$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2bwFCE56qs4d2F0N9aXN4v17FhQ.roa File: 2bwFCE56qs4d2F0N9aXN4v17FhQ.roa (raw, json) Hash identifier: icD5Ut58fwqwFt51RPmhKiXBtOCMC6xKVC/RlHy6eUg= Subject key identifier: D9:BC:05:08:4E:7A:AA:CE:1D:D8:5D:0D:F5:A5:CD:E2:FD:7B:16:14 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0173 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2bwFCE56qs4d2F0N9aXN4v17FhQ.roa Signing time: Tue 30 May 2023 17:34:19 +0000 ROA not before: Tue 30 May 2023 17:34:19 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:9700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: May 30 17:34:19 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=D9BC05084E7AAACE1DD85D0DF5A5CDE2FD7B1614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:c2:f6:40:2c:b5:d0:37:eb:92:88:88:9f: a0:e9:02:7c:73:b0:cf:ff:4a:14:de:ab:ee:f2:19: 41:6e:24:8e:d8:f8:11:ad:6e:75:e9:78:71:0a:b9: 49:a4:e5:83:f4:1b:45:11:06:b5:6f:d9:bc:3c:3f: dc:60:bf:f2:8a:7a:b9:09:c2:26:e9:43:79:6b:dd: 55:e9:d7:7d:bf:67:33:13:0b:02:04:65:d5:7b:3e: 6b:a9:1f:3f:2d:62:5a:5d:e3:93:fb:e5:69:0b:36: c4:0a:c5:9b:45:a2:c6:e0:da:03:0f:84:df:44:4a: 36:f1:63:ec:13:59:ea:57:24:99:db:fa:49:09:96: 8f:00:0d:64:4b:89:ca:73:a3:fd:c0:e7:f8:41:a6: 70:4d:eb:aa:17:65:34:38:27:90:bc:82:6f:06:a0: cf:97:34:a2:4a:55:d3:dc:b2:fb:c2:f5:6f:d5:63: e3:7d:fd:44:8a:e0:20:cf:ad:de:0d:05:10:8d:90: 06:5a:51:d7:30:ed:81:47:36:99:d1:73:04:1c:5d: 9b:37:2f:53:59:d0:68:af:7a:bb:62:d1:72:78:a2: 9a:71:45:8d:b8:da:bf:ad:39:a9:17:83:f1:56:f1: 3a:1c:19:d5:fb:37:d6:c8:c1:f4:d1:72:33:a1:b0: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BC:05:08:4E:7A:AA:CE:1D:D8:5D:0D:F5:A5:CD:E2:FD:7B:16:14 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2bwFCE56qs4d2F0N9aXN4v17FhQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:9700::/40 Signature Algorithm: sha256WithRSAEncryption 87:1e:1a:85:1d:e2:61:ec:bb:dd:a9:de:f9:70:0b:61:bc:ef: 90:e4:35:70:c5:69:d3:6c:dc:46:3d:eb:ae:6e:93:2d:1c:8f: 22:fe:55:89:5f:7e:63:3a:2c:41:4f:0a:31:a0:27:28:4d:ae: 71:05:b5:b3:5e:c0:69:25:91:52:6b:99:cc:a6:c2:ee:40:be: d9:f7:76:88:0c:be:7a:e5:bd:e7:2b:72:f0:f6:77:1c:13:71: 56:01:fd:2e:a5:85:01:aa:b8:ae:77:ed:a6:84:8f:26:e7:d6: 79:cb:bf:a7:18:a0:6f:65:4d:01:67:6b:4e:79:85:ee:23:ad: 1e:54:52:f8:0f:9b:10:3a:03:04:21:25:85:42:81:73:3d:e2: c0:2c:46:35:62:3f:07:51:d0:66:b3:ad:44:b1:37:4d:f0:58: 34:a7:fa:dc:71:61:5e:55:29:c8:ab:73:e8:eb:d3:ed:8c:e5: fd:bc:03:b2:50:3e:f9:89:8a:ec:78:81:17:ad:a1:69:dd:3a: f8:36:0e:d0:1f:77:b2:47:6d:ee:35:8e:ec:91:73:85:54:1f: 85:bd:8c:3f:28:70:2d:dc:ab:28:8c:87:1b:ba:8d:ef:77:95: 45:f0:5f:a9:6a:20:84:ab:d7:f5:7c:f3:5a:4f:2f:9f:8b:a3: b8:3d:d8:31 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx NzM0MTlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5QkMwNTA4NEU3QUFB Q0UxREQ4NUQwREY1QTVDREUyRkQ3QjE2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOYsL2QCy10DfrkoiIn6DpAnxzsM//ShTeq+7yGUFuJI7Y+BGt bnXpeHEKuUmk5YP0G0URBrVv2bw8P9xgv/KKerkJwibpQ3lr3VXp132/ZzMTCwIE ZdV7PmupHz8tYlpd45P75WkLNsQKxZtFosbg2gMPhN9ESjbxY+wTWepXJJnb+kkJ lo8ADWRLicpzo/3A5/hBpnBN66oXZTQ4J5C8gm8GoM+XNKJKVdPcsvvC9W/VY+N9 /USK4CDPrd4NBRCNkAZaUdcw7YFHNpnRcwQcXZs3L1NZ0Giverti0XJ4oppxRY24 2r+tOakXg/FW8TocGdX7N9bIwfTRcjOhsKp1AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQU2bwFCE56qs4d2F0N9aXN4v17FhQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8yYndGQ0U1NnFzNGQyRjBOOWFYTjR2MTdGaFEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa5cwDQYJKoZIhvcNAQELBQADggEBAIceGoUd4mHsu92p3vlw C2G875DkNXDFadNs3EY9665uky0cjyL+VYlffmM6LEFPCjGgJyhNrnEFtbNewGkl kVJrmcymwu5Avtn3dogMvnrlvecrcvD2dxwTcVYB/S6lhQGquK537aaEjybn1nnL v6cYoG9lTQFna055he4jrR5UUvgPmxA6AwQhJYVCgXM94sAsRjViPwdR0GazrUSx N03wWDSn+txxYV5VKcirc+jr0+2M5f28A7JQPvmJiux4gRetoWndOvg2DtAfd7JH be41juyRc4VUH4W9jD8ocC3cqyiMhxu6je93lUXwX6lqIISr1/V881pPL5+Lo7g9 2DE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org