$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/-7nuBCxl9e7DgoQlkRt1xnayAjM.roa File: -7nuBCxl9e7DgoQlkRt1xnayAjM.roa (raw, json) Hash identifier: +JfJeB/eG20110ph0S1CVxN2KRYnDceru5um3l4kodk= Subject key identifier: FB:B9:EE:04:2C:65:F5:EE:C3:82:84:25:91:1B:75:C6:76:B2:02:33 Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 17 Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/-7nuBCxl9e7DgoQlkRt1xnayAjM.roa Signing time: Wed 18 Sep 2024 07:24:04 +0000 ROA not before: Wed 18 Sep 2024 07:24:04 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 2405:25c0:ae00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 18 07:24:04 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=FBB9EE042C65F5EEC3828425911B75C676B20233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:1f:c8:55:82:4d:80:27:11:ff:8c:4e:3d: 70:63:2b:8e:d2:a2:40:d1:3f:a5:ef:a0:b3:7e:52: 27:9e:22:84:a0:fd:3a:a5:e6:d0:93:97:2d:6e:0a: 9a:00:fa:fa:5a:47:fd:f9:82:df:3b:10:31:55:cb: 6c:0c:cb:23:00:46:17:e0:c7:1c:4b:e9:e2:8e:f9: a9:0a:7f:84:3f:d9:51:e4:16:88:94:3a:5e:62:c5: 16:10:35:3a:91:00:48:03:b1:bc:9b:85:22:c0:94: ef:82:cd:af:b1:a9:20:e2:3b:1d:81:1f:a3:5a:b3: 73:8f:72:24:d2:9c:1c:da:77:cb:20:43:da:1f:1f: 67:3c:d4:81:fe:9f:4b:b1:45:19:de:6d:ac:3d:00: 21:6b:38:e2:34:8b:69:39:40:29:5c:49:e1:b8:e4: f6:9c:32:a7:60:45:51:76:7a:59:6a:16:6f:8a:4f: a6:8e:ed:ab:92:38:6c:27:75:83:f9:39:67:11:8b: 35:bb:56:3f:0a:69:06:36:42:ca:7f:a2:b0:6a:83: 87:8c:42:eb:1b:23:8b:e8:84:bb:95:f9:8f:ae:a3: 70:f1:3d:00:42:0f:74:3e:5e:f1:ed:40:92:c3:32: bb:9d:21:0c:f5:1b:df:d4:4e:19:28:a4:67:c5:fd: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B9:EE:04:2C:65:F5:EE:C3:82:84:25:91:1B:75:C6:76:B2:02:33 X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/-7nuBCxl9e7DgoQlkRt1xnayAjM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 61:0b:6f:36:a8:eb:15:25:12:98:3b:cb:54:55:60:5c:1f:58: 93:ad:b1:ad:0e:45:1a:d5:60:c1:f0:7b:7b:bc:75:36:9c:d3: 6b:d7:48:4d:bd:74:d7:07:e7:9f:bc:98:9e:39:59:1f:63:ef: 41:d8:5a:4f:b2:c1:96:ed:f8:12:dc:6e:8f:ac:67:f5:9c:0b: 0b:c1:99:45:ea:c6:09:f3:db:5e:fd:35:b1:70:12:d2:d8:f7: 96:12:63:10:db:cc:39:e6:b3:2d:a8:d1:72:45:24:0c:16:37: e7:55:cb:ea:89:86:c5:59:3d:e4:69:0d:0b:b9:9e:6a:bf:2e: 25:a9:4e:83:d1:cc:1e:95:45:98:f0:93:40:d5:3a:bf:ec:c5: 6f:2f:ea:88:c2:cc:ed:d0:a4:69:99:cb:44:36:f3:f2:a4:1f: 2d:5e:f0:25:9e:b2:fb:43:e5:4d:93:03:be:dc:c3:94:9a:de: d0:4b:50:dc:1f:44:83:a2:1a:88:a4:8e:9a:ca:62:66:c6:79: 04:07:36:9e:ef:d2:7d:21:ed:be:92:84:71:2e:8d:de:4b:87: 7e:7d:b8:e4:05:69:4a:48:97:8c:4c:0d:34:40:69:14:fd:97: e4:67:d0:e9:dd:85:60:de:cd:e8:fa:d0:55:7c:58:ca:23:0c: 82:dd:2b:cd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3 MjQwNFoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRkJCOUVFMDQyQzY1RjVF RUMzODI4NDI1OTExQjc1QzY3NkIyMDIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMnPH8hVgk2AJxH/jE49cGMrjtKiQNE/pe+gs35SJ54ihKD9OqXm 0JOXLW4KmgD6+lpH/fmC3zsQMVXLbAzLIwBGF+DHHEvp4o75qQp/hD/ZUeQWiJQ6 XmLFFhA1OpEASAOxvJuFIsCU74LNr7GpIOI7HYEfo1qzc49yJNKcHNp3yyBD2h8f ZzzUgf6fS7FFGd5trD0AIWs44jSLaTlAKVxJ4bjk9pwyp2BFUXZ6WWoWb4pPpo7t q5I4bCd1g/k5ZxGLNbtWPwppBjZCyn+isGqDh4xC6xsji+iEu5X5j66jcPE9AEIP dD5e8e1AksMyu50hDPUb39ROGSikZ8X9P08CAwEAAaOCAiowggImMB0GA1UdDgQW BBT7ue4ELGX17sOChCWRG3XGdrICMzAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5Ly03bnVCQ3hsOWU3RGdvUWxrUnQxeG5heUFqTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBSXArjANBgkqhkiG9w0BAQsFAAOCAQEAYQtvNqjrFSUSmDvLVFVg XB9Yk62xrQ5FGtVgwfB7e7x1NpzTa9dITb101wfnn7yYnjlZH2PvQdhaT7LBlu34 Etxuj6xn9ZwLC8GZRerGCfPbXv01sXAS0tj3lhJjENvMOeazLajRckUkDBY351XL 6omGxVk95GkNC7mear8uJalOg9HMHpVFmPCTQNU6v+zFby/qiMLM7dCkaZnLRDbz 8qQfLV7wJZ6y+0PlTZMDvtzDlJre0EtQ3B9Eg6IaiKSOmspiZsZ5BAc2nu/SfSHt vpKEcS6N3kuHfn245AVpSkiXjEwNNEBpFP2X5GfQ6d2FYN7N6PrQVXxYyiMMgt0r zQ== -----END CERTIFICATE-----Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org