$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa File: aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa (raw, json) Hash identifier: F7T3jN6ytcxpXvaPLrTVdHmG+zT8Mfa/S+t6gKKodsY= Subject key identifier: 68:2B:B3:FD:0D:24:F0:28:DB:44:CA:B6:35:BD:68:17:C0:4A:1E:E6 Certificate issuer: /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Certificate serial: 23 Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa Signing time: Fri 01 Sep 2023 01:30:40 +0000 ROA not before: Fri 01 Sep 2023 01:30:40 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 9824 IP address blocks: 2001:c30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Validity Not Before: Sep 1 01:30:40 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=682BB3FD0D24F028DB44CAB635BD6817C04A1EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:99:ba:05:5c:22:bf:be:74:44:0f:8c:04: 2b:3d:45:a4:b3:58:b8:38:1c:39:92:89:7a:38:6b: 08:8a:36:ac:d9:3e:0e:38:ff:1f:76:0c:6c:f4:ca: 01:cb:9a:3d:72:c1:8d:2c:43:d9:5a:dd:50:0d:d0: ba:83:de:6b:a9:32:5b:ba:c4:0c:b7:d5:03:d5:1b: 38:33:ee:54:93:1e:d1:54:c1:6c:e9:fb:f7:ea:a7: 3b:56:d8:c2:9e:50:c6:11:51:00:a4:5d:e1:ae:32: 1d:f5:e2:96:53:fd:8b:72:61:fd:aa:1f:38:fe:cd: 42:87:df:6e:bb:02:c9:be:bc:64:6f:89:87:f0:07: 92:89:95:c6:57:d3:72:c4:eb:15:80:cb:50:05:b1: c7:43:ce:96:ba:13:a8:54:93:97:38:7b:7f:9d:be: e7:23:19:a8:d8:63:c7:e2:06:ae:44:e8:54:37:fb: 08:e8:0b:57:86:38:99:95:39:d0:9d:46:95:dc:56: 30:86:5b:d8:2d:40:31:41:f8:71:8b:54:5c:e7:cf: 47:6a:dc:cc:2f:61:a4:e4:3d:a1:8d:4f:bf:ef:39: 3b:a9:e7:b2:27:f9:26:7b:d9:36:0c:9b:c9:2a:db: 2f:09:dc:e1:ce:22:a9:9b:e9:35:8a:c7:2d:5d:fb: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:B3:FD:0D:24:F0:28:DB:44:CA:B6:35:BD:68:17:C0:4A:1E:E6 X509v3 Authority Key Identifier: keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/aCuz_Q0k8CjbRMq2Nb1oF8BKHuY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:c30::/32 Signature Algorithm: sha256WithRSAEncryption 5f:d8:a6:f3:bb:de:be:74:01:ee:f9:0f:08:84:ae:09:e1:6f: 36:b5:61:0f:53:f0:51:03:13:3e:3c:48:11:a2:89:5f:ec:03: 80:e6:a1:ef:db:80:23:2f:32:43:f3:86:21:b4:fc:6a:b4:63: 4e:a1:dd:2f:97:15:7f:a9:1d:14:4c:c1:ef:4a:da:28:b7:6c: 2e:47:2e:fd:33:39:f3:6d:64:64:a4:88:64:09:36:11:4b:c0: 1c:b5:b7:a0:f9:ec:8e:ee:88:2b:92:ae:62:35:21:b4:e9:23: d2:9d:13:78:98:65:12:70:97:49:85:8b:26:5f:36:d8:03:b2: 69:47:cf:d4:ff:0e:43:64:77:63:ef:d5:d1:dc:d4:cb:56:b4: e5:55:71:14:95:46:23:b3:fc:c8:dd:d1:53:33:b1:47:94:cc: 91:3d:dc:31:59:b5:b6:09:88:77:93:57:6a:66:96:8d:93:bd: 5b:9a:27:52:be:70:9f:f3:89:a6:de:0f:f7:d0:27:5a:02:5c: 8f:b9:7c:a5:d7:10:4f:e4:01:a1:99:7d:e2:82:10:f2:f5:bf: 43:45:13:0a:46:09:2b:d7:0c:65:3f:2f:cc:85:50:d4:ed:bf: ae:81:0a:fc:0b:3d:4e:98:99:3b:71:0a:f4:fa:54:ff:98:2e: 88:81:e4:ee -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTIzMDkwMTAx MzA0MFoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoNjgyQkIzRkQwRDI0RjAy OERCNDRDQUI2MzVCRDY4MTdDMDRBMUVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALO0mboFXCK/vnRED4wEKz1FpLNYuDgcOZKJejhrCIo2rNk+Djj/ H3YMbPTKAcuaPXLBjSxD2VrdUA3QuoPea6kyW7rEDLfVA9UbODPuVJMe0VTBbOn7 9+qnO1bYwp5QxhFRAKRd4a4yHfXillP9i3Jh/aofOP7NQoffbrsCyb68ZG+Jh/AH komVxlfTcsTrFYDLUAWxx0POlroTqFSTlzh7f52+5yMZqNhjx+IGrkToVDf7COgL V4Y4mZU50J1GldxWMIZb2C1AMUH4cYtUXOfPR2rczC9hpOQ9oY1Pv+85O6nnsif5 JnvZNgybySrbLwnc4c4iqZvpNYrHLV37Vb0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBRoK7P9DSTwKNtEyrY1vWgXwEoe5jAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK 0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDcyL2FDdXpfUTBrOENqYlJNcTJOYjFvRjhCS0h1WS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQwwMA0GCSqGSIb3DQEBCwUAA4IBAQBf2Kbzu96+dAHu+Q8IhK4J 4W82tWEPU/BRAxM+PEgRoolf7AOA5qHv24AjLzJD84YhtPxqtGNOod0vlxV/qR0U TMHvStoot2wuRy79MznzbWRkpIhkCTYRS8Actbeg+eyO7ogrkq5iNSG06SPSnRN4 mGUScJdJhYsmXzbYA7JpR8/U/w5DZHdj79XR3NTLVrTlVXEUlUYjs/zI3dFTM7FH lMyRPdwxWbW2CYh3k1dqZpaNk71bmidSvnCf84mm3g/30CdaAlyPuXyl1xBP5AGh mX3ighDy9b9DRRMKRgkr1wxlPy/MhVDU7b+ugQr8Cz1OmJk7cQr0+lT/mC6IgeTu -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:45 2024 by rpki-client on console-ams.rpki-client.org