$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ONgPWfUZCXTzqrPhNEtHSo-7IcI.roa File: ONgPWfUZCXTzqrPhNEtHSo-7IcI.roa (raw, json) Hash identifier: Wuk5d7RlAApprROTMuWsdnfSlSdPbLWXC68TLX2Gbhc= Subject key identifier: 38:D8:0F:59:F5:19:09:74:F3:AA:B3:E1:34:4B:47:4A:8F:BB:21:C2 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 02E6 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ONgPWfUZCXTzqrPhNEtHSo-7IcI.roa Signing time: Tue 30 Apr 2024 01:45:01 +0000 ROA not before: Tue 30 Apr 2024 01:45:01 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:61:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 20:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 01:45:01 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=38D80F59F5190974F3AAB3E1344B474A8FBB21C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:09:9a:b9:25:24:81:83:b1:c1:cb:05:f6: a0:91:61:30:50:25:31:6d:1b:8c:f1:c8:a7:e4:b8: 3c:8f:78:90:9b:77:35:ec:bc:0c:8a:8f:03:8d:93: 36:ee:fe:00:c9:32:dc:d4:9b:21:8a:b8:d7:1a:78: 90:71:7a:2b:35:78:b3:f1:80:68:22:25:ed:eb:a7: d0:90:79:95:4f:36:71:90:68:77:e4:ea:13:96:bc: ad:aa:37:94:06:95:3d:e4:e7:62:00:7d:b7:1a:2b: 01:8e:f3:84:bd:f3:94:36:b7:d0:3a:08:57:a3:2e: 98:2b:24:2e:ec:f6:de:6a:bd:cf:59:a6:6f:e9:9e: 2b:ce:98:7c:33:51:1b:6f:61:0b:5c:bf:1c:5a:31: 5a:d3:6a:6d:6e:64:62:29:66:23:8b:20:5c:07:36: aa:2a:c7:21:52:86:d7:8d:43:f5:fa:4e:7b:88:58: 0d:ca:c4:38:4b:09:f4:fc:e7:17:d9:7a:6f:d7:35: f1:d6:82:f3:5b:52:3c:1c:d5:67:93:91:56:9d:92: 7d:96:40:e2:8a:d1:71:4f:9f:9e:1b:0b:c1:b4:0c: eb:ca:71:24:f3:c4:0e:13:59:90:2e:e2:03:32:ff: 9d:22:e8:a9:1f:9c:56:44:8e:5f:5e:78:61:35:72: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:0F:59:F5:19:09:74:F3:AA:B3:E1:34:4B:47:4A:8F:BB:21:C2 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ONgPWfUZCXTzqrPhNEtHSo-7IcI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:61:800::/38 Signature Algorithm: sha256WithRSAEncryption a8:06:76:58:2f:66:fe:20:94:20:a5:e2:95:ea:a6:be:aa:5a: e2:cd:d6:d3:14:66:23:22:e6:19:79:74:b8:5b:8e:06:11:cf: 0d:76:c4:99:7e:1f:e6:66:20:e7:26:4d:b8:e5:d1:fb:67:43: 1f:2a:d3:99:6d:cb:5d:0b:a4:a4:73:da:ed:4c:d1:74:d8:82: c9:75:45:12:43:91:e3:46:83:de:6f:bd:b5:99:89:0b:09:1a: 79:45:c7:c1:7a:e2:6c:8e:c5:d4:9d:6d:89:46:36:11:d7:78: d9:77:a7:af:35:c7:a1:7a:e5:4b:90:b0:21:94:99:b5:d8:b8: e1:d7:dd:cd:2a:ae:84:4f:82:2a:3b:68:f4:e7:db:60:20:e4: f9:1e:97:af:0c:32:83:9b:3e:d8:99:08:52:28:95:c0:b0:ea: 1d:f7:75:5d:41:58:a0:96:d1:e1:28:d3:85:85:8b:bf:b1:35: 98:4f:2d:9a:3a:03:3e:87:bd:66:1b:d5:51:1e:ba:69:f6:14: 71:55:e5:55:39:01:a6:9e:c6:01:74:1d:10:31:a1:78:e4:1e: 92:a5:92:aa:94:ac:08:e9:da:fc:22:37:09:dc:36:ae:09:38: d9:8c:f1:29:09:29:3d:c0:dd:4e:84:29:a4:2d:01:dc:7e:2b: 74:96:40:24 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MTQ1MDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4RDgwRjU5RjUxOTA5 NzRGM0FBQjNFMTM0NEI0NzRBOEZCQjIxQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN4AmauSUkgYOxwcsF9qCRYTBQJTFtG4zxyKfkuDyPeJCbdzXs vAyKjwONkzbu/gDJMtzUmyGKuNcaeJBxeis1eLPxgGgiJe3rp9CQeZVPNnGQaHfk 6hOWvK2qN5QGlT3k52IAfbcaKwGO84S985Q2t9A6CFejLpgrJC7s9t5qvc9Zpm/p nivOmHwzURtvYQtcvxxaMVrTam1uZGIpZiOLIFwHNqoqxyFShteNQ/X6TnuIWA3K xDhLCfT85xfZem/XNfHWgvNbUjwc1WeTkVadkn2WQOKK0XFPn54bC8G0DOvKcSTz xA4TWZAu4gMy/50i6KkfnFZEjl9eeGE1creNAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUONgPWfUZCXTzqrPhNEtHSo+7IcIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9PTmdQV2ZVWkNYVHpxclBoTkV0SFNvLTdJY0ku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAoAYQgwDQYJKoZIhvcNAQELBQADggEBAKgGdlgvZv4glCCl4pXq pr6qWuLN1tMUZiMi5hl5dLhbjgYRzw12xJl+H+ZmIOcmTbjl0ftnQx8q05lty10L pKRz2u1M0XTYgsl1RRJDkeNGg95vvbWZiQsJGnlFx8F64myOxdSdbYlGNhHXeNl3 p681x6F65UuQsCGUmbXYuOHX3c0qroRPgio7aPTn22Ag5Pkel68MMoObPtiZCFIo lcCw6h33dV1BWKCW0eEo04WFi7+xNZhPLZo6Az6HvWYb1VEeumn2FHFV5VU5Aaae xgF0HRAxoXjkHpKlkqqUrAjp2vwiNwncNq4JONmM8SkJKT3A3U6EKaQtAdx+K3SW QCQ= -----END CERTIFICATE-----Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org