$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/F4_6mMGK-HTepssz1B8N-bnlse0.roa File: F4_6mMGK-HTepssz1B8N-bnlse0.roa (raw, json) Hash identifier: axV7ZGLQ7OOMyJT4G1Pv+HssyML+VnNx/zerJPxUQl8= Subject key identifier: 17:8F:FA:98:C1:8A:F8:74:DE:A6:CB:33:D4:1F:0D:F9:B9:E5:B1:ED Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Certificate serial: 1D Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/F4_6mMGK-HTepssz1B8N-bnlse0.roa Signing time: Sat 31 Aug 2024 01:31:37 +0000 ROA not before: Sat 31 Aug 2024 01:31:37 +0000 ROA not after: Fri 15 Aug 2025 01:30:02 +0000 asID: 10000 IP address blocks: 2405:ed00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Validity Not Before: Aug 31 01:31:37 2024 GMT Not After : Aug 15 01:30:02 2025 GMT Subject: CN=178FFA98C18AF874DEA6CB33D41F0DF9B9E5B1ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:63:49:94:ac:8c:71:fd:7c:29:41:9e:fc: 7d:83:5a:0c:26:1b:46:79:0e:4b:90:4d:a0:a1:98: 97:ef:99:6f:4c:06:20:b7:2c:96:47:70:e6:e9:16: f2:61:e3:2b:84:d4:8c:9d:f8:0e:c9:22:53:11:44: 6e:f9:25:93:3e:e5:af:89:ee:43:e2:c4:2b:3f:65: f8:da:28:33:55:9d:0f:8c:bc:f0:9c:1b:c9:96:53: fd:32:12:10:ae:79:09:f0:34:33:e7:05:e4:13:c3: a4:b0:2b:fa:a5:14:35:58:5f:4b:df:bf:42:0d:b8: bf:81:c9:6d:1b:82:d5:08:e1:cf:94:7c:93:42:06: 2c:d6:97:c7:2d:4c:3f:bb:37:64:0c:39:27:b8:7c: 6c:c5:ad:a5:50:a7:c8:b9:84:63:41:fd:7c:e2:22: d3:f9:91:cb:60:6c:5b:44:9c:57:5e:e4:84:83:08: c9:e2:0b:ef:84:5d:1f:eb:ac:ec:66:d8:41:6d:e3: a7:14:49:57:c9:e8:dc:c2:67:d9:4b:35:7d:da:69: 44:4d:89:d6:ba:e6:58:17:3b:a8:53:06:4e:43:6d: bc:de:f4:f5:33:05:7d:de:0c:ff:3c:b4:d0:56:50: c2:71:73:ea:19:c0:cb:82:4e:58:cd:5e:63:ef:af: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8F:FA:98:C1:8A:F8:74:DE:A6:CB:33:D4:1F:0D:F9:B9:E5:B1:ED X509v3 Authority Key Identifier: keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/F4_6mMGK-HTepssz1B8N-bnlse0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:ed00::/32 Signature Algorithm: sha256WithRSAEncryption 37:56:5e:e9:d5:6f:21:3e:f0:42:03:e3:6b:a8:2f:96:e8:8a: 27:b8:86:35:1c:a3:4a:33:8f:c8:4a:d6:3c:6a:f1:d0:a4:25: 48:48:09:bb:af:c1:1a:ac:42:ce:89:be:c4:95:85:cb:8d:79: 39:f8:c3:ba:26:3c:e6:b6:09:8f:90:a0:f9:01:da:f0:03:68: db:fa:ba:7b:02:96:73:f2:38:36:18:ab:3e:b4:a3:96:c2:40: 50:0d:e4:23:cf:ee:0b:9b:ef:a5:19:87:30:da:d8:3b:c9:b7: 85:51:f3:d6:38:2f:6b:32:6f:5b:60:62:f4:9c:ed:de:d0:c6: e7:12:a6:bc:dd:8d:eb:95:74:95:bd:98:c4:61:62:29:3a:ad: 1b:1f:d5:70:c7:7d:ea:02:4b:6a:9d:e1:9a:b0:31:c3:49:9c: cd:de:14:49:12:2d:a8:65:3e:6b:aa:d3:ac:62:5e:e1:5d:77: d3:af:dc:dc:df:f2:17:21:96:1b:d0:05:b7:69:8d:81:fc:ea: f8:c5:8c:c0:1e:68:04:16:0f:51:e0:c1:d3:c9:3d:96:65:f4: e6:24:d3:37:5c:7d:ee:8a:1c:dd:4b:26:63:47:d8:b6:33:08: 1b:cc:88:49:c3:69:6f:ad:09:42:6b:e2:22:6c:ba:ba:b6:9d: 57:26:88:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2 N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTI0MDgzMTAx MzEzN1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMTc4RkZBOThDMThBRjg3 NERFQTZDQjMzRDQxRjBERjlCOUU1QjFFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKvwY0mUrIxx/XwpQZ78fYNaDCYbRnkOS5BNoKGYl++Zb0wGILcs lkdw5ukW8mHjK4TUjJ34DskiUxFEbvklkz7lr4nuQ+LEKz9l+NooM1WdD4y88Jwb yZZT/TISEK55CfA0M+cF5BPDpLAr+qUUNVhfS9+/Qg24v4HJbRuC1Qjhz5R8k0IG LNaXxy1MP7s3ZAw5J7h8bMWtpVCnyLmEY0H9fOIi0/mRy2BsW0ScV17khIMIyeIL 74RdH+us7GbYQW3jpxRJV8no3MJn2Us1fdppRE2J1rrmWBc7qFMGTkNtvN709TMF fd4M/zy00FZQwnFz6hnAy4JOWM1eY++vffkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQXj/qYwYr4dN6myzPUHw35ueWx7TAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ1L0Y0XzZtTUdLLUhUZXBzc3oxQjhOLWJubHNlMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBe0AMA0GCSqGSIb3DQEBCwUAA4IBAQA3Vl7p1W8hPvBCA+NrqC+W 6IonuIY1HKNKM4/IStY8avHQpCVISAm7r8EarELOib7ElYXLjXk5+MO6JjzmtgmP kKD5AdrwA2jb+rp7ApZz8jg2GKs+tKOWwkBQDeQjz+4Lm++lGYcw2tg7ybeFUfPW OC9rMm9bYGL0nO3e0MbnEqa83Y3rlXSVvZjEYWIpOq0bH9Vwx33qAktqneGasDHD SZzN3hRJEi2oZT5rqtOsYl7hXXfTr9zc3/IXIZYb0AW3aY2B/Or4xYzAHmgEFg9R 4MHTyT2WZfTmJNM3XH3uihzdSyZjR9i2MwgbzIhJw2lvrQlCa+IibLq6tp1XJohy -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org