$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oI7aJTmAhI7Il8aBQX9YS3MlNE0.roa File: oI7aJTmAhI7Il8aBQX9YS3MlNE0.roa (raw, json) Hash identifier: 2GR4qEHXXJqQgLi0WtUIqHM0GfSDynRxwwc5ZQDPBJE= Subject key identifier: A0:8E:DA:25:39:80:84:8E:C8:97:C6:81:41:7F:58:4B:73:25:34:4D Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Certificate serial: 0315 Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oI7aJTmAhI7Il8aBQX9YS3MlNE0.roa Signing time: Tue 30 Apr 2024 01:50:48 +0000 ROA not before: Tue 30 Apr 2024 01:50:48 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 240a:40:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 20:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB Validity Not Before: Apr 30 01:50:48 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=A08EDA253980848EC897C681417F584B7325344D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:4e:6d:2b:0f:0e:8c:88:15:25:ca:34:a0: 4b:99:5c:7b:d2:a2:c9:31:58:87:6b:7f:63:bf:51: de:41:6a:b1:7f:62:ee:23:19:3e:a3:90:93:ef:82: 3a:86:75:84:39:e3:94:33:be:33:e3:ba:4e:24:87: 3c:45:3e:90:8a:e2:d3:dd:18:dc:e4:6e:00:c7:b4: 5c:ac:ac:66:f6:f7:d7:c2:08:76:04:bf:14:c7:08: d3:30:87:35:7a:a3:52:1c:90:cd:81:09:7c:88:f4: 01:e7:0e:a4:74:1b:54:18:e5:cb:dd:f9:0b:6b:74: 23:2a:62:46:d9:6f:e1:ae:ae:ab:3b:76:5c:14:b2: c2:5e:33:70:ba:d8:23:8c:1d:f8:10:6d:ff:57:39: c2:62:ad:6a:fd:94:e3:3e:0b:4a:24:60:72:85:ec: 11:de:b7:1b:a7:47:11:f6:53:e3:4c:d7:bb:50:df: 82:73:91:51:03:4c:be:4d:7c:eb:f2:11:4d:ac:f6: 11:4d:11:d1:b0:78:59:6a:28:1b:65:0e:78:b7:ac: cb:b9:8b:f7:91:2b:bc:3c:9f:da:0a:b8:ff:1a:9c: 91:73:23:03:e4:3e:8a:9e:cb:25:f7:bc:1d:69:c7: cd:b1:c7:25:60:ad:8e:1b:88:db:7d:3c:ec:43:6c: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8E:DA:25:39:80:84:8E:C8:97:C6:81:41:7F:58:4B:73:25:34:4D X509v3 Authority Key Identifier: keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oI7aJTmAhI7Il8aBQX9YS3MlNE0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 240a:40:4000::/35 Signature Algorithm: sha256WithRSAEncryption b1:5f:2c:39:c7:31:8e:4c:b4:f3:71:6b:ed:49:a6:2d:07:9d: da:ef:59:2a:67:fd:42:6d:1a:d2:81:41:3e:50:49:7e:8c:6c: 26:6e:3f:86:db:e8:d7:5d:b4:34:58:1c:de:77:c3:af:b4:f3: f1:f7:81:23:9e:62:1c:2d:7b:a7:b6:66:26:b5:6c:b8:e8:28: c5:4d:f3:97:fd:9d:20:e1:6f:4c:85:d1:89:cc:7a:5f:44:fb: 35:ee:65:ae:e6:6c:00:1a:ad:2d:46:4a:71:49:3e:f3:0d:57: 53:87:08:3c:b7:cb:12:ee:55:a4:68:d2:98:a0:07:99:c5:91: 2b:e1:e6:14:9b:dd:80:4c:e8:31:7a:e2:af:79:10:a6:8d:46: e4:05:7e:59:c0:ba:16:4f:a3:24:52:f6:a2:3c:52:b3:49:d2: 3b:c3:ee:42:67:8a:e1:56:53:24:61:db:e2:78:60:35:56:2e: c4:cd:ce:cf:32:ef:6b:12:41:e4:25:00:d8:5a:0d:b6:ee:07: 09:eb:01:0a:f4:1f:d4:ab:fa:ca:d3:2d:29:e5:6a:8f:e8:1c: e0:b0:5a:f5:63:5f:a0:fa:8e:fe:c2:2c:28:5e:2e:db:0d:9f: 0d:ec:ff:6f:e9:3e:82:97:5d:05:90:20:4d:ad:89:04:3d:cd: d9:b4:e9:88 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw MTUwNDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwOEVEQTI1Mzk4MDg0 OEVDODk3QzY4MTQxN0Y1ODRCNzMyNTM0NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCn0U5tKw8OjIgVJco0oEuZXHvSoskxWIdrf2O/Ud5BarF/Yu4j GT6jkJPvgjqGdYQ545QzvjPjuk4khzxFPpCK4tPdGNzkbgDHtFysrGb299fCCHYE vxTHCNMwhzV6o1IckM2BCXyI9AHnDqR0G1QY5cvd+QtrdCMqYkbZb+Gurqs7dlwU ssJeM3C62COMHfgQbf9XOcJirWr9lOM+C0okYHKF7BHetxunRxH2U+NM17tQ34Jz kVEDTL5NfOvyEU2s9hFNEdGweFlqKBtlDni3rMu5i/eRK7w8n9oKuP8anJFzIwPk PoqeyyX3vB1px82xxyVgrY4biNt9POxDbNjbAgMBAAGjggIqMIICJjAdBgNVHQ4E FgQUoI7aJTmAhI7Il8aBQX9YS3MlNE0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7 BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8zMDEyOS9vSTdhSlRtQWhJN0lsOGFCUVg5WVMzTWxORTAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYFJAoAQEAwDQYJKoZIhvcNAQELBQADggEBALFfLDnHMY5MtPNxa+1J pi0HndrvWSpn/UJtGtKBQT5QSX6MbCZuP4bb6NddtDRYHN53w6+08/H3gSOeYhwt e6e2Zia1bLjoKMVN85f9nSDhb0yF0YnMel9E+zXuZa7mbAAarS1GSnFJPvMNV1OH CDy3yxLuVaRo0pigB5nFkSvh5hSb3YBM6DF64q95EKaNRuQFflnAuhZPoyRS9qI8 UrNJ0jvD7kJniuFWUyRh2+J4YDVWLsTNzs8y72sSQeQlANhaDbbuBwnrAQr0H9Sr +srTLSnlao/oHOCwWvVjX6D6jv7CLCheLtsNnw3s/2/pPoKXXQWQIE2tiQQ9zdm0 6Yg= -----END CERTIFICATE-----Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org