$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30409/rePuk5dE08sJY21Av--_2YvwuNI.roa File: rePuk5dE08sJY21Av--_2YvwuNI.roa (raw, json) Hash identifier: YLGD0hA0mHhOncJs9ClnMpLMIpVSSc1x/TI5Wr4UsVE= Subject key identifier: AD:E3:EE:93:97:44:D3:CB:09:63:6D:40:BF:EF:BF:D9:8B:F0:B8:D2 Certificate issuer: /CN=6084C82997BC86365F5318867EFFB82561955474 Certificate serial: 1D Authority key identifier: 60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/rePuk5dE08sJY21Av--_2YvwuNI.roa Signing time: Mon 30 Sep 2024 01:28:54 +0000 ROA not before: Mon 30 Sep 2024 01:28:54 +0000 ROA not after: Mon 15 Sep 2025 01:30:03 +0000 asID: 146984 IP address blocks: 2400:b420::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6084C82997BC86365F5318867EFFB82561955474 Validity Not Before: Sep 30 01:28:54 2024 GMT Not After : Sep 15 01:30:03 2025 GMT Subject: CN=ADE3EE939744D3CB09636D40BFEFBFD98BF0B8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:f0:c8:94:4c:c5:33:43:3f:8f:16:05:d8: 71:e8:a9:c3:00:ee:2c:a7:92:1e:fe:5c:e0:3b:61: 04:f2:0c:4b:08:1e:65:12:8f:d5:ef:76:9c:91:69: a9:59:e1:2b:d5:a6:2d:7c:a3:c8:b2:6a:bc:3c:c0: 32:ff:2d:1f:64:83:8a:ed:69:ec:de:ba:d4:d9:75: 88:9f:a2:8a:c3:26:97:70:2f:82:3b:0c:d9:ca:7c: 2d:86:18:3c:7e:92:ee:f4:e3:f9:f7:d0:39:87:24: 91:f1:2f:71:ea:e5:67:be:e2:83:01:ff:9e:b0:05: ed:71:b1:72:f5:10:44:1e:45:b7:06:49:de:1e:5d: 54:ad:39:7e:56:93:f0:69:50:8f:27:e9:71:f6:6f: 0c:6f:2f:57:20:ca:b7:6c:bb:6d:19:12:26:3f:a9: 05:ed:69:84:38:96:b0:1a:d9:6e:25:fb:4c:ca:81: 71:cb:8e:16:bc:66:de:b8:cb:98:9f:f8:9f:c1:44: 93:4f:87:f2:9c:74:96:c8:44:20:ff:7c:f2:f3:15: db:b7:73:c8:6a:45:a8:79:ec:5f:2a:cd:f6:42:ec: 6b:4d:ae:72:e7:83:29:1d:ca:2f:a8:4f:ea:23:8c: 3b:7a:4e:bb:70:57:0b:f8:aa:28:1b:6a:1b:12:09: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E3:EE:93:97:44:D3:CB:09:63:6D:40:BF:EF:BF:D9:8B:F0:B8:D2 X509v3 Authority Key Identifier: keyid:60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/rePuk5dE08sJY21Av--_2YvwuNI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:b420::/32 Signature Algorithm: sha256WithRSAEncryption 0c:a8:13:e0:d5:c0:2f:06:59:5d:4f:6b:47:ab:fb:2d:3f:45: 3b:1d:7c:3f:bc:09:ee:59:cf:e3:9f:92:3a:66:3b:27:00:a4: 8a:9d:09:e4:d1:4e:a5:82:30:40:d3:f1:ec:ad:29:06:be:65: 5e:7e:84:89:01:02:10:02:2f:e2:74:f9:8e:62:6f:93:d3:76: 7a:d2:59:fc:1a:d0:bd:fb:a6:64:9a:a3:e5:ba:eb:b9:85:d3: 63:23:73:a5:85:ab:c0:8b:94:22:17:2d:05:24:51:a3:15:72: 61:2d:6f:67:e2:e8:10:a4:0e:77:a8:ed:a2:02:c0:f8:03:dc: 71:cb:38:ae:5d:35:71:e9:13:d1:8e:4f:71:32:0c:a0:47:3d: 70:8e:15:21:d1:0e:ed:ab:f5:6e:dc:12:60:e2:94:a6:88:81: 58:5d:69:32:a4:59:2a:77:24:50:e8:8e:94:e2:e9:9a:46:d7: 93:fa:2e:da:27:14:6f:6d:d1:ab:ee:87:03:47:95:45:46:be: c3:4f:33:70:ef:bf:af:33:63:f6:6c:61:73:89:64:26:bb:16: f5:a8:a0:9c:0c:31:dd:bf:21:dd:0b:51:85:7d:08:ef:bf:b2: 8e:38:eb:1c:fd:0e:99:a6:54:25:46:be:48:2b:81:e1:75:53: 79:b2:78:31 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MDg0 QzgyOTk3QkM4NjM2NUY1MzE4ODY3RUZGQjgyNTYxOTU1NDc0MB4XDTI0MDkzMDAx Mjg1NFoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQURFM0VFOTM5NzQ0RDND QjA5NjM2RDQwQkZFRkJGRDk4QkYwQjhEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALb48MiUTMUzQz+PFgXYceipwwDuLKeSHv5c4DthBPIMSwgeZRKP 1e92nJFpqVnhK9WmLXyjyLJqvDzAMv8tH2SDiu1p7N661Nl1iJ+iisMml3AvgjsM 2cp8LYYYPH6S7vTj+ffQOYckkfEvcerlZ77igwH/nrAF7XGxcvUQRB5FtwZJ3h5d VK05flaT8GlQjyfpcfZvDG8vVyDKt2y7bRkSJj+pBe1phDiWsBrZbiX7TMqBccuO Frxm3rjLmJ/4n8FEk0+H8px0lshEIP988vMV27dzyGpFqHnsXyrN9kLsa02ucueD KR3KL6hP6iOMO3pOu3BXC/iqKBtqGxIJOG0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBSt4+6Tl0TTywljbUC/77/Zi/C40jAfBgNVHSMEGDAWgBRghMgpl7yGNl9TGIZ+ /7glYZVUdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MDkvWUlUSUtaZThoalpmVXhpR2Z2LTRKV0dWVkhRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWUlUSUtaZThoalpmVXhpR2Z2LTRK V0dWVkhRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDA5L3JlUHVrNWRFMDhzSlkyMUF2LS1fMll2d3VOSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkALQgMA0GCSqGSIb3DQEBCwUAA4IBAQAMqBPg1cAvBlldT2tHq/st P0U7HXw/vAnuWc/jn5I6ZjsnAKSKnQnk0U6lgjBA0/HsrSkGvmVefoSJAQIQAi/i dPmOYm+T03Z60ln8GtC9+6ZkmqPluuu5hdNjI3OlhavAi5QiFy0FJFGjFXJhLW9n 4ugQpA53qO2iAsD4A9xxyziuXTVx6RPRjk9xMgygRz1wjhUh0Q7tq/Vu3BJg4pSm iIFYXWkypFkqdyRQ6I6U4umaRteT+i7aJxRvbdGr7ocDR5VFRr7DTzNw77+vM2P2 bGFziWQmuxb1qKCcDDHdvyHdC1GFfQjvv7KOOOsc/Q6ZplQlRr5IK4HhdVN5sngx -----END CERTIFICATE-----Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org