$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/zrA_fzWTKrm51h9vXEA3EvmP_cg.roa File: zrA_fzWTKrm51h9vXEA3EvmP_cg.roa (raw, json) Hash identifier: t4FetL69/qvzOlxlhvvr5mhOxleM4gIhWekW+/jxnIA= Subject key identifier: CE:B0:3F:7F:35:93:2A:B9:B9:D6:1F:6F:5C:40:37:12:F9:8F:FD:C8 Certificate issuer: /CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Certificate serial: 04 Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/zrA_fzWTKrm51h9vXEA3EvmP_cg.roa Signing time: Mon 15 Apr 2024 03:49:09 +0000 ROA not before: Mon 15 Apr 2024 03:49:09 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 7690 IP address blocks: 2407:d600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04 Validity Not Before: Apr 15 03:49:09 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=CEB03F7F35932AB9B9D61F6F5C403712F98FFDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:bf:6e:73:e5:2e:79:83:ad:85:0c:42:1d: 28:59:30:0b:2e:09:d0:fd:1d:8f:fe:43:c8:58:1c: 6f:b4:16:68:6c:e6:68:d5:dd:b1:d5:3f:ef:19:be: 7b:ed:23:e3:99:13:99:7b:4e:0f:c3:47:b8:34:d2: 2f:31:36:45:bf:2b:c2:35:a2:a8:32:a5:3d:01:1b: f1:36:8e:42:e1:ef:49:d0:1e:a9:c9:96:ab:cd:a6: 1c:53:66:1a:c6:74:82:5f:af:01:96:38:51:9e:75: 5b:ea:f9:d2:73:e9:69:a3:11:73:cc:c2:a5:ce:6d: 30:04:23:91:17:fb:a3:b5:ef:f3:e7:56:ad:ec:32: 77:ff:38:ee:3b:35:15:1e:d5:26:3d:92:9c:d1:a9: cb:95:3d:85:3d:7d:1a:b3:4f:7f:74:3c:1c:d4:87: fa:3c:10:bb:c4:e9:20:c9:78:40:30:9b:58:ae:db: 65:ab:fa:a5:a9:59:96:bf:ef:0c:bd:9e:ce:a6:a6: 7c:d0:52:36:58:db:fe:d7:0c:78:db:7f:ee:9b:de: fd:fc:66:ee:9c:77:2c:9c:17:c6:d0:58:51:c3:71: 9e:e5:2e:00:df:e0:69:08:0c:c3:d8:82:54:b2:73: 9b:2e:79:bb:b1:ab:b3:23:0f:9e:ac:90:65:c8:61: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B0:3F:7F:35:93:2A:B9:B9:D6:1F:6F:5C:40:37:12:F9:8F:FD:C8 X509v3 Authority Key Identifier: keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/zrA_fzWTKrm51h9vXEA3EvmP_cg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d600::/32 Signature Algorithm: sha256WithRSAEncryption 66:01:73:fa:50:bc:c6:16:39:59:89:2a:ca:9d:ed:43:cf:32: 3c:64:60:a6:27:73:7f:31:52:2c:21:db:0c:36:49:c1:48:67: a7:39:17:7d:61:9e:46:7f:96:af:74:5c:af:32:e7:5d:72:76: 8d:f3:03:d8:0d:6c:a8:5c:0e:64:dc:cc:b2:65:3b:50:01:d5: 41:b5:96:f0:9a:57:7e:6e:a6:9b:bd:04:dd:84:e6:3c:a9:35: 08:fb:60:99:40:25:c1:20:1a:43:37:7a:cc:9a:0f:be:43:49: 5b:4f:6f:03:63:23:78:cd:86:d8:99:d3:39:c8:28:f2:1b:92: c9:4b:32:df:d0:b8:c6:fa:e6:78:54:2c:43:4f:cf:dc:6c:b3: c9:f3:fb:a5:dd:f2:6f:61:40:a1:72:b4:4a:e8:f1:89:e5:d5: 59:2e:95:52:d4:f3:f9:41:1c:ee:1b:34:9a:1a:be:43:0f:8b: 0c:37:38:e4:48:02:82:d8:ef:21:f3:f7:be:c2:d4:9e:35:85: 59:ec:cb:a2:37:0d:d0:9d:fe:c5:68:80:83:42:8e:c3:da:b5: 40:c7:2e:97:0c:ad:3d:23:be:b3:9b:cf:3f:91:1e:0b:94:9e: a4:59:4c:dd:0a:ab:44:d6:d0:85:1a:54:21:02:5b:7f:26:ed: 8f:02:06:af -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MTg5 MzJGNjQxRDY1MERDODYwRDc0MTFBQzhBRUI2QzM1Qzg5RDA0MB4XDTI0MDQxNTAz NDkwOVoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0VCMDNGN0YzNTkzMkFC OUI5RDYxRjZGNUM0MDM3MTJGOThGRkRDODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6Pv25z5S55g62FDEIdKFkwCy4J0P0dj/5DyFgcb7QWaGzmaNXd sdU/7xm+e+0j45kTmXtOD8NHuDTSLzE2Rb8rwjWiqDKlPQEb8TaOQuHvSdAeqcmW q82mHFNmGsZ0gl+vAZY4UZ51W+r50nPpaaMRc8zCpc5tMAQjkRf7o7Xv8+dWrewy d/847js1FR7VJj2SnNGpy5U9hT19GrNPf3Q8HNSH+jwQu8TpIMl4QDCbWK7bZav6 palZlr/vDL2ezqamfNBSNljb/tcMeNt/7pve/fxm7px3LJwXxtBYUcNxnuUuAN/g aQgMw9iCVLJzmy55u7GrsyMPnqyQZchhrrUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTOsD9/NZMqubnWH29cQDcS+Y/9yDAfBgNVHSMEGDAWgBRhiTL2QdZQ3IYNdBGs iutsNcidBDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxODAvWVlreTlrSFdVTnlHRFhRUnJJcnJiRFhJblFRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWVlreTlrSFdVTnlHRFhRUnJJcnJi RFhJblFRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTgwL3pyQV9meldUS3JtNTFoOXZYRUEzRXZtUF9jZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB9YAMA0GCSqGSIb3DQEBCwUAA4IBAQBmAXP6ULzGFjlZiSrKne1D zzI8ZGCmJ3N/MVIsIdsMNknBSGenORd9YZ5Gf5avdFyvMuddcnaN8wPYDWyoXA5k 3MyyZTtQAdVBtZbwmld+bqabvQTdhOY8qTUI+2CZQCXBIBpDN3rMmg++Q0lbT28D YyN4zYbYmdM5yCjyG5LJSzLf0LjG+uZ4VCxDT8/cbLPJ8/ul3fJvYUChcrRK6PGJ 5dVZLpVS1PP5QRzuGzSaGr5DD4sMNzjkSAKC2O8h8/e+wtSeNYVZ7MuiNw3Qnf7F aICDQo7D2rVAxy6XDK09I76zm88/kR4LlJ6kWUzdCqtE1tCFGlQhAlt/Ju2PAgav -----END CERTIFICATE-----Generated at Sat Jun 15 02:01:40 2024 by rpki-client on console-fra.rpki-client.org