$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/z9nt-xS_liuIs5oFuBxxKnPYHsM.roa File: z9nt-xS_liuIs5oFuBxxKnPYHsM.roa (raw, json) Hash identifier: hct3ehOZLviJXrnEOPkScf7XcZgdiDHRkgiu/tbJY3w= Subject key identifier: CF:D9:ED:FB:14:BF:96:2B:88:B3:9A:05:B8:1C:71:2A:73:D8:1E:C3 Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Certificate serial: 0A Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/z9nt-xS_liuIs5oFuBxxKnPYHsM.roa Signing time: Wed 18 Sep 2024 07:16:11 +0000 ROA not before: Wed 18 Sep 2024 07:16:11 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 0 IP address blocks: 2405:25c0:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023 Validity Not Before: Sep 18 07:16:11 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=CFD9EDFB14BF962B88B39A05B81C712A73D81EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:90:68:60:5d:9d:3b:d4:7b:c1:52:3f:8f:a5: 12:ff:0f:fd:00:a3:88:ed:b0:d7:0f:a5:47:7c:b5: dd:14:4b:5b:be:16:55:8e:11:8f:d5:1b:c8:a4:ca: 61:64:bb:69:22:84:63:43:d9:45:60:24:e1:15:8d: 5b:23:2f:46:67:4e:d4:ba:ed:f1:9a:1a:c0:8f:73: 12:4b:8e:50:a0:0f:23:c9:20:d1:28:57:be:13:45: aa:a0:27:64:64:f7:4a:1e:ac:39:3e:2a:bb:92:38: af:df:95:9f:0b:7b:92:e0:22:61:11:71:ef:ef:55: f4:f6:1f:fd:7a:38:a4:7e:6f:8a:9c:2c:ac:05:05: 89:cd:3f:f3:47:47:e1:39:0e:33:7b:91:fa:74:c1: 2c:b8:19:ea:59:3a:fe:0d:39:c4:8f:1e:72:e1:5d: f8:07:9b:bf:a0:10:fb:c4:23:a9:b6:86:02:ac:32: 78:71:3f:a4:5f:84:b0:83:1f:26:db:1f:e9:43:58: f9:3d:e7:39:3b:c9:e2:75:b9:d5:4c:cb:44:3a:fe: dc:eb:40:55:ed:ff:2a:3a:0c:84:08:b5:4b:d4:08: 74:ae:84:10:91:76:6d:cd:0e:e6:38:5b:e1:ee:f4: af:95:c7:62:05:dd:2d:20:dc:db:7b:55:e9:84:5f: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:ED:FB:14:BF:96:2B:88:B3:9A:05:B8:1C:71:2A:73:D8:1E:C3 X509v3 Authority Key Identifier: keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/z9nt-xS_liuIs5oFuBxxKnPYHsM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:25c0:7000::/36 Signature Algorithm: sha256WithRSAEncryption a5:0a:78:e8:b6:71:50:56:7f:22:be:37:af:85:9e:6d:74:00: 9d:d5:69:fa:23:9d:e5:7d:7b:76:51:36:5d:ab:be:73:5d:37: 71:ff:f7:32:6e:9c:af:98:18:78:f1:86:82:82:be:e7:d0:68: 78:37:ad:fc:84:d5:fb:cd:95:9f:38:7b:6d:89:5c:3d:0e:b2: 65:6e:bf:f4:bb:c6:39:ce:ef:b4:ac:8e:28:aa:22:9d:93:66: 71:8d:e9:cb:95:b0:11:20:c5:4d:0a:bb:12:ac:36:57:6c:b5: f2:b5:0c:b4:af:2f:f5:83:ac:6e:41:8b:9c:f1:2e:35:bf:56: 99:a8:e5:33:11:3e:86:f6:18:77:0c:af:16:99:35:ec:a9:ad: b1:b0:cd:a6:42:73:7c:ff:73:9f:50:d0:fa:1e:26:47:04:cb: 89:b0:c2:01:5c:42:bd:3f:7c:0d:f6:a7:9a:50:7b:77:ab:7d: ae:72:5e:90:57:88:12:56:09:4a:3b:4f:99:1c:96:70:41:ee: 71:94:af:41:7c:48:23:6d:b0:3b:12:43:b7:c6:de:cf:c1:22: 1b:8e:15:eb:51:f9:17:19:80:6d:ef:e3:fa:af:03:01:ba:56: d0:cf:33:89:43:56:88:5e:e1:95:35:55:9e:1f:e6:d9:a3:77: 83:03:42:35 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3 MTYxMVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQ0ZEOUVERkIxNEJGOTYy Qjg4QjM5QTA1QjgxQzcxMkE3M0Q4MUVDMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOWQaGBdnTvUe8FSP4+lEv8P/QCjiO2w1w+lR3y13RRLW74WVY4R j9UbyKTKYWS7aSKEY0PZRWAk4RWNWyMvRmdO1Lrt8ZoawI9zEkuOUKAPI8kg0ShX vhNFqqAnZGT3Sh6sOT4qu5I4r9+Vnwt7kuAiYRFx7+9V9PYf/Xo4pH5vipwsrAUF ic0/80dH4TkOM3uR+nTBLLgZ6lk6/g05xI8ecuFd+Aebv6AQ+8QjqbaGAqwyeHE/ pF+EsIMfJtsf6UNY+T3nOTvJ4nW51UzLRDr+3OtAVe3/KjoMhAi1S9QIdK6EEJF2 bc0O5jhb4e70r5XHYgXdLSDc23tV6YRf3a0CAwEAAaOCAiowggImMB0GA1UdDgQW BBTP2e37FL+WK4izmgW4HHEqc9gewzAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6 Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzQ5L3o5bnQteFNfbGl1SXM1b0Z1Qnh4S25QWUhzTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkBSXAcDANBgkqhkiG9w0BAQsFAAOCAQEApQp46LZxUFZ/Ir43r4We bXQAndVp+iOd5X17dlE2Xau+c103cf/3Mm6cr5gYePGGgoK+59BoeDet/ITV+82V nzh7bYlcPQ6yZW6/9LvGOc7vtKyOKKoinZNmcY3py5WwESDFTQq7Eqw2V2y18rUM tK8v9YOsbkGLnPEuNb9WmajlMxE+hvYYdwyvFpk17KmtsbDNpkJzfP9zn1DQ+h4m RwTLibDCAVxCvT98DfanmlB7d6t9rnJekFeIElYJSjtPmRyWcEHucZSvQXxII22w OxJDt8bez8EiG44V61H5FxmAbe/j+q8DAbpW0M8ziUNWiF7hlTVVnh/m2aN3gwNC NQ== -----END CERTIFICATE-----Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org