$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30229/vF9vyRo53I1yWSJmveVEWGjVzns.roa File: vF9vyRo53I1yWSJmveVEWGjVzns.roa (raw, json) Hash identifier: icdlV2YvyutqUJl0Pn3MPCUzxLIdUh5DY5TYudYi9GM= Subject key identifier: BC:5F:6F:C9:1A:39:DC:8D:72:59:22:66:BD:E5:44:58:68:D5:CE:7B Certificate issuer: /CN=E06AF47B5B3459CAE224BEC7ED12FC5743434EFE Certificate serial: 02 Authority key identifier: E0:6A:F4:7B:5B:34:59:CA:E2:24:BE:C7:ED:12:FC:57:43:43:4E:FE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4Gr0e1s0WcriJL7H7RL8V0NDTv4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/vF9vyRo53I1yWSJmveVEWGjVzns.roa Signing time: Mon 12 Aug 2024 01:00:12 +0000 ROA not before: Mon 12 Aug 2024 01:00:12 +0000 ROA not after: Tue 12 Aug 2025 00:44:05 +0000 asID: 55891 IP address blocks: 2403:7300::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/4Gr0e1s0WcriJL7H7RL8V0NDTv4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/4Gr0e1s0WcriJL7H7RL8V0NDTv4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4Gr0e1s0WcriJL7H7RL8V0NDTv4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E06AF47B5B3459CAE224BEC7ED12FC5743434EFE Validity Not Before: Aug 12 01:00:12 2024 GMT Not After : Aug 12 00:44:05 2025 GMT Subject: CN=BC5F6FC91A39DC8D72592266BDE5445868D5CE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:a4:7f:20:dd:80:7a:f8:df:ff:11:44:f8: 28:65:d6:28:6e:b4:1b:c0:30:65:63:41:ee:e6:17: 92:91:38:d8:ba:db:e6:28:78:d4:ad:51:9c:20:04: 06:cf:7d:44:2d:5e:76:d6:f9:7d:01:b5:a2:fa:1a: 9a:0b:3d:35:09:a1:fa:63:ba:78:64:42:dc:7a:c2: ed:c6:26:42:b2:5a:4c:f3:c4:c9:da:f6:4f:c5:bb: cb:da:8f:e6:4e:d2:5e:43:a5:0f:70:df:d7:41:1f: d6:f3:ed:81:0a:45:3f:e3:da:b6:6b:5d:9c:32:0c: 7e:65:34:4e:73:8a:e2:b5:24:92:94:ca:ba:2f:46: 45:9c:27:e4:11:19:83:b7:66:6f:b5:23:aa:dc:ce: 5e:9e:6c:32:ad:e3:8d:c0:a4:c9:8c:95:9b:ea:0e: 4b:d5:e0:c4:d6:4f:9f:56:5e:18:3f:26:81:43:98: 34:c6:49:76:bd:21:e8:5b:5f:4a:78:9d:46:67:1f: 1c:5e:46:ed:88:e4:fe:09:5e:bf:e9:47:2f:fa:ef: 2a:83:9c:23:51:aa:34:9a:aa:4d:c4:e3:79:7f:7a: 1d:e3:e6:f4:8d:58:1e:a9:1c:e1:80:eb:39:0a:51: 6c:52:50:b5:b9:de:7d:92:94:61:ed:ea:ca:80:44: 71:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5F:6F:C9:1A:39:DC:8D:72:59:22:66:BD:E5:44:58:68:D5:CE:7B X509v3 Authority Key Identifier: keyid:E0:6A:F4:7B:5B:34:59:CA:E2:24:BE:C7:ED:12:FC:57:43:43:4E:FE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/4Gr0e1s0WcriJL7H7RL8V0NDTv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4Gr0e1s0WcriJL7H7RL8V0NDTv4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/vF9vyRo53I1yWSJmveVEWGjVzns.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:7300::/32 Signature Algorithm: sha256WithRSAEncryption 4d:7f:bf:44:a9:62:9c:7d:8b:70:c8:56:41:7f:11:ae:2a:05: d9:80:a4:f0:9b:52:06:a0:b5:a9:37:5a:3d:87:0a:d5:6e:f9: 6b:e7:a6:c8:03:2f:74:e6:b4:99:87:dd:6b:49:ff:fb:72:37: 7e:76:77:68:20:22:b1:ac:72:84:d2:64:9d:6a:05:53:e0:54: b4:94:94:4d:7a:e7:08:ac:ff:73:98:59:40:97:20:cc:bb:67: d0:3d:d7:aa:f0:90:1c:dc:70:c3:63:10:8a:63:d8:d5:db:22: 40:fd:d1:d7:d2:c5:95:d6:bc:6c:79:c2:41:0f:f5:d0:94:09: cb:a6:a4:95:bb:b7:d4:3d:ed:7d:84:e1:86:3c:66:2a:b7:36: b7:89:3f:7a:2a:1c:4b:6d:6f:98:ce:c6:d8:b5:c3:86:da:90: 5b:7b:2f:e0:42:40:09:fd:bf:f7:3e:d6:4d:6f:37:13:c6:5a: c0:95:73:71:c5:0b:ff:35:d9:0a:28:92:4c:7b:ac:bf:63:ab: 8a:0d:2c:bc:77:14:60:98:5a:4c:02:e7:6e:de:c6:20:03:28: ff:b8:79:f6:85:ed:82:1f:61:5d:b7:58:5b:d7:58:e3:6a:a9: ed:03:5c:d5:87:94:74:df:01:2c:f5:68:e5:e0:94:c8:d3:e4: 53:06:67:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDZB RjQ3QjVCMzQ1OUNBRTIyNEJFQzdFRDEyRkM1NzQzNDM0RUZFMB4XDTI0MDgxMjAx MDAxMloXDTI1MDgxMjAwNDQwNVowMzExMC8GA1UEAxMoQkM1RjZGQzkxQTM5REM4 RDcyNTkyMjY2QkRFNTQ0NTg2OEQ1Q0U3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALYMpH8g3YB6+N//EUT4KGXWKG60G8AwZWNB7uYXkpE42Lrb5ih4 1K1RnCAEBs99RC1edtb5fQG1ovoamgs9NQmh+mO6eGRC3HrC7cYmQrJaTPPEydr2 T8W7y9qP5k7SXkOlD3Df10Ef1vPtgQpFP+PatmtdnDIMfmU0TnOK4rUkkpTKui9G RZwn5BEZg7dmb7UjqtzOXp5sMq3jjcCkyYyVm+oOS9XgxNZPn1ZeGD8mgUOYNMZJ dr0h6FtfSnidRmcfHF5G7Yjk/glev+lHL/rvKoOcI1GqNJqqTcTjeX96HePm9I1Y Hqkc4YDrOQpRbFJQtbnefZKUYe3qyoBEcaECAwEAAaOCAikwggIlMB0GA1UdDgQW BBS8X2/JGjncjXJZIma95URYaNXOezAfBgNVHSMEGDAWgBTgavR7WzRZyuIkvsft EvxXQ0NO/jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMjkvNEdyMGUxczBXY3JpSkw3SDdSTDhWME5EVHY0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEdyMGUxczBXY3JpSkw3SDdSTDhW ME5EVHY0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjI5L3ZGOXZ5Um81M0kxeVdTSm12ZVZFV0dqVnpucy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkA3MAMA0GCSqGSIb3DQEBCwUAA4IBAQBNf79EqWKcfYtwyFZBfxGu KgXZgKTwm1IGoLWpN1o9hwrVbvlr56bIAy905rSZh91rSf/7cjd+dndoICKxrHKE 0mSdagVT4FS0lJRNeucIrP9zmFlAlyDMu2fQPdeq8JAc3HDDYxCKY9jV2yJA/dHX 0sWV1rxsecJBD/XQlAnLpqSVu7fUPe19hOGGPGYqtza3iT96KhxLbW+YzsbYtcOG 2pBbey/gQkAJ/b/3PtZNbzcTxlrAlXNxxQv/NdkKKJJMe6y/Y6uKDSy8dxRgmFpM Audu3sYgAyj/uHn2he2CH2Fdt1hb11jjaqntA1zVh5R03wEs9Wjl4JTI0+RTBmeY -----END CERTIFICATE-----Generated at Sun Feb 16 22:24:30 2025 by rpki-client