$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30201/NCqhQn_7o776fCaZYH3REv3wPk4.roa File: NCqhQn_7o776fCaZYH3REv3wPk4.roa (raw, json) Hash identifier: mf9KOJNKDqR23PPaBxM0MtDxqTDUlYDBvyyx5de7+oE= Subject key identifier: 34:2A:A1:42:7F:FB:A3:BE:FA:7C:26:99:60:7D:D1:12:FD:F0:3E:4E Certificate issuer: /CN=F02CCAFADD1DB0D57751B20D7729CA4DA8F4D202 Certificate serial: 1F Authority key identifier: F0:2C:CA:FA:DD:1D:B0:D5:77:51:B2:0D:77:29:CA:4D:A8:F4:D2:02 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/NCqhQn_7o776fCaZYH3REv3wPk4.roa Signing time: Thu 29 Feb 2024 01:34:18 +0000 ROA not before: Thu 29 Feb 2024 01:34:18 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 17530 IP address blocks: 2401:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F02CCAFADD1DB0D57751B20D7729CA4DA8F4D202 Validity Not Before: Feb 29 01:34:18 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=342AA1427FFBA3BEFA7C2699607DD112FDF03E4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:e5:28:bc:b1:4b:5d:44:50:94:12:a1:0c: 91:0c:59:c5:ab:a8:8b:68:5b:9e:ef:e2:15:9b:da: 23:65:c1:27:d5:9f:8c:41:3e:7a:f0:03:37:00:e1: 64:e3:a5:24:c4:f4:be:ec:36:68:0d:6d:70:bd:c5: 97:e7:30:8c:1f:35:cb:ce:b4:ce:a3:2d:73:12:dc: a2:a6:a0:31:25:79:d9:d5:6f:e8:97:38:9b:06:f5: f9:29:51:fc:0c:a6:21:9f:be:6e:a5:45:ab:fd:7c: d3:82:cd:7e:fa:53:a7:ea:6f:dd:11:41:63:fa:c1: de:42:91:26:19:5e:2b:cd:8a:40:1b:ce:21:da:75: 56:5e:04:60:ed:d9:90:be:c0:c7:f0:40:10:3d:59: 73:c5:56:4f:68:f9:59:3c:34:d7:ee:d0:66:74:13: 06:8c:24:59:93:29:44:d9:15:70:e4:c4:87:2d:08: f3:33:d0:6e:88:20:58:4e:b0:4f:2f:8e:45:2b:cc: 58:93:db:1d:33:8b:af:b8:9b:3c:48:2f:e4:64:e0: 0d:f0:18:f3:63:ed:f8:c6:53:e0:6d:04:99:49:96: ea:64:c6:1c:80:78:fe:bb:70:c4:6c:6c:d9:8f:3d: 7c:b3:5c:75:b5:5f:b8:29:ce:6d:ca:b1:47:43:98: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:A1:42:7F:FB:A3:BE:FA:7C:26:99:60:7D:D1:12:FD:F0:3E:4E X509v3 Authority Key Identifier: keyid:F0:2C:CA:FA:DD:1D:B0:D5:77:51:B2:0D:77:29:CA:4D:A8:F4:D2:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/8CzK-t0dsNV3UbINdynKTaj00gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8CzK-t0dsNV3UbINdynKTaj00gI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30201/NCqhQn_7o776fCaZYH3REv3wPk4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf00::/32 Signature Algorithm: sha256WithRSAEncryption e6:2e:cc:29:76:75:68:31:e1:aa:19:8a:04:1e:64:c1:dd:8e: 36:3b:96:04:7d:b2:47:b6:cd:07:e0:a5:89:4f:69:3a:9d:b5: 4a:50:22:be:31:16:e9:62:71:c8:d4:43:e1:36:a2:b9:f7:96: 93:8d:2e:0d:98:f1:5b:b6:c0:9e:ad:d6:30:6c:89:4d:23:73: 26:b5:ca:3a:70:53:ea:94:ef:61:3c:1e:38:71:ab:57:17:f1: 12:84:f0:04:95:9e:38:e6:fe:2d:f0:57:d6:3a:e9:f4:9f:31: 1b:21:43:b6:f3:16:3a:33:dd:c0:39:d4:94:29:df:e0:0a:d6: 71:6e:8d:dc:ad:17:79:97:3d:f6:60:c9:00:09:06:42:12:ac: 04:61:72:4d:79:da:ce:b4:f6:50:bf:4a:a3:0b:97:8d:17:d3: 90:06:4c:f6:46:34:8c:4c:ac:a2:85:09:5e:f0:7b:52:45:3e: 55:66:7b:91:e0:a2:a5:9b:7c:b3:16:87:e0:28:9a:80:3b:a3: e0:19:0c:42:cc:04:29:23:0a:cf:06:12:db:73:db:17:f2:15: d6:04:dc:7a:5b:bf:3c:7b:b6:8e:84:41:73:ce:88:7b:c1:d8: cb:55:d3:dc:d9:8b:76:93:23:50:87:ca:f1:d1:7d:60:03:48: eb:63:a7:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDJD Q0FGQUREMURCMEQ1Nzc1MUIyMEQ3NzI5Q0E0REE4RjREMjAyMB4XDTI0MDIyOTAx MzQxOFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMzQyQUExNDI3RkZCQTNC RUZBN0MyNjk5NjA3REQxMTJGREYwM0U0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJUq5Si8sUtdRFCUEqEMkQxZxauoi2hbnu/iFZvaI2XBJ9WfjEE+ evADNwDhZOOlJMT0vuw2aA1tcL3Fl+cwjB81y860zqMtcxLcoqagMSV52dVv6Jc4 mwb1+SlR/AymIZ++bqVFq/1804LNfvpTp+pv3RFBY/rB3kKRJhleK82KQBvOIdp1 Vl4EYO3ZkL7Ax/BAED1Zc8VWT2j5WTw01+7QZnQTBowkWZMpRNkVcOTEhy0I8zPQ boggWE6wTy+ORSvMWJPbHTOLr7ibPEgv5GTgDfAY82Pt+MZT4G0EmUmW6mTGHIB4 /rtwxGxs2Y89fLNcdbVfuCnObcqxR0OYIJcCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQ0KqFCf/ujvvp8JplgfdES/fA+TjAfBgNVHSMEGDAWgBTwLMr63R2w1XdRsg13 KcpNqPTSAjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMDEvOEN6Sy10MGRzTlYzVWJJTmR5bktUYWowMGdJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOEN6Sy10MGRzTlYzVWJJTmR5bktU YWowMGdJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjAxL05DcWhRbl83bzc3NmZDYVpZSDNSRXYzd1BrNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAb8AMA0GCSqGSIb3DQEBCwUAA4IBAQDmLswpdnVoMeGqGYoEHmTB 3Y42O5YEfbJHts0H4KWJT2k6nbVKUCK+MRbpYnHI1EPhNqK595aTjS4NmPFbtsCe rdYwbIlNI3Mmtco6cFPqlO9hPB44catXF/EShPAElZ445v4t8FfWOun0nzEbIUO2 8xY6M93AOdSUKd/gCtZxbo3crRd5lz32YMkACQZCEqwEYXJNedrOtPZQv0qjC5eN F9OQBkz2RjSMTKyihQle8HtSRT5VZnuR4KKlm3yzFofgKJqAO6PgGQxCzAQpIwrP BhLbc9sX8hXWBNx6W788e7aOhEFzzoh7wdjLVdPc2Yt2kyNQh8rx0X1gA0jrY6cV -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org