$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa File: K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa (raw, json) Hash identifier: OB7pz/aqW6PE+WF7RDC+dM8bFflZGgVGQ0t0xF+Xx5M= Subject key identifier: 2B:66:8C:0D:13:2D:EF:20:09:63:47:1F:1F:ED:AA:B0:94:16:1E:C1 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0241 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa Signing time: Tue 30 May 2023 17:42:31 +0000 ROA not before: Tue 30 May 2023 17:42:31 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:1500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: May 30 17:42:31 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=2B668C0D132DEF200963471F1FEDAAB094161EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:91:8b:69:b2:36:3f:bb:53:73:68:11:f0: ae:ed:a5:c7:09:8e:b5:ba:e5:c9:a5:aa:09:e4:ef: 09:e7:1a:63:b1:a2:6c:50:44:3f:98:c4:4c:f8:ff: 5a:cf:7a:77:cd:21:5d:18:37:62:6c:a5:da:54:43: d4:b4:68:a5:eb:c0:54:4d:87:b6:49:16:ea:65:25: fc:7c:c8:06:9f:16:f0:17:6d:dc:13:21:ad:b6:78: 22:0a:06:1c:ea:ce:7d:ef:53:e2:7b:47:d5:87:6b: 2b:c5:a3:57:17:dc:d2:6d:fd:f1:3c:18:41:60:ab: 7d:6f:c8:a7:48:d7:91:b9:fa:16:85:8c:23:b0:7b: 05:ec:74:4d:80:53:a1:90:74:40:00:56:01:22:4d: d7:36:f7:81:b3:6d:c5:03:8a:c0:6a:c9:c6:ce:0a: a4:ff:6b:75:29:b5:8a:f0:aa:e8:bd:99:c9:a7:ef: 11:bc:b4:46:37:ef:5f:4a:bb:1b:34:77:0f:4d:c0: 52:87:94:86:8a:2b:b0:81:cf:77:9c:9b:d9:57:b6: 97:a0:7c:2b:a1:6e:40:7d:43:70:26:dc:ae:29:64: 2f:04:72:88:65:b9:c1:3f:14:f4:87:04:ca:1e:48: 42:8d:a2:dd:cb:36:3d:ec:cc:48:6c:f7:9e:a8:45: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:66:8C:0D:13:2D:EF:20:09:63:47:1F:1F:ED:AA:B0:94:16:1E:C1 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K2aMDRMt7yAJY0cfH-2qsJQWHsE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:1500::/40 Signature Algorithm: sha256WithRSAEncryption 4e:aa:68:02:f5:22:f9:41:03:5b:db:79:6a:04:fd:39:f2:5a: 4f:38:9f:74:19:93:b9:c7:88:7b:2a:26:ef:c3:fb:da:f4:45: 43:83:9a:54:94:17:ce:d7:45:d5:66:6e:30:17:e5:a9:fc:9e: fc:da:dc:ee:7c:bd:2b:f6:51:1f:64:33:9a:48:aa:ab:0a:62: 91:59:5d:00:5d:e2:3c:ce:db:f8:61:cd:7b:48:ea:0b:4e:90: 83:07:0b:b4:bb:83:1e:a4:d9:01:e1:d6:b3:18:75:d6:35:d0: 82:ca:ad:aa:a4:da:bd:a9:5f:3c:d8:7d:2c:cb:9c:10:9e:46: 74:0f:46:be:74:88:ab:80:65:6f:19:1b:41:e5:14:d1:f3:09: 8f:dc:44:1b:9c:ea:34:f4:a9:6b:72:f9:ee:86:58:c4:5e:a4: e4:83:ff:8a:31:13:09:d4:6b:b0:9d:a0:b5:06:23:07:5e:4f: 9e:82:1a:33:c2:74:f0:17:86:f4:82:47:81:9f:1e:43:43:96: af:a4:b0:ba:09:f5:c5:3b:00:9b:cd:d0:82:b7:99:70:41:25: 36:54:d8:4f:83:90:97:4c:f2:eb:25:c0:16:bc:1b:cb:1a:60: 97:25:e4:19:65:36:07:d1:07:ce:70:9b:f0:7c:2e:11:c7:08: b2:d9:41:51 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx NzQyMzFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJCNjY4QzBEMTMyREVG MjAwOTYzNDcxRjFGRURBQUIwOTQxNjFFQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+FpGLabI2P7tTc2gR8K7tpccJjrW65cmlqgnk7wnnGmOxomxQ RD+YxEz4/1rPenfNIV0YN2JspdpUQ9S0aKXrwFRNh7ZJFuplJfx8yAafFvAXbdwT Ia22eCIKBhzqzn3vU+J7R9WHayvFo1cX3NJt/fE8GEFgq31vyKdI15G5+haFjCOw ewXsdE2AU6GQdEAAVgEiTdc294GzbcUDisBqycbOCqT/a3UptYrwqui9mcmn7xG8 tEY3719Kuxs0dw9NwFKHlIaKK7CBz3ecm9lXtpegfCuhbkB9Q3Am3K4pZC8Ecohl ucE/FPSHBMoeSEKNot3LNj3szEhs956oRSR/AgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUK2aMDRMt7yAJY0cfH+2qsJQWHsEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9LMmFNRFJNdDd5QUpZMGNmSC0ycXNKUVdIc0Uu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAaxUwDQYJKoZIhvcNAQELBQADggEBAE6qaAL1IvlBA1vbeWoE /TnyWk84n3QZk7nHiHsqJu/D+9r0RUODmlSUF87XRdVmbjAX5an8nvza3O58vSv2 UR9kM5pIqqsKYpFZXQBd4jzO2/hhzXtI6gtOkIMHC7S7gx6k2QHh1rMYddY10ILK raqk2r2pXzzYfSzLnBCeRnQPRr50iKuAZW8ZG0HlFNHzCY/cRBuc6jT0qWty+e6G WMRepOSD/4oxEwnUa7CdoLUGIwdeT56CGjPCdPAXhvSCR4GfHkNDlq+ksLoJ9cU7 AJvN0IK3mXBBJTZU2E+DkJdM8uslwBa8G8saYJcl5BllNgfRB85wm/B8LhHHCLLZ QVE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org