk5YW53 a3p6YXZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDAzL1hrTlgwRWw1eHpSMDdGamJOc2MwZzdQcnhGRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQOg8AYwDQYJKoZIhvcNAQELBQADggEBAD+LTqZ7PzU2bz5Ac68U zu0U2xBdP2nmVY/JflJlc2yx1n+d42cpLkjWhpG08a58leGCfVb0yLxHUDgqviCm MNOAEZM255WAcB4l49+rqrj0bLvL6uWnmf0HpmR8jJPC38TqYBhOlMluEvCMBxCS yjO/IAXyT2urCduML9Sw1kTaXsDbnFCv1o72kfk+XniILHeIgQ9HXqS8i3Wv9Cl5 +n6XShKL4LBA+mDe4TBiO8WA+NI+VLOUZAfXXTCrnPJy7PgSBCpsfqkGJ75h95hK CClZg4r7LxGI1K5EAUHl7nUSTW4fA4Ih0tLIxOA3+SL1F+KHKneUhD8C5EHweCPG jGg= -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:36 2025 by rpki-client