$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30286/YaOVV4yeIwdMA4s83C9_QeAT-YY.roa File: YaOVV4yeIwdMA4s83C9_QeAT-YY.roa (raw, json) Hash identifier: EE0lRsSqfVbyeCpV8eeEgOax5Xj5XLzgpUcr8CYxPn0= Subject key identifier: 61:A3:95:57:8C:9E:23:07:4C:03:8B:3C:DC:2F:7F:41:E0:13:F9:86 Certificate issuer: /CN=0CE9148428894A9D99226AC1F46D15383D64D856 Certificate serial: 1E Authority key identifier: 0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/YaOVV4yeIwdMA4s83C9_QeAT-YY.roa Signing time: Mon 01 Jan 2024 01:31:00 +0000 ROA not before: Mon 01 Jan 2024 01:31:00 +0000 ROA not after: Sat 14 Dec 2024 01:30:03 +0000 asID: 23805 IP address blocks: 2405:fc80::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE9148428894A9D99226AC1F46D15383D64D856 Validity Not Before: Jan 1 01:31:00 2024 GMT Not After : Dec 14 01:30:03 2024 GMT Subject: CN=61A395578C9E23074C038B3CDC2F7F41E013F986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:ad:f4:34:8a:77:8b:ca:0c:05:70:7d:95: 08:96:8f:59:61:b9:15:d9:1c:5e:b6:ad:97:5c:84: d0:48:61:a9:a2:e7:f4:e1:14:57:cf:23:8b:f3:cd: 7c:76:e5:c1:56:6e:2f:e5:b1:1b:b6:71:78:0d:35: af:64:8a:5a:9a:5e:01:35:98:28:b5:8f:a4:d1:30: 56:91:03:ce:dd:cf:93:00:a4:05:9a:5f:b5:5a:20: fb:4b:87:f0:28:02:0e:8f:48:f5:bd:b3:f3:a2:26: be:54:93:b8:e4:54:7a:02:2d:06:c5:52:83:52:d1: 71:e0:21:c7:89:e0:f8:9a:8b:0d:8a:a4:d9:e3:2f: 08:3e:e3:fd:83:cc:e8:26:8b:bc:99:34:9b:2b:31: c9:0a:11:5a:e4:f8:e5:ea:a2:cc:1d:09:40:93:07: e3:3f:38:76:d8:04:12:00:eb:89:2c:b6:6d:ce:40: 5a:34:7e:6c:17:da:d6:d5:0a:34:15:2b:14:c1:cd: da:ea:3a:20:5e:d1:55:14:5f:96:42:53:08:da:31: eb:7b:91:c3:69:0e:3a:ae:43:6d:de:85:eb:71:b4: d3:3f:62:a3:d7:92:90:68:82:e6:ba:76:dd:ce:1d: c9:d0:b1:7e:92:1b:73:59:ff:21:1b:50:36:ce:14: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A3:95:57:8C:9E:23:07:4C:03:8B:3C:DC:2F:7F:41:E0:13:F9:86 X509v3 Authority Key Identifier: keyid:0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/YaOVV4yeIwdMA4s83C9_QeAT-YY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:fc80::/32 Signature Algorithm: sha256WithRSAEncryption 0d:6f:f2:20:b9:65:2b:f9:5b:dc:b4:5e:7d:dc:5f:9d:81:cc: 84:79:6a:65:80:a5:75:94:3c:00:c4:d0:9c:e3:4c:5d:c4:9d: 6e:85:f8:50:ad:18:68:81:7e:c2:3d:93:7c:04:9b:4e:bc:b9: 87:a1:47:7e:5a:14:e1:8d:9e:0e:88:cc:15:82:b9:53:8a:42: 3e:d1:b3:f2:18:14:1a:2b:fd:17:7a:54:a1:5f:16:72:ba:79: 93:6f:54:29:5b:8f:7c:86:40:f6:f7:bf:cb:a8:7b:e1:53:b2: 39:ca:66:d5:96:e0:6c:e4:c3:1f:94:9f:00:bb:21:d6:b2:ca: 60:a7:8b:fd:be:e0:f2:65:54:43:c3:12:26:36:80:ad:b0:51: 0a:c3:c5:06:db:fe:d3:62:eb:00:d7:cf:0e:9d:d6:c3:24:ad: fa:e3:a1:0c:d9:30:db:70:14:9f:8e:c1:23:26:0b:4a:3c:ef: ef:f8:78:70:3a:77:67:24:b2:d3:78:93:7e:95:49:14:d4:b8: 88:d8:d6:42:3b:4a:24:3b:7b:a5:c2:b3:d0:59:a8:7e:1c:62: eb:b7:65:0f:9e:bc:f4:0b:b7:8b:b3:07:ca:61:16:70:68:f5: d7:bf:36:27:7b:0d:a7:1c:af:91:35:36:34:9a:6b:6f:e4:a1: e1:32:a2:0c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQ0U5 MTQ4NDI4ODk0QTlEOTkyMjZBQzFGNDZEMTUzODNENjREODU2MB4XDTI0MDEwMTAx MzEwMFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoNjFBMzk1NTc4QzlFMjMw NzRDMDM4QjNDREMyRjdGNDFFMDEzRjk4NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMxarfQ0ineLygwFcH2VCJaPWWG5FdkcXratl1yE0EhhqaLn9OEU V88ji/PNfHblwVZuL+WxG7ZxeA01r2SKWppeATWYKLWPpNEwVpEDzt3PkwCkBZpf tVog+0uH8CgCDo9I9b2z86ImvlSTuORUegItBsVSg1LRceAhx4ng+JqLDYqk2eMv CD7j/YPM6CaLvJk0mysxyQoRWuT45eqizB0JQJMH4z84dtgEEgDriSy2bc5AWjR+ bBfa1tUKNBUrFMHN2uo6IF7RVRRflkJTCNox63uRw2kOOq5Dbd6F63G00z9io9eS kGiC5rp23c4dydCxfpIbc1n/IRtQNs4UID8CAwEAAaOCAikwggIlMB0GA1UdDgQW BBRho5VXjJ4jB0wDizzcL39B4BP5hjAfBgNVHSMEGDAWgBQM6RSEKIlKnZkiasH0 bRU4PWTYVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyODYvRE9rVWhDaUpTcDJaSW1yQjlHMFZPRDFrMkZZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRE9rVWhDaUpTcDJaSW1yQjlHMFZP RDFrMkZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjg2L1lhT1ZWNHllSXdkTUE0czgzQzlfUWVBVC1ZWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBfyAMA0GCSqGSIb3DQEBCwUAA4IBAQANb/IguWUr+VvctF593F+d gcyEeWplgKV1lDwAxNCc40xdxJ1uhfhQrRhogX7CPZN8BJtOvLmHoUd+WhThjZ4O iMwVgrlTikI+0bPyGBQaK/0XelShXxZyunmTb1QpW498hkD297/LqHvhU7I5ymbV luBs5MMflJ8AuyHWsspgp4v9vuDyZVRDwxImNoCtsFEKw8UG2/7TYusA188OndbD JK3646EM2TDbcBSfjsEjJgtKPO/v+HhwOndnJLLTeJN+lUkU1LiI2NZCO0okO3ul wrPQWah+HGLrt2UPnrz0C7eLswfKYRZwaPXXvzYnew2nHK+RNTY0mmtv5KHhMqIM -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org