$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pdc-a1bItWMdqffQIUZg0WfMKs0.roa File: Pdc-a1bItWMdqffQIUZg0WfMKs0.roa (raw, json) Hash identifier: CcDxBsa1Qg9mBcKEYg+vqEuARPvPoKRA4OjZLxqDnfo= Subject key identifier: 3D:D7:3E:6B:56:C8:B5:63:1D:A9:F7:D0:21:46:60:D1:67:CC:2A:CD Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 02A3 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pdc-a1bItWMdqffQIUZg0WfMKs0.roa Signing time: Tue 30 Apr 2024 01:35:17 +0000 ROA not before: Tue 30 Apr 2024 01:35:17 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:7b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 01:35:17 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=3DD73E6B56C8B5631DA9F7D0214660D167CC2ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:40:22:67:86:05:a0:df:a6:ac:90:ed:24: 12:82:a8:09:51:91:7e:36:dd:78:07:cb:09:d8:8c: 07:71:6b:ad:d8:4e:0a:f5:47:f3:69:df:6a:4f:19: ae:66:3c:ee:27:a8:2f:52:cb:86:ee:40:d4:1c:c8: 83:25:d0:cf:f0:13:7a:eb:0a:5c:df:56:58:bf:3c: c2:ac:e2:0d:9a:bd:cf:77:c4:d7:fb:81:cc:22:29: ae:1b:89:c0:fe:25:c4:d8:60:cf:a8:85:8e:8b:e3: f1:f0:36:4e:18:f1:0f:41:69:3d:3e:d1:e4:80:e6: a5:aa:07:24:52:1d:c8:37:aa:5a:de:51:4e:5a:97: ff:d6:5d:44:8f:e2:77:f0:1f:66:5a:a7:29:d2:c8: 9d:6d:7a:24:50:f1:3f:d3:95:64:b3:36:1a:03:8c: f9:54:7e:be:62:f8:e6:69:8b:95:1d:b6:6a:00:62: 06:7c:dc:88:81:a2:68:c8:54:a9:24:0b:75:1c:23: f1:b3:3d:cb:72:bc:aa:b9:34:27:a9:7d:a4:c1:35: 9a:d1:c3:de:9d:4c:f3:71:15:82:42:7a:18:95:4a: e8:b2:13:03:6a:8a:11:c4:3a:d6:99:51:f1:c5:ea: 90:79:77:0d:f7:cf:b3:49:19:c2:f5:3b:64:9f:82: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D7:3E:6B:56:C8:B5:63:1D:A9:F7:D0:21:46:60:D1:67:CC:2A:CD X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pdc-a1bItWMdqffQIUZg0WfMKs0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:7b00::/40 Signature Algorithm: sha256WithRSAEncryption 63:43:05:e8:be:ad:4a:29:08:3a:1d:67:63:50:30:df:be:33: 59:f4:06:54:e2:70:8b:de:10:5e:b2:fb:83:b0:ce:e4:fc:c6: 69:9c:60:11:be:ea:a0:40:c9:de:de:16:e3:22:9f:90:87:48: 82:23:4f:54:c1:fb:15:7e:44:a8:71:2e:dc:dc:b6:e7:f5:39: 10:0c:55:96:0e:cd:77:0a:77:c2:27:ab:30:a5:71:ec:d5:48: db:9a:a1:ce:6e:34:25:15:a4:f5:66:0a:2f:4f:e3:ce:65:35: 2b:2b:26:af:00:82:ee:7c:cd:fa:2c:a2:85:99:a7:27:d1:09: 92:81:52:73:ba:9b:0c:4b:06:d3:6e:fd:b9:f9:e8:e0:2a:b4: 95:60:80:7f:58:3d:f7:8b:9c:10:8e:1a:f8:df:f4:a7:f0:a4: 18:27:e1:aa:22:66:52:83:24:5b:fd:32:41:af:a6:be:a7:90: a6:fb:30:b7:80:d4:5f:14:69:5b:d8:26:b7:31:f6:d5:fc:34: bb:0e:66:43:5c:b3:e9:7f:80:a0:f3:02:81:9c:36:39:8f:3a: 96:18:9f:3f:08:00:9b:84:47:74:84:81:84:0e:d1:aa:31:80: fe:c6:68:c5:28:4c:e0:72:5d:59:18:52:9f:e8:1c:21:c2:ba: c3:00:72:c9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MTM1MTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNERDczRTZCNTZDOEI1 NjMxREE5RjdEMDIxNDY2MEQxNjdDQzJBQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKPEAiZ4YFoN+mrJDtJBKCqAlRkX423XgHywnYjAdxa63YTgr1 R/Np32pPGa5mPO4nqC9Sy4buQNQcyIMl0M/wE3rrClzfVli/PMKs4g2avc93xNf7 gcwiKa4bicD+JcTYYM+ohY6L4/HwNk4Y8Q9BaT0+0eSA5qWqByRSHcg3qlreUU5a l//WXUSP4nfwH2ZapynSyJ1teiRQ8T/TlWSzNhoDjPlUfr5i+OZpi5UdtmoAYgZ8 3IiBomjIVKkkC3UcI/GzPctyvKq5NCepfaTBNZrRw96dTPNxFYJCehiVSuiyEwNq ihHEOtaZUfHF6pB5dw33z7NJGcL1O2SfguvLAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUPdc+a1bItWMdqffQIUZg0WfMKs0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9QZGMtYTFiSXRXTWRxZmZRSVVaZzBXZk1LczAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa3swDQYJKoZIhvcNAQELBQADggEBAGNDBei+rUopCDodZ2NQ MN++M1n0BlTicIveEF6y+4OwzuT8xmmcYBG+6qBAyd7eFuMin5CHSIIjT1TB+xV+ RKhxLtzctuf1ORAMVZYOzXcKd8InqzClcezVSNuaoc5uNCUVpPVmCi9P485lNSsr Jq8Agu58zfosooWZpyfRCZKBUnO6mwxLBtNu/bn56OAqtJVggH9YPfeLnBCOGvjf 9KfwpBgn4aoiZlKDJFv9MkGvpr6nkKb7MLeA1F8UaVvYJrcx9tX8NLsOZkNcs+l/ gKDzAoGcNjmPOpYYnz8IAJuER3SEgYQO0aoxgP7GaMUoTOByXVkYUp/oHCHCusMA csk= -----END CERTIFICATE-----Generated at Sun Feb 16 22:32:11 2025 by rpki-client