$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30233/0otSijm1zM-nTUWaVzrWSqHzPlw.roa File: 0otSijm1zM-nTUWaVzrWSqHzPlw.roa (raw, json) Hash identifier: gMkbYBfD3KRa8UIvUnrEftsVwuI0JB5ByDvEeD49Nhg= Subject key identifier: D2:8B:52:8A:39:B5:CC:CF:A7:4D:45:9A:57:3A:D6:4A:A1:F3:3E:5C Certificate issuer: /CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1 Certificate serial: 1C Authority key identifier: 44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/0otSijm1zM-nTUWaVzrWSqHzPlw.roa Signing time: Wed 31 Jul 2024 01:31:56 +0000 ROA not before: Wed 31 Jul 2024 01:31:56 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 55900 IP address blocks: 2404:2d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1 Validity Not Before: Jul 31 01:31:56 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=D28B528A39B5CCCFA74D459A573AD64AA1F33E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:50:95:f1:22:6e:e8:cd:da:61:1b:9a:71: 17:7b:8e:65:df:39:cf:f4:e9:89:9f:4d:57:59:04: d3:1d:dc:b6:ed:29:92:c7:12:49:aa:ef:29:a3:51: 8f:f2:f3:fe:46:ee:c3:fc:2f:d2:02:3b:2a:d4:81: 55:a9:7d:5d:3e:4b:29:3f:3a:e7:62:75:f6:9b:28: 00:24:1b:e8:b2:a2:c6:fd:3e:f4:5e:63:c8:70:10: e5:bb:8c:61:d6:fe:7d:90:20:a1:18:ee:6b:73:ff: 87:0f:28:c3:73:32:36:3f:d2:3b:d3:bd:c4:4a:9b: e8:6b:ea:4f:14:4c:cd:3d:93:51:b6:ac:f1:dd:8f: 8b:04:d7:15:bc:c2:68:72:64:d1:90:e2:b6:5b:dc: c2:a3:64:a3:48:5c:06:64:d3:a8:01:7b:cf:69:74: 7a:00:4c:a5:ee:e9:dd:12:5a:97:1e:b5:c5:90:43: 60:41:d8:fd:68:e3:95:46:4a:fa:70:40:5c:5d:bd: a1:10:d3:cc:be:57:fb:ce:50:ac:d7:3c:ba:63:3f: ad:e1:8c:92:b8:1d:a7:eb:59:db:d3:e0:c8:8e:0d: e4:3c:6b:cb:9e:71:ca:24:fa:32:7f:6b:a3:ae:16: 35:29:5c:e1:72:a7:35:09:b6:0c:eb:b7:54:0d:89: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:52:8A:39:B5:CC:CF:A7:4D:45:9A:57:3A:D6:4A:A1:F3:3E:5C X509v3 Authority Key Identifier: keyid:44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/0otSijm1zM-nTUWaVzrWSqHzPlw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:2d00::/32 Signature Algorithm: sha256WithRSAEncryption 44:2c:b6:85:a6:62:4b:d0:e0:47:29:5a:36:ef:1c:04:75:02: 37:2d:eb:73:2f:f2:82:2d:38:b2:62:85:b4:c2:05:e3:72:ad: a3:5b:c6:32:bb:3e:44:1c:3e:4f:d9:9a:f7:a4:39:8f:b7:2c: bf:52:c8:a0:a6:03:ad:d5:1a:66:cd:26:e7:f3:7d:2c:82:4c: 9b:6f:f5:3e:03:37:55:0f:1f:6a:d3:9b:a4:94:8e:c1:30:3d: 76:ce:9e:34:a7:41:9a:e9:e9:b5:49:96:4b:b2:fe:d6:00:8b: 59:9f:66:56:15:a0:84:71:66:24:27:94:83:7f:ff:a1:3c:dc: 13:b5:19:6f:b5:8f:14:8e:49:75:73:41:e6:7a:91:27:e1:44: 3f:3b:bc:a4:9d:8f:5e:88:27:ee:f6:fb:8d:25:64:de:1d:69: 05:40:f7:39:ec:4e:71:1d:3d:46:6b:f3:2c:4a:dd:2b:50:6f: 01:f6:9c:e3:46:02:54:97:10:59:75:7a:d4:5b:6b:e3:ed:0c: 35:04:fd:2a:15:9d:33:a9:29:d6:93:0b:c0:61:fe:42:11:55: 61:36:2d:43:94:78:36:45:93:d5:8b:7a:f0:fd:8c:ed:3d:bf: 5f:98:2d:a1:84:af:06:73:e7:47:01:9d:2c:21:1d:48:25:df: 4d:b2:45:e4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NDc1 RjY1RDk2Q0E2OERDRDhFNzMwQUI3OUJGMjEzODhFRTQ4QUQxMB4XDTI0MDczMTAx MzE1NloXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRDI4QjUyOEEzOUI1Q0ND RkE3NEQ0NTlBNTczQUQ2NEFBMUYzM0U1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM33UJXxIm7ozdphG5pxF3uOZd85z/TpiZ9NV1kE0x3ctu0pkscS SarvKaNRj/Lz/kbuw/wv0gI7KtSBVal9XT5LKT8652J19psoACQb6LKixv0+9F5j yHAQ5buMYdb+fZAgoRjua3P/hw8ow3MyNj/SO9O9xEqb6GvqTxRMzT2TUbas8d2P iwTXFbzCaHJk0ZDitlvcwqNko0hcBmTTqAF7z2l0egBMpe7p3RJalx61xZBDYEHY /WjjlUZK+nBAXF29oRDTzL5X+85QrNc8umM/reGMkrgdp+tZ29PgyI4N5Dxry55x yiT6Mn9ro64WNSlc4XKnNQm2DOu3VA2JICECAwEAAaOCAikwggIlMB0GA1UdDgQW BBTSi1KKObXMz6dNRZpXOtZKofM+XDAfBgNVHSMEGDAWgBREdfZdlspo3NjnMKt5 vyE4juSK0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMzMvUkhYMlhaYkthTnpZNXpDcmViOGhPSTdraXRFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUkhYMlhaYkthTnpZNXpDcmViOGhP STdraXRFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjMzLzBvdFNpam0xek0tblRVV2FWenJXU3FIelBsdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBC0AMA0GCSqGSIb3DQEBCwUAA4IBAQBELLaFpmJL0OBHKVo27xwE dQI3LetzL/KCLTiyYoW0wgXjcq2jW8Yyuz5EHD5P2Zr3pDmPtyy/UsigpgOt1Rpm zSbn830sgkybb/U+AzdVDx9q05uklI7BMD12zp40p0Ga6em1SZZLsv7WAItZn2ZW FaCEcWYkJ5SDf/+hPNwTtRlvtY8Ujkl1c0HmepEn4UQ/O7yknY9eiCfu9vuNJWTe HWkFQPc57E5xHT1Ga/MsSt0rUG8B9pzjRgJUlxBZdXrUW2vj7Qw1BP0qFZ0zqSnW kwvAYf5CEVVhNi1DlHg2RZPVi3rw/YztPb9fmC2hhK8Gc+dHAZ0sIR1IJd9NskXk -----END CERTIFICATE-----Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org