$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BZPxgoLh-uVCqybEQAYKMoRgcqc.roa File: BZPxgoLh-uVCqybEQAYKMoRgcqc.roa (raw, json) Hash identifier: 4Qx2quxsMuXT4sOOpoc5BqhaWT333i3DSVzKK03+Bzo= Subject key identifier: 05:93:F1:82:82:E1:FA:E5:42:AB:26:C4:40:06:0A:32:84:60:72:A7 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0381 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BZPxgoLh-uVCqybEQAYKMoRgcqc.roa Signing time: Tue 30 Apr 2024 02:00:05 +0000 ROA not before: Tue 30 Apr 2024 02:00:05 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 02:00:05 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=0593F18282E1FAE542AB26C440060A32846072A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:86:88:96:0e:9a:74:0a:8f:9d:94:a9:1f:1f: 64:da:51:80:01:ca:fe:91:d5:2b:28:97:b1:50:b5: a9:3b:30:1a:7d:d5:31:ec:ae:ab:76:8a:7e:a5:e3: 93:a7:7e:13:67:a9:00:b3:d1:ee:7b:7f:cd:05:81: 20:8a:12:cf:17:ce:18:7a:a8:62:1b:50:e3:39:f1: 21:63:77:8e:53:b4:40:cc:6c:13:a8:92:a4:e6:55: 19:fa:9a:72:88:36:87:79:db:bb:bb:5a:ca:ce:9d: 66:61:41:de:19:0b:19:bf:79:60:1a:8d:4e:23:ca: 8a:69:c2:c2:fd:23:75:e5:f3:32:f6:ff:22:24:8c: 00:dc:ec:cb:be:ce:54:b7:21:5d:49:ca:e1:a9:93: 0f:f4:d5:a8:90:39:3e:ed:d5:4b:97:d7:7f:79:bc: b0:95:b4:ea:ce:6d:ac:4b:97:aa:60:db:31:30:c2: f4:b1:bf:a3:76:d6:05:eb:40:64:bf:bc:97:7a:cf: a0:12:70:e4:55:c2:91:35:8d:6e:82:4c:7e:b5:09: 72:bd:97:6f:99:41:89:1e:c6:99:49:1d:5d:5b:98: 2e:b0:64:2a:01:44:5e:68:32:55:6b:1c:2a:2f:a5: c1:f0:f8:94:69:c6:89:64:58:d7:b8:48:fc:b6:c0: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:93:F1:82:82:E1:FA:E5:42:AB:26:C4:40:06:0A:32:84:60:72:A7 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BZPxgoLh-uVCqybEQAYKMoRgcqc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:f00::/40 Signature Algorithm: sha256WithRSAEncryption 88:8e:94:8f:09:bf:90:14:85:66:bb:ff:30:a0:48:ad:f1:fe: c3:46:4c:bc:48:16:2d:e4:11:63:d0:9a:d9:bf:83:2b:92:b8: a3:4b:d9:b1:27:a6:96:04:73:4d:9c:b5:d4:45:0e:27:2a:ff: 3b:ff:31:b6:b8:ca:c3:f9:38:ad:78:9d:83:53:aa:40:f5:84: 75:7b:c1:90:22:22:19:a8:ef:4e:ad:5c:7c:2e:76:e5:70:c2: 55:3c:e7:ed:51:bf:5a:97:9e:0e:28:8e:b2:80:05:63:40:8b: 8e:98:a3:a3:a1:d0:f4:d9:69:bf:9c:50:9f:5a:e6:1e:1e:c1: a5:0a:4e:a1:76:f9:dc:50:ac:67:28:15:f0:57:f8:5a:b1:6d: 3e:38:66:55:90:4b:76:d4:7f:f3:b2:be:6e:df:c5:c9:4c:2c: 64:8a:fd:85:48:54:ba:41:ea:0e:0a:2f:6f:ba:bb:16:17:3a: 63:b7:6f:2f:c1:a2:ab:cb:25:40:33:4a:d0:d2:14:ff:13:bc: f9:f1:51:19:78:a3:c3:15:2d:cf:c7:5d:c5:b8:d6:0b:3c:73: 37:43:92:e9:5a:30:88:5a:d9:1a:8b:0d:00:fc:c5:44:4d:e3: 99:59:43:fd:bc:1e:63:c9:f8:82:d8:98:f4:2f:2f:37:a7:fc: ee:04:1c:c0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MjAwMDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1OTNGMTgyODJFMUZB RTU0MkFCMjZDNDQwMDYwQTMyODQ2MDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4hoiWDpp0Co+dlKkfH2TaUYAByv6R1Ssol7FQtak7MBp91THs rqt2in6l45OnfhNnqQCz0e57f80FgSCKEs8Xzhh6qGIbUOM58SFjd45TtEDMbBOo kqTmVRn6mnKINod527u7WsrOnWZhQd4ZCxm/eWAajU4jyoppwsL9I3Xl8zL2/yIk jADc7Mu+zlS3IV1JyuGpkw/01aiQOT7t1UuX1395vLCVtOrObaxLl6pg2zEwwvSx v6N21gXrQGS/vJd6z6AScORVwpE1jW6CTH61CXK9l2+ZQYkexplJHV1bmC6wZCoB RF5oMlVrHCovpcHw+JRpxolkWNe4SPy2wK43AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUBZPxgoLh+uVCqybEQAYKMoRgcqcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9CWlB4Z29MaC11VkNxeWJFUUFZS01vUmdjcWMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAaw8wDQYJKoZIhvcNAQELBQADggEBAIiOlI8Jv5AUhWa7/zCg SK3x/sNGTLxIFi3kEWPQmtm/gyuSuKNL2bEnppYEc02ctdRFDicq/zv/Mba4ysP5 OK14nYNTqkD1hHV7wZAiIhmo706tXHwuduVwwlU85+1Rv1qXng4ojrKABWNAi46Y o6Oh0PTZab+cUJ9a5h4ewaUKTqF2+dxQrGcoFfBX+FqxbT44ZlWQS3bUf/Oyvm7f xclMLGSK/YVIVLpB6g4KL2+6uxYXOmO3by/BoqvLJUAzStDSFP8TvPnxURl4o8MV Lc/HXcW41gs8czdDkulaMIha2RqLDQD8xURN45lZQ/28HmPJ+ILYmPQvLzen/O4E HMA= -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org