$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1-8z9FO_jdI4yR4Lol5TOLfyJCM.roa File: 1-8z9FO_jdI4yR4Lol5TOLfyJCM.roa (raw, json) Hash identifier: a9FCLGMU0E/8Zvpk80I3FyZDLwmZyfI/z8oM7a7YN+k= Subject key identifier: D7:EF:33:F4:53:BF:8D:D2:38:C9:1E:0B:A2:5E:53:38:B7:F2:24:23 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0256 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1-8z9FO_jdI4yR4Lol5TOLfyJCM.roa Signing time: Thu 27 Jul 2023 17:23:35 +0000 ROA not before: Thu 27 Jul 2023 17:23:35 +0000 ROA not after: Sun 14 Jul 2024 01:30:03 +0000 asID: 9605 IP address blocks: 240a:0:280::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 22:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Jul 27 17:23:35 2023 GMT Not After : Jul 14 01:30:03 2024 GMT Subject: CN=D7EF33F453BF8DD238C91E0BA25E5338B7F22423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:09:82:bc:2b:14:de:04:23:76:19:79:52: 0c:59:d6:22:cd:94:bd:28:fa:cd:7e:0a:d4:10:2d: 60:ee:7c:03:16:de:1a:0e:7d:12:eb:cf:04:e2:90: b3:25:0e:f7:76:9c:d9:d6:a6:d5:a5:ac:75:97:56: e8:29:3f:fe:56:ae:4e:0c:9a:9c:8f:57:cb:a5:15: f0:28:9c:3e:f4:6b:42:cf:2f:9a:b8:d5:36:b6:e7: b3:ae:23:df:49:85:24:a7:94:d4:91:df:f4:44:5a: 27:69:6b:6d:42:d0:73:6d:46:5e:11:b6:e1:02:86: 99:bd:9d:e7:de:b7:11:62:b4:89:5c:f1:34:67:1f: 83:df:79:b6:e1:0e:d7:4c:05:c7:3c:73:a6:2d:1f: 4f:f9:6b:ce:e3:2c:9a:90:fc:af:e4:f7:37:48:48: ad:0c:69:0c:7b:2f:ba:36:14:f0:c9:72:46:3e:99: 38:2c:f5:e3:32:d0:23:b1:82:7e:04:e0:bf:f2:e6: ca:80:d7:d7:03:8a:17:88:4a:8e:9c:d4:7c:a4:b8: ac:4f:b5:68:36:0c:67:f0:61:0e:2b:d8:35:c4:31: 57:46:94:1b:d4:81:18:0b:4b:ae:34:53:cb:33:02: 2d:9f:72:1f:4b:01:fe:14:5c:26:ab:ea:3e:71:e2: 06:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EF:33:F4:53:BF:8D:D2:38:C9:1E:0B:A2:5E:53:38:B7:F2:24:23 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1-8z9FO_jdI4yR4Lol5TOLfyJCM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:0:280::/41 Signature Algorithm: sha256WithRSAEncryption 91:11:fe:ae:5d:ce:22:50:11:22:13:ad:39:11:ee:3c:e7:aa: dc:97:02:ea:33:2c:7f:f9:50:c5:77:3f:e1:38:93:77:e9:e9: 29:5b:d5:d9:21:1f:8b:d7:1f:59:b4:38:6a:50:41:71:90:ce: 6c:a7:c8:7c:46:ca:93:53:b4:f0:d2:53:18:0c:61:88:be:5f: f0:bb:7f:01:86:ad:6a:f3:9a:ad:62:75:26:b0:4b:39:a3:d9: 22:94:df:40:72:3a:be:76:b4:34:b3:c6:33:8d:0f:27:22:d8: 1e:04:b7:cc:b3:0f:bc:d9:d2:28:53:fd:2f:fd:09:b1:da:86: de:b0:74:18:1e:a3:a4:66:42:0a:70:a8:3d:f0:fa:fa:9f:01: ab:1b:e4:20:b2:a2:0f:5d:af:82:47:d1:88:60:58:8f:ef:db: 95:02:e2:a0:ea:bf:5b:5d:66:b8:c3:a7:ba:f2:8e:21:6a:8c: 4e:fd:91:fd:9b:ed:87:8e:28:62:fd:69:25:c3:91:3c:b0:1b: 3d:b9:f7:7e:e8:ed:23:49:4f:d6:a3:ee:0b:ba:4f:e0:63:ba: 38:2c:a8:1a:d2:30:f8:98:14:55:ef:81:e2:b2:91:54:e5:56: c1:af:87:b5:8a:95:cc:f6:80:db:05:43:7f:e6:4b:5e:ca:3d: 6f:4d:ec:a1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA3Mjcx NzIzMzVaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ3RUYzM0Y0NTNCRjhE RDIzOEM5MUUwQkEyNUU1MzM4QjdGMjI0MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCY4QmCvCsU3gQjdhl5UgxZ1iLNlL0o+s1+CtQQLWDufAMW3hoO fRLrzwTikLMlDvd2nNnWptWlrHWXVugpP/5Wrk4MmpyPV8ulFfAonD70a0LPL5q4 1Ta257OuI99JhSSnlNSR3/REWidpa21C0HNtRl4RtuEChpm9nefetxFitIlc8TRn H4PfebbhDtdMBcc8c6YtH0/5a87jLJqQ/K/k9zdISK0MaQx7L7o2FPDJckY+mTgs 9eMy0COxgn4E4L/y5sqA19cDiheISo6c1HykuKxPtWg2DGfwYQ4r2DXEMVdGlBvU gRgLS640U8szAi2fch9LAf4UXCar6j5x4gb5AgMBAAGjggIrMIICJzAdBgNVHQ4E FgQU1+8z9FO/jdI4yR4Lol5TOLfyJCMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8xLTh6OUZPX2pkSTR5UjRMb2w1VE9MZnlKQ00u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcHJAoAAAKAMA0GCSqGSIb3DQEBCwUAA4IBAQCREf6uXc4iUBEiE605 Ee4856rclwLqMyx/+VDFdz/hOJN36ekpW9XZIR+L1x9ZtDhqUEFxkM5sp8h8RsqT U7Tw0lMYDGGIvl/wu38Bhq1q85qtYnUmsEs5o9kilN9Acjq+drQ0s8YzjQ8nItge BLfMsw+82dIoU/0v/Qmx2obesHQYHqOkZkIKcKg98Pr6nwGrG+QgsqIPXa+CR9GI YFiP79uVAuKg6r9bXWa4w6e68o4haoxO/ZH9m+2Hjihi/Wklw5E8sBs9ufd+6O0j SU/Wo+4Luk/gY7o4LKga0jD4mBRV74HispFU5VbBr4e1ipXM9oDbBUN/5kteyj1v Teyh -----END CERTIFICATE-----Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org