$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/xU5EKKEyjJPdPqahKS3raUxHLVI.roa File: xU5EKKEyjJPdPqahKS3raUxHLVI.roa (raw, json) Hash identifier: sMnX1v4QnzBbUMLVXvjncHU5XGx10EirAZEKwSEA1+8= Subject key identifier: C5:4E:44:28:A1:32:8C:93:DD:3E:A6:A1:29:2D:EB:69:4C:47:2D:52 Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2 Certificate serial: 56 Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/xU5EKKEyjJPdPqahKS3raUxHLVI.roa Signing time: Thu 29 Feb 2024 01:31:17 +0000 ROA not before: Thu 29 Feb 2024 01:31:17 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9370 IP address blocks: 2406:ce00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2 Validity Not Before: Feb 29 01:31:17 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=C54E4428A1328C93DD3EA6A1292DEB694C472D52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:c8:17:e8:1a:a5:86:d8:75:62:59:e2:5e: fe:69:b7:e2:ce:72:bc:69:a8:a0:55:bc:a6:e4:ba: e7:bf:94:36:47:04:4b:69:16:83:45:5a:bd:45:76: 4c:0f:f4:e8:31:bc:66:99:1f:1a:7f:3b:1f:b6:17: d4:27:a6:1b:76:9f:20:8d:04:53:dd:ff:79:38:c7: 99:50:41:61:4d:91:41:a6:9e:3d:b5:7d:1e:49:69: 58:a0:2e:5d:4b:ab:da:6b:3b:a2:94:81:3a:41:40: 6a:24:10:7d:c3:99:d6:5b:c0:49:24:e4:ff:08:85: b2:39:5b:84:ce:b6:16:34:1a:02:5b:af:39:d4:be: 96:41:d0:13:c0:77:55:f1:61:63:d0:34:5f:00:87: f9:54:99:e3:e9:c5:1d:70:c2:01:fe:04:0b:34:75: c2:99:65:85:28:33:74:59:b0:83:63:fe:56:9b:47: 0c:17:b3:9d:f6:26:9f:70:f3:61:a5:06:a7:9c:e3: 76:06:ee:f6:85:69:9c:07:16:f3:2f:fa:ac:ee:20: 67:e3:89:49:7d:1a:70:0d:55:a9:d4:5f:60:8e:01: 25:ad:43:ee:0b:4f:58:66:be:d1:75:4e:34:36:ab: 63:3b:bd:d7:5c:30:4e:1b:34:92:c4:30:b1:57:73: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4E:44:28:A1:32:8C:93:DD:3E:A6:A1:29:2D:EB:69:4C:47:2D:52 X509v3 Authority Key Identifier: keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/xU5EKKEyjJPdPqahKS3raUxHLVI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:ce00::/29 Signature Algorithm: sha256WithRSAEncryption 71:76:17:d7:53:b3:a4:38:fd:89:df:fc:d7:cd:42:e7:5c:9a: b8:63:aa:0f:0b:37:a9:c2:01:20:6e:ed:a3:24:26:0b:6d:e3: dc:52:b8:ef:f9:f0:c2:8b:68:86:92:b1:78:f3:df:86:1f:cc: 45:b5:54:90:69:8e:16:8d:a1:5c:77:64:1f:18:91:7a:61:59: aa:59:a8:79:4f:51:c1:14:23:f2:23:a1:d4:81:17:37:4a:31: 1a:c2:73:2d:57:74:59:02:00:92:c3:58:c1:89:04:95:fb:99: f4:1f:80:cd:82:9a:ba:72:04:24:71:85:8f:86:ea:bf:c9:e7: e2:68:1f:71:06:77:16:1f:ce:32:ba:b5:12:9f:03:6b:ec:c7: 6a:15:bd:57:14:98:3b:35:d7:98:42:3e:ab:c4:76:0c:98:72: 19:6d:3a:20:2f:95:39:df:f0:bf:b4:80:ad:4d:f2:b5:4b:a9: a4:67:ce:3e:d2:ff:5d:19:79:d3:a0:c9:cf:04:ac:ee:7f:fc: 56:2d:ee:38:bb:d7:81:f6:45:59:5a:75:70:6e:a0:3b:b6:c3: 7b:c0:c1:75:a6:6c:56:1c:31:e6:90:28:74:11:ce:4b:ba:c8: 71:78:a3:c5:ba:78:89:ea:ae:8c:a3:ca:8e:b9:af:cc:5b:89: 89:e4:a2:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTI0MDIyOTAx MzExN1oXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQzU0RTQ0MjhBMTMyOEM5 M0REM0VBNkExMjkyREVCNjk0QzQ3MkQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALdSyBfoGqWG2HViWeJe/mm34s5yvGmooFW8puS657+UNkcES2kW g0VavUV2TA/06DG8ZpkfGn87H7YX1CemG3afII0EU93/eTjHmVBBYU2RQaaePbV9 HklpWKAuXUur2ms7opSBOkFAaiQQfcOZ1lvASSTk/wiFsjlbhM62FjQaAluvOdS+ lkHQE8B3VfFhY9A0XwCH+VSZ4+nFHXDCAf4ECzR1wpllhSgzdFmwg2P+VptHDBez nfYmn3DzYaUGp5zjdgbu9oVpnAcW8y/6rO4gZ+OJSX0acA1VqdRfYI4BJa1D7gtP WGa+0XVONDarYzu911wwThs0ksQwsVdzuXUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTFTkQooTKMk90+pqEpLetpTEctUjAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ 7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDY4L3hVNUVLS0V5akpQZFBxYWhLUzNyYVV4SExWSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQMkBs4AMA0GCSqGSIb3DQEBCwUAA4IBAQBxdhfXU7OkOP2J3/zXzULn XJq4Y6oPCzepwgEgbu2jJCYLbePcUrjv+fDCi2iGkrF489+GH8xFtVSQaY4WjaFc d2QfGJF6YVmqWah5T1HBFCPyI6HUgRc3SjEawnMtV3RZAgCSw1jBiQSV+5n0H4DN gpq6cgQkcYWPhuq/yefiaB9xBncWH84yurUSnwNr7MdqFb1XFJg7NdeYQj6rxHYM mHIZbTogL5U53/C/tICtTfK1S6mkZ84+0v9dGXnToMnPBKzuf/xWLe44u9eB9kVZ WnVwbqA7tsN7wMF1pmxWHDHmkCh0Ec5LushxeKPFuniJ6q6Mo8qOua/MW4mJ5KIl -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org