$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30142/DrDG5zXnEnrx6FYTupJwZUA9OVo.roa File: DrDG5zXnEnrx6FYTupJwZUA9OVo.roa (raw, json) Hash identifier: 3OhZ3jXsH5YctfBCVbRkGl/UbNVPOvoaunRBe9fYrH0= Subject key identifier: 0E:B0:C6:E7:35:E7:12:7A:F1:E8:56:13:BA:92:70:65:40:3D:39:5A Certificate issuer: /CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7 Certificate serial: 3C Authority key identifier: 9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/DrDG5zXnEnrx6FYTupJwZUA9OVo.roa Signing time: Thu 29 Feb 2024 01:31:00 +0000 ROA not before: Thu 29 Feb 2024 01:31:00 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 9371 IP address blocks: 2403:3a00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7 Validity Not Before: Feb 29 01:31:00 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=0EB0C6E735E7127AF1E85613BA927065403D395A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f9:cc:b8:03:a9:04:c2:4e:42:b4:b0:e8:3a: 94:a2:7f:ec:4e:56:c3:20:9a:63:64:8a:98:95:6f: 4b:6a:aa:58:b5:5c:bc:d9:6d:8f:3c:7d:4e:5e:aa: e7:28:7f:bd:f4:04:1c:01:39:b6:25:dc:6c:3c:b4: 5b:c6:fa:35:64:18:b5:86:17:e7:88:90:51:b1:37: 6a:25:8a:fb:58:32:58:36:b0:85:6e:14:38:d2:4b: 1c:25:f0:14:3c:66:f9:69:05:4b:fa:ed:09:36:70: 85:16:87:50:72:1b:c9:da:8a:2d:5b:7e:b7:fb:0d: b8:99:5a:db:82:e4:95:ec:a9:23:a5:31:90:38:bb: c6:ab:a5:40:5b:43:d1:7a:ad:7c:2b:09:c2:a9:56: 3b:08:ad:6a:1c:e4:52:98:19:cd:43:96:7c:48:36: a4:94:c1:00:d3:31:cc:2b:43:fa:bd:86:16:8f:c2: 37:d3:66:9c:88:30:23:f0:5f:84:12:ab:61:c5:fc: 6f:c3:6a:80:3c:31:04:fe:13:1e:20:75:2c:2b:76: be:bf:f7:19:48:06:fa:09:50:95:2c:1f:46:f8:a0: 93:28:e8:c1:06:62:da:43:16:58:44:3e:8e:c3:ab: d9:e8:dc:7f:89:69:bf:98:2f:e6:98:1f:b3:b2:c6: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B0:C6:E7:35:E7:12:7A:F1:E8:56:13:BA:92:70:65:40:3D:39:5A X509v3 Authority Key Identifier: keyid:9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/DrDG5zXnEnrx6FYTupJwZUA9OVo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:3a00::/32 Signature Algorithm: sha256WithRSAEncryption 5a:79:71:62:07:36:b7:f1:ff:18:c8:41:31:f1:fc:e4:da:7d: 13:a0:dc:14:e9:9f:d2:09:22:23:60:e2:4e:89:40:e1:11:32: 17:dc:c5:e1:9e:7d:9c:84:67:33:b0:41:9d:9e:4d:1a:cb:09: ee:72:27:d5:8c:09:57:72:7b:e9:5a:36:89:e7:ca:8d:c6:52: 91:17:f4:c3:cb:59:bc:6d:87:0c:30:65:b5:e7:f1:0e:05:59: e8:01:22:12:e2:1c:44:12:ba:36:b8:35:40:7a:f2:95:a9:42: 84:d8:b9:55:27:28:9b:c3:19:26:eb:a7:3e:70:aa:75:b8:ca: 8d:72:c6:2d:95:5a:96:d6:f3:90:8a:dc:73:29:c5:f1:89:55: de:cc:0f:bb:e6:4f:d4:a1:30:93:c3:ea:47:70:ea:91:96:d5: d5:6e:70:1e:de:cf:13:1a:29:cc:3b:b1:d4:30:f3:d3:86:1f: 96:48:36:a8:bc:bd:a4:e6:a6:a0:e6:9e:06:f6:0f:e6:3b:90: 67:79:ea:c5:30:69:c9:a8:94:f3:36:48:10:57:af:5c:89:7f: 6b:d9:53:10:2a:40:2b:07:de:f7:67:94:97:69:58:a1:e0:26: c7:cd:79:a1:4b:2e:a2:3b:4a:d6:f8:0f:c1:79:f0:8a:42:37: 51:33:41:4f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RjVC RjBFMTZGOTM0RkFBRjlDMjgxRUQwQkVDOUExRjUxMjAwQUM3MB4XDTI0MDIyOTAx MzEwMFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMEVCMEM2RTczNUU3MTI3 QUYxRTg1NjEzQkE5MjcwNjU0MDNEMzk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOz5zLgDqQTCTkK0sOg6lKJ/7E5WwyCaY2SKmJVvS2qqWLVcvNlt jzx9Tl6q5yh/vfQEHAE5tiXcbDy0W8b6NWQYtYYX54iQUbE3aiWK+1gyWDawhW4U ONJLHCXwFDxm+WkFS/rtCTZwhRaHUHIbydqKLVt+t/sNuJla24LkleypI6UxkDi7 xqulQFtD0XqtfCsJwqlWOwitahzkUpgZzUOWfEg2pJTBANMxzCtD+r2GFo/CN9Nm nIgwI/BfhBKrYcX8b8NqgDwxBP4THiB1LCt2vr/3GUgG+glQlSwfRvigkyjowQZi 2kMWWEQ+jsOr2ejcf4lpv5gv5pgfs7LGE3kCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQOsMbnNecSevHoVhO6knBlQD05WjAfBgNVHSMEGDAWgBSfW/Dhb5NPqvnCge0L 7JofUSAKxzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDIvbjF2dzRXLVRUNnI1d29IdEMteWFIMUVnQ3NjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbjF2dzRXLVRUNnI1d29IdEMteWFI MUVnQ3NjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQyL0RyREc1elhuRW5yeDZGWVR1cEp3WlVBOU9Wby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAzoAMA0GCSqGSIb3DQEBCwUAA4IBAQBaeXFiBza38f8YyEEx8fzk 2n0ToNwU6Z/SCSIjYOJOiUDhETIX3MXhnn2chGczsEGdnk0aywnucifVjAlXcnvp WjaJ58qNxlKRF/TDy1m8bYcMMGW15/EOBVnoASIS4hxEEro2uDVAevKVqUKE2LlV Jyibwxkm66c+cKp1uMqNcsYtlVqW1vOQitxzKcXxiVXezA+75k/UoTCTw+pHcOqR ltXVbnAe3s8TGinMO7HUMPPThh+WSDaovL2k5qag5p4G9g/mO5BneerFMGnJqJTz NkgQV69ciX9r2VMQKkArB973Z5SXaVih4CbHzXmhSy6iO0rW+A/BefCKQjdRM0FP -----END CERTIFICATE-----Generated at Thu Jun 6 15:06:34 2024 by rpki-client on console-ams.rpki-client.org