$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30376/epGSGtJMsGgD7JhIs2JH9PpfEyY.roa File: epGSGtJMsGgD7JhIs2JH9PpfEyY.roa (raw, json) Hash identifier: 8azvIju4DBBFMPPoxGJb4KR7n/RzlXmX1bIr1fCq09w= Subject key identifier: 7A:91:92:1A:D2:4C:B0:68:03:EC:98:48:B3:62:47:F4:FA:5F:13:26 Certificate issuer: /CN=E2828702AF9524B2C3D57E1B8B0C64962566949C Certificate serial: 1F Authority key identifier: E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/epGSGtJMsGgD7JhIs2JH9PpfEyY.roa Signing time: Sun 01 Oct 2023 01:30:27 +0000 ROA not before: Sun 01 Oct 2023 01:30:27 +0000 ROA not after: Sat 14 Sep 2024 01:30:03 +0000 asID: 24277 IP address blocks: 2407:58c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2828702AF9524B2C3D57E1B8B0C64962566949C Validity Not Before: Oct 1 01:30:27 2023 GMT Not After : Sep 14 01:30:03 2024 GMT Subject: CN=7A91921AD24CB06803EC9848B36247F4FA5F1326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:4f:85:0d:4c:a5:89:ab:03:b7:03:17:2d: be:b5:70:1d:6c:ed:e9:bd:84:08:5f:48:06:31:a4: 4d:43:79:bb:16:e1:5e:03:b2:61:ae:32:53:0a:f5: 39:2f:81:5e:71:d8:07:38:a2:35:4f:be:ba:ac:22: b2:17:95:95:9c:e9:e3:ac:ec:23:01:52:e5:6d:73: f4:4c:fb:4a:87:b5:4d:10:4a:d6:ae:c0:46:63:1a: ef:6a:66:6d:df:14:44:33:b8:30:5a:a8:10:54:01: 3d:99:cc:f2:57:bc:61:d8:6d:3b:1a:07:64:50:52: ed:3a:48:6a:b7:96:93:61:99:d1:31:ab:cb:70:c6: b7:bd:a1:c8:7b:15:07:e7:cf:5d:51:c9:51:7e:03: cd:b5:3e:c6:1b:7a:53:a7:06:0b:8f:67:fd:b7:ee: ff:2c:b9:9e:6b:ec:00:b8:35:2d:93:e6:62:18:88: 77:1a:03:1c:00:90:20:10:7e:c7:b3:af:ac:bd:34: 75:fc:b5:b1:75:74:e0:9a:86:ef:d3:9f:d4:57:5f: 3b:19:02:81:6b:9e:c0:d6:20:8b:2e:c1:45:55:22: 81:1b:f7:f0:ad:22:3d:e8:2b:c7:be:a3:83:20:65: 37:fa:d7:9d:ca:9e:6e:45:ec:19:ca:5f:b6:c5:76: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:92:1A:D2:4C:B0:68:03:EC:98:48:B3:62:47:F4:FA:5F:13:26 X509v3 Authority Key Identifier: keyid:E2:82:87:02:AF:95:24:B2:C3:D5:7E:1B:8B:0C:64:96:25:66:94:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/4oKHAq-VJLLD1X4biwxkliVmlJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4oKHAq-VJLLD1X4biwxkliVmlJw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30376/epGSGtJMsGgD7JhIs2JH9PpfEyY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:58c0::/32 Signature Algorithm: sha256WithRSAEncryption 99:1e:57:39:41:f3:f1:06:c0:ff:32:76:3d:d3:9f:1a:38:fd: 4a:cf:71:11:33:0d:3a:74:ca:c3:f2:8e:9e:45:1f:13:30:07: 62:8d:d1:0e:90:a3:2b:8b:f1:10:c2:1b:e5:d3:e7:6e:69:48: 35:a8:86:5f:69:3b:9e:8e:c5:ea:1a:f4:61:b1:87:32:c6:f0: 37:80:93:3c:70:c9:77:c7:07:51:2a:33:cc:de:15:d3:fc:e4: cb:ad:22:cd:08:68:f3:f6:bc:10:1e:91:6a:2d:b8:31:79:fb: 6f:1d:d1:2b:92:b9:b4:1d:35:f2:c0:2e:f3:92:d4:8f:1a:67: 22:b6:33:88:b8:a7:f1:cb:fa:32:29:e1:01:d5:4a:b2:e2:ea: 88:58:af:ee:9b:7b:72:08:2a:83:32:23:ec:d9:fd:05:9c:3b: 52:98:e8:af:b2:0e:c2:90:f0:ae:e6:34:5b:43:be:82:76:4c: 82:70:47:ca:51:1e:cc:2a:5f:49:03:7a:8e:d9:1e:4b:37:6b: 7d:e3:1e:94:8d:e2:43:50:42:6d:3d:20:26:91:21:06:75:31: a0:6a:39:ef:9c:e2:7e:20:7e:f8:16:2c:89:fb:7c:47:16:f5: 7e:fb:e9:e6:92:14:70:cd:82:03:8d:ed:57:1e:83:02:8a:09: bd:ad:75:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMjgy ODcwMkFGOTUyNEIyQzNENTdFMUI4QjBDNjQ5NjI1NjY5NDlDMB4XDTIzMTAwMTAx MzAyN1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoN0E5MTkyMUFEMjRDQjA2 ODAzRUM5ODQ4QjM2MjQ3RjRGQTVGMTMyNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALV6T4UNTKWJqwO3AxctvrVwHWzt6b2ECF9IBjGkTUN5uxbhXgOy Ya4yUwr1OS+BXnHYBziiNU++uqwisheVlZzp46zsIwFS5W1z9Ez7Soe1TRBK1q7A RmMa72pmbd8URDO4MFqoEFQBPZnM8le8YdhtOxoHZFBS7TpIareWk2GZ0TGry3DG t72hyHsVB+fPXVHJUX4DzbU+xht6U6cGC49n/bfu/yy5nmvsALg1LZPmYhiIdxoD HACQIBB+x7OvrL00dfy1sXV04JqG79Of1FdfOxkCgWuewNYgiy7BRVUigRv38K0i Pegrx76jgyBlN/rXncqebkXsGcpftsV2JdsCAwEAAaOCAikwggIlMB0GA1UdDgQW BBR6kZIa0kywaAPsmEizYkf0+l8TJjAfBgNVHSMEGDAWgBTigocCr5UkssPVfhuL DGSWJWaUnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNzYvNG9LSEFxLVZKTExEMVg0Yml3eGtsaVZtbEp3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNG9LSEFxLVZKTExEMVg0Yml3eGts aVZtbEp3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzc2L2VwR1NHdEpNc0dnRDdKaElzMkpIOVBwZkV5WS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB1jAMA0GCSqGSIb3DQEBCwUAA4IBAQCZHlc5QfPxBsD/MnY9058a OP1Kz3ERMw06dMrD8o6eRR8TMAdijdEOkKMri/EQwhvl0+duaUg1qIZfaTuejsXq GvRhsYcyxvA3gJM8cMl3xwdRKjPM3hXT/OTLrSLNCGjz9rwQHpFqLbgxeftvHdEr krm0HTXywC7zktSPGmcitjOIuKfxy/oyKeEB1Uqy4uqIWK/um3tyCCqDMiPs2f0F nDtSmOivsg7CkPCu5jRbQ76CdkyCcEfKUR7MKl9JA3qO2R5LN2t94x6UjeJDUEJt PSAmkSEGdTGgajnvnOJ+IH74FiyJ+3xHFvV+++nmkhRwzYIDje1XHoMCigm9rXUN -----END CERTIFICATE-----Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org