$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hdYERRLHUdlF2nXCyw-H6nHYddY.roa File: hdYERRLHUdlF2nXCyw-H6nHYddY.roa (raw, json) Hash identifier: Up8LyHEF5SPz78CnYJoKSIy2Q76WJHOxjWYNSW6cucQ= Subject key identifier: 85:D6:04:45:12:C7:51:D9:45:DA:75:C2:CB:0F:87:EA:71:D8:75:D6 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 01BA Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hdYERRLHUdlF2nXCyw-H6nHYddY.roa Signing time: Tue 30 May 2023 17:36:32 +0000 ROA not before: Tue 30 May 2023 17:36:32 +0000 ROA not after: Tue 14 May 2024 01:30:02 +0000 asID: 9605 IP address blocks: 240a:6b:2300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 13:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: May 30 17:36:32 2023 GMT Not After : May 14 01:30:02 2024 GMT Subject: CN=85D6044512C751D945DA75C2CB0F87EA71D875D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:10:67:db:f8:3c:92:ac:a8:4e:15:a8:98: 85:9b:f4:33:30:70:b0:ba:2d:eb:99:e7:39:c0:6e: 82:a6:aa:cb:fe:34:5b:25:2e:f4:0f:d5:fc:b4:4e: 31:3d:fb:e1:ba:f0:ad:9e:21:61:5b:4f:86:1c:81: 67:a7:ba:99:b7:01:15:81:a7:3f:09:11:31:9d:34: f8:f0:70:8a:5c:d8:24:20:4b:7c:6b:53:22:76:64: 26:1b:8f:60:7b:b9:e9:0e:3a:86:2a:0c:0c:3b:28: 96:83:1b:c7:c5:b6:ab:e9:b0:41:65:8c:a6:3e:3d: 10:8b:be:fa:44:f0:99:97:20:6f:35:c9:77:7b:80: e7:b7:e7:9f:b9:5b:2e:80:95:ff:33:2a:3f:ce:9a: 3a:6a:98:17:d0:d4:6e:41:36:45:27:bd:8e:e6:0d: ee:6f:89:22:1b:52:44:00:0d:1c:c2:7c:8e:e4:cb: 13:8c:bc:ea:40:cc:fd:52:9e:a7:5c:7d:57:67:12: bf:db:00:b5:ee:29:d4:c8:e1:bc:b1:61:56:c1:c0: 0e:c5:c5:78:9e:68:19:db:66:83:e4:a9:9a:d2:06: 0d:ee:a8:20:37:c5:0c:b7:c6:4c:53:f6:69:db:fa: e3:7e:cf:08:d0:90:67:58:99:be:91:cd:23:e8:98: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D6:04:45:12:C7:51:D9:45:DA:75:C2:CB:0F:87:EA:71:D8:75:D6 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hdYERRLHUdlF2nXCyw-H6nHYddY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:6b:2300::/40 Signature Algorithm: sha256WithRSAEncryption 91:50:81:8f:38:f1:d0:42:ff:87:4e:fa:d3:d3:3c:1e:80:d0: b8:c7:bc:e0:49:c6:aa:15:58:ac:94:ab:fd:99:a4:cc:89:25: 6e:ab:cd:8b:09:ad:e7:18:12:42:61:cf:b1:fe:e4:02:98:e3: a3:54:a4:1d:13:0f:87:58:4f:8c:2e:d5:1d:d5:08:47:ec:ac: 9c:7f:99:66:e1:81:fb:11:b7:f1:5c:b1:41:dd:3d:14:01:01: ed:17:97:c2:31:e4:da:98:ad:f5:19:24:80:1f:86:ec:d4:86: 90:3e:7a:37:15:9c:46:e3:6e:74:0e:df:cc:9e:d0:a1:bb:32: 1f:1d:b3:d1:fd:ec:d6:1a:41:d4:02:f5:59:2a:0c:21:d5:78: 84:d1:f3:82:e7:aa:2f:67:33:e4:13:91:24:c7:af:53:33:b1: ff:9d:c4:38:a1:03:29:5e:13:64:2c:21:2d:bf:78:49:0a:a5: 6c:dc:36:cc:77:22:94:d0:38:51:b8:22:ca:9c:b6:e0:64:45: 7c:22:af:4b:b8:6f:9e:fd:d0:ea:f3:6a:54:03:d2:b3:a9:09: 58:05:07:61:20:9f:ed:5d:e5:0a:a6:57:d6:13:56:ed:c6:3c: 11:ec:7b:97:6c:34:31:b6:6b:73:c7:e0:eb:12:6e:d9:4f:9f: 9a:b7:9e:49 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx NzM2MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDg1RDYwNDQ1MTJDNzUx RDk0NURBNzVDMkNCMEY4N0VBNzFEODc1RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3IxBn2/g8kqyoThWomIWb9DMwcLC6LeuZ5znAboKmqsv+NFsl LvQP1fy0TjE9++G68K2eIWFbT4YcgWenupm3ARWBpz8JETGdNPjwcIpc2CQgS3xr UyJ2ZCYbj2B7uekOOoYqDAw7KJaDG8fFtqvpsEFljKY+PRCLvvpE8JmXIG81yXd7 gOe355+5Wy6Alf8zKj/OmjpqmBfQ1G5BNkUnvY7mDe5viSIbUkQADRzCfI7kyxOM vOpAzP1SnqdcfVdnEr/bALXuKdTI4byxYVbBwA7FxXieaBnbZoPkqZrSBg3uqCA3 xQy3xkxT9mnb+uN+zwjQkGdYmb6RzSPomPhZAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUhdYERRLHUdlF2nXCyw+H6nHYddYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9oZFlFUlJMSFVkbEYyblhDeXctSDZuSFlkZFku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAoAayMwDQYJKoZIhvcNAQELBQADggEBAJFQgY848dBC/4dO+tPT PB6A0LjHvOBJxqoVWKyUq/2ZpMyJJW6rzYsJrecYEkJhz7H+5AKY46NUpB0TD4dY T4wu1R3VCEfsrJx/mWbhgfsRt/FcsUHdPRQBAe0Xl8Ix5NqYrfUZJIAfhuzUhpA+ ejcVnEbjbnQO38ye0KG7Mh8ds9H97NYaQdQC9VkqDCHVeITR84Lnqi9nM+QTkSTH r1Mzsf+dxDihAyleE2QsIS2/eEkKpWzcNsx3IpTQOFG4IsqctuBkRXwir0u4b579 0OrzalQD0rOpCVgFB2Egn+1d5QqmV9YTVu3GPBHse5dsNDG2a3PH4OsSbtlPn5q3 nkk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:53 2024 by rpki-client on console-ams.rpki-client.org