$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa File: mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa (raw, json) Hash identifier: /q7psxi2NYcBrpZYSkB2LCpvWcPkj8NJbdZyrVwaDUM= Subject key identifier: 98:A6:C1:15:67:B9:80:29:7E:87:AC:B4:BE:54:CB:63:BA:64:80:66 Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 038D Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa Signing time: Tue 30 Apr 2024 02:02:43 +0000 ROA not before: Tue 30 Apr 2024 02:02:43 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:14:ecc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 02:02:43 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=98A6C11567B980297E87ACB4BE54CB63BA648066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:97:b3:8e:73:9e:56:40:be:7c:fb:22:f0: 70:2e:27:40:77:9c:9b:b7:3c:db:3c:93:45:16:5c: 55:64:6e:84:42:6f:e2:55:6c:86:a7:f4:e4:cc:2b: 11:04:53:ed:41:c6:39:b2:40:73:d7:70:6d:9d:36: 67:4c:f5:24:3e:1d:b7:e9:ad:cb:15:f2:7b:50:b1: ea:a0:72:2a:3d:63:95:78:86:43:1d:39:9c:e7:9b: f1:59:5a:fa:fc:3b:be:db:55:6a:fe:a3:d8:ac:a0: 09:73:28:24:71:b1:82:eb:aa:32:8a:eb:60:66:b8: ba:ce:be:87:41:de:6e:e0:76:33:94:82:57:cd:f9: c6:9f:5d:d8:68:75:d5:2b:fa:c9:af:c8:08:1e:60: 40:18:8f:91:44:ed:1f:ff:e4:43:7e:ed:55:ad:c5: 50:99:15:0a:02:6a:50:2e:c1:c4:6e:47:3c:a3:5c: 97:d2:59:93:fa:75:e9:20:17:a1:c4:9c:d5:e0:02: 8b:33:60:36:48:e4:8f:2e:16:9d:c9:a5:f5:36:7d: cd:86:c4:ac:fd:a0:f2:bb:08:c1:bf:b4:80:a0:04: 84:80:c1:e2:cf:78:4f:5f:26:f3:ba:63:37:49:6b: 57:c8:26:af:f5:af:1a:23:a1:5d:d1:98:87:5d:3b: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A6:C1:15:67:B9:80:29:7E:87:AC:B4:BE:54:CB:63:BA:64:80:66 X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:14:ecc::/48 Signature Algorithm: sha256WithRSAEncryption 3d:4d:4c:94:bf:77:70:ce:d9:bc:9e:a3:f8:d9:e7:89:e0:5a: 89:4d:5e:ca:4c:74:51:48:c9:42:a8:04:2a:3c:74:40:8a:8d: 70:c0:5e:28:78:b4:97:b6:a4:2f:51:ad:0d:5c:de:4b:33:76: 2a:47:59:f3:8e:70:da:0e:d2:77:8a:1a:f5:64:b8:d1:b1:5a: 8e:a5:6d:1e:b9:b5:f9:6c:ec:db:27:66:58:db:19:cd:8f:f1: 68:3c:ab:78:59:06:8c:f0:f4:26:a1:12:91:05:2b:de:4a:e4: 5b:ec:c1:71:0b:49:5b:f0:84:97:f4:6b:d1:25:bd:fe:bc:83: a9:cb:11:4c:d2:26:72:a9:3f:ec:6e:f5:06:96:1c:1f:40:28: b2:89:60:9c:1e:65:be:12:b8:a8:35:55:da:3b:69:71:0a:d8: be:d3:59:ae:d2:82:3c:87:1a:3e:c6:39:19:06:1a:8a:0e:0b: 53:f2:0b:7a:dd:94:ad:48:aa:78:41:ac:50:77:77:21:b6:e7: 67:e5:08:46:64:f9:3a:36:b8:8f:31:83:7d:49:93:c9:db:8e: b0:2f:02:b2:d6:5e:26:bf:49:2f:c7:83:5b:d2:89:74:99:0a: 62:5c:53:b4:ca:26:71:e1:06:97:f3:f4:2b:96:90:4b:5a:49: e5:5b:cc:3f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgICA40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MjAyNDNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4QTZDMTE1NjdCOTgw Mjk3RTg3QUNCNEJFNTRDQjYzQkE2NDgwNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3dJezjnOeVkC+fPsi8HAuJ0B3nJu3PNs8k0UWXFVkboRCb+JV bIan9OTMKxEEU+1BxjmyQHPXcG2dNmdM9SQ+HbfprcsV8ntQseqgcio9Y5V4hkMd OZznm/FZWvr8O77bVWr+o9isoAlzKCRxsYLrqjKK62BmuLrOvodB3m7gdjOUglfN +cafXdhoddUr+smvyAgeYEAYj5FE7R//5EN+7VWtxVCZFQoCalAuwcRuRzyjXJfS WZP6dekgF6HEnNXgAoszYDZI5I8uFp3JpfU2fc2GxKz9oPK7CMG/tICgBISAweLP eE9fJvO6YzdJa1fIJq/1rxojoV3RmIddO1brAgMBAAGjggIrMIICJzAdBgNVHQ4E FgQUmKbBFWe5gCl+h6y0vlTLY7pkgGYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9tS2JCRldlNWdDbC1oNnkwdmxUTFk3cGtnR1ku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAoAFA7MMA0GCSqGSIb3DQEBCwUAA4IBAQA9TUyUv3dwztm8nqP4 2eeJ4FqJTV7KTHRRSMlCqAQqPHRAio1wwF4oeLSXtqQvUa0NXN5LM3YqR1nzjnDa DtJ3ihr1ZLjRsVqOpW0eubX5bOzbJ2ZY2xnNj/FoPKt4WQaM8PQmoRKRBSveSuRb 7MFxC0lb8ISX9GvRJb3+vIOpyxFM0iZyqT/sbvUGlhwfQCiyiWCcHmW+ErioNVXa O2lxCti+01mu0oI8hxo+xjkZBhqKDgtT8gt63ZStSKp4QaxQd3chtudn5QhGZPk6 NriPMYN9SZPJ246wLwKy1l4mv0kvx4Nb0ol0mQpiXFO0yiZx4QaX8/QrlpBLWknl W8w/ -----END CERTIFICATE-----Generated at Sun Feb 16 22:22:19 2025 by rpki-client