$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30427/A2R-J0HpqRGOiCex2yn0Fd0B_E0.roa File: A2R-J0HpqRGOiCex2yn0Fd0B_E0.roa (raw, json) Hash identifier: Scu0ptB6W/2jCQblfz/b4XWQtYweXauDfS42YOkrfNA= Subject key identifier: 03:64:7E:27:41:E9:A9:11:8E:88:27:B1:DB:29:F4:15:DD:01:FC:4D Certificate issuer: /CN=EB9438A78EABAD9DFF5E2AE21ACDDF5810291CBF Certificate serial: 02 Authority key identifier: EB:94:38:A7:8E:AB:AD:9D:FF:5E:2A:E2:1A:CD:DF:58:10:29:1C:BF Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/65Q4p46rrZ3_XiriGs3fWBApHL8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/A2R-J0HpqRGOiCex2yn0Fd0B_E0.roa Signing time: Tue 17 Oct 2023 18:38:33 +0000 ROA not before: Tue 17 Oct 2023 18:38:33 +0000 ROA not after: Wed 16 Oct 2024 18:30:03 +0000 asID: 150369 IP address blocks: 2401:2d60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/65Q4p46rrZ3_XiriGs3fWBApHL8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/65Q4p46rrZ3_XiriGs3fWBApHL8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/65Q4p46rrZ3_XiriGs3fWBApHL8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB9438A78EABAD9DFF5E2AE21ACDDF5810291CBF Validity Not Before: Oct 17 18:38:33 2023 GMT Not After : Oct 16 18:30:03 2024 GMT Subject: CN=03647E2741E9A9118E8827B1DB29F415DD01FC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:f5:43:92:cb:2b:14:44:83:61:42:48:0a: 7e:e3:6e:fb:54:d7:2c:d6:0f:c0:74:16:e3:c4:7d: 43:1e:38:8c:31:9e:5e:b1:5c:6f:44:51:df:8d:d2: d2:f6:a1:74:ec:19:8a:18:4f:ff:10:ea:1e:84:13: ef:53:af:52:26:f3:4d:d8:b2:11:ae:1e:75:98:a2: b4:6d:6e:c6:23:5f:49:8c:52:d2:79:c0:7c:6d:ec: 47:25:e4:db:22:4a:18:ee:b5:9e:03:dd:43:75:04: 4f:95:5a:be:b6:83:b3:fd:23:f8:f5:b3:92:11:e1: 2d:d1:d2:16:61:0e:d9:fa:3a:35:42:7d:43:2e:ec: 40:bb:6e:4e:15:a9:53:98:84:e2:9a:cd:2b:f6:35: 25:00:24:11:dc:05:e5:5a:e7:b7:5e:5e:42:4e:34: de:91:4a:f5:67:50:8b:95:f9:e0:77:c6:bf:bd:a4: ed:2b:6b:5b:b5:6a:c0:84:a8:6a:a6:8a:e4:db:01: 86:b6:12:50:93:50:31:05:47:3a:cb:b6:f0:ed:ab: a7:de:fb:a4:98:f7:0a:32:97:42:5c:ae:eb:29:1d: c0:5f:98:26:e3:b6:1d:dd:ab:68:00:c0:48:64:2f: 19:8d:cd:b7:08:f9:12:47:2d:cd:ce:3e:e9:de:ae: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:64:7E:27:41:E9:A9:11:8E:88:27:B1:DB:29:F4:15:DD:01:FC:4D X509v3 Authority Key Identifier: keyid:EB:94:38:A7:8E:AB:AD:9D:FF:5E:2A:E2:1A:CD:DF:58:10:29:1C:BF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/65Q4p46rrZ3_XiriGs3fWBApHL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/65Q4p46rrZ3_XiriGs3fWBApHL8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30427/A2R-J0HpqRGOiCex2yn0Fd0B_E0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:2d60::/32 Signature Algorithm: sha256WithRSAEncryption ab:8a:8d:1a:3a:4e:5a:72:48:8c:c0:77:c2:42:12:00:02:b1: e4:65:6d:8a:0d:05:c4:fd:1f:e0:86:e9:f7:1e:64:dd:93:13: 1b:f1:97:f2:20:7f:ba:2e:fd:9a:69:ae:8e:6a:6e:9e:7b:02: 5f:31:5a:02:d4:a2:2e:12:35:75:de:35:da:08:04:0d:21:92: 00:9d:49:73:29:97:87:51:cb:af:ee:0c:db:c6:e7:c6:af:c8: f7:1a:f0:c1:55:f3:23:05:ac:ae:89:fd:59:c9:4f:2f:f1:f7: 2e:90:8f:39:87:fd:a0:39:1c:23:05:3f:dd:16:56:d7:96:a0: 04:ec:48:7c:79:ef:c0:e2:9c:94:6a:bf:6a:12:10:ac:71:44: 50:be:20:a3:f8:28:e6:ee:10:97:da:3c:c2:6c:35:24:14:5b: 82:cd:7c:15:51:1a:6e:53:ad:80:9a:58:7a:64:e4:5d:84:5f: 34:4a:c2:3d:73:e7:5b:43:95:ff:b3:e2:bd:64:f4:7d:3c:62: 9e:64:e1:bf:ab:96:63:46:2f:f0:e8:30:26:fc:c0:83:0e:22: a6:3a:27:d7:dc:33:d1:a5:4b:c7:cc:05:6b:9c:ff:3e:bd:0b: 93:fb:31:fc:49:c4:2d:09:58:30:f3:b4:27:77:d4:e5:74:dd: 1b:0f:89:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQjk0 MzhBNzhFQUJBRDlERkY1RTJBRTIxQUNEREY1ODEwMjkxQ0JGMB4XDTIzMTAxNzE4 MzgzM1oXDTI0MTAxNjE4MzAwM1owMzExMC8GA1UEAxMoMDM2NDdFMjc0MUU5QTkx MThFODgyN0IxREIyOUY0MTVERDAxRkM0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKav9UOSyysURINhQkgKfuNu+1TXLNYPwHQW48R9Qx44jDGeXrFc b0RR343S0vahdOwZihhP/xDqHoQT71OvUibzTdiyEa4edZiitG1uxiNfSYxS0nnA fG3sRyXk2yJKGO61ngPdQ3UET5VavraDs/0j+PWzkhHhLdHSFmEO2fo6NUJ9Qy7s QLtuThWpU5iE4prNK/Y1JQAkEdwF5Vrnt15eQk403pFK9WdQi5X54HfGv72k7Str W7VqwISoaqaK5NsBhrYSUJNQMQVHOsu28O2rp977pJj3CjKXQlyu6ykdwF+YJuO2 Hd2raADASGQvGY3Ntwj5Ekctzc4+6d6uQz0CAwEAAaOCAikwggIlMB0GA1UdDgQW BBQDZH4nQempEY6IJ7HbKfQV3QH8TTAfBgNVHSMEGDAWgBTrlDinjqutnf9eKuIa zd9YECkcvzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjcvNjVRNHA0NnJyWjNfWGlyaUdzM2ZXQkFwSEw4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNjVRNHA0NnJyWjNfWGlyaUdzM2ZX QkFwSEw4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDI3L0EyUi1KMEhwcVJHT2lDZXgyeW4wRmQwQl9FMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAS1gMA0GCSqGSIb3DQEBCwUAA4IBAQCrio0aOk5ackiMwHfCQhIA ArHkZW2KDQXE/R/ghun3HmTdkxMb8ZfyIH+6Lv2aaa6Oam6eewJfMVoC1KIuEjV1 3jXaCAQNIZIAnUlzKZeHUcuv7gzbxufGr8j3GvDBVfMjBayuif1ZyU8v8fcukI85 h/2gORwjBT/dFlbXlqAE7Eh8ee/A4pyUar9qEhCscURQviCj+Cjm7hCX2jzCbDUk FFuCzXwVURpuU62Amlh6ZORdhF80SsI9c+dbQ5X/s+K9ZPR9PGKeZOG/q5ZjRi/w 6DAm/MCDDiKmOifX3DPRpUvHzAVrnP8+vQuT+zH8ScQtCVgw87Qnd9TldN0bD4mP -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org