$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/iVf74UYpaD1qYLLZokZuHiX2ORg.roa File: iVf74UYpaD1qYLLZokZuHiX2ORg.roa (raw, json) Hash identifier: m9jhTXyivsGkVYH3rfTgkdWpbr5vmuyz+Qz5hq6+1tw= Subject key identifier: 89:57:FB:E1:46:29:68:3D:6A:60:B2:D9:A2:46:6E:1E:25:F6:39:18 Certificate issuer: /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D Certificate serial: 47 Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/iVf74UYpaD1qYLLZokZuHiX2ORg.roa Signing time: Fri 31 May 2024 01:28:07 +0000 ROA not before: Fri 31 May 2024 01:28:07 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 4713 IP address blocks: 2400:4000::/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D Validity Not Before: May 31 01:28:07 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=8957FBE14629683D6A60B2D9A2466E1E25F63918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:6b:a4:c3:e4:12:04:46:23:9c:78:b2:0e: f0:4c:f9:59:2e:dc:a2:55:e6:96:e7:9b:2a:2b:3a: f0:ec:30:52:e5:68:84:1c:42:dc:de:d6:d7:76:3f: 95:fa:05:62:6e:1b:fd:58:ae:d2:41:d5:ca:43:64: e7:09:b6:29:1e:69:48:f9:59:c2:7b:6a:76:55:8c: 7e:61:4b:bc:33:8f:af:ea:1e:7b:ff:42:fb:05:30: 00:48:8e:db:d4:a9:54:da:16:05:2e:41:12:f2:ea: 8e:f6:98:e9:dd:6b:b9:91:4e:8e:85:ee:1f:37:3b: 6a:3f:84:61:09:59:89:64:f7:1b:e0:68:a7:11:8b: 5d:c1:48:81:2b:2d:c1:bf:81:37:88:b0:4b:e6:4d: 63:70:38:0b:c0:62:e5:ad:07:7f:7c:b1:76:6a:ee: 70:c5:bd:7f:34:47:c2:64:40:8c:99:e0:a6:f8:3f: 25:ca:cb:a2:8e:f0:77:c5:60:23:88:72:3f:b3:83: d1:de:04:0f:25:ce:8b:d3:67:ce:9b:b5:c6:9e:e5: 17:a1:c5:6f:84:cd:ba:0d:0c:d3:ee:85:41:13:47: f4:57:6f:c0:46:b6:e2:53:b5:03:62:0b:1d:e9:20: 72:5b:2c:26:01:0b:4a:80:38:b3:cd:d6:45:10:23: ae:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:57:FB:E1:46:29:68:3D:6A:60:B2:D9:A2:46:6E:1E:25:F6:39:18 X509v3 Authority Key Identifier: keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/iVf74UYpaD1qYLLZokZuHiX2ORg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:4000::/22 Signature Algorithm: sha256WithRSAEncryption 10:c3:81:e8:33:b2:bd:c7:5b:e2:f1:9f:c4:c5:e0:25:6f:91: 0a:d9:3e:3a:f8:20:02:af:59:54:5e:63:3c:12:5e:44:d5:ac: ab:9c:de:7c:5f:26:d7:11:31:ec:71:98:26:5f:c6:bd:ad:27: 7a:f0:49:a1:66:20:3b:91:ed:43:3c:f4:27:bc:39:7e:66:6a: c3:6d:22:42:c2:cc:63:cf:4a:13:d8:47:19:87:4c:79:e1:48: d5:c1:55:3b:61:f7:47:e4:5c:7d:80:28:cf:9d:73:4a:88:f1: e9:20:75:7d:c0:ea:9f:86:ca:32:d8:8f:d8:da:8c:0f:dc:38: d5:2d:92:2b:4d:bb:e4:38:46:fd:8b:a9:8e:76:17:f1:7c:f1: f8:e1:cd:6e:fe:8d:a2:d7:99:0d:18:08:01:59:f0:c0:27:e7: 3b:0c:57:67:0c:95:a2:eb:1d:66:ba:11:f1:4f:55:bd:c5:09: 31:ce:35:65:56:01:d3:b2:fc:6a:97:b4:00:1e:97:8e:e4:57: 66:f0:72:03:3b:d5:17:cb:e3:19:4f:a9:c4:99:b8:9f:f3:18: 1b:24:7e:4c:be:83:fa:43:d7:5a:84:f8:92:8e:ef:2c:86:0e: 1f:b5:44:61:0d:8e:2e:7c:28:d5:4a:3d:d8:13:5f:f6:b0:8c: 63:c3:8c:87 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0M3 QTE5ODA0RjcyOEU4RkY1RTQ1QkVDOERBNTgyMTA1QTNEQTlEMB4XDTI0MDUzMTAx MjgwN1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoODk1N0ZCRTE0NjI5Njgz RDZBNjBCMkQ5QTI0NjZFMUUyNUY2MzkxODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANSta6TD5BIERiOceLIO8Ez5WS7colXmluebKis68OwwUuVohBxC 3N7W13Y/lfoFYm4b/Viu0kHVykNk5wm2KR5pSPlZwntqdlWMfmFLvDOPr+oee/9C +wUwAEiO29SpVNoWBS5BEvLqjvaY6d1ruZFOjoXuHzc7aj+EYQlZiWT3G+BopxGL XcFIgSstwb+BN4iwS+ZNY3A4C8Bi5a0Hf3yxdmrucMW9fzRHwmRAjJngpvg/JcrL oo7wd8VgI4hyP7OD0d4EDyXOi9Nnzpu1xp7lF6HFb4TNug0M0+6FQRNH9FdvwEa2 4lO1A2ILHekgclssJgELSoA4s83WRRAjroMCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSJV/vhRiloPWpgstmiRm4eJfY5GDAfBgNVHSMEGDAWgBSzx6GYBPco6P9eRb7I 2lghBaPanTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNzMvczhlaG1BVDNLT2pfWGtXLXlOcFlJUVdqMnAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvczhlaG1BVDNLT2pfWGtXLXlOcFlJ UVdqMnAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDczL2lWZjc0VVlwYUQxcVlMTFpva1p1SGlYMk9SZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgACMAYDBAIkAEAwDQYJKoZIhvcNAQELBQADggEBABDDgegzsr3HW+Lxn8TF4CVv kQrZPjr4IAKvWVReYzwSXkTVrKuc3nxfJtcRMexxmCZfxr2tJ3rwSaFmIDuR7UM8 9Ce8OX5masNtIkLCzGPPShPYRxmHTHnhSNXBVTth90fkXH2AKM+dc0qI8ekgdX3A 6p+GyjLYj9jajA/cONUtkitNu+Q4Rv2LqY52F/F88fjhzW7+jaLXmQ0YCAFZ8MAn 5zsMV2cMlaLrHWa6EfFPVb3FCTHONWVWAdOy/GqXtAAel47kV2bwcgM71RfL4xlP qcSZuJ/zGBskfky+g/pD11qE+JKO7yyGDh+1RGENji58KNVKPdgTX/awjGPDjIc= -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org