$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bJ7QdmCNJevSUxicqVX8OV0QgLc.roa File: bJ7QdmCNJevSUxicqVX8OV0QgLc.roa (raw, json) Hash identifier: rKAwzeYpamOGpsB0ABaahaQDxfK82WYghJS0uwxrc/M= Subject key identifier: 6C:9E:D0:76:60:8D:25:EB:D2:53:18:9C:A9:55:FC:39:5D:10:80:B7 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 02DB Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bJ7QdmCNJevSUxicqVX8OV0QgLc.roa Signing time: Tue 30 Apr 2024 01:44:56 +0000 ROA not before: Tue 30 Apr 2024 01:44:56 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 01:44:56 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=6C9ED076608D25EBD253189CA955FC395D1080B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:df:d1:2f:d3:03:f6:c2:19:19:77:9c:5f: 7d:b2:28:f5:de:85:09:0f:73:d5:1a:5e:e3:aa:8c: 0d:99:d0:50:f4:10:a2:1a:ba:aa:e0:14:9c:62:c1: 85:07:e4:12:5a:bb:df:a1:4d:95:22:7c:22:30:76: fd:67:52:c0:71:71:d9:44:dc:e5:24:fa:dd:2e:2f: 1d:20:25:41:a3:bb:f3:22:aa:f0:da:71:6b:97:b7: 36:96:43:97:1c:ab:5a:d8:52:40:90:ab:85:d6:4b: 34:64:f1:c4:48:9a:9a:67:3d:94:e9:8a:c3:62:3e: ad:a9:03:78:34:ba:bd:da:c6:f4:94:a3:4c:37:b6: 9a:5f:3f:7f:33:48:4d:78:1e:9d:3d:75:e2:3f:28: 47:78:70:52:b9:43:e9:30:9a:d5:e4:6f:ea:4b:3f: 49:c6:e2:a3:ff:4f:50:3f:bb:45:96:1a:d5:2b:66: 92:2d:3f:15:a8:f0:6c:6d:5a:80:14:ed:db:93:e0: 56:ee:50:cf:fa:8b:85:3e:75:8c:fd:4b:d6:46:f2: 6b:d9:9b:e8:2d:bb:69:f2:ee:c7:15:84:87:41:75: 15:53:fc:0c:81:d1:34:57:ae:87:b2:fe:3f:4e:78: 6d:6f:f6:44:86:ae:28:dd:21:38:87:68:31:7a:99: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9E:D0:76:60:8D:25:EB:D2:53:18:9C:A9:55:FC:39:5D:10:80:B7 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bJ7QdmCNJevSUxicqVX8OV0QgLc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:a00::/40 Signature Algorithm: sha256WithRSAEncryption 33:22:fe:5a:1d:a5:5c:9e:86:ef:ae:ee:6d:fc:ee:04:28:04: ba:ae:f6:39:7d:dd:7c:21:5a:8a:0b:eb:ba:4b:ce:82:8d:7e: d8:c8:f2:1a:0c:02:63:45:34:1e:48:4c:a8:b4:a0:f6:19:1e: 43:52:62:da:dd:d5:2c:01:b6:ba:8e:cb:7c:81:f7:55:5e:31: d2:db:58:59:95:00:d7:47:5f:40:5c:fa:c3:be:8d:13:71:15: 4c:75:00:b3:f4:74:06:b3:8e:70:8e:44:db:f3:a8:72:35:66: 36:7c:7d:5b:d5:ea:a6:f0:30:33:45:71:3c:c4:29:04:2c:06: 31:db:34:ed:3b:39:b3:86:a3:1c:f3:df:a1:90:fa:ab:95:1f: 32:76:9a:df:92:5b:b9:b2:4e:28:d9:b6:65:a1:2e:0d:94:78: 1f:be:c8:30:1d:56:62:5b:ce:e1:cf:78:d2:0a:d5:36:aa:8f: ef:9a:77:45:f5:9b:d2:33:2b:9d:b9:55:61:2e:fe:8c:c1:67: 5d:46:27:67:0a:e1:e9:e5:7f:b5:ef:e0:60:6c:85:42:38:d1: 83:72:44:a3:98:63:80:73:cf:78:8f:d6:f1:5b:85:45:87:86: 9a:2f:0f:a0:e2:b3:5c:3a:01:63:e4:a7:de:7b:6f:cf:9e:2a: d0:8d:c7:f8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MTQ0NTZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZDOUVEMDc2NjA4RDI1 RUJEMjUzMTg5Q0E5NTVGQzM5NUQxMDgwQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCawd/RL9MD9sIZGXecX32yKPXehQkPc9UaXuOqjA2Z0FD0EKIa uqrgFJxiwYUH5BJau9+hTZUifCIwdv1nUsBxcdlE3OUk+t0uLx0gJUGju/MiqvDa cWuXtzaWQ5ccq1rYUkCQq4XWSzRk8cRImppnPZTpisNiPq2pA3g0ur3axvSUo0w3 tppfP38zSE14Hp09deI/KEd4cFK5Q+kwmtXkb+pLP0nG4qP/T1A/u0WWGtUrZpIt PxWo8GxtWoAU7duT4FbuUM/6i4U+dYz9S9ZG8mvZm+gtu2ny7scVhIdBdRVT/AyB 0TRXroey/j9OeG1v9kSGrijdITiHaDF6mWNzAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUbJ7QdmCNJevSUxicqVX8OV0QgLcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9iSjdRZG1DTkpldlNVeGljcVZYOE9WMFFnTGMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAawowDQYJKoZIhvcNAQELBQADggEBADMi/lodpVyehu+u7m38 7gQoBLqu9jl93XwhWooL67pLzoKNftjI8hoMAmNFNB5ITKi0oPYZHkNSYtrd1SwB trqOy3yB91VeMdLbWFmVANdHX0Bc+sO+jRNxFUx1ALP0dAazjnCORNvzqHI1ZjZ8 fVvV6qbwMDNFcTzEKQQsBjHbNO07ObOGoxzz36GQ+quVHzJ2mt+SW7myTijZtmWh Lg2UeB++yDAdVmJbzuHPeNIK1Taqj++ad0X1m9IzK525VWEu/ozBZ11GJ2cK4enl f7Xv4GBshUI40YNyRKOYY4Bzz3iP1vFbhUWHhpovD6Dis1w6AWPkp957b8+eKtCN x/g= -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org