$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30059/Sm0QD66A4RQN18I7gFv6lIBm6GA.roa File: Sm0QD66A4RQN18I7gFv6lIBm6GA.roa (raw, json) Hash identifier: QCsjj1E1cfkilJfnmk9PBCEZs9PLaa+yQIBwp9L/ipc= Subject key identifier: 4A:6D:10:0F:AE:80:E1:14:0D:D7:C2:3B:80:5B:FA:94:80:66:E8:60 Certificate issuer: /CN=3FCE5741A48139453D71F293D0FBE6DC8126A421 Certificate serial: 02 Authority key identifier: 3F:CE:57:41:A4:81:39:45:3D:71:F2:93:D0:FB:E6:DC:81:26:A4:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/Sm0QD66A4RQN18I7gFv6lIBm6GA.roa Signing time: Fri 12 Apr 2024 05:57:53 +0000 ROA not before: Fri 12 Apr 2024 05:57:53 +0000 ROA not after: Sat 12 Apr 2025 05:50:06 +0000 asID: 23775 IP address blocks: 2001:f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Oct 2024 13:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCE5741A48139453D71F293D0FBE6DC8126A421 Validity Not Before: Apr 12 05:57:53 2024 GMT Not After : Apr 12 05:50:06 2025 GMT Subject: CN=4A6D100FAE80E1140DD7C23B805BFA948066E860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:3d:11:7b:2f:70:ed:fd:98:e5:3f:e2:c0: 35:d6:72:aa:b5:cd:f7:bf:cd:34:c2:69:2c:dd:61: 82:4c:ac:f6:b6:77:56:78:ec:82:7f:7a:9e:36:3d: 45:3d:92:9a:1f:26:3f:b7:37:fb:ed:6f:fc:69:08: e1:78:3b:da:91:8e:2d:b8:94:7c:6b:f2:13:3a:0a: d5:2d:dd:b6:98:80:8e:89:69:a7:24:e0:eb:be:f6: 9b:65:03:75:62:06:50:f8:71:73:2b:0e:8b:02:b0: 5c:9f:07:cb:04:37:49:aa:db:aa:56:6d:58:41:ed: bd:92:7b:94:12:4b:5a:b6:3a:d3:01:39:f6:a1:2d: 01:73:a2:3b:9e:24:16:16:ad:87:cc:71:02:b2:b3: 7b:e5:10:80:66:f8:17:48:6f:f2:80:03:8f:f0:a2: 2a:e2:58:ac:d4:5a:dd:85:fc:b2:9f:97:04:ee:1c: 09:8c:eb:d1:8a:ed:37:6a:1f:b4:9a:6c:7e:f1:b1: cf:df:85:fa:ee:eb:a5:d6:70:14:b4:2d:16:d8:0d: cc:ce:e6:f2:1e:65:96:25:65:26:5c:ea:cf:08:6e: 42:1c:e6:68:d2:3f:94:50:a9:bb:77:47:0e:49:32: 5f:11:f5:ff:8a:41:86:20:94:89:3f:8e:3d:4b:fb: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:10:0F:AE:80:E1:14:0D:D7:C2:3B:80:5B:FA:94:80:66:E8:60 X509v3 Authority Key Identifier: keyid:3F:CE:57:41:A4:81:39:45:3D:71:F2:93:D0:FB:E6:DC:81:26:A4:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/Sm0QD66A4RQN18I7gFv6lIBm6GA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:f80::/32 Signature Algorithm: sha256WithRSAEncryption dd:b2:ca:ee:a4:24:af:e2:30:f9:d0:48:b6:00:1f:06:b7:bd: d9:d1:f3:49:07:21:30:91:99:d1:24:f7:3d:d1:f1:47:bb:0d: 9c:a1:49:be:7e:a2:53:1f:4c:95:a1:e8:ac:ef:06:a1:05:a9: d6:cf:fb:2f:4b:c7:e9:8b:a9:d5:78:71:51:a8:69:de:84:c9: 3a:d3:db:31:4e:82:37:4a:6d:bf:0d:fe:41:c7:4e:68:bf:53: 66:92:0b:ee:70:10:cf:92:80:db:f0:bf:cf:68:7d:d4:8d:84: 45:48:1e:12:55:04:52:62:f3:cb:8c:ef:8b:a4:69:0a:6d:59: c5:a2:5d:84:1f:22:2c:2f:19:f6:28:1f:ca:c9:ed:7e:1e:a3: 5b:c4:8b:15:fa:3f:e2:45:69:50:f7:7e:55:88:99:8c:d1:45: bc:ab:cb:dc:c3:c9:48:42:18:dc:9b:05:ff:70:07:c8:b5:ee: 91:82:6d:e4:65:78:5d:ca:dc:be:4e:9d:91:17:9f:eb:cc:2a: 63:f9:5f:d4:48:61:40:ea:58:64:c4:ed:c8:88:d5:ff:42:50: 0c:92:b0:be:d7:86:95:c7:0c:6d:af:3d:3c:71:f5:30:6f:34: 1f:17:78:0e:84:63:09:c1:d6:01:8b:e6:62:9d:11:bd:f3:45: 29:ac:63:1f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRkNF NTc0MUE0ODEzOTQ1M0Q3MUYyOTNEMEZCRTZEQzgxMjZBNDIxMB4XDTI0MDQxMjA1 NTc1M1oXDTI1MDQxMjA1NTAwNlowMzExMC8GA1UEAxMoNEE2RDEwMEZBRTgwRTEx NDBERDdDMjNCODA1QkZBOTQ4MDY2RTg2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANDIPRF7L3Dt/ZjlP+LANdZyqrXN97/NNMJpLN1hgkys9rZ3Vnjs gn96njY9RT2Smh8mP7c3++1v/GkI4Xg72pGOLbiUfGvyEzoK1S3dtpiAjolppyTg 6772m2UDdWIGUPhxcysOiwKwXJ8HywQ3SarbqlZtWEHtvZJ7lBJLWrY60wE59qEt AXOiO54kFhath8xxArKze+UQgGb4F0hv8oADj/CiKuJYrNRa3YX8sp+XBO4cCYzr 0YrtN2oftJpsfvGxz9+F+u7rpdZwFLQtFtgNzM7m8h5lliVlJlzqzwhuQhzmaNI/ lFCpu3dHDkkyXxH1/4pBhiCUiT+OPUv7cO0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBRKbRAProDhFA3XwjuAW/qUgGboYDAfBgNVHSMEGDAWgBQ/zldBpIE5RT1x8pPQ ++bcgSakITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNTkvUDg1WFFhU0JPVVU5Y2ZLVDBQdm0zSUVtcENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUDg1WFFhU0JPVVU5Y2ZLVDBQdm0z SUVtcENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDU5L1NtMFFENjZBNFJRTjE4STdnRnY2bElCbTZHQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQ+AMA0GCSqGSIb3DQEBCwUAA4IBAQDdssrupCSv4jD50Ei2AB8G t73Z0fNJByEwkZnRJPc90fFHuw2coUm+fqJTH0yVoeis7wahBanWz/svS8fpi6nV eHFRqGnehMk609sxToI3Sm2/Df5Bx05ov1NmkgvucBDPkoDb8L/PaH3UjYRFSB4S VQRSYvPLjO+LpGkKbVnFol2EHyIsLxn2KB/Kye1+HqNbxIsV+j/iRWlQ935ViJmM 0UW8q8vcw8lIQhjcmwX/cAfIte6Rgm3kZXhdyty+Tp2RF5/rzCpj+V/USGFA6lhk xO3IiNX/QlAMkrC+14aVxwxtrz08cfUwbzQfF3gOhGMJwdYBi+ZinRG980UprGMf -----END CERTIFICATE-----Generated at Fri Sep 27 05:00:15 2024 by rpki-client on console-fra.rpki-client.org