$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa File: vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa (raw, json) Hash identifier: JIXl/S6S9EMPgXnMZEl2cdQhd2ml/2ERY7jlXBG3SLE= Subject key identifier: BC:5E:9B:04:AA:CF:A0:F5:1A:F8:06:E4:1E:42:A9:32:D4:41:5D:EA Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 0D Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa Signing time: Wed 18 Sep 2024 07:16:12 +0000 ROA not before: Wed 18 Sep 2024 07:16:12 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 2405:25c0:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 18 07:16:12 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=BC5E9B04AACFA0F51AF806E41E42A932D4415DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:74:d4:fa:62:d5:c4:22:2d:50:67:0f:a9: b5:7a:4e:36:ba:64:0f:03:3a:b8:7f:53:71:d4:a3: 40:f0:fc:80:1b:54:70:ff:15:a0:a1:95:15:63:d7: cd:29:e2:43:be:29:83:61:4a:0c:e4:e2:07:a4:ec: 34:31:f5:e2:45:11:c0:26:35:08:d7:e7:e0:e5:14: dd:c8:77:45:04:2e:46:16:cd:07:2a:cc:4b:3c:06: 38:52:1b:7c:86:8c:88:9a:7a:49:be:2f:be:1b:dc: 1a:43:47:66:7c:58:50:bb:53:b7:1f:6c:c8:5f:7a: d1:aa:92:b3:62:60:24:89:ba:b9:d0:0e:1a:58:3f: 5e:5c:43:2a:78:14:13:33:79:df:fb:5f:90:8b:6c: 82:52:af:9a:50:00:b8:ab:96:a4:71:46:30:cf:70: 99:d4:47:4f:8a:19:3e:84:28:46:8c:12:3d:0f:69: 34:92:83:bf:9c:02:e6:01:df:04:c1:9f:86:af:8b: 6f:3f:93:b5:f0:4f:6b:60:1f:5d:68:3c:86:b2:79: 52:87:21:30:47:dc:d5:cd:cb:52:dd:05:b1:9d:fc: 36:64:af:d2:19:24:ba:90:f1:28:c6:de:90:19:e7: c0:92:6b:73:7b:a5:e0:63:43:6d:99:55:c7:8d:a9: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5E:9B:04:AA:CF:A0:F5:1A:F8:06:E4:1E:42:A9:32:D4:41:5D:EA X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:a000::/40 Signature Algorithm: sha256WithRSAEncryption b4:d5:a6:18:8f:6f:3e:f0:7c:37:be:c8:b5:2a:39:2d:cc:46: 82:db:63:5e:c1:da:64:d6:e5:57:46:25:a5:f7:c4:97:de:19: ae:8d:64:03:ea:9e:76:e3:d1:c8:96:26:82:e5:6e:57:a6:72: 2e:27:bc:9e:12:8c:75:ac:1a:6f:cf:81:6a:cc:6d:65:de:57: 63:7a:e8:fb:fe:b3:1b:1d:4a:23:71:e1:d6:f4:16:29:90:1c: d6:54:13:64:54:a7:43:07:72:73:5c:9a:dc:e8:3e:b1:58:ab: 7a:83:a1:5a:d4:c2:1e:c6:19:bb:6a:bc:4b:c3:01:1d:c2:a5: 44:94:d0:68:e6:51:88:fb:72:fc:d4:ab:c7:b5:6c:78:7c:1e: 90:7d:e2:d4:8a:2d:28:ee:2c:dd:15:38:b9:0e:8d:32:42:55: d2:1f:6d:45:c9:d4:90:3c:f3:98:24:2a:eb:1a:f1:dd:4d:4f: 58:9b:aa:9c:a3:5f:97:d5:cc:b4:8f:72:b7:35:3f:d0:ad:be: 4c:28:16:71:b8:2f:2d:32:ba:9b:b5:ca:97:ae:11:9d:b3:b9: c2:07:57:6f:26:33:6a:99:31:ea:fd:22:77:fa:43:06:c7:bf: c0:b3:7c:2c:d8:3b:b5:c9:93:bd:90:58:fc:7a:73:a5:42:24: 04:0e:f0:62 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3 MTYxMloXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQkM1RTlCMDRBQUNGQTBG NTFBRjgwNkU0MUU0MkE5MzJENDQxNURFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK78dNT6YtXEIi1QZw+ptXpONrpkDwM6uH9TcdSjQPD8gBtUcP8V oKGVFWPXzSniQ74pg2FKDOTiB6TsNDH14kURwCY1CNfn4OUU3ch3RQQuRhbNByrM SzwGOFIbfIaMiJp6Sb4vvhvcGkNHZnxYULtTtx9syF960aqSs2JgJIm6udAOGlg/ XlxDKngUEzN53/tfkItsglKvmlAAuKuWpHFGMM9wmdRHT4oZPoQoRowSPQ9pNJKD v5wC5gHfBMGfhq+Lbz+TtfBPa2AfXWg8hrJ5UochMEfc1c3LUt0FsZ38NmSv0hkk upDxKMbekBnnwJJrc3ul4GNDbZlVx42pzZUCAwEAAaOCAiowggImMB0GA1UdDgQW BBS8XpsEqs+g9Rr4BuQeQqky1EFd6jAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5L3ZGNmJCS3JQb1BVYS1BYmtIa0twTXRSQlhlby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkBSXAoDANBgkqhkiG9w0BAQsFAAOCAQEAtNWmGI9vPvB8N77ItSo5 LcxGgttjXsHaZNblV0YlpffEl94Zro1kA+qeduPRyJYmguVuV6ZyLie8nhKMdawa b8+BasxtZd5XY3ro+/6zGx1KI3Hh1vQWKZAc1lQTZFSnQwdyc1ya3Og+sVireoOh WtTCHsYZu2q8S8MBHcKlRJTQaOZRiPty/NSrx7VseHwekH3i1IotKO4s3RU4uQ6N MkJV0h9tRcnUkDzzmCQq6xrx3U1PWJuqnKNfl9XMtI9ytzU/0K2+TCgWcbgvLTK6 m7XKl64RnbO5wgdXbyYzapkx6v0id/pDBse/wLN8LNg7tcmTvZBY/HpzpUIkBA7w Yg== -----END CERTIFICATE-----Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org