$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30406/uO3PkguR4v349WZNgEF0GxU-Pmw.roa File: uO3PkguR4v349WZNgEF0GxU-Pmw.roa (raw, json) Hash identifier: tZGwntwJHmyPSWvCQdp+02hsPJsWlys8MVuXgCR/jGg= Subject key identifier: B8:ED:CF:92:0B:91:E2:FD:F8:F5:66:4D:80:41:74:1B:15:3E:3E:6C Certificate issuer: /CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Certificate serial: 0E Authority key identifier: E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/uO3PkguR4v349WZNgEF0GxU-Pmw.roa Signing time: Tue 14 May 2024 16:13:29 +0000 ROA not before: Tue 14 May 2024 16:13:29 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 24271 IP address blocks: 2400:99a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63 Validity Not Before: May 14 16:13:29 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=B8EDCF920B91E2FDF8F5664D8041741B153E3E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:95:2a:d4:e4:15:2c:60:04:74:d3:c7:ed: 80:e9:c1:36:50:41:16:56:2c:8d:cb:7d:e7:27:30: 92:c7:54:ba:d7:c8:94:ce:47:a4:17:8d:ff:4c:01: 5b:2c:34:81:ed:ad:45:41:28:62:27:4e:fd:df:ec: 56:0b:1d:0a:d0:eb:12:99:18:74:d2:b1:6c:22:04: 7d:38:af:02:31:27:7e:e1:46:0f:a2:37:75:9b:fe: 24:df:62:45:82:e9:97:ef:bd:fb:ac:75:ba:8b:86: cd:fc:32:43:db:eb:e9:8a:95:ae:41:98:6d:53:dc: c4:90:ba:c9:c2:11:cb:57:44:ba:a1:cc:ec:72:ba: 0f:37:9d:7b:7d:f3:40:0f:bb:1d:03:f0:68:ef:9f: af:6f:11:51:0a:40:53:ee:f9:18:fc:ed:10:d0:14: 26:24:11:3c:de:af:88:52:35:f9:de:d4:fe:c3:2c: 16:43:1f:6f:4e:49:62:e8:9f:c7:e0:6b:01:72:29: 6a:02:1e:ab:69:52:d2:66:7f:4b:77:cc:e4:7c:85: a2:ba:91:2e:a7:75:93:fe:d9:29:3f:fb:87:18:d7: b7:31:f5:17:eb:e8:cf:0a:ec:06:6c:6e:25:fe:6e: 0c:85:bd:30:ce:7c:3e:f2:39:28:48:8e:9c:48:7e: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:CF:92:0B:91:E2:FD:F8:F5:66:4D:80:41:74:1B:15:3E:3E:6C X509v3 Authority Key Identifier: keyid:E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/uO3PkguR4v349WZNgEF0GxU-Pmw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:99a0::/32 Signature Algorithm: sha256WithRSAEncryption d1:16:c0:c6:0e:5f:d3:73:f3:0a:0f:c6:51:4a:52:67:7c:59: d8:13:52:24:fd:8d:74:d3:59:74:0a:5d:70:6e:82:08:53:bb: 63:62:6a:15:bb:db:b1:c6:3f:62:b7:9c:eb:4b:6c:41:24:42: 43:42:63:5f:86:d2:2d:c8:84:93:ea:fd:cf:76:29:bc:bd:8b: 17:c6:ee:a8:8c:d0:c1:26:a7:88:90:7e:fe:fb:ef:9b:74:2a: c6:bd:a8:95:2e:a4:48:6f:b6:2b:9a:5b:37:9a:71:c0:ed:0b: 1c:61:92:b0:7b:e1:d6:1d:3d:e3:46:78:6a:14:41:5a:21:bd: 1b:7b:bf:fc:4a:03:3b:23:5f:3a:5e:97:32:76:bd:a0:03:89: 17:9c:95:cd:90:09:46:7e:07:8f:3c:a1:c1:88:1f:60:64:b6: 51:44:66:d7:91:cc:78:a2:a6:85:e8:a8:57:16:ab:6b:0d:94: cc:32:55:8a:b4:c7:1e:ef:0d:a0:7b:13:c9:96:51:1a:78:dc: c2:0b:fa:cc:61:6f:8e:e2:4a:60:7f:d0:09:db:91:2d:4a:e5: 71:9f:f2:38:14:f0:ee:2a:0f:22:fe:33:05:6b:f3:81:85:24: cd:69:bd:cf:1f:ac:81:4b:44:57:f9:34:0c:ae:25:0b:51:20: 6f:2e:5b:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkNC MjExRjI5M0U1NEU4NEUzQ0JEOUQyMkIwODg0Njc1QkIxQzYzMB4XDTI0MDUxNDE2 MTMyOVoXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjhFRENGOTIwQjkxRTJG REY4RjU2NjREODA0MTc0MUIxNTNFM0U2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOSJlSrU5BUsYAR008ftgOnBNlBBFlYsjct95ycwksdUutfIlM5H pBeN/0wBWyw0ge2tRUEoYidO/d/sVgsdCtDrEpkYdNKxbCIEfTivAjEnfuFGD6I3 dZv+JN9iRYLpl++9+6x1uouGzfwyQ9vr6YqVrkGYbVPcxJC6ycIRy1dEuqHM7HK6 Dzede33zQA+7HQPwaO+fr28RUQpAU+75GPztENAUJiQRPN6viFI1+d7U/sMsFkMf b05JYuifx+BrAXIpagIeq2lS0mZ/S3fM5HyForqRLqd1k/7ZKT/7hxjXtzH1F+vo zwrsBmxuJf5uDIW9MM58PvI5KEiOnEh+xfMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBS47c+SC5Hi/fj1Zk2AQXQbFT4+bDAfBgNVHSMEGDAWgBTiyyEfKT5U6E48vZ0i sIhGdbscYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDYvNHNzaEh5ay1WT2hPUEwyZElyQ0lSblc3SEdNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHNzaEh5ay1WT2hPUEwyZElyQ0lS blc3SEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDA2L3VPM1BrZ3VSNHYzNDlXWk5nRUYwR3hVLVBtdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAJmgMA0GCSqGSIb3DQEBCwUAA4IBAQDRFsDGDl/Tc/MKD8ZRSlJn fFnYE1Ik/Y1001l0Cl1wboIIU7tjYmoVu9uxxj9it5zrS2xBJEJDQmNfhtItyIST 6v3Pdim8vYsXxu6ojNDBJqeIkH7++++bdCrGvaiVLqRIb7Yrmls3mnHA7QscYZKw e+HWHT3jRnhqFEFaIb0be7/8SgM7I186Xpcydr2gA4kXnJXNkAlGfgePPKHBiB9g ZLZRRGbXkcx4oqaF6KhXFqtrDZTMMlWKtMce7w2gexPJllEaeNzCC/rMYW+O4kpg f9AJ25EtSuVxn/I4FPDuKg8i/jMFa/OBhSTNab3PH6yBS0RX+TQMriULUSBvLltJ -----END CERTIFICATE-----Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org