$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8-s3aHnYuFt4MV_nFkuffmmtYr8.roa File: 8-s3aHnYuFt4MV_nFkuffmmtYr8.roa (raw, json) Hash identifier: bMAJ8+t3rmK1OOgdjOYRdblOqbZbbOrGOMicP2ksw98= Subject key identifier: F3:EB:37:68:79:D8:B8:5B:78:31:5F:E7:16:4B:9F:7E:69:AD:62:BF Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0234 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8-s3aHnYuFt4MV_nFkuffmmtYr8.roa Signing time: Tue 30 May 2023 17:42:26 +0000 ROA not before: Tue 30 May 2023 17:42:26 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 240a:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: May 30 17:42:26 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=F3EB376879D8B85B78315FE7164B9F7E69AD62BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:d0:3d:d1:dd:42:16:ce:73:5c:e9:73:91: a5:72:15:6c:13:57:1f:17:1f:d3:6a:5b:31:08:0d: 68:74:c1:43:a2:76:18:2e:ba:9f:26:4c:6b:be:c3: a4:35:f9:ce:f5:ec:e0:f3:0f:55:dc:d6:3b:2e:e0: 67:87:7a:0e:fb:27:c1:97:b2:b7:81:87:54:4a:08: 2b:6a:d3:e4:3a:b0:b7:43:03:3c:9f:1a:cf:83:00: 26:48:79:dc:a9:5b:b3:ad:46:a8:da:ba:a3:d2:43: 91:13:b1:03:87:e2:de:45:1b:c5:58:91:6b:2e:c5: 46:72:93:af:09:80:7e:78:26:d2:06:c3:f6:fa:43: e8:42:3c:2e:f7:e9:67:41:72:54:4d:a0:dd:d8:b9: b7:cf:09:9b:e2:6c:ab:6e:e4:a9:8b:54:2c:e7:f6: 37:78:c4:ef:40:69:47:23:fa:32:10:2c:84:94:d8: 04:00:61:c3:6b:0b:78:64:8f:95:1e:19:a6:67:18: 80:e5:ae:16:ed:c8:12:54:92:74:24:74:be:05:fb: 02:61:68:18:ea:7f:44:9d:30:ca:2f:7f:0d:79:e8: 45:6a:ec:b0:fa:de:8c:c3:95:f1:52:9a:d5:6b:22: 42:6a:47:8d:ba:0b:3d:c5:b9:bf:b6:92:ed:fb:83: 75:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EB:37:68:79:D8:B8:5B:78:31:5F:E7:16:4B:9F:7E:69:AD:62:BF X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8-s3aHnYuFt4MV_nFkuffmmtYr8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:70::/48 Signature Algorithm: sha256WithRSAEncryption bf:eb:60:4a:95:03:52:e3:ff:2e:0f:4d:ce:91:15:fd:f3:b9: ba:96:53:44:ac:7c:24:71:d2:00:b3:6e:d7:bc:fb:27:a2:00: b3:96:bc:a6:16:d0:8d:76:53:07:08:85:7a:32:72:bc:7c:5c: c0:73:11:74:54:f2:a4:92:62:ca:08:f4:0d:bc:17:f1:da:23: da:ee:e4:f4:01:3e:05:9f:96:67:3a:f8:ce:6d:73:32:49:4e: a0:bf:0c:89:33:03:3b:a4:ee:96:82:41:ef:26:50:ed:15:5f: 6d:59:3b:c6:11:57:34:ef:bf:4b:51:78:37:c3:ad:28:1a:e8: 62:14:ed:f7:f5:8d:31:f5:86:e1:c6:63:d7:42:97:b7:95:91: 4e:39:60:99:12:95:19:83:ad:19:5b:3b:1c:66:10:88:27:0e: bb:b7:ed:4b:41:9a:9a:6d:ca:92:7d:1f:b5:ca:1d:7c:43:e1: c7:fa:7d:77:ba:e3:81:ea:9e:29:83:42:3f:f9:be:33:64:dc: 82:b5:52:e2:4a:2d:eb:8c:e9:03:cf:3d:da:3d:8d:77:9d:0b: d3:d0:8c:b6:59:4f:dc:33:71:52:27:5c:3a:50:de:9b:28:9b: b1:35:c9:99:a0:73:5e:e1:82:f3:a9:45:0a:f6:c7:93:ed:3f: a6:68:07:c7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx NzQyMjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEYzRUIzNzY4NzlEOEI4 NUI3ODMxNUZFNzE2NEI5RjdFNjlBRDYyQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZktA90d1CFs5zXOlzkaVyFWwTVx8XH9NqWzEIDWh0wUOidhgu up8mTGu+w6Q1+c717ODzD1Xc1jsu4GeHeg77J8GXsreBh1RKCCtq0+Q6sLdDAzyf Gs+DACZIedypW7OtRqjauqPSQ5ETsQOH4t5FG8VYkWsuxUZyk68JgH54JtIGw/b6 Q+hCPC736WdBclRNoN3YubfPCZvibKtu5KmLVCzn9jd4xO9AaUcj+jIQLISU2AQA YcNrC3hkj5UeGaZnGIDlrhbtyBJUknQkdL4F+wJhaBjqf0SdMMovfw156EVq7LD6 3ozDlfFSmtVrIkJqR426Cz3Fub+2ku37g3WDAgMBAAGjggIrMIICJzAdBgNVHQ4E FgQU8+s3aHnYuFt4MV/nFkuffmmtYr8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS84LXMzYUhuWXVGdDRNVl9uRmt1ZmZtbXRZcjgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAoAcAAAMA0GCSqGSIb3DQEBCwUAA4IBAQC/62BKlQNS4/8uD03O kRX987m6llNErHwkcdIAs27XvPsnogCzlrymFtCNdlMHCIV6MnK8fFzAcxF0VPKk kmLKCPQNvBfx2iPa7uT0AT4Fn5ZnOvjObXMySU6gvwyJMwM7pO6WgkHvJlDtFV9t WTvGEVc0779LUXg3w60oGuhiFO339Y0x9YbhxmPXQpe3lZFOOWCZEpUZg60ZWzsc ZhCIJw67t+1LQZqabcqSfR+1yh18Q+HH+n13uuOB6p4pg0I/+b4zZNyCtVLiSi3r jOkDzz3aPY13nQvT0Iy2WU/cM3FSJ1w6UN6bKJuxNcmZoHNe4YLzqUUK9seT7T+m aAfH -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org