$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/GSDVEKBv8nkz3NEYaYgkkQkNxsQ.roa File: GSDVEKBv8nkz3NEYaYgkkQkNxsQ.roa (raw, json) Hash identifier: JSpfgusfyYYb75zP4rdA3dUJYa3BvOb1oGPL5xIqq4I= Subject key identifier: 19:20:D5:10:A0:6F:F2:79:33:DC:D1:18:69:88:24:91:09:0D:C6:C4 Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6 Certificate serial: 38 Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/GSDVEKBv8nkz3NEYaYgkkQkNxsQ.roa Signing time: Fri 01 Dec 2023 01:29:58 +0000 ROA not before: Fri 01 Dec 2023 01:29:58 +0000 ROA not after: Thu 14 Nov 2024 01:30:03 +0000 asID: 2527 IP address blocks: 2001:3b8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jul 2024 10:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6 Validity Not Before: Dec 1 01:29:58 2023 GMT Not After : Nov 14 01:30:03 2024 GMT Subject: CN=1920D510A06FF27933DCD11869882491090DC6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:7c:16:4b:ce:f1:85:eb:b4:c7:57:c0:aa: a4:93:69:7b:69:d7:85:64:21:5c:c6:71:e3:77:90: bf:2e:65:05:2c:5d:67:58:fd:2c:30:82:9b:4a:88: f3:cd:27:a2:bf:3b:83:9c:f1:c7:04:49:75:34:13: 21:aa:9f:84:0a:d9:b9:b4:fd:2e:56:22:ed:59:a1: 01:61:fa:71:45:fe:bf:65:29:6c:ca:b0:e4:ce:ae: 66:2f:40:bd:98:82:25:4a:ad:b3:f1:a6:e3:73:73: 5c:2f:2c:fb:af:0c:76:8a:d2:74:68:fa:36:db:27: 6d:b9:13:0e:d2:c4:4d:2d:9f:77:d8:83:94:88:d0: ed:a4:8a:bc:a9:21:21:59:6e:76:46:f5:b9:87:da: 31:dd:31:0e:82:3e:b6:1e:32:8f:99:3c:96:31:e7: b3:57:01:ee:0c:fc:1d:3c:27:d1:38:b5:b7:f1:92: 38:46:b2:7d:92:e0:5d:98:84:9b:70:6a:47:29:7b: 79:2d:3a:94:08:70:0d:d7:39:e2:e1:06:80:4e:ce: 1c:25:0f:27:be:39:c0:b1:59:13:ff:98:1f:bf:c2: f1:46:a3:48:ae:f7:ac:a9:6a:59:5b:ef:c9:72:c2: 43:06:0d:b9:1c:79:fa:a0:e5:76:4e:e4:c3:39:d0: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:D5:10:A0:6F:F2:79:33:DC:D1:18:69:88:24:91:09:0D:C6:C4 X509v3 Authority Key Identifier: keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/GSDVEKBv8nkz3NEYaYgkkQkNxsQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:3b8::/32 Signature Algorithm: sha256WithRSAEncryption 4e:ab:ab:e3:93:89:8d:fc:50:77:f1:c7:21:8c:30:aa:33:81: aa:33:40:f9:7f:67:b8:d8:3b:61:36:bc:9a:69:99:75:11:3e: a5:33:c9:ed:9e:8e:4b:d8:27:7a:4b:aa:d2:e3:35:7d:0e:72: ef:3e:49:fc:ac:3f:4a:4d:be:f4:b2:59:4f:e5:5f:76:ad:d2: 86:97:73:21:c3:7a:ab:08:82:53:de:52:c6:60:99:b9:92:93: 58:69:9b:3d:e1:1d:d8:8d:9f:db:83:9e:19:76:28:f7:52:38: 9c:1b:5d:76:af:5e:71:cc:a6:50:aa:75:35:bc:1f:4b:12:21: 70:9a:56:7c:fe:da:33:a5:7b:2a:28:43:ce:d9:2a:89:74:20: 89:d7:7c:ac:dc:62:4d:3c:30:d3:1f:f5:18:ba:66:57:a0:f5: df:a0:d1:26:a3:d0:a7:25:a6:b1:b2:6a:62:c5:0a:56:57:7f: 02:d6:21:27:70:c9:ba:83:d4:62:dc:c8:b1:27:2f:9f:85:52: c0:fa:be:57:93:d1:2a:5f:a0:c9:0f:60:4e:e4:6a:16:40:40: 21:3f:e6:d9:bd:9a:b7:7c:7b:6c:8e:90:76:7a:3f:2b:30:bd: 92:ce:94:f0:42:30:85:3d:e2:79:77:c3:07:db:ac:de:3d:29: c6:41:b4:f4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFM0Q3 QzkwRTlDQzJDQThDREIxRDc0QzA1OEIxMjJCOUFFM0VGRkQ2MB4XDTIzMTIwMTAx Mjk1OFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMTkyMEQ1MTBBMDZGRjI3 OTMzRENEMTE4Njk4ODI0OTEwOTBEQzZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMHnfBZLzvGF67THV8CqpJNpe2nXhWQhXMZx43eQvy5lBSxdZ1j9 LDCCm0qI880nor87g5zxxwRJdTQTIaqfhArZubT9LlYi7VmhAWH6cUX+v2UpbMqw 5M6uZi9AvZiCJUqts/Gm43NzXC8s+68MdorSdGj6NtsnbbkTDtLETS2fd9iDlIjQ 7aSKvKkhIVludkb1uYfaMd0xDoI+th4yj5k8ljHns1cB7gz8HTwn0Ti1t/GSOEay fZLgXZiEm3BqRyl7eS06lAhwDdc54uEGgE7OHCUPJ745wLFZE/+YH7/C8UajSK73 rKlqWVvvyXLCQwYNuRx5+qDldk7kwznQYDUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQZINUQoG/yeTPc0RhpiCSRCQ3GxDAfBgNVHSMEGDAWgBTj18kOnMLKjNsddMBY sSK5rj7/1jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMzAvNDlmSkRwekN5b3piSFhUQVdMRWl1YTQtXzlZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNDlmSkRwekN5b3piSFhUQVdMRWl1 YTQtXzlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDMwL0dTRFZFS0J2OG5rejNORVlhWWdra1FrTnhzUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQO4MA0GCSqGSIb3DQEBCwUAA4IBAQBOq6vjk4mN/FB38cchjDCq M4GqM0D5f2e42DthNryaaZl1ET6lM8ntno5L2Cd6S6rS4zV9DnLvPkn8rD9KTb70 sllP5V92rdKGl3Mhw3qrCIJT3lLGYJm5kpNYaZs94R3YjZ/bg54Zdij3UjicG112 r15xzKZQqnU1vB9LEiFwmlZ8/tozpXsqKEPO2SqJdCCJ13ys3GJNPDDTH/UYumZX oPXfoNEmo9CnJaaxsmpixQpWV38C1iEncMm6g9Ri3MixJy+fhVLA+r5Xk9EqX6DJ D2BO5GoWQEAhP+bZvZq3fHtsjpB2ej8rML2SzpTwQjCFPeJ5d8MH26zePSnGQbT0 -----END CERTIFICATE-----Generated at Fri Jun 28 04:55:44 2024 by rpki-client on console-fra.rpki-client.org