$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1UXl25j5TD2dJYpG3ozGrSG_w1g.roa File: 1UXl25j5TD2dJYpG3ozGrSG_w1g.roa (raw, json) Hash identifier: WlMirO+1h0hr/qFuryOqMc9+hkQmVcfZk+deScovlCU= Subject key identifier: D5:45:E5:DB:98:F9:4C:3D:9D:25:8A:46:DE:8C:C6:AD:21:BF:C3:58 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 014F Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1UXl25j5TD2dJYpG3ozGrSG_w1g.roa Signing time: Tue 30 May 2023 17:32:25 +0000 ROA not before: Tue 30 May 2023 17:32:25 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 240a:70:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: May 30 17:32:25 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=D545E5DB98F94C3D9D258A46DE8CC6AD21BFC358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:70:73:f3:03:b8:c3:9d:f8:eb:f7:c1:31: c9:72:e0:cd:e0:b1:44:4c:98:21:6d:8f:7e:12:73: 34:94:59:91:06:1a:ba:83:7b:da:48:9e:c7:fd:0a: 22:6d:d7:fe:fa:0a:cb:b7:bb:b7:e1:7a:1b:21:b2: 78:70:43:8f:cb:07:74:27:f7:07:39:2b:1e:43:df: 95:10:6c:f2:c7:9e:28:a1:da:44:c9:5d:53:90:d1: e6:9a:7c:d5:0a:88:bc:9e:ca:5a:cd:97:0a:ea:9a: f6:2b:7a:bc:17:ea:5e:fd:e4:95:45:2a:e0:10:ac: b2:41:ad:58:0c:40:99:7f:db:d5:97:6a:32:3e:39: 2d:6c:a6:dc:08:58:23:d4:80:89:8b:4d:c7:b2:28: 6b:9b:fc:73:d0:54:ec:f2:4f:91:a6:4b:91:cd:50: 66:cb:a6:2e:79:d1:b7:b6:7b:56:d1:66:42:67:8e: b9:94:e0:c0:09:33:59:1d:af:cf:9a:a4:b2:43:d6: 2d:7b:82:3e:11:62:38:85:07:db:ca:4b:f7:07:66: be:7a:d4:22:38:f3:36:dd:d4:99:b4:d3:e9:b2:d7: 52:d8:1a:31:ad:b9:de:ab:78:8b:e2:ff:6a:2d:92: 50:bf:8c:74:e6:8e:2c:ef:b4:b1:ce:a0:04:5c:74: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:45:E5:DB:98:F9:4C:3D:9D:25:8A:46:DE:8C:C6:AD:21:BF:C3:58 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1UXl25j5TD2dJYpG3ozGrSG_w1g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:70:1::/48 Signature Algorithm: sha256WithRSAEncryption 9e:f5:2e:c7:51:af:e8:01:82:69:e2:d0:a2:0c:f1:10:67:eb: 1e:ed:13:e2:42:29:7c:cc:5a:c6:e8:7c:58:73:b1:4b:56:f3: f0:6b:d1:b9:e5:48:38:4e:33:3c:bc:99:43:b7:cd:f2:db:09: 3e:3f:f1:78:56:c3:8e:c5:1b:d7:b7:03:e6:89:ec:0d:29:5b: 31:89:96:1c:d1:d4:99:fe:15:c2:2a:a3:02:42:2b:54:9e:c2: 49:88:9f:37:24:10:43:8d:90:82:13:76:99:6c:dc:93:21:ac: b3:1b:71:57:6b:4e:b2:ed:9e:bb:cc:9d:e5:43:2d:01:ff:d9: b8:64:30:a0:36:1d:0f:cf:30:85:df:1b:02:51:53:97:e9:a4: 02:63:56:aa:48:bf:37:42:0e:3d:bc:4b:13:a0:0e:13:92:d9: a5:c8:4b:2b:02:4c:34:65:44:5f:5f:21:11:2f:61:4b:e9:00: 4f:25:69:42:f2:61:d9:9d:d5:44:3d:89:4c:ad:8c:bd:57:16: 2d:06:23:b2:80:ef:41:b1:23:33:f0:d5:79:2d:e1:f3:11:94: e9:a9:50:42:46:06:de:c8:c0:df:67:9b:bc:86:85:e4:4d:8e: 67:30:83:e2:8a:f3:72:ee:88:11:fa:52:be:f0:25:10:d2:be: 5e:4e:a8:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx NzMyMjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ1NDVFNURCOThGOTRD M0Q5RDI1OEE0NkRFOENDNkFEMjFCRkMzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkf3Bz8wO4w5346/fBMcly4M3gsURMmCFtj34SczSUWZEGGrqD e9pInsf9CiJt1/76Csu3u7fhehshsnhwQ4/LB3Qn9wc5Kx5D35UQbPLHniih2kTJ XVOQ0eaafNUKiLyeylrNlwrqmvYrerwX6l795JVFKuAQrLJBrVgMQJl/29WXajI+ OS1sptwIWCPUgImLTceyKGub/HPQVOzyT5GmS5HNUGbLpi550be2e1bRZkJnjrmU 4MAJM1kdr8+apLJD1i17gj4RYjiFB9vKS/cHZr561CI48zbd1Jm00+my11LYGjGt ud6reIvi/2otklC/jHTmjizvtLHOoARcdFlBAgMBAAGjggIrMIICJzAdBgNVHQ4E FgQU1UXl25j5TD2dJYpG3ozGrSG/w1gwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8xVVhsMjVqNVREMmRKWXBHM296R3JTR193MWcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAoAcAABMA0GCSqGSIb3DQEBCwUAA4IBAQCe9S7HUa/oAYJp4tCi DPEQZ+se7RPiQil8zFrG6HxYc7FLVvPwa9G55Ug4TjM8vJlDt83y2wk+P/F4VsOO xRvXtwPmiewNKVsxiZYc0dSZ/hXCKqMCQitUnsJJiJ83JBBDjZCCE3aZbNyTIayz G3FXa06y7Z67zJ3lQy0B/9m4ZDCgNh0PzzCF3xsCUVOX6aQCY1aqSL83Qg49vEsT oA4TktmlyEsrAkw0ZURfXyERL2FL6QBPJWlC8mHZndVEPYlMrYy9VxYtBiOygO9B sSMz8NV5LeHzEZTpqVBCRgbeyMDfZ5u8hoXkTY5nMIPiivNy7ogR+lK+8CUQ0r5e TqhP -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org