$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/3xLq0pwBnZzX_pHVqJ_Mggzm6TE.roa File: 3xLq0pwBnZzX_pHVqJ_Mggzm6TE.roa (raw, json) Hash identifier: 7iukbyWl7D5DXmV3FR2Qx091iDdLZZ415tB95Mzcgek= Subject key identifier: DF:12:EA:D2:9C:01:9D:9C:D7:FE:91:D5:A8:9F:CC:82:0C:E6:E9:31 Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Certificate serial: 04 Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/3xLq0pwBnZzX_pHVqJ_Mggzm6TE.roa Signing time: Mon 23 Dec 2024 03:00:32 +0000 ROA not before: Mon 23 Dec 2024 03:00:32 +0000 ROA not after: Fri 19 Dec 2025 12:59:01 +0000 asID: 16509 IP address blocks: 2404:7a00:e000::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 13:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968 Validity Not Before: Dec 23 03:00:32 2024 GMT Not After : Dec 19 12:59:01 2025 GMT Subject: CN=DF12EAD29C019D9CD7FE91D5A89FCC820CE6E931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1b:54:01:bd:6d:b4:ca:e0:52:44:6a:4f:bc: be:53:c8:f6:9c:5e:4a:43:78:cd:48:15:de:9b:44: 94:f4:87:af:8c:ec:5d:b0:98:2f:d1:56:ac:19:b0: 35:cf:01:98:35:2d:1b:4c:cb:56:64:83:85:d0:40: dc:5b:b2:7f:f9:12:50:ae:ba:6d:28:a9:1c:b6:72: 29:4e:6b:93:f6:48:ec:4c:0b:5d:d0:1e:c9:67:4a: 93:0d:ac:7e:44:40:65:34:64:11:b8:be:85:f7:47: b7:ad:4d:bc:75:24:8f:2f:3c:c6:25:d5:85:44:00: e7:68:b9:06:56:b1:f5:24:51:5b:92:1f:5c:77:8f: bc:05:95:07:f3:7c:7a:b9:1b:9d:9f:7d:aa:26:1c: de:f2:fc:8e:1e:5c:f6:77:bd:0a:4d:2d:8e:b0:fb: 5b:a9:b0:63:d2:6a:33:c2:37:07:c4:3c:7e:fc:ee: bf:e6:71:2e:33:4b:ea:a1:5a:53:f5:b2:9f:be:13: 96:71:d2:41:e8:3c:30:b7:da:c7:bb:34:a0:8a:46: b8:41:c6:16:c9:a3:42:11:48:0a:a3:e6:f0:76:bf: df:27:e3:de:5d:dd:5d:9e:53:9b:0f:44:d3:5f:cc: 0f:2a:f6:22:12:e7:ef:c6:03:de:d4:2e:92:56:c8: 78:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:EA:D2:9C:01:9D:9C:D7:FE:91:D5:A8:9F:CC:82:0C:E6:E9:31 X509v3 Authority Key Identifier: keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/3xLq0pwBnZzX_pHVqJ_Mggzm6TE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:7a00:e000::/36 Signature Algorithm: sha256WithRSAEncryption 35:ab:3e:8d:a9:bc:7a:0c:aa:66:03:70:8e:f5:10:fa:79:e7: 60:ad:be:83:b4:87:99:9e:52:7f:1a:06:54:6a:f7:d1:72:7e: 12:6c:f8:75:5b:9a:0f:b9:e1:1d:65:30:06:ee:35:80:37:c2: 3d:4f:47:07:20:c4:48:a9:ba:bf:5f:2d:2f:e5:6e:e0:a2:8a: 8f:67:b0:c6:ec:97:36:50:23:2f:1d:c1:46:bf:52:16:46:0b: 4a:29:3c:80:31:9e:7d:9f:5c:9d:fb:9e:b3:ee:49:88:ae:f6: ae:8b:7c:11:ac:ac:6f:a1:e8:8f:04:35:8f:61:8a:1c:33:6a: 09:b9:b3:0f:03:80:9b:e9:03:d1:25:62:00:c9:0a:59:5c:1f: 0a:27:65:fa:29:e1:e4:cf:60:c1:db:0d:93:f0:86:68:65:b7: 40:1d:2b:0f:be:26:4d:14:ff:5d:b4:d8:15:23:3e:5c:23:19: 7d:3b:e3:ca:aa:37:fd:7e:c9:17:dc:e1:1f:08:4d:89:cb:e2: 0d:bf:a4:d4:50:7d:8f:3e:d9:22:c2:82:c6:bc:27:5b:5f:f1: 54:53:09:50:9f:05:72:f6:9c:64:6b:9b:b4:fe:e3:31:7a:32: bb:7b:89:86:22:81:39:5d:8b:94:3f:a5:36:20:fb:ed:e1:1a: 61:41:4e:02 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMEVG MDE5NEE1MEQxQ0ZCMUM3Qjk5NEJFRkU0QkU3REE2QUMxOTY4MB4XDTI0MTIyMzAz MDAzMloXDTI1MTIxOTEyNTkwMVowMzExMC8GA1UEAxMoREYxMkVBRDI5QzAxOUQ5 Q0Q3RkU5MUQ1QTg5RkNDODIwQ0U2RTkzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOYbVAG9bbTK4FJEak+8vlPI9pxeSkN4zUgV3ptElPSHr4zsXbCY L9FWrBmwNc8BmDUtG0zLVmSDhdBA3Fuyf/kSUK66bSipHLZyKU5rk/ZI7EwLXdAe yWdKkw2sfkRAZTRkEbi+hfdHt61NvHUkjy88xiXVhUQA52i5Blax9SRRW5IfXHeP vAWVB/N8erkbnZ99qiYc3vL8jh5c9ne9Ck0tjrD7W6mwY9JqM8I3B8Q8fvzuv+Zx LjNL6qFaU/Wyn74TlnHSQeg8MLfax7s0oIpGuEHGFsmjQhFICqPm8Ha/3yfj3l3d XZ5Tmw9E01/MDyr2IhLn78YD3tQuklbIeGsCAwEAAaOCAiowggImMB0GA1UdDgQW BBTfEurSnAGdnNf+kdWon8yCDObpMTAfBgNVHSMEGDAWgBSw7wGUpQ0c+xx7mUvv 5L59pqwZaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNTkvc084QmxLVU5IUHNjZTVsTDctUy1mYWFzR1dnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc084QmxLVU5IUHNjZTVsTDctUy1m YWFzR1dnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTU5LzN4THEwcHdCblp6WF9wSFZxSl9NZ2d6bTZURS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBHoA4DANBgkqhkiG9w0BAQsFAAOCAQEANas+jam8egyqZgNwjvUQ +nnnYK2+g7SHmZ5SfxoGVGr30XJ+Emz4dVuaD7nhHWUwBu41gDfCPU9HByDESKm6 v18tL+Vu4KKKj2ewxuyXNlAjLx3BRr9SFkYLSik8gDGefZ9cnfues+5JiK72rot8 Eaysb6HojwQ1j2GKHDNqCbmzDwOAm+kD0SViAMkKWVwfCidl+inh5M9gwdsNk/CG aGW3QB0rD74mTRT/XbTYFSM+XCMZfTvjyqo3/X7JF9zhHwhNicviDb+k1FB9jz7Z IsKCxrwnW1/xVFMJUJ8FcvacZGubtP7jMXoyu3uJhiKBOV2LlD+lNiD77eEaYUFO Ag== -----END CERTIFICATE-----Generated at Wed Feb 5 15:46:02 2025 by rpki-client