$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/mNgtEQNTfHEJkPAavkuI7W1NgG0.roa File: mNgtEQNTfHEJkPAavkuI7W1NgG0.roa (raw, json) Hash identifier: B5vm3WbBGLMbgPac0Kh5jwYGahB1nV48nGqj//UX2s4= Subject key identifier: 98:D8:2D:11:03:53:7C:71:09:90:F0:1A:BE:4B:88:ED:6D:4D:80:6D Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21 Certificate serial: 6C Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/mNgtEQNTfHEJkPAavkuI7W1NgG0.roa Signing time: Sun 31 Mar 2024 01:28:43 +0000 ROA not before: Sun 31 Mar 2024 01:28:43 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 10010 IP address blocks: 2406:bb00::/29 maxlen: 56 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 11:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21 Validity Not Before: Mar 31 01:28:43 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=98D82D1103537C710990F01ABE4B88ED6D4D806D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:a4:13:34:b7:0e:c5:67:f5:b0:91:0b:d2: 0f:b7:9e:17:fb:ad:a7:c6:f5:c6:d9:5f:a5:29:0e: 92:1a:7f:f5:c9:77:dc:14:81:2b:18:10:f9:50:b0: 91:e0:73:19:39:6a:99:3a:f7:ab:30:0a:55:38:47: 1d:28:f9:7f:5b:76:09:33:2b:0e:13:20:2e:88:77: 19:17:d0:c9:52:7f:e6:e4:dd:bb:d6:4b:bd:8e:65: 0d:03:cb:f9:bc:70:b8:c2:fb:6e:be:4c:a5:3e:cc: 13:66:ba:28:59:e4:bf:56:6f:3e:46:0c:af:dd:7b: c1:da:6f:90:92:f4:a5:47:dd:01:8f:58:1e:29:8b: 8b:ea:4d:86:fa:c4:ea:ec:b1:e1:88:b7:f7:17:98: 3e:be:f4:d8:0f:5f:fa:3b:89:a4:b7:5f:be:c6:eb: 3b:21:93:a3:89:8c:bb:76:5d:12:d7:8f:51:c2:d0: 0d:38:01:e2:21:52:f5:db:30:85:17:e9:ad:51:1a: 96:c7:c6:0e:da:f1:96:9b:3f:dc:ff:63:43:20:8a: 3e:74:ef:7d:ce:9f:f8:5b:04:0b:7e:88:db:03:fc: 39:dc:f0:3f:cb:34:ac:1a:bc:7c:20:44:09:57:2e: 14:af:64:0b:45:f2:d0:ad:0d:fd:d4:dd:b7:4e:22: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:2D:11:03:53:7C:71:09:90:F0:1A:BE:4B:88:ED:6D:4D:80:6D X509v3 Authority Key Identifier: keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/mNgtEQNTfHEJkPAavkuI7W1NgG0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:bb00::/29 Signature Algorithm: sha256WithRSAEncryption 86:7b:d8:d1:af:66:5a:22:51:d6:6f:a2:8f:cb:b4:14:6b:81: e3:1f:fd:97:a7:8e:7b:b9:b1:06:8f:66:dd:29:d8:d5:a1:92: da:e0:63:77:08:10:fb:50:f5:08:58:bb:83:e2:38:0a:9e:04: 83:25:78:2a:89:a0:40:12:c0:fb:49:a4:ba:92:f4:97:47:59: c3:e9:9e:a8:f0:a9:8c:3e:8c:3a:bb:11:cb:a0:01:84:8b:10: 1d:96:9c:d2:ed:12:c6:bc:66:f0:e8:df:f8:5e:82:9c:d4:25: b8:97:54:cc:01:68:3e:2a:2e:bc:43:21:c1:76:49:f8:76:21: 66:22:78:59:61:a8:c6:8c:a5:2e:23:9d:79:80:43:04:f1:77: 75:cf:11:85:b8:9c:3e:5e:aa:44:95:22:79:8d:34:f8:2d:55: 1e:92:fa:f8:78:d2:62:ff:59:58:28:c3:c9:3d:a2:e4:74:51: 54:dc:1f:8f:4c:02:a3:ad:1f:1c:72:e6:e2:f8:7b:87:a4:d8: 33:25:47:fc:b4:9d:f1:aa:9a:74:c6:ca:f3:1b:28:88:54:59: f8:6d:32:11:74:74:d1:03:3d:e7:d2:b3:50:df:31:10:c7:1f: 61:4f:ac:dc:f9:d2:80:1e:70:ca:83:5a:73:71:a1:0a:fc:11: ce:65:a3:9a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTBE ODg2NTgyQkRERjQ4QjA0MTg1MUMzOEMwQjYzMjExNUY1QzIxMB4XDTI0MDMzMTAx Mjg0M1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOThEODJEMTEwMzUzN0M3 MTA5OTBGMDFBQkU0Qjg4RUQ2RDREODA2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALtdpBM0tw7FZ/WwkQvSD7eeF/utp8b1xtlfpSkOkhp/9cl33BSB KxgQ+VCwkeBzGTlqmTr3qzAKVThHHSj5f1t2CTMrDhMgLoh3GRfQyVJ/5uTdu9ZL vY5lDQPL+bxwuML7br5MpT7ME2a6KFnkv1ZvPkYMr917wdpvkJL0pUfdAY9YHimL i+pNhvrE6uyx4Yi39xeYPr702A9f+juJpLdfvsbrOyGTo4mMu3ZdEtePUcLQDTgB 4iFS9dswhRfprVEalsfGDtrxlps/3P9jQyCKPnTvfc6f+FsEC36I2wP8OdzwP8s0 rBq8fCBECVcuFK9kC0Xy0K0N/dTdt04i+UUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSY2C0RA1N8cQmQ8Bq+S4jtbU2AbTAfBgNVHSMEGDAWgBTRDYhlgr3fSLBBhRw4 wLYyEV9cITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMjgvMFEySVpZSzkzMGl3UVlVY09NQzJNaEZmWENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFEySVpZSzkzMGl3UVlVY09NQzJN aEZmWENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjI4L21OZ3RFUU5UZkhFSmtQQWF2a3VJN1cxTmdHMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQMkBrsAMA0GCSqGSIb3DQEBCwUAA4IBAQCGe9jRr2ZaIlHWb6KPy7QU a4HjH/2Xp457ubEGj2bdKdjVoZLa4GN3CBD7UPUIWLuD4jgKngSDJXgqiaBAEsD7 SaS6kvSXR1nD6Z6o8KmMPow6uxHLoAGEixAdlpzS7RLGvGbw6N/4XoKc1CW4l1TM AWg+Ki68QyHBdkn4diFmInhZYajGjKUuI515gEME8Xd1zxGFuJw+XqpElSJ5jTT4 LVUekvr4eNJi/1lYKMPJPaLkdFFU3B+PTAKjrR8ccubi+HuHpNgzJUf8tJ3xqpp0 xsrzGyiIVFn4bTIRdHTRAz3n0rNQ3zEQxx9hT6zc+dKAHnDKg1pzcaEK/BHOZaOa -----END CERTIFICATE-----Generated at Sun Jun 16 14:31:50 2024 by rpki-client on console-ams.rpki-client.org