$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30293/cM6D35DIlQ_hervUnxnIGAETDQ4.roa File: cM6D35DIlQ_hervUnxnIGAETDQ4.roa (raw, json) Hash identifier: 5E308BPqJmhvGkq+2Hlp8jMs9CHNb3iu5OqklS5q+Mc= Subject key identifier: 70:CE:83:DF:90:C8:95:0F:E1:7A:BB:D4:9F:19:C8:18:01:13:0D:0E Certificate issuer: /CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE Certificate serial: 3D Authority key identifier: 4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/cM6D35DIlQ_hervUnxnIGAETDQ4.roa Signing time: Thu 29 Feb 2024 01:30:43 +0000 ROA not before: Thu 29 Feb 2024 01:30:43 +0000 ROA not after: Fri 14 Feb 2025 01:30:03 +0000 asID: 38631 IP address blocks: 2400:dcc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED0E8EA7DB29EAACFBAA3F2EE80A4AE9B5F57CE Validity Not Before: Feb 29 01:30:43 2024 GMT Not After : Feb 14 01:30:03 2025 GMT Subject: CN=70CE83DF90C8950FE17ABBD49F19C81801130D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:f4:d1:df:8f:99:82:c4:c3:a2:0c:be:14: cb:69:7a:14:3c:04:ce:75:b4:7c:14:0f:13:e5:06: 99:8d:f6:43:1b:92:e2:89:9b:10:e1:be:10:b8:4f: ac:e8:88:c6:4b:cb:02:5f:5a:0e:b6:75:92:cc:9b: dd:49:03:1d:08:7f:f7:3a:b7:3f:d4:06:46:81:a7: 2d:31:2d:2b:e3:3e:7f:ee:0f:1e:97:ca:5c:c1:a9: 24:2f:31:06:43:f9:04:92:16:33:c6:6d:85:44:b4: eb:19:8f:71:f9:1f:4a:66:8d:8d:a5:4f:9d:7d:f1: 1c:2e:33:ab:20:b8:5d:38:4a:15:7d:ea:87:b1:9e: 69:ca:8a:a2:34:97:5e:e0:49:b2:d8:64:73:e4:4c: 63:67:8e:6d:44:6f:54:0b:88:31:d6:d6:81:b2:f0: e6:cb:29:91:ac:57:03:e3:54:5d:6c:e0:5a:5a:01: cd:4a:de:88:03:86:23:17:52:76:e9:9f:2b:3e:aa: ce:41:a3:39:fe:a8:30:75:25:c6:54:3a:14:72:2d: bc:95:b6:94:e7:28:a7:40:d8:79:22:73:f7:18:f8: c0:26:99:ee:32:93:d2:e1:10:f1:d1:a1:4f:3c:a5: 60:4f:74:26:b7:40:57:2e:7f:a0:c6:87:59:b3:9c: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CE:83:DF:90:C8:95:0F:E1:7A:BB:D4:9F:19:C8:18:01:13:0D:0E X509v3 Authority Key Identifier: keyid:4E:D0:E8:EA:7D:B2:9E:AA:CF:BA:A3:F2:EE:80:A4:AE:9B:5F:57:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/TtDo6n2ynqrPuqPy7oCkrptfV84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TtDo6n2ynqrPuqPy7oCkrptfV84.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30293/cM6D35DIlQ_hervUnxnIGAETDQ4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:dcc0::/32 Signature Algorithm: sha256WithRSAEncryption 93:80:66:c0:11:f4:82:7d:df:a7:f4:ae:16:7d:75:9d:99:45: 51:e9:4d:8a:2d:1a:ef:71:ab:b1:2d:0a:45:3d:7b:dd:62:64: a4:4d:3d:69:23:dc:b5:11:e1:7d:47:ac:4b:8a:f7:81:d7:9b: 77:fb:3d:a4:5b:1f:87:eb:4e:3d:64:2a:37:56:00:e0:a1:34: 8c:3d:3b:7d:3e:4e:79:7e:19:90:6c:dc:d1:16:eb:de:82:da: e0:e3:24:a1:cf:8a:56:25:73:fb:36:b9:2a:9d:7a:b3:93:4a: bd:0a:74:77:5e:e5:9d:cf:79:c3:db:d7:d0:4f:f3:f1:a5:7b: b7:cb:d4:af:05:be:a2:3f:69:22:b7:45:23:56:49:6c:48:57: 2f:69:99:f9:82:6b:11:e2:2b:e5:c6:f5:50:c4:bf:c2:61:80: 07:71:e5:e2:87:7d:32:b3:54:e1:37:e1:e2:9b:e3:93:6d:cd: 2c:25:91:34:90:bb:1e:25:ae:8a:18:2d:74:7d:10:19:ec:07: 69:e2:82:b6:d1:f6:1f:0b:70:d4:9a:51:31:97:6b:46:f5:bb: c6:1f:ef:61:d0:00:42:03:96:49:18:6c:49:fc:cc:03:4a:94: c3:94:ce:12:a8:ad:0c:f9:79:49:15:ec:21:ce:23:70:10:9e: 0d:7c:7a:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUQw RThFQTdEQjI5RUFBQ0ZCQUEzRjJFRTgwQTRBRTlCNUY1N0NFMB4XDTI0MDIyOTAx MzA0M1oXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNzBDRTgzREY5MEM4OTUw RkUxN0FCQkQ0OUYxOUM4MTgwMTEzMEQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOQ89NHfj5mCxMOiDL4Uy2l6FDwEznW0fBQPE+UGmY32QxuS4omb EOG+ELhPrOiIxkvLAl9aDrZ1ksyb3UkDHQh/9zq3P9QGRoGnLTEtK+M+f+4PHpfK XMGpJC8xBkP5BJIWM8ZthUS06xmPcfkfSmaNjaVPnX3xHC4zqyC4XThKFX3qh7Ge acqKojSXXuBJsthkc+RMY2eObURvVAuIMdbWgbLw5sspkaxXA+NUXWzgWloBzUre iAOGIxdSdumfKz6qzkGjOf6oMHUlxlQ6FHItvJW2lOcop0DYeSJz9xj4wCaZ7jKT 0uEQ8dGhTzylYE90JrdAVy5/oMaHWbOcR60CAwEAAaOCAikwggIlMB0GA1UdDgQW BBRwzoPfkMiVD+F6u9SfGcgYARMNDjAfBgNVHSMEGDAWgBRO0OjqfbKeqs+6o/Lu gKSum19XzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTMvVHREbzZuMnlucXJQdXFQeTdvQ2tycHRmVjg0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHREbzZuMnlucXJQdXFQeTdvQ2ty cHRmVjg0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjkzL2NNNkQzNURJbFFfaGVydlVueG5JR0FFVERRNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkANzAMA0GCSqGSIb3DQEBCwUAA4IBAQCTgGbAEfSCfd+n9K4WfXWd mUVR6U2KLRrvcauxLQpFPXvdYmSkTT1pI9y1EeF9R6xLiveB15t3+z2kWx+H6049 ZCo3VgDgoTSMPTt9Pk55fhmQbNzRFuvegtrg4yShz4pWJXP7NrkqnXqzk0q9CnR3 XuWdz3nD29fQT/PxpXu3y9SvBb6iP2kit0UjVklsSFcvaZn5gmsR4ivlxvVQxL/C YYAHceXih30ys1ThN+Him+OTbc0sJZE0kLseJa6KGC10fRAZ7Adp4oK20fYfC3DU mlExl2tG9bvGH+9h0ABCA5ZJGGxJ/MwDSpTDlM4SqK0M+XlJFewhziNwEJ4NfHpZ -----END CERTIFICATE-----Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org