$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/BwCwPMq6QxtfseyxSLn2hgJxFA8.roa File: BwCwPMq6QxtfseyxSLn2hgJxFA8.roa (raw, json) Hash identifier: bQm63CJvBfVva2xoAr/irwWGrzZQdXv+dOQuKfyGxRc= Subject key identifier: 07:00:B0:3C:CA:BA:43:1B:5F:B1:EC:B1:48:B9:F6:86:02:71:14:0F Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 03 Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/BwCwPMq6QxtfseyxSLn2hgJxFA8.roa Signing time: Tue 05 Sep 2023 05:35:30 +0000 ROA not before: Tue 05 Sep 2023 05:35:30 +0000 ROA not after: Wed 14 Aug 2024 01:30:02 +0000 asID: 63803 IP address blocks: 2401:d20:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: Sep 5 05:35:30 2023 GMT Not After : Aug 14 01:30:02 2024 GMT Subject: CN=0700B03CCABA431B5FB1ECB148B9F6860271140F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:2c:7b:b4:0e:60:ba:32:37:32:dd:44:fb: a4:43:e0:9b:76:6b:87:77:85:f0:aa:92:15:4d:d1: ee:19:96:5a:9e:c9:10:d7:18:fa:32:b1:d8:65:cd: 65:92:5f:52:dc:b7:1a:8e:48:1a:3c:76:8e:a7:90: d4:4a:3b:c1:cd:c6:1b:0d:fc:f9:f1:ee:09:18:5f: b7:e1:4f:b4:9f:25:84:00:a5:03:e6:6e:f8:c5:9f: 34:4f:64:70:48:b3:f6:b7:ef:e7:55:f4:be:3f:00: 84:ac:bc:cb:1e:e6:6c:50:9f:1f:77:6f:7b:01:48: 52:7f:34:64:72:7d:3e:3c:f0:73:e8:ec:fa:dc:90: 54:b6:b9:1e:a6:b9:65:e7:9f:e4:9e:84:46:b5:f7: d4:70:70:5d:23:ce:e9:64:08:0e:77:5e:81:e1:d7: 3f:14:9e:7f:b3:b4:7d:53:78:0f:4a:1a:7a:18:98: ba:c9:ca:b3:e0:a9:87:d9:ac:cb:2b:90:34:87:bc: 58:10:dd:e5:41:2d:7d:0c:19:50:d3:52:e8:03:c8: 4f:c1:5d:93:b6:50:99:2e:9b:3b:25:3e:c8:d2:61: 4b:63:60:9d:a6:25:13:6c:d0:54:90:3e:79:b4:b0: 6e:97:a4:b9:a2:ae:f1:68:b0:1f:d1:d4:5d:35:d3: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:B0:3C:CA:BA:43:1B:5F:B1:EC:B1:48:B9:F6:86:02:71:14:0F X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/BwCwPMq6QxtfseyxSLn2hgJxFA8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d20:2000::/36 Signature Algorithm: sha256WithRSAEncryption 66:33:4c:4e:e5:8a:01:5d:f5:d4:d0:f1:4d:d1:56:03:96:41: 22:b9:ae:4b:db:f8:94:75:75:8f:41:80:db:7e:4b:1f:3c:05: 76:6c:b3:a3:19:62:b6:1f:f2:c0:36:5e:fd:03:00:05:97:dd: 4d:10:7f:96:5e:18:95:70:bf:9c:d3:35:fb:26:75:eb:0a:64: 3a:f6:49:50:21:be:d0:d8:65:b9:1f:e9:c1:c0:f4:b4:5f:23: 87:bf:fc:63:6e:52:03:bf:4f:30:bb:80:cb:fd:9d:b6:5d:45: 8f:7d:22:ca:4a:03:e0:71:39:b9:52:5d:e2:32:93:fe:83:35: ac:5a:9a:62:d9:5d:a0:3e:a3:d9:e8:31:aa:6a:e9:e5:44:e1: 2e:14:db:fb:86:33:cd:c0:87:6f:0b:89:d3:ca:28:4d:1e:8a: 72:fd:fe:d1:ba:dd:38:e0:56:71:56:b0:9a:c4:3d:34:0b:1f: ce:62:a1:66:35:09:27:85:53:a3:1a:01:48:e8:e6:d0:bc:7b: 3a:2d:44:e0:d9:9e:e8:3c:f4:78:ac:c8:33:43:40:bf:bb:24: f9:31:a1:26:59:30:c4:9d:31:2f:d1:98:f2:9a:cc:47:d4:0a: 25:05:e1:d3:c1:47:aa:4d:92:07:93:21:c5:ab:c7:55:49:5a: 80:63:1d:73 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTIzMDkwNTA1 MzUzMFoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoMDcwMEIwM0NDQUJBNDMx QjVGQjFFQ0IxNDhCOUY2ODYwMjcxMTQwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALm8LHu0DmC6Mjcy3UT7pEPgm3Zrh3eF8KqSFU3R7hmWWp7JENcY +jKx2GXNZZJfUty3Go5IGjx2jqeQ1Eo7wc3GGw38+fHuCRhft+FPtJ8lhAClA+Zu +MWfNE9kcEiz9rfv51X0vj8AhKy8yx7mbFCfH3dvewFIUn80ZHJ9Pjzwc+js+tyQ VLa5Hqa5Zeef5J6ERrX31HBwXSPO6WQIDndegeHXPxSef7O0fVN4D0oaehiYusnK s+Cph9msyyuQNIe8WBDd5UEtfQwZUNNS6APIT8Fdk7ZQmS6bOyU+yNJhS2NgnaYl E2zQVJA+ebSwbpekuaKu8WiwH9HUXTXTUvsCAwEAAaOCAiowggImMB0GA1UdDgQW BBQHALA8yrpDG1+x7LFIufaGAnEUDzAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIzL0J3Q3dQTXE2UXh0ZnNleXhTTG4yaGdKeEZBOC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgQkAQ0gIDANBgkqhkiG9w0BAQsFAAOCAQEAZjNMTuWKAV311NDxTdFW A5ZBIrmuS9v4lHV1j0GA235LHzwFdmyzoxlith/ywDZe/QMABZfdTRB/ll4YlXC/ nNM1+yZ16wpkOvZJUCG+0NhluR/pwcD0tF8jh7/8Y25SA79PMLuAy/2dtl1Fj30i ykoD4HE5uVJd4jKT/oM1rFqaYtldoD6j2egxqmrp5UThLhTb+4YzzcCHbwuJ08oo TR6Kcv3+0brdOOBWcVawmsQ9NAsfzmKhZjUJJ4VToxoBSOjm0Lx7Oi1E4Nme6Dz0 eKzIM0NAv7sk+TGhJlkwxJ0xL9GY8prMR9QKJQXh08FHqk2SB5MhxavHVUlagGMd cw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:15:55 2024 by rpki-client on console-ams.rpki-client.org