$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/SXusXkJuc0s0k0uAZzDiV5AkLRk.roa File: SXusXkJuc0s0k0uAZzDiV5AkLRk.roa (raw, json) Hash identifier: v410YokyewlSDCMFu5ey4SyoM2TY0C4ptVT4CKMKQNQ= Subject key identifier: 49:7B:AC:5E:42:6E:73:4B:34:93:4B:80:67:30:E2:57:90:24:2D:19 Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Certificate serial: 54 Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/SXusXkJuc0s0k0uAZzDiV5AkLRk.roa Signing time: Mon 30 Sep 2024 01:29:29 +0000 ROA not before: Mon 30 Sep 2024 01:29:29 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 38639 IP address blocks: 2402:c800:cafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C Validity Not Before: Sep 30 01:29:29 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=497BAC5E426E734B34934B806730E25790242D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:be:64:ef:75:06:41:cf:10:e7:15:db:c0:d8: 56:96:e1:5f:db:ca:aa:10:4f:26:5b:bb:21:a7:5f: 72:c3:45:2f:8e:e6:77:87:a3:be:45:20:68:1d:2d: 27:1a:de:38:4d:e4:7a:15:cf:ec:e6:44:3a:ac:e4: 2c:34:13:73:f7:5c:f5:d0:d0:cd:4d:cb:a5:8e:91: da:72:34:e5:e9:a7:b3:c9:f2:9f:f0:69:59:92:22: 2a:41:6c:c1:e3:80:ee:73:e2:88:10:a8:f1:a9:75: b2:99:6a:0b:8b:66:96:2a:5e:d1:f2:02:e6:8f:67: ea:c4:88:a4:1f:d0:8d:43:89:1b:6a:13:5e:73:5c: 7a:77:a1:2e:2c:4f:bc:34:e1:94:f4:54:6e:24:24: 11:d0:8b:c2:50:c4:ff:af:61:c4:7f:c9:f0:de:df: 27:b9:d9:9a:40:5c:4b:f0:9c:c5:89:dc:2c:9c:72: ca:15:0b:e4:df:8a:73:5a:da:f7:de:b3:d9:83:2f: cf:a2:dc:3f:16:19:c2:17:ab:24:77:1e:aa:ba:0a: 36:b0:b8:58:5a:cb:8f:4b:1a:46:f4:bf:2f:2a:92: 5e:03:e6:73:4e:d7:c1:10:47:11:44:90:9e:3e:b9: 05:bd:b1:ff:bf:18:5e:85:99:b0:a6:3a:ab:04:e4: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7B:AC:5E:42:6E:73:4B:34:93:4B:80:67:30:E2:57:90:24:2D:19 X509v3 Authority Key Identifier: keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/SXusXkJuc0s0k0uAZzDiV5AkLRk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:c800:cafe::/48 Signature Algorithm: sha256WithRSAEncryption 0e:e1:e2:82:50:23:c0:e5:ca:6f:2a:5b:e4:c2:01:ba:15:7e: 2c:a5:e9:45:87:7f:69:60:42:7d:85:b4:73:a6:4a:c5:8d:04: 47:e0:6d:0c:91:0d:08:f7:1c:04:46:58:0d:c9:f5:df:9f:54: 8b:b5:7c:cd:dc:3e:8c:b7:4f:d7:a7:6a:09:8f:0e:94:66:f3: d2:fb:a7:69:27:44:67:ef:15:94:76:ba:aa:a4:58:e8:4f:12: e5:fe:d7:a7:c6:ab:01:0f:cb:31:88:5d:e2:a2:c4:2c:40:1a: 23:d2:09:9a:82:36:d3:ae:66:23:c4:71:5e:e8:98:6b:a5:95: b2:e2:98:ff:90:25:2c:7d:91:5e:19:c1:9f:9b:19:a1:14:a5: a5:7f:cb:2c:75:d3:94:fb:51:1f:00:e6:25:65:0e:16:a5:42: 1e:5e:9b:85:ce:9b:86:81:2c:7f:1e:00:d1:d4:2f:0d:5b:46: 87:26:b0:1e:c7:98:6a:aa:15:4b:3b:ab:5c:f9:b8:33:bd:56: 18:30:9d:65:b3:20:b3:c5:03:69:15:a2:00:08:ca:46:74:ca: 7e:6f:bf:1d:bd:bc:e6:74:76:a6:88:53:ae:ce:2f:ee:6e:52: 65:d9:1e:74:d8:6a:f8:de:1d:af:7c:67:c5:5b:5a:d6:5a:5a: fe:b8:c5:73 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTI0MDkzMDAx MjkyOVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNDk3QkFDNUU0MjZFNzM0 QjM0OTM0QjgwNjczMEUyNTc5MDI0MkQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPO+ZO91BkHPEOcV28DYVpbhX9vKqhBPJlu7IadfcsNFL47md4ej vkUgaB0tJxreOE3kehXP7OZEOqzkLDQTc/dc9dDQzU3LpY6R2nI05emns8nyn/Bp WZIiKkFsweOA7nPiiBCo8al1splqC4tmlipe0fIC5o9n6sSIpB/QjUOJG2oTXnNc enehLixPvDThlPRUbiQkEdCLwlDE/69hxH/J8N7fJ7nZmkBcS/CcxYncLJxyyhUL 5N+Kc1ra996z2YMvz6LcPxYZwherJHceqroKNrC4WFrLj0saRvS/LyqSXgPmc07X wRBHEUSQnj65Bb2x/78YXoWZsKY6qwTkfcUCAwEAAaOCAiswggInMB0GA1UdDgQW BBRJe6xeQm5zSzSTS4BnMOJXkCQtGTAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDkxL1NYdXNYa0p1YzBzMGswdUFaekRpVjVBa0xSay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAsgAyv4wDQYJKoZIhvcNAQELBQADggEBAA7h4oJQI8Dlym8qW+TC AboVfiyl6UWHf2lgQn2FtHOmSsWNBEfgbQyRDQj3HARGWA3J9d+fVIu1fM3cPoy3 T9enagmPDpRm89L7p2knRGfvFZR2uqqkWOhPEuX+16fGqwEPyzGIXeKixCxAGiPS CZqCNtOuZiPEcV7omGullbLimP+QJSx9kV4ZwZ+bGaEUpaV/yyx105T7UR8A5iVl DhalQh5em4XOm4aBLH8eANHULw1bRocmsB7HmGqqFUs7q1z5uDO9VhgwnWWzILPF A2kVogAIykZ0yn5vvx29vOZ0dqaIU67OL+5uUmXZHnTYavjeHa98Z8VbWtZaWv64 xXM= -----END CERTIFICATE-----Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org