$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2vT6hXt1MmXYP0TCRrH9KxgbZ4s.roa File: 2vT6hXt1MmXYP0TCRrH9KxgbZ4s.roa (raw, json) Hash identifier: wpRB5ieKEaJ6brGXB+ElLX+PahBZz8C1kKxXfwIFSdA= Subject key identifier: DA:F4:FA:85:7B:75:32:65:D8:3F:44:C2:46:B1:FD:2B:18:1B:67:8B Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 02A1 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2vT6hXt1MmXYP0TCRrH9KxgbZ4s.roa Signing time: Tue 30 Apr 2024 01:35:17 +0000 ROA not before: Tue 30 Apr 2024 01:35:17 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:6100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 22:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 01:35:17 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=DAF4FA857B753265D83F44C246B1FD2B181B678B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:1c:d2:3d:ef:67:3e:03:0b:70:9a:8a:fc: 0c:18:62:ea:d8:c9:f5:c9:f2:9c:af:1f:6a:28:e3: f0:d2:df:0d:bb:ca:12:40:ee:c2:e2:9a:55:30:27: 21:71:ae:95:34:5d:14:e7:27:a7:91:03:56:d0:98: 36:4f:e1:6e:a8:81:8c:55:50:30:b4:06:9c:c3:9a: cf:51:ce:bd:1f:92:52:c4:ff:2f:b9:54:09:53:2b: b0:b0:ed:38:2f:ed:2f:8f:39:56:25:c0:f3:a2:8b: 8c:42:4c:55:02:f1:12:86:a8:0f:b3:51:dc:8a:94: 15:f3:76:b6:af:dc:d6:44:59:00:0b:bc:64:fc:7a: 5e:42:2b:e5:75:11:ee:dc:20:f5:c7:e3:d9:2b:5e: 59:c9:b9:b9:7e:ee:0a:fd:3e:10:8c:f2:df:4a:2b: 44:3c:57:d7:79:5a:4c:8e:2c:bc:37:4e:53:b7:2d: af:cd:28:5d:3a:ef:b3:96:b4:ed:b1:63:3f:12:fd: db:d0:a7:c3:73:f9:0b:61:ac:88:d2:34:70:da:38: 95:b3:a0:60:03:77:33:20:70:38:47:11:4e:69:fe: 54:ec:5e:d3:e7:f5:f6:d6:21:bb:8f:c5:09:13:6e: 99:cc:73:06:ed:df:de:f1:01:3d:00:68:25:c2:e7: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F4:FA:85:7B:75:32:65:D8:3F:44:C2:46:B1:FD:2B:18:1B:67:8B X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2vT6hXt1MmXYP0TCRrH9KxgbZ4s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:6100::/40 Signature Algorithm: sha256WithRSAEncryption a1:1d:ef:ad:97:f0:87:12:cc:48:08:b6:4d:0c:b2:7d:ee:05: 3b:6c:23:db:83:10:1c:07:41:69:d0:e5:60:b7:2f:f7:73:7b: 29:22:9c:62:b6:7d:f1:0a:42:f9:91:64:38:a2:73:5f:1c:3d: 5e:59:3a:3e:83:5c:b6:76:2a:61:39:31:cd:2e:63:d1:84:dc: aa:5b:d0:65:a8:79:9b:c8:c1:9d:3e:95:43:cd:2b:6e:ce:80: dd:59:8d:5c:d1:fc:82:9c:d0:2a:5d:9a:13:c8:a1:31:e1:a5: d9:d2:1b:b7:9b:3b:84:12:ee:46:04:0f:18:9d:7b:56:2e:8f: 46:38:2a:6b:7a:b8:5a:92:20:a5:ab:f5:da:59:d9:26:81:5e: a5:90:36:f6:83:bd:5a:ab:b6:bd:74:16:a8:68:0e:a0:c7:81: 02:9d:2c:0f:31:ef:50:d2:c4:e4:19:7e:dc:06:1f:a9:a0:84: 53:88:97:0d:60:0b:fc:d3:49:f0:b1:8e:1c:4a:a0:84:17:78: 7b:15:81:95:e4:bb:d6:f0:10:f0:ab:84:27:0b:22:bf:b2:ed: 01:2a:91:ac:c5:28:8c:27:ee:42:16:6f:7f:6d:a7:10:09:31: 0c:be:4f:56:c8:60:a2:31:ff:c8:0f:03:ec:74:69:0b:5e:8e: 19:b1:1f:6a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MTM1MTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBRjRGQTg1N0I3NTMy NjVEODNGNDRDMjQ2QjFGRDJCMTgxQjY3OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2uBzSPe9nPgMLcJqK/AwYYurYyfXJ8pyvH2oo4/DS3w27yhJA 7sLimlUwJyFxrpU0XRTnJ6eRA1bQmDZP4W6ogYxVUDC0BpzDms9Rzr0fklLE/y+5 VAlTK7Cw7Tgv7S+POVYlwPOii4xCTFUC8RKGqA+zUdyKlBXzdrav3NZEWQALvGT8 el5CK+V1Ee7cIPXH49krXlnJubl+7gr9PhCM8t9KK0Q8V9d5WkyOLLw3TlO3La/N KF0677OWtO2xYz8S/dvQp8Nz+QthrIjSNHDaOJWzoGADdzMgcDhHEU5p/lTsXtPn 9fbWIbuPxQkTbpnMcwbt397xAT0AaCXC51SzAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQU2vT6hXt1MmXYP0TCRrH9KxgbZ4swHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS8ydlQ2aFh0MU1tWFlQMFRDUnJIOUt4Z2JaNHMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa2EwDQYJKoZIhvcNAQELBQADggEBAKEd762X8IcSzEgItk0M sn3uBTtsI9uDEBwHQWnQ5WC3L/dzeykinGK2ffEKQvmRZDiic18cPV5ZOj6DXLZ2 KmE5Mc0uY9GE3Kpb0GWoeZvIwZ0+lUPNK27OgN1ZjVzR/IKc0CpdmhPIoTHhpdnS G7ebO4QS7kYEDxide1Yuj0Y4Kmt6uFqSIKWr9dpZ2SaBXqWQNvaDvVqrtr10Fqho DqDHgQKdLA8x71DSxOQZftwGH6mghFOIlw1gC/zTSfCxjhxKoIQXeHsVgZXku9bw EPCrhCcLIr+y7QEqkazFKIwn7kIWb39tpxAJMQy+T1bIYKIx/8gPA+x0aQtejhmx H2o= -----END CERTIFICATE-----Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org