$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/_T-aPsJK5Hyx2MNvGbtPP-izxEA.roa File: _T-aPsJK5Hyx2MNvGbtPP-izxEA.roa (raw, json) Hash identifier: wWgMMO00g36buoPJiTqBR9V+Hqgtgv/l9q1IvjVQRxk= Subject key identifier: FD:3F:9A:3E:C2:4A:E4:7C:B1:D8:C3:6F:19:BB:4F:3F:E8:B3:C4:40 Certificate issuer: /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF Certificate serial: 2B Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/_T-aPsJK5Hyx2MNvGbtPP-izxEA.roa Signing time: Wed 31 Jul 2024 01:29:24 +0000 ROA not before: Wed 31 Jul 2024 01:29:24 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 9617 IP address blocks: 2400:3800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF Validity Not Before: Jul 31 01:29:24 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=FD3F9A3EC24AE47CB1D8C36F19BB4F3FE8B3C440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:6c:81:e0:5e:13:ab:af:22:8a:73:12:07: cc:2f:c1:b4:18:ae:16:69:ed:85:09:ac:31:66:01: 16:4a:5f:5e:65:cb:c2:ff:5a:c4:f8:24:dd:ed:db: f4:96:71:98:69:2b:cc:b9:7b:ba:ea:b1:45:67:16: 8c:46:07:e8:63:44:a5:a6:91:37:0e:e3:b5:cd:79: 7c:5a:88:f1:10:7e:cc:a8:cd:55:4b:75:ba:bb:db: ea:94:52:2b:e9:fd:0e:cd:8c:d1:0c:03:0a:79:7e: 86:fd:2b:c0:57:78:0e:04:47:50:7d:2e:78:85:e3: b3:a2:d0:84:91:af:03:54:33:cc:bd:84:95:0d:ae: 1a:9d:f4:0e:17:84:34:e2:97:b1:d3:a4:c7:e0:d0: 92:e0:28:78:cf:10:80:ca:10:0f:f3:e0:1e:46:20: 8f:55:33:78:fe:d4:b1:db:0c:72:08:53:17:40:10: ed:c0:d2:e8:f2:f5:c2:52:da:37:23:85:d8:eb:15: a7:47:01:27:01:b6:17:44:29:02:47:04:5b:46:11: cd:b5:88:e3:ba:70:a2:fa:b7:78:f2:e3:27:a4:97: ef:66:a6:19:ff:00:e5:7a:77:80:0d:fd:b5:11:10: 0e:21:a0:89:f7:cc:11:24:a6:e3:d5:4b:51:64:b1: 82:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3F:9A:3E:C2:4A:E4:7C:B1:D8:C3:6F:19:BB:4F:3F:E8:B3:C4:40 X509v3 Authority Key Identifier: keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/_T-aPsJK5Hyx2MNvGbtPP-izxEA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:3800::/32 Signature Algorithm: sha256WithRSAEncryption 71:84:7c:1e:cf:4e:c8:74:39:50:ee:f2:01:bf:4a:13:54:49: 12:4d:80:4b:e7:4a:03:55:e2:f4:f0:04:5d:0b:52:4f:20:3d: 70:d5:64:f8:50:f3:58:7f:e0:2a:53:12:43:e8:ca:5d:db:3e: f7:6d:68:72:40:1d:0e:22:2e:54:ef:39:f7:82:8f:e1:54:f2: 6a:0c:db:06:e5:0b:0d:89:72:ef:09:95:6b:29:9b:40:d6:96: 18:55:8a:1b:0b:a1:df:f9:eb:37:e4:31:f4:c1:43:d0:63:52: 90:61:27:0b:de:21:fe:1c:ad:5d:77:da:d8:42:e2:1a:2a:66: da:a0:34:1c:9f:8a:df:5e:9e:f1:ee:64:dd:71:66:10:d6:e4: f6:98:42:16:74:09:e0:24:e8:87:7a:53:a4:65:23:71:35:55: e5:74:96:7c:d4:fb:55:54:b4:3c:0d:95:07:47:0a:36:34:0b: 06:10:3e:76:b4:16:0e:ac:56:e6:9a:5f:78:9b:1d:3b:bf:4c: 82:49:b1:cf:2b:f3:fc:33:42:c2:a5:e9:b7:76:00:a8:21:bf: ff:bb:2f:60:62:10:09:8f:60:da:d1:31:13:a6:64:ae:d4:d3: 82:01:a5:50:ae:c6:ba:7f:9d:d5:8c:b7:d9:4a:63:99:f4:4c: ed:70:fe:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUNF MDk1OTJDOURBNjFDQzAzQzNEMzI0QTdDNkNBQzQ3NzdDQ0NGMB4XDTI0MDczMTAx MjkyNFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRkQzRjlBM0VDMjRBRTQ3 Q0IxRDhDMzZGMTlCQjRGM0ZFOEIzQzQ0MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALp9bIHgXhOrryKKcxIHzC/BtBiuFmnthQmsMWYBFkpfXmXLwv9a xPgk3e3b9JZxmGkrzLl7uuqxRWcWjEYH6GNEpaaRNw7jtc15fFqI8RB+zKjNVUt1 urvb6pRSK+n9Ds2M0QwDCnl+hv0rwFd4DgRHUH0ueIXjs6LQhJGvA1QzzL2ElQ2u Gp30DheENOKXsdOkx+DQkuAoeM8QgMoQD/PgHkYgj1UzeP7UsdsMcghTF0AQ7cDS 6PL1wlLaNyOF2OsVp0cBJwG2F0QpAkcEW0YRzbWI47pwovq3ePLjJ6SX72amGf8A 5Xp3gA39tREQDiGgiffMESSm49VLUWSxgpUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBT9P5o+wkrkfLHYw28Zu08/6LPEQDAfBgNVHSMEGDAWgBQ5zglZLJ2mHMA8PTJK fGysR3fMzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMDIvT2M0SldTeWRwaHpBUEQweVNueHNyRWQzek04LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT2M0SldTeWRwaHpBUEQweVNueHNy RWQzek04LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTAyL19ULWFQc0pLNUh5eDJNTnZHYnRQUC1penhFQS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkADgAMA0GCSqGSIb3DQEBCwUAA4IBAQBxhHwez07IdDlQ7vIBv0oT VEkSTYBL50oDVeL08ARdC1JPID1w1WT4UPNYf+AqUxJD6Mpd2z73bWhyQB0OIi5U 7zn3go/hVPJqDNsG5QsNiXLvCZVrKZtA1pYYVYobC6Hf+es35DH0wUPQY1KQYScL 3iH+HK1dd9rYQuIaKmbaoDQcn4rfXp7x7mTdcWYQ1uT2mEIWdAngJOiHelOkZSNx NVXldJZ81PtVVLQ8DZUHRwo2NAsGED52tBYOrFbmml94mx07v0yCSbHPK/P8M0LC pem3dgCoIb//uy9gYhAJj2Da0TETpmSu1NOCAaVQrsa6f53VjLfZSmOZ9EztcP6S -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:33 2024 by rpki-client on console-ams.rpki-client.org