$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/HsMLSlnqPCytmXjUEoKW2oiMNaE.roa File: HsMLSlnqPCytmXjUEoKW2oiMNaE.roa (raw, json) Hash identifier: hGPDlx+BrpZaabCTOwLo5JUNYReTGwTh57TGLM7LbCQ= Subject key identifier: 1E:C3:0B:4A:59:EA:3C:2C:AD:99:78:D4:12:82:96:DA:88:8C:35:A1 Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21 Certificate serial: 68 Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/HsMLSlnqPCytmXjUEoKW2oiMNaE.roa Signing time: Thu 29 Feb 2024 01:29:30 +0000 ROA not before: Thu 29 Feb 2024 01:29:30 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 10010 IP address blocks: 2406:bb00::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21 Validity Not Before: Feb 29 01:29:30 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=1EC30B4A59EA3C2CAD9978D4128296DA888C35A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:a0:1c:3a:be:60:01:9e:8a:d7:4f:17:a5: d8:5d:98:d0:8b:99:d8:44:99:9a:30:84:d5:86:31: 50:9e:23:5f:40:cb:22:d3:8d:4c:9a:71:ad:a2:05: d2:2b:8c:25:13:47:dd:f7:aa:7b:b9:98:a6:68:58: d6:ae:47:c9:76:4b:7a:9e:ac:85:19:fe:bc:71:23: e4:40:4d:b6:9a:24:73:6b:4d:67:ed:95:ca:b0:15: 0d:6c:31:c9:2b:31:4a:33:2b:70:ee:14:ec:9d:6e: f1:84:31:62:b5:dd:8e:26:e3:20:b3:99:0a:36:9e: 2d:e6:ed:18:58:5d:63:99:80:3f:9b:0e:82:42:57: 38:20:cf:03:3e:e9:6c:0d:84:9c:38:8f:ea:4f:fc: 7a:08:59:a4:5b:a3:2a:33:66:01:aa:e3:dc:28:96: 4e:ae:92:8c:59:4e:2a:9f:d4:d2:6d:e4:d7:d6:43: 34:4d:1f:cf:92:e0:e2:b5:08:63:f8:35:74:04:64: 1a:7f:a5:84:56:da:9c:27:21:aa:04:25:eb:a4:cc: 2f:61:df:2f:5f:f6:05:c1:74:d4:83:ac:90:1b:7c: f2:74:d1:44:ef:f4:7f:43:26:0c:e4:35:12:a0:cc: 78:17:8d:63:bf:5b:9d:8f:bb:ee:6a:b0:74:5a:f5: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C3:0B:4A:59:EA:3C:2C:AD:99:78:D4:12:82:96:DA:88:8C:35:A1 X509v3 Authority Key Identifier: keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/HsMLSlnqPCytmXjUEoKW2oiMNaE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:bb00::/30 Signature Algorithm: sha256WithRSAEncryption 79:8c:b5:aa:5e:34:4b:e7:0d:76:7f:23:61:ad:72:4a:63:65: 99:5a:be:79:e2:e2:8f:c1:7e:1c:ca:2f:45:88:c7:28:d6:65: 7d:a5:d6:f1:2f:7d:49:13:e2:de:91:3d:7a:ef:53:b2:96:a7: 0a:bc:49:3e:3f:1e:b7:b7:27:e3:a7:b2:b8:68:b2:43:3f:11: 51:17:8b:a8:21:ec:75:ab:e9:6f:8b:b6:a7:16:64:04:a0:2d: 29:bd:f2:5f:ee:63:08:e5:ef:14:64:56:0e:d9:34:dc:36:e0: 65:16:fe:72:ea:a8:76:e9:07:d5:b7:e7:c5:c4:10:36:f5:1b: fd:d3:85:9a:22:0e:75:b2:4f:8a:df:11:9a:41:4e:84:cd:bb: 02:ca:f8:1b:64:cf:55:55:45:da:07:28:ff:2d:de:54:53:21: 58:4e:8d:f0:79:c3:4d:0b:47:26:54:8b:60:d1:8c:6a:78:00: 59:a1:7d:ce:2d:8b:5a:4a:4f:46:1a:13:7e:ab:98:1d:96:97: b0:6f:5d:63:ed:aa:44:33:95:4a:47:27:5f:4b:89:f6:51:a5: 93:0d:8a:02:05:ab:cf:09:fa:69:6a:6e:11:f7:e0:d6:52:29: b0:3f:02:a8:31:51:52:ce:0b:20:3a:85:3a:6e:31:6c:d9:c7: 9c:c3:67:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTBE ODg2NTgyQkRERjQ4QjA0MTg1MUMzOEMwQjYzMjExNUY1QzIxMB4XDTI0MDIyOTAx MjkzMFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMUVDMzBCNEE1OUVBM0My Q0FEOTk3OEQ0MTI4Mjk2REE4ODhDMzVBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5QoBw6vmABnorXTxel2F2Y0IuZ2ESZmjCE1YYxUJ4jX0DLItON TJpxraIF0iuMJRNH3feqe7mYpmhY1q5HyXZLep6shRn+vHEj5EBNtpokc2tNZ+2V yrAVDWwxySsxSjMrcO4U7J1u8YQxYrXdjibjILOZCjaeLebtGFhdY5mAP5sOgkJX OCDPAz7pbA2EnDiP6k/8eghZpFujKjNmAarj3CiWTq6SjFlOKp/U0m3k19ZDNE0f z5Lg4rUIY/g1dARkGn+lhFbanCchqgQl66TML2HfL1/2BcF01IOskBt88nTRRO/0 f0MmDOQ1EqDMeBeNY79bnY+77mqwdFr1iB0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBQewwtKWeo8LK2ZeNQSgpbaiIw1oTAfBgNVHSMEGDAWgBTRDYhlgr3fSLBBhRw4 wLYyEV9cITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMjgvMFEySVpZSzkzMGl3UVlVY09NQzJNaEZmWENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFEySVpZSzkzMGl3UVlVY09NQzJN aEZmWENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjI4L0hzTUxTbG5xUEN5dG1YalVFb0tXMm9pTU5hRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQIkBrsAMA0GCSqGSIb3DQEBCwUAA4IBAQB5jLWqXjRL5w12fyNhrXJK Y2WZWr554uKPwX4cyi9FiMco1mV9pdbxL31JE+LekT1671OylqcKvEk+Px63tyfj p7K4aLJDPxFRF4uoIex1q+lvi7anFmQEoC0pvfJf7mMI5e8UZFYO2TTcNuBlFv5y 6qh26QfVt+fFxBA29Rv904WaIg51sk+K3xGaQU6EzbsCyvgbZM9VVUXaByj/Ld5U UyFYTo3wecNNC0cmVItg0YxqeABZoX3OLYtaSk9GGhN+q5gdlpewb11j7apEM5VK RydfS4n2UaWTDYoCBavPCfppam4R9+DWUimwPwKoMVFSzgsgOoU6bjFs2cecw2cN -----END CERTIFICATE-----Generated at Sat Jun 1 15:54:27 2024 by rpki-client on console-ams.rpki-client.org