$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30024/Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa File: Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa (raw, json) Hash identifier: XLEG1pzS4CIK1tpJCkVrOKJhx9BfORYaWN+p6NN4JcQ= Subject key identifier: 2D:B6:F8:1D:5F:FC:E6:B9:FB:1F:25:59:E2:2C:38:58:70:6B:D7:36 Certificate issuer: /CN=C704C9A0D115D26062A916A8ADD698F218E00A87 Certificate serial: 02 Authority key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa Signing time: Fri 27 Sep 2024 00:51:49 +0000 ROA not before: Fri 27 Sep 2024 00:51:49 +0000 ROA not after: Sat 27 Sep 2025 00:42:41 +0000 asID: 2907 IP address blocks: 2001:2f8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C704C9A0D115D26062A916A8ADD698F218E00A87 Validity Not Before: Sep 27 00:51:49 2024 GMT Not After : Sep 27 00:42:41 2025 GMT Subject: CN=2DB6F81D5FFCE6B9FB1F2559E22C3858706BD736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:c7:be:8f:8d:29:cc:c3:c4:a7:c2:01:d3: 2c:7d:d3:95:ef:a4:30:8a:eb:f6:ef:55:63:02:a0: a2:c7:a3:3f:c1:1f:a5:d7:82:70:16:42:c1:4c:a4: 78:e1:dc:ed:f4:29:bc:2c:ba:b7:ed:8a:b7:64:79: eb:37:83:34:cf:4e:23:a3:73:40:70:4a:95:67:6f: 3c:9e:ec:77:5a:57:95:9d:a3:26:e8:4d:12:84:75: f7:20:db:23:34:ec:a3:9b:29:d8:76:c0:2f:27:80: ff:d4:23:bc:9a:c1:77:af:84:a6:32:62:70:34:ab: a3:7f:27:69:ce:9a:8e:c1:d8:46:be:47:c8:f4:cc: b8:65:d8:74:41:f6:4a:eb:fa:7f:bf:16:d5:97:e0: ea:6d:d5:b4:d9:99:dd:8e:31:46:54:1a:14:14:68: e6:d4:c4:90:2d:31:6e:07:c0:d9:2a:5c:8e:81:c1: 2c:a6:20:e9:53:a4:f2:36:f8:f9:c1:f4:e6:00:92: 3b:d9:31:91:88:1c:ad:ce:14:f3:ea:cd:c8:b0:15: 90:5a:c7:71:3f:c7:c7:cb:07:15:22:04:76:6d:0e: d5:4d:92:4f:28:b8:cf:e4:6d:7d:6b:40:b1:e7:a9: 1a:6e:19:d0:23:92:41:35:eb:18:7e:e9:f5:d2:02: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:F8:1D:5F:FC:E6:B9:FB:1F:25:59:E2:2C:38:58:70:6B:D7:36 X509v3 Authority Key Identifier: keyid:C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2f8::/32 Signature Algorithm: sha256WithRSAEncryption 73:4c:85:3a:b0:b1:db:7a:81:ea:76:7e:46:6a:2c:fd:9b:47: c1:63:20:2b:ca:cb:1a:33:54:8c:74:ea:64:c5:2d:43:72:bc: 10:2c:b2:8d:05:92:57:4d:c3:40:76:87:77:ed:4a:97:cb:56: d4:2d:b7:08:c7:e4:4d:8c:1e:cd:62:61:13:26:81:cb:93:a0: 52:55:18:79:70:a8:a4:86:4e:ec:b4:f1:db:6d:9c:42:e4:c0: 26:4e:93:19:f1:ed:f3:63:d3:6c:ce:a2:6f:60:68:9a:a3:71: c3:e7:e9:22:e6:79:84:1e:8b:c1:0e:e5:e0:1a:47:ab:c6:7c: 17:f7:86:f5:1c:9a:90:99:73:c4:b3:71:64:bd:58:af:0c:96: 42:cb:e0:40:0a:e4:67:a4:0d:8f:98:0c:8a:ea:2d:a5:4d:cb: 57:1e:63:d6:a3:34:16:47:c4:48:f3:4f:82:db:99:09:24:a8: 54:ac:3a:33:38:d8:f4:7a:a6:38:72:c4:21:60:8c:28:bd:b9: 06:63:69:88:12:5a:70:6f:a2:73:71:0a:2e:6e:d2:b4:60:8b: 46:89:f7:5e:6d:11:9f:e3:bc:5e:dc:03:64:5c:93:a2:e8:80: 1d:da:3a:3d:82:3f:19:7d:4e:4e:90:9a:17:6d:ae:2d:91:30: a2:7d:9c:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzA0 QzlBMEQxMTVEMjYwNjJBOTE2QThBREQ2OThGMjE4RTAwQTg3MB4XDTI0MDkyNzAw NTE0OVoXDTI1MDkyNzAwNDI0MVowMzExMC8GA1UEAxMoMkRCNkY4MUQ1RkZDRTZC OUZCMUYyNTU5RTIyQzM4NTg3MDZCRDczNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM1Bx76PjSnMw8SnwgHTLH3Tle+kMIrr9u9VYwKgosejP8EfpdeC cBZCwUykeOHc7fQpvCy6t+2Kt2R56zeDNM9OI6NzQHBKlWdvPJ7sd1pXlZ2jJuhN EoR19yDbIzTso5sp2HbALyeA/9QjvJrBd6+EpjJicDSro38nac6ajsHYRr5HyPTM uGXYdEH2Suv6f78W1Zfg6m3VtNmZ3Y4xRlQaFBRo5tTEkC0xbgfA2SpcjoHBLKYg 6VOk8jb4+cH05gCSO9kxkYgcrc4U8+rNyLAVkFrHcT/Hx8sHFSIEdm0O1U2STyi4 z+RtfWtAseepGm4Z0COSQTXrGH7p9dICMzcCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQttvgdX/zmufsfJVniLDhYcGvXNjAfBgNVHSMEGDAWgBTHBMmg0RXSYGKpFqit 1pjyGOAKhzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMjQveHdUSm9ORVYwbUJpcVJhb3JkYVk4aGpnQ29jLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveHdUSm9ORVYwbUJpcVJhb3JkYVk4 aGpnQ29jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDI0L0xiYjRIVl84NXJuN0h5Vlo0aXc0V0hCcjF6WS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQL4MA0GCSqGSIb3DQEBCwUAA4IBAQBzTIU6sLHbeoHqdn5Gaiz9 m0fBYyAryssaM1SMdOpkxS1DcrwQLLKNBZJXTcNAdod37UqXy1bULbcIx+RNjB7N YmETJoHLk6BSVRh5cKikhk7stPHbbZxC5MAmTpMZ8e3zY9NszqJvYGiao3HD5+ki 5nmEHovBDuXgGkerxnwX94b1HJqQmXPEs3FkvVivDJZCy+BACuRnpA2PmAyK6i2l TctXHmPWozQWR8RI80+C25kJJKhUrDozONj0eqY4csQhYIwovbkGY2mIElpwb6Jz cQoubtK0YItGifdebRGf47xe3ANkXJOi6IAd2jo9gj8ZfU5OkJoXba4tkTCifZzx -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org