$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/I1DC8SSTPHccbLSBaEnyadDNJyw.roa File: I1DC8SSTPHccbLSBaEnyadDNJyw.roa (raw, json) Hash identifier: tFMPfWuCO6FS4SQpK5PeapByU+ja1IFZ2AnhT4yQRC4= Subject key identifier: 23:50:C2:F1:24:93:3C:77:1C:6C:B4:81:68:49:F2:69:D0:CD:27:2C Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21 Certificate serial: 6A Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/I1DC8SSTPHccbLSBaEnyadDNJyw.roa Signing time: Sun 31 Mar 2024 01:28:42 +0000 ROA not before: Sun 31 Mar 2024 01:28:42 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 10010 IP address blocks: 2403:7800::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21 Validity Not Before: Mar 31 01:28:42 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=2350C2F124933C771C6CB4816849F269D0CD272C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:aa:cf:fe:08:02:02:ca:83:80:26:e7:2f: 5b:b5:9c:26:00:dd:af:be:ec:0d:2b:96:e2:3e:35: 1c:bd:2e:e8:40:6f:e8:d1:5c:a9:f0:ad:1c:23:16: 86:af:eb:ba:b2:58:e9:14:13:8d:b2:06:ce:e4:5e: 3f:e3:7f:3c:6a:0d:99:f1:54:ba:a4:09:cb:4e:4c: 87:c6:a3:53:08:1c:63:f2:f5:18:d4:74:2f:90:32: a4:0e:7c:e2:8d:8b:cc:92:cf:83:eb:ae:bb:cc:c6: d8:97:cd:24:15:46:40:4b:35:e3:7f:71:5c:ef:c4: 08:31:44:70:c0:3a:43:bf:60:1a:87:0d:00:c6:6f: 5c:77:b0:ca:ed:2b:75:da:c5:1d:55:a9:5f:cd:0b: a4:0e:84:02:e4:5d:7e:2b:cd:c0:4a:e8:b3:b6:3e: 39:05:5b:64:3b:a1:bd:70:fc:47:6b:e4:ed:6f:06: a5:51:fb:f2:36:1c:f0:fa:81:fe:2b:fb:f1:89:b9: 3f:ac:ea:38:3f:90:66:b1:2c:d3:43:54:70:d7:e7: 53:ff:ef:48:fe:2f:c8:e2:0d:b3:b6:17:21:0f:ba: d3:2b:df:c6:28:ed:7f:3e:d1:ab:42:74:89:f6:f2: e6:d5:40:77:cd:73:3a:63:db:19:1a:e1:f0:fd:d2: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:50:C2:F1:24:93:3C:77:1C:6C:B4:81:68:49:F2:69:D0:CD:27:2C X509v3 Authority Key Identifier: keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/I1DC8SSTPHccbLSBaEnyadDNJyw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:7800::/32 Signature Algorithm: sha256WithRSAEncryption 91:1e:b0:93:9c:1c:d2:95:67:0c:32:fd:bc:b7:69:e7:49:82: 84:6e:c3:f7:5c:2c:f3:c1:d5:ad:bd:20:bb:c8:be:6c:02:b9: 54:10:c6:bd:42:4e:7a:09:14:ef:ad:bb:26:3f:cc:c6:13:3a: cb:8a:50:c9:c6:e7:ab:64:5a:d6:93:eb:c6:79:29:f1:c6:c8: d8:c9:69:a8:2d:1b:a7:96:cb:8a:c6:d6:2c:71:8e:e1:09:aa: 93:e8:6e:d4:99:49:a6:2c:a4:99:f3:28:8d:ac:50:d3:f0:9e: c2:5f:56:61:d7:ed:f4:f8:58:e1:5e:b0:96:ef:b7:c1:61:0d: 17:eb:4a:ec:ff:03:cb:8e:d8:56:15:e4:5e:05:c5:6e:a3:a3: e5:0b:60:d4:47:6c:18:d3:e5:d4:53:9f:bf:8a:f3:c5:0b:57: 20:3c:c3:67:26:11:31:1e:fd:f4:f5:ce:55:6a:22:9e:8e:63: 69:ba:61:cb:73:a2:08:9e:d2:55:81:a2:fa:28:c7:5b:9f:a4: d1:32:3a:11:f9:79:55:44:03:f6:71:e9:17:d4:e5:be:cf:63: c0:53:d6:1f:59:df:a0:bd:0a:bc:50:f1:93:f6:d8:6d:bb:e4: d1:3b:e6:4a:e2:1a:8a:f1:6a:b4:81:0d:38:fc:2b:a4:20:9b: 91:2b:e2:eb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTBE ODg2NTgyQkRERjQ4QjA0MTg1MUMzOEMwQjYzMjExNUY1QzIxMB4XDTI0MDMzMTAx Mjg0MloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjM1MEMyRjEyNDkzM0M3 NzFDNkNCNDgxNjg0OUYyNjlEMENEMjcyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALSAqs/+CAICyoOAJucvW7WcJgDdr77sDSuW4j41HL0u6EBv6NFc qfCtHCMWhq/rurJY6RQTjbIGzuReP+N/PGoNmfFUuqQJy05Mh8ajUwgcY/L1GNR0 L5AypA584o2LzJLPg+uuu8zG2JfNJBVGQEs1439xXO/ECDFEcMA6Q79gGocNAMZv XHewyu0rddrFHVWpX80LpA6EAuRdfivNwEros7Y+OQVbZDuhvXD8R2vk7W8GpVH7 8jYc8PqB/iv78Ym5P6zqOD+QZrEs00NUcNfnU//vSP4vyOINs7YXIQ+60yvfxijt fz7Rq0J0ifby5tVAd81zOmPbGRrh8P3SR8ECAwEAAaOCAikwggIlMB0GA1UdDgQW BBQjUMLxJJM8dxxstIFoSfJp0M0nLDAfBgNVHSMEGDAWgBTRDYhlgr3fSLBBhRw4 wLYyEV9cITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMjgvMFEySVpZSzkzMGl3UVlVY09NQzJNaEZmWENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFEySVpZSzkzMGl3UVlVY09NQzJN aEZmWENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjI4L0kxREM4U1NUUEhjY2JMU0JhRW55YWRETkp5dy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkA3gAMA0GCSqGSIb3DQEBCwUAA4IBAQCRHrCTnBzSlWcMMv28t2nn SYKEbsP3XCzzwdWtvSC7yL5sArlUEMa9Qk56CRTvrbsmP8zGEzrLilDJxuerZFrW k+vGeSnxxsjYyWmoLRunlsuKxtYscY7hCaqT6G7UmUmmLKSZ8yiNrFDT8J7CX1Zh 1+30+FjhXrCW77fBYQ0X60rs/wPLjthWFeReBcVuo6PlC2DUR2wY0+XUU5+/ivPF C1cgPMNnJhExHv309c5VaiKejmNpumHLc6IIntJVgaL6KMdbn6TRMjoR+XlVRAP2 cekX1OW+z2PAU9YfWd+gvQq8UPGT9thtu+TRO+ZK4hqK8Wq0gQ04/CukIJuRK+Lr -----END CERTIFICATE-----Generated at Sun Feb 16 22:08:50 2025 by rpki-client