$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa File: SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa (raw, json) Hash identifier: 515PMOATHu+M4WYoIWF9RD0oWGJplfKNmV7fMDX3HTM= Subject key identifier: 49:74:DB:45:B3:CF:89:C1:02:D5:EA:84:CD:36:A2:D5:17:6D:D1:0D Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0149 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa Signing time: Tue 30 May 2023 17:32:23 +0000 ROA not before: Tue 30 May 2023 17:32:23 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:f600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: May 30 17:32:23 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=4974DB45B3CF89C102D5EA84CD36A2D5176DD10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:55:ca:b6:c4:07:e2:42:e1:66:80:7b:80: 5e:f8:01:11:6e:7b:c3:17:54:bc:af:5f:4e:ec:49: 96:ad:1e:9f:bc:0c:23:98:51:79:89:44:e2:da:90: 88:a5:77:3b:bf:73:61:a8:3b:88:1a:c8:ef:40:e5: de:6a:4b:c8:a7:01:8a:b4:94:d0:91:8e:07:c2:e7: e6:e8:3c:16:51:cf:9a:e4:48:ff:e0:57:bb:86:ea: 0f:30:1d:92:34:17:0d:79:10:19:88:ea:c0:a5:53: 0e:98:ea:7c:2a:fe:92:f2:e4:84:c9:47:c3:50:d0: 52:b3:69:4a:2a:2f:9c:c9:4e:fc:50:76:09:f8:72: 5c:d1:07:e4:b4:b5:66:12:df:5e:46:c1:7e:76:a4: fe:ad:e3:b3:68:93:64:ac:f6:cd:22:ba:76:f9:3c: 69:9f:a0:c1:cb:04:51:5d:f2:8b:1b:7d:e9:83:9c: 5d:d4:76:0f:fc:a3:6c:2f:2a:06:c5:84:30:eb:03: 78:ed:b6:77:26:6f:d0:10:0a:3e:81:ca:95:28:90: b7:0a:9e:66:c9:81:0e:44:bf:34:15:5f:28:9a:f9: 05:88:db:b5:4c:69:f8:6a:17:78:ac:64:d4:71:29: ae:5b:b1:cc:51:bd:94:19:a7:31:4c:ef:b9:4f:b9: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:DB:45:B3:CF:89:C1:02:D5:EA:84:CD:36:A2:D5:17:6D:D1:0D X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:f600::/40 Signature Algorithm: sha256WithRSAEncryption a4:4d:a8:a3:12:69:97:f7:42:4b:26:d1:06:71:12:21:02:89: 60:0a:90:73:23:2e:d2:85:9b:42:34:1d:ed:66:c5:c0:67:d4: 02:ca:ff:fa:62:08:c0:73:10:7e:8a:f4:aa:f3:4d:ef:42:6f: fe:59:9d:cd:ed:c7:fe:dd:15:49:95:9b:86:69:0e:3c:40:e2: a5:fd:fe:a0:92:85:cb:6d:4b:47:d0:16:0d:72:38:14:95:4e: 02:8c:f0:43:43:77:93:87:cb:53:dd:88:8a:72:69:cd:06:57: 21:5b:65:ce:02:a6:39:a3:f2:54:f4:a2:b9:a9:07:63:90:8d: 18:7f:fc:a2:70:d5:f0:1d:7c:50:d3:c9:1f:aa:1f:7f:c1:6e: 6d:9e:15:b7:30:3d:58:82:ff:88:17:26:b1:a3:ed:e0:18:af: 35:ef:c9:90:94:9b:e3:42:6a:32:12:4d:ad:53:84:1c:ca:0e: ce:e7:f8:8f:a0:3d:76:59:2e:08:49:d6:8e:60:a8:1e:eb:aa: be:b6:b1:61:31:9c:70:a1:a3:bd:63:84:74:af:9b:e5:bd:d7: f0:4d:2f:79:6a:89:f9:27:13:5c:33:f2:f1:5b:14:42:23:23: b5:e0:bf:83:b3:ab:b7:1c:00:1e:a5:f1:c2:f7:63:86:da:c5: 35:3a:68:cd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx NzMyMjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5NzREQjQ1QjNDRjg5 QzEwMkQ1RUE4NENEMzZBMkQ1MTc2REQxMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWyFXKtsQH4kLhZoB7gF74ARFue8MXVLyvX07sSZatHp+8DCOY UXmJROLakIildzu/c2GoO4gayO9A5d5qS8inAYq0lNCRjgfC5+boPBZRz5rkSP/g V7uG6g8wHZI0Fw15EBmI6sClUw6Y6nwq/pLy5ITJR8NQ0FKzaUoqL5zJTvxQdgn4 clzRB+S0tWYS315GwX52pP6t47Nok2Ss9s0iunb5PGmfoMHLBFFd8osbfemDnF3U dg/8o2wvKgbFhDDrA3jttncmb9AQCj6BypUokLcKnmbJgQ5EvzQVXyia+QWI27VM afhqF3isZNRxKa5bscxRvZQZpzFM77lPuUDFAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUSXTbRbPPicEC1eqEzTai1Rdt0Q0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9TWFRiUmJQUGljRUMxZXFFelRhaTFSZHQwUTAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa/YwDQYJKoZIhvcNAQELBQADggEBAKRNqKMSaZf3Qksm0QZx EiECiWAKkHMjLtKFm0I0He1mxcBn1ALK//piCMBzEH6K9KrzTe9Cb/5Znc3tx/7d FUmVm4ZpDjxA4qX9/qCShcttS0fQFg1yOBSVTgKM8ENDd5OHy1PdiIpyac0GVyFb Zc4Cpjmj8lT0ormpB2OQjRh//KJw1fAdfFDTyR+qH3/Bbm2eFbcwPViC/4gXJrGj 7eAYrzXvyZCUm+NCajISTa1ThBzKDs7n+I+gPXZZLghJ1o5gqB7rqr62sWExnHCh o71jhHSvm+W91/BNL3lqifknE1wz8vFbFEIjI7Xgv4Ozq7ccAB6l8cL3Y4baxTU6 aM0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org