$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/0x-rrUTd9nok7mEJT2vaOUEVTIo.roa File: 0x-rrUTd9nok7mEJT2vaOUEVTIo.roa (raw, json) Hash identifier: KYe3JFWEd7Ju9Y4MDg1bJ9Yjn4/z0xkJzb9erY23pdU= Subject key identifier: D3:1F:AB:AD:44:DD:F6:7A:24:EE:61:09:4F:6B:DA:39:41:15:4C:8A Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Certificate serial: 06 Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/0x-rrUTd9nok7mEJT2vaOUEVTIo.roa Signing time: Mon 23 Dec 2024 03:00:33 +0000 ROA not before: Mon 23 Dec 2024 03:00:33 +0000 ROA not after: Fri 19 Dec 2025 12:59:01 +0000 asID: 16509 IP address blocks: 2404:7a00:f000::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 13:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Validity Not Before: Dec 23 03:00:33 2024 GMT Not After : Dec 19 12:59:01 2025 GMT Subject: CN=D31FABAD44DDF67A24EE61094F6BDA3941154C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:b5:5d:2f:84:e0:6b:7b:91:35:7a:e1:89: c4:39:e9:b2:9b:6a:a0:97:19:85:58:fe:0d:ca:7a: 75:ae:7c:4b:03:5b:26:1e:77:9b:11:f0:79:00:df: b6:b6:3e:4e:3b:e4:3d:b1:18:4f:3a:7d:50:61:53: de:7e:12:16:dd:af:f6:41:ba:16:04:4f:06:ca:73: da:55:05:dd:a8:d8:38:1c:9c:ef:0e:5f:20:1e:92: b3:d2:fc:75:04:80:21:67:98:4d:00:b0:6b:fa:9e: 2b:2c:fa:a2:f5:d2:0b:78:b0:ea:5d:98:e0:a9:fa: ac:0c:02:66:a5:ef:14:4c:2b:92:d1:d3:29:71:2c: b9:15:ae:e1:9b:ff:6f:ac:17:da:58:d5:98:d7:d4: 8d:2a:bf:6b:e6:4a:9f:25:12:33:ab:8a:8d:72:ae: 48:4e:2b:aa:9c:9e:d2:3e:0d:d0:96:03:2b:db:e2: f6:ae:6d:65:60:62:bf:16:50:77:54:a9:e6:d5:97: 8a:80:8f:1e:ab:87:a7:0d:cf:c1:eb:1b:fb:36:75: 9d:70:fb:a5:a3:54:ac:80:49:be:f0:d2:a8:3e:86: 73:de:85:78:ce:89:a0:31:88:ad:63:b7:6a:f2:17: ee:0b:02:66:f6:59:34:4a:44:cf:cf:c8:6c:bf:84: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1F:AB:AD:44:DD:F6:7A:24:EE:61:09:4F:6B:DA:39:41:15:4C:8A X509v3 Authority Key Identifier: keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/0x-rrUTd9nok7mEJT2vaOUEVTIo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7a00:f000::/36 Signature Algorithm: sha256WithRSAEncryption 06:54:c7:bd:f6:66:b9:91:7c:b7:39:48:cd:08:e4:ec:a8:55: 5f:41:50:19:31:b3:26:83:80:d3:88:63:56:72:67:c5:49:f7: d4:4d:c0:5c:a1:6c:2b:80:3f:06:7d:79:98:2c:8d:8a:f6:e1: 4e:4b:9c:5f:02:61:7a:a9:27:b2:2e:2a:da:fb:eb:b8:49:c8: ad:d9:6a:61:fe:7a:c2:e9:bc:5e:61:6b:50:13:77:45:49:88: c1:8f:1f:1f:01:40:4d:cc:f8:ea:4a:07:01:6e:75:42:27:96: 33:4f:8c:22:52:fe:5e:4f:b8:c8:17:72:2d:7c:ea:5f:ba:91: db:3f:1e:4c:7d:bf:35:38:1b:05:2b:a5:73:9c:b5:a0:62:f3: 11:15:af:a7:8c:6d:dc:79:ea:01:67:25:9b:6f:81:7e:63:4d: e9:d5:89:d6:72:c8:72:75:18:18:e0:d1:15:db:f4:d9:5f:2e: 57:45:7b:64:01:58:41:28:a9:2a:49:50:77:83:26:1d:c6:e5: d2:44:1e:8a:d0:fa:72:10:92:75:00:11:d7:9e:7e:37:ec:45: db:8b:20:b0:83:b2:b9:45:f5:40:a2:60:92:8c:7a:1c:35:6a: a1:52:19:df:a5:9a:01:02:6f:a0:ff:a7:13:8c:9e:c6:81:ac: a0:96:8d:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMEVG MDE5NEE1MEQxQ0ZCMUM3Qjk5NEJFRkU0QkU3REE2QUMxOTY4MB4XDTI0MTIyMzAz MDAzM1oXDTI1MTIxOTEyNTkwMVowMzExMC8GA1UEAxMoRDMxRkFCQUQ0NERERjY3 QTI0RUU2MTA5NEY2QkRBMzk0MTE1NEM4QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKwWtV0vhOBre5E1euGJxDnpsptqoJcZhVj+Dcp6da58SwNbJh53 mxHweQDftrY+TjvkPbEYTzp9UGFT3n4SFt2v9kG6FgRPBspz2lUF3ajYOByc7w5f IB6Ss9L8dQSAIWeYTQCwa/qeKyz6ovXSC3iw6l2Y4Kn6rAwCZqXvFEwrktHTKXEs uRWu4Zv/b6wX2ljVmNfUjSq/a+ZKnyUSM6uKjXKuSE4rqpye0j4N0JYDK9vi9q5t ZWBivxZQd1Sp5tWXioCPHquHpw3Pwesb+zZ1nXD7paNUrIBJvvDSqD6Gc96FeM6J oDGIrWO3avIX7gsCZvZZNEpEz8/IbL+ErPECAwEAAaOCAiowggImMB0GA1UdDgQW BBTTH6utRN32eiTuYQlPa9o5QRVMijAfBgNVHSMEGDAWgBSw7wGUpQ0c+xx7mUvv 5L59pqwZaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNTkvc084QmxLVU5IUHNjZTVsTDctUy1mYWFzR1dnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc084QmxLVU5IUHNjZTVsTDctUy1m YWFzR1dnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTU5LzB4LXJyVVRkOW5vazdtRUpUMnZhT1VFVlRJby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBHoA8DANBgkqhkiG9w0BAQsFAAOCAQEABlTHvfZmuZF8tzlIzQjk 7KhVX0FQGTGzJoOA04hjVnJnxUn31E3AXKFsK4A/Bn15mCyNivbhTkucXwJheqkn si4q2vvruEnIrdlqYf56wum8XmFrUBN3RUmIwY8fHwFATcz46koHAW51QieWM0+M IlL+Xk+4yBdyLXzqX7qR2z8eTH2/NTgbBSulc5y1oGLzERWvp4xt3HnqAWclm2+B fmNN6dWJ1nLIcnUYGODRFdv02V8uV0V7ZAFYQSipKklQd4MmHcbl0kQeitD6chCS dQAR155+N+xF24sgsIOyuUX1QKJgkox6HDVqoVIZ36WaAQJvoP+nE4yexoGsoJaN MA== -----END CERTIFICATE-----Generated at Wed Feb 5 15:56:50 2025 by rpki-client