$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g8gB2BDIlZVGN7BMnMX1fg_AnXs.roa File: g8gB2BDIlZVGN7BMnMX1fg_AnXs.roa (raw, json) Hash identifier: cn/gWNwrPZMeIriPATCb0iFaw2bjDSRemgT/AXqXCII= Subject key identifier: 83:C8:01:D8:10:C8:95:95:46:37:B0:4C:9C:C5:F5:7E:0F:C0:9D:7B Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0310 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g8gB2BDIlZVGN7BMnMX1fg_AnXs.roa Signing time: Tue 30 Apr 2024 01:50:47 +0000 ROA not before: Tue 30 Apr 2024 01:50:47 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 22:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 01:50:47 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=83C801D810C895954637B04C9CC5F57E0FC09D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:d1:6b:3c:3c:ea:79:e5:93:05:e4:c2:f9: 4f:13:bb:31:a9:f2:5a:52:3c:c1:08:34:fe:9c:5a: dd:db:76:5a:a9:06:d2:03:81:5b:a5:52:83:ea:03: 8d:0e:b4:7e:74:6e:4a:8c:aa:62:d9:0c:06:f5:6f: 2b:e6:e4:1c:a6:f5:ac:ff:4a:45:af:94:85:32:75: e3:22:e6:cf:11:d7:47:36:52:f9:07:c9:ef:3a:57: fe:5e:bf:f4:aa:87:f6:34:85:e4:51:d7:5e:ad:5a: 59:54:db:88:22:6b:e3:e9:f5:34:76:9e:7a:f7:77: 38:c1:a6:1b:38:c2:5a:6c:85:0d:78:4c:e4:2d:ce: 08:b9:77:27:a4:ff:14:42:01:0b:65:db:23:3b:45: 52:36:3e:7f:be:83:c6:c8:2f:2c:58:a0:9c:bb:15: f8:25:65:85:d3:fd:50:54:eb:58:4e:f6:77:e7:4c: bc:02:a4:fb:5c:74:21:01:95:0f:7e:77:34:92:6f: 1d:76:72:a5:11:cd:c3:87:64:f6:77:0f:15:28:90: 63:3b:a7:e2:3b:6b:6d:3e:c2:08:64:d7:5d:b3:78: e4:cc:22:d3:e9:60:67:2b:a5:fc:3e:14:db:26:93: 91:13:46:35:f5:4b:80:47:e3:c0:70:9f:99:30:90: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C8:01:D8:10:C8:95:95:46:37:B0:4C:9C:C5:F5:7E:0F:C0:9D:7B X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g8gB2BDIlZVGN7BMnMX1fg_AnXs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 84:29:be:59:b9:4b:70:7c:06:86:4c:fe:da:60:4a:86:8d:82: bc:96:43:f0:06:92:7e:39:e1:af:65:a0:e9:2b:ec:77:a9:41: d3:09:72:f1:d4:9b:a9:3f:1f:30:08:26:42:21:b5:6e:c6:5e: 65:c1:ae:24:e1:99:47:70:e0:a3:d4:17:b8:c0:a1:77:49:7c: 63:84:33:84:88:1f:f8:c0:a0:88:f8:c9:51:bf:d5:83:64:46: 96:1c:36:cc:15:d5:9d:9d:61:66:4b:f7:55:1e:32:79:ec:dc: 35:7f:fa:a4:30:d1:35:0f:f7:86:d8:48:07:e0:c4:90:9b:c0: 66:de:94:f5:a3:a6:8f:b3:b2:56:a4:ce:68:69:a1:57:46:0b: 44:aa:de:bf:50:86:e7:ff:af:76:1c:13:b2:55:c8:67:2f:cd: 3a:21:0f:6d:aa:88:ab:f6:0d:f6:b6:27:39:71:d8:b0:52:c5: 6e:0a:32:74:d5:07:37:b0:40:bb:f3:b6:ff:4f:bb:ea:d7:32: f8:95:b9:31:32:dc:3b:1d:0f:fa:ed:25:d4:cb:24:d5:23:db: ce:18:54:fa:c7:0a:d3:98:4d:1c:6a:82:b7:82:17:f3:e8:65: 3d:31:c7:e6:50:98:27:77:ba:8a:89:ea:9e:9f:b4:3f:52:07: ea:da:f8:12 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MTUwNDdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgzQzgwMUQ4MTBDODk1 OTU0NjM3QjA0QzlDQzVGNTdFMEZDMDlEN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWetFrPDzqeeWTBeTC+U8TuzGp8lpSPMEINP6cWt3bdlqpBtID gVulUoPqA40OtH50bkqMqmLZDAb1byvm5Bym9az/SkWvlIUydeMi5s8R10c2UvkH ye86V/5ev/Sqh/Y0heRR116tWllU24gia+Pp9TR2nnr3dzjBphs4wlpshQ14TOQt zgi5dyek/xRCAQtl2yM7RVI2Pn++g8bILyxYoJy7FfglZYXT/VBU61hO9nfnTLwC pPtcdCEBlQ9+dzSSbx12cqURzcOHZPZ3DxUokGM7p+I7a20+wghk112zeOTMItPp YGcrpfw+FNsmk5ETRjX1S4BH48Bwn5kwkOmpAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUg8gB2BDIlZVGN7BMnMX1fg/AnXswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9nOGdCMkJESWxaVkdON0JNbk1YMWZnX0FuWHMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAa58wDQYJKoZIhvcNAQELBQADggEBAIQpvlm5S3B8BoZM/tpg SoaNgryWQ/AGkn454a9loOkr7HepQdMJcvHUm6k/HzAIJkIhtW7GXmXBriThmUdw 4KPUF7jAoXdJfGOEM4SIH/jAoIj4yVG/1YNkRpYcNswV1Z2dYWZL91UeMnns3DV/ +qQw0TUP94bYSAfgxJCbwGbelPWjpo+zslakzmhpoVdGC0Sq3r9Qhuf/r3YcE7JV yGcvzTohD22qiKv2Dfa2Jzlx2LBSxW4KMnTVBzewQLvztv9Pu+rXMviVuTEy3Dsd D/rtJdTLJNUj284YVPrHCtOYTRxqgreCF/PoZT0xx+ZQmCd3uoqJ6p6ftD9SB+ra +BI= -----END CERTIFICATE-----Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org