$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30419/insry1ULSC1d5XhLf0ybXpdSf88.roa File: insry1ULSC1d5XhLf0ybXpdSf88.roa (raw, json) Hash identifier: gITLLpWVbgs9e/82WQXq02JkqN9v56IoxU6lC1hLKLI= Subject key identifier: 8A:7B:2B:CB:55:0B:48:2D:5D:E5:78:4B:7F:4C:9B:5E:97:52:7F:CF Certificate issuer: /CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41 Certificate serial: 02 Authority key identifier: 5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/insry1ULSC1d5XhLf0ybXpdSf88.roa Signing time: Tue 23 Jan 2024 07:08:09 +0000 ROA not before: Tue 23 Jan 2024 07:08:09 +0000 ROA not after: Wed 22 Jan 2025 01:15:32 +0000 asID: 150366 IP address blocks: 2400:fba0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41 Validity Not Before: Jan 23 07:08:09 2024 GMT Not After : Jan 22 01:15:32 2025 GMT Subject: CN=8A7B2BCB550B482D5DE5784B7F4C9B5E97527FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:67:ab:12:0c:ab:26:9f:c3:36:81:b2:c9: 12:ee:42:a0:17:0f:84:3d:ac:8a:02:e6:44:f1:c8: 7d:70:09:64:3b:fa:57:c1:cf:98:34:dc:08:e8:de: 78:ba:0d:04:e7:17:3d:5a:3a:e5:f1:4b:b6:ca:58: bd:f1:f1:58:a0:ea:84:e9:61:6b:61:b3:14:61:43: 3d:86:6a:34:8c:83:97:6f:e0:82:7a:14:50:5e:16: c6:2d:60:43:dd:00:d6:89:e8:79:1f:50:4b:a4:de: 1e:71:8e:d8:bf:c1:ab:5b:88:3a:9d:d3:21:af:b9: 80:f3:8f:ec:a1:9f:c6:75:34:87:9e:aa:35:bd:d2: fc:0e:36:33:39:4f:5d:f4:e8:72:44:ac:1b:86:c9: fd:01:47:0d:bb:94:75:f6:43:86:bf:ca:3d:5c:2e: a7:b7:b0:7e:66:13:e2:7e:05:33:71:2c:ca:f4:9d: e8:61:09:5a:62:32:f8:24:aa:89:1b:28:bc:23:56: 02:35:7e:60:72:b3:d8:50:7a:f3:6f:71:81:f6:e8: 62:6f:05:a9:d6:01:11:4e:a2:ae:7b:be:a5:a4:4f: 2c:48:ae:5c:e4:b6:94:a7:a1:26:e8:c5:26:23:6f: c5:d4:e8:20:e6:47:3a:8b:80:ea:06:b3:62:9b:b2: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7B:2B:CB:55:0B:48:2D:5D:E5:78:4B:7F:4C:9B:5E:97:52:7F:CF X509v3 Authority Key Identifier: keyid:5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/insry1ULSC1d5XhLf0ybXpdSf88.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:fba0::/32 Signature Algorithm: sha256WithRSAEncryption 93:e7:39:f6:89:66:3b:9a:13:f2:00:3c:c3:9f:62:dd:6b:b9: a3:b4:17:35:d9:1b:07:54:76:f1:05:30:ec:d6:be:53:59:d4: a7:37:2c:3e:22:5c:e2:c5:22:3b:23:91:2f:4e:3f:9c:12:e6: 19:a3:f9:56:c6:9f:d9:f8:19:51:ff:86:6e:4d:9e:70:b9:85: 7e:01:06:8f:82:a8:4f:97:c2:e5:c1:39:1b:82:79:16:a7:80: 88:0f:21:83:28:b2:9c:8f:d9:a8:05:d6:ea:7b:55:7e:b5:41: 94:1e:ef:e3:e5:0c:36:b0:65:b6:d6:eb:ee:b1:c4:47:0c:91: 06:08:a1:db:32:01:b3:63:21:a6:78:90:cc:ba:be:07:94:24: 92:7f:7c:93:78:4f:5d:a0:c6:74:b5:33:01:c9:5c:37:88:02: 57:56:83:89:e9:70:78:9b:c5:9c:69:da:cc:7b:1f:84:06:3c: 40:31:05:59:ee:35:5f:44:59:c9:4f:43:d9:0c:e9:fd:3d:1c: 95:d9:56:2f:f6:a1:82:9d:35:e2:66:5f:b0:4a:5c:bc:6a:e0: 8f:55:ba:57:51:21:49:dd:c2:17:44:8f:88:b0:08:e4:c7:f1: 7b:b7:ac:d1:a7:57:7e:c2:94:d6:2d:ee:ac:8b:ec:18:ab:f6: d7:b7:79:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1Qzk0 RDQ2MDEyNkQzRTIyNEIxREJENjY0NkZBRTkyNDNBNjBFQzQxMB4XDTI0MDEyMzA3 MDgwOVoXDTI1MDEyMjAxMTUzMlowMzExMC8GA1UEAxMoOEE3QjJCQ0I1NTBCNDgy RDVERTU3ODRCN0Y0QzlCNUU5NzUyN0ZDRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6VZ6sSDKsmn8M2gbLJEu5CoBcPhD2sigLmRPHIfXAJZDv6V8HP mDTcCOjeeLoNBOcXPVo65fFLtspYvfHxWKDqhOlha2GzFGFDPYZqNIyDl2/ggnoU UF4Wxi1gQ90A1onoeR9QS6TeHnGO2L/Bq1uIOp3TIa+5gPOP7KGfxnU0h56qNb3S /A42MzlPXfTockSsG4bJ/QFHDbuUdfZDhr/KPVwup7ewfmYT4n4FM3EsyvSd6GEJ WmIy+CSqiRsovCNWAjV+YHKz2FB6829xgfboYm8FqdYBEU6irnu+paRPLEiuXOS2 lKehJujFJiNvxdToIOZHOouA6gazYpuyMtsCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSKeyvLVQtILV3leEt/TJtel1J/zzAfBgNVHSMEGDAWgBRclNRgEm0+IksdvWZG +ukkOmDsQTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MTkvWEpUVVlCSnRQaUpMSGIxbVJ2cnBKRHBnN0VFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEpUVVlCSnRQaUpMSGIxbVJ2cnBK RHBnN0VFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDE5L2luc3J5MVVMU0MxZDVYaExmMHliWHBkU2Y4OC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAPugMA0GCSqGSIb3DQEBCwUAA4IBAQCT5zn2iWY7mhPyADzDn2Ld a7mjtBc12RsHVHbxBTDs1r5TWdSnNyw+IlzixSI7I5EvTj+cEuYZo/lWxp/Z+BlR /4ZuTZ5wuYV+AQaPgqhPl8LlwTkbgnkWp4CIDyGDKLKcj9moBdbqe1V+tUGUHu/j 5Qw2sGW21uvuscRHDJEGCKHbMgGzYyGmeJDMur4HlCSSf3yTeE9doMZ0tTMByVw3 iAJXVoOJ6XB4m8WcadrMex+EBjxAMQVZ7jVfRFnJT0PZDOn9PRyV2VYv9qGCnTXi Zl+wSly8auCPVbpXUSFJ3cIXRI+IsAjkx/F7t6zRp1d+wpTWLe6si+wYq/bXt3lB -----END CERTIFICATE-----Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org