$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/3c0aaQ_D72rIkLvKNouKYLSRLec.roa File: 3c0aaQ_D72rIkLvKNouKYLSRLec.roa (raw, json) Hash identifier: erwu5mIVkvMR4u0KIdaJX4Y9Y9iu/DRWy4+smywNAR8= Subject key identifier: DD:CD:1A:69:0F:C3:EF:6A:C8:90:BB:CA:36:8B:8A:60:B4:91:2D:E7 Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21 Certificate serial: 67 Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/3c0aaQ_D72rIkLvKNouKYLSRLec.roa Signing time: Thu 29 Feb 2024 01:29:29 +0000 ROA not before: Thu 29 Feb 2024 01:29:29 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 2403:7800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21 Validity Not Before: Feb 29 01:29:29 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=DDCD1A690FC3EF6AC890BBCA368B8A60B4912DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:c4:39:8d:94:1e:6e:82:45:4e:05:7a:e8: bb:97:fa:22:c4:78:21:f8:37:57:00:91:83:a9:6c: 9a:6a:8f:c0:f7:d5:90:b6:82:b9:9a:d3:98:de:d5: 68:0a:4c:da:84:41:cb:d4:63:f7:fc:9e:91:c0:0f: ce:62:b6:f9:ab:75:83:80:e6:4c:d3:49:18:e0:72: 1f:2d:4c:63:83:74:43:39:f8:fa:0e:e8:65:51:b4: 6f:46:bd:af:88:19:79:42:e0:d5:2e:fc:3c:42:d8: aa:77:1b:de:b7:55:16:9a:00:54:53:29:92:fe:9e: 5b:78:6a:41:35:10:cd:58:dc:ff:8e:49:b3:d4:ca: 5a:31:77:d8:87:88:4f:50:55:0b:e8:d4:eb:be:16: 37:2f:9d:ef:c4:85:ac:65:ed:a8:32:ff:84:ce:9b: f4:3a:3e:31:89:20:e3:db:63:7b:72:07:da:48:d9: 40:4e:b3:1f:f9:cc:c4:03:52:ff:12:48:77:8c:93: 05:da:f6:0e:bd:7b:a5:56:e2:9e:8f:53:8d:4a:2d: e0:dc:9b:2e:1b:b8:b2:6e:07:e4:f5:6a:7a:c6:a4: 40:27:51:d7:80:e1:52:68:9a:f6:52:d0:16:66:bc: 51:e7:08:92:4a:72:18:5b:80:57:a7:40:de:ca:c9: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CD:1A:69:0F:C3:EF:6A:C8:90:BB:CA:36:8B:8A:60:B4:91:2D:E7 X509v3 Authority Key Identifier: keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/3c0aaQ_D72rIkLvKNouKYLSRLec.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:7800::/32 Signature Algorithm: sha256WithRSAEncryption 3e:d1:b6:a0:e1:ca:0a:1d:e5:ee:4b:0d:88:20:5d:75:1e:84: 95:88:58:19:19:5b:b3:5a:22:0f:d1:3d:fe:cf:3a:b3:c6:4f: d9:c4:b5:04:30:56:1b:d5:e3:54:11:2f:47:ef:f3:eb:76:6c: e2:91:4f:31:bd:62:d0:79:d2:f0:6f:62:04:47:09:b5:05:1f: ab:9b:58:21:5e:04:a7:c2:e5:17:e5:c2:74:df:87:16:1c:95: 66:81:52:a3:9d:ea:55:d6:3b:9a:37:44:d6:d2:cc:17:f2:ea: 14:53:ce:c8:98:94:ed:6c:94:30:b0:7e:8b:8f:80:5e:de:eb: e1:93:63:91:51:39:17:55:40:94:50:74:1d:b7:fd:b9:04:60: e6:1c:f8:5d:2e:e3:7c:db:35:09:56:d1:6c:b4:d8:32:48:fd: f0:9c:4f:43:2e:e7:76:32:d7:37:61:13:f5:d8:ab:05:83:e2: 29:3e:c1:3f:3e:4b:7f:8c:15:fa:70:43:a8:c1:15:b8:bb:75: 13:aa:eb:14:15:bf:f9:ce:c3:93:a6:24:1a:4e:ec:af:79:f9: c2:41:96:50:a0:52:a7:81:7a:45:79:5a:c1:76:10:69:f5:0d: af:db:b0:d1:54:fa:9c:16:be:08:d9:63:1d:7f:71:48:35:f8: 59:6e:e8:35 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTBE ODg2NTgyQkRERjQ4QjA0MTg1MUMzOEMwQjYzMjExNUY1QzIxMB4XDTI0MDIyOTAx MjkyOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRERDRDFBNjkwRkMzRUY2 QUM4OTBCQkNBMzY4QjhBNjBCNDkxMkRFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM7exDmNlB5ugkVOBXrou5f6IsR4Ifg3VwCRg6lsmmqPwPfVkLaC uZrTmN7VaApM2oRBy9Rj9/yekcAPzmK2+at1g4DmTNNJGOByHy1MY4N0Qzn4+g7o ZVG0b0a9r4gZeULg1S78PELYqncb3rdVFpoAVFMpkv6eW3hqQTUQzVjc/45Js9TK WjF32IeIT1BVC+jU674WNy+d78SFrGXtqDL/hM6b9Do+MYkg49tje3IH2kjZQE6z H/nMxANS/xJId4yTBdr2Dr17pVbino9TjUot4NybLhu4sm4H5PVqesakQCdR14Dh Umia9lLQFma8UecIkkpyGFuAV6dA3srJtLkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTdzRppD8PvasiQu8o2i4pgtJEt5zAfBgNVHSMEGDAWgBTRDYhlgr3fSLBBhRw4 wLYyEV9cITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMjgvMFEySVpZSzkzMGl3UVlVY09NQzJNaEZmWENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFEySVpZSzkzMGl3UVlVY09NQzJN aEZmWENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjI4LzNjMGFhUV9ENzJySWtMdktOb3VLWUxTUkxlYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkA3gAMA0GCSqGSIb3DQEBCwUAA4IBAQA+0bag4coKHeXuSw2IIF11 HoSViFgZGVuzWiIP0T3+zzqzxk/ZxLUEMFYb1eNUES9H7/PrdmzikU8xvWLQedLw b2IERwm1BR+rm1ghXgSnwuUX5cJ034cWHJVmgVKjnepV1juaN0TW0swX8uoUU87I mJTtbJQwsH6Lj4Be3uvhk2ORUTkXVUCUUHQdt/25BGDmHPhdLuN82zUJVtFstNgy SP3wnE9DLud2Mtc3YRP12KsFg+IpPsE/Pkt/jBX6cEOowRW4u3UTqusUFb/5zsOT piQaTuyvefnCQZZQoFKngXpFeVrBdhBp9Q2v27DRVPqcFr4I2WMdf3FINfhZbug1 -----END CERTIFICATE-----Generated at Sun Jun 16 12:57:19 2024 by rpki-client on console-fra.rpki-client.org