$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30428/mRNM7zXNvWnSgLHomQnoKGh5iS4.roa File: mRNM7zXNvWnSgLHomQnoKGh5iS4.roa (raw, json) Hash identifier: vH/9MxpBExfrDO7o4/WKz1j6YoDlDPxFz57Tk7D/e2M= Subject key identifier: 99:13:4C:EF:35:CD:BD:69:D2:80:B1:E8:99:09:E8:28:68:79:89:2E Certificate issuer: /CN=CBAAB6E902A754AB20FF1256A2AFC679C413373E Certificate serial: 02 Authority key identifier: CB:AA:B6:E9:02:A7:54:AB:20:FF:12:56:A2:AF:C6:79:C4:13:37:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/mRNM7zXNvWnSgLHomQnoKGh5iS4.roa Signing time: Thu 11 Apr 2024 07:37:28 +0000 ROA not before: Thu 11 Apr 2024 07:37:28 +0000 ROA not after: Fri 11 Apr 2025 07:30:15 +0000 asID: 23831 IP address blocks: 2401:2f20::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBAAB6E902A754AB20FF1256A2AFC679C413373E Validity Not Before: Apr 11 07:37:28 2024 GMT Not After : Apr 11 07:30:15 2025 GMT Subject: CN=99134CEF35CDBD69D280B1E89909E8286879892E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:fb:8b:f0:92:63:fd:28:64:ae:a4:b3:84: 7e:d8:91:b5:06:a4:51:83:d6:4d:23:17:0a:5c:e3: ab:5b:f9:60:b6:3f:fa:e2:8d:c7:41:90:c5:1c:5d: 63:ac:84:3a:83:b4:b9:d2:19:90:f1:53:4b:81:87: e4:77:ac:54:0c:29:29:df:ed:08:f4:c8:f0:65:0c: 65:ef:aa:e8:aa:06:2a:ba:4a:89:5c:40:1f:d4:0e: f1:9f:7b:1e:41:17:27:db:13:25:88:b6:45:6e:a9: 84:d5:95:45:3e:b6:39:ff:1e:df:eb:a9:26:1a:0d: 06:bc:46:2f:a9:95:21:63:1d:d6:fe:09:1d:f9:72: 81:21:ed:bd:b7:39:ba:d6:28:cd:fc:80:87:b6:71: 02:d7:81:e7:95:f4:75:1a:9d:bf:d4:df:16:f3:99: 9e:af:e3:d5:50:27:6c:a4:f7:fe:84:bd:75:ce:10: f1:ca:2b:51:f5:d9:49:b5:6f:2b:87:2b:63:4e:52: 90:a0:92:13:e5:ae:db:39:80:ce:ac:70:b7:3f:a8: 17:08:46:6d:86:4d:46:44:f1:b6:0b:47:08:49:24: ef:94:87:70:e7:e3:3c:46:a7:d5:0d:5b:08:68:1d: ac:5f:bd:55:54:7c:6f:43:b6:f2:d4:91:ea:72:a6: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:13:4C:EF:35:CD:BD:69:D2:80:B1:E8:99:09:E8:28:68:79:89:2E X509v3 Authority Key Identifier: keyid:CB:AA:B6:E9:02:A7:54:AB:20:FF:12:56:A2:AF:C6:79:C4:13:37:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/y6q26QKnVKsg_xJWoq_GecQTNz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y6q26QKnVKsg_xJWoq_GecQTNz4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30428/mRNM7zXNvWnSgLHomQnoKGh5iS4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:2f20::/32 Signature Algorithm: sha256WithRSAEncryption 0f:c9:00:0f:6b:6a:b1:3d:9d:fd:67:55:3e:2f:c7:45:9a:25: 38:7d:89:fd:d6:06:43:75:9f:b3:f2:24:32:4a:a5:01:ff:78: 77:59:76:93:87:b8:10:9f:4c:e7:9a:0a:d4:9d:d8:5a:48:5d: 8a:d9:c1:6f:1b:ce:a6:7d:3c:d2:45:33:17:bd:8e:5f:46:f2: b7:24:26:12:d3:05:c9:62:1b:64:82:1c:59:0a:b6:09:18:8b: 25:cb:21:b9:37:fd:0f:cb:0a:90:13:d9:3f:1e:0a:61:4c:c7: 4a:c9:47:e3:72:a2:a9:15:94:34:3a:b8:74:a1:bd:7d:1b:e4: fe:3b:a7:2b:5e:c8:cc:3d:3f:72:12:df:4b:06:06:0c:71:60: db:43:37:26:99:b1:dc:81:2c:cc:04:8c:ea:3e:df:d9:f5:8c: 5a:c6:19:be:5d:78:f0:bf:d3:09:65:61:42:95:2e:1c:c9:4b: 31:6a:1e:e5:b6:1c:bd:b1:ed:80:b1:62:18:77:65:c2:00:af: e8:cd:11:1b:06:c2:db:76:52:34:94:e5:c2:d3:68:df:f3:40: 09:71:5a:75:76:1a:3b:09:f3:1b:2d:f0:17:9c:d5:ce:b5:96: 0b:44:33:6e:d7:e6:70:e3:24:6b:39:73:9a:b1:18:0e:de:bc: f5:63:f5:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQkFB QjZFOTAyQTc1NEFCMjBGRjEyNTZBMkFGQzY3OUM0MTMzNzNFMB4XDTI0MDQxMTA3 MzcyOFoXDTI1MDQxMTA3MzAxNVowMzExMC8GA1UEAxMoOTkxMzRDRUYzNUNEQkQ2 OUQyODBCMUU4OTkwOUU4Mjg2ODc5ODkyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK6b+4vwkmP9KGSupLOEftiRtQakUYPWTSMXClzjq1v5YLY/+uKN x0GQxRxdY6yEOoO0udIZkPFTS4GH5HesVAwpKd/tCPTI8GUMZe+q6KoGKrpKiVxA H9QO8Z97HkEXJ9sTJYi2RW6phNWVRT62Of8e3+upJhoNBrxGL6mVIWMd1v4JHfly gSHtvbc5utYozfyAh7ZxAteB55X0dRqdv9TfFvOZnq/j1VAnbKT3/oS9dc4Q8cor UfXZSbVvK4crY05SkKCSE+Wu2zmAzqxwtz+oFwhGbYZNRkTxtgtHCEkk75SHcOfj PEan1Q1bCGgdrF+9VVR8b0O28tSR6nKmar8CAwEAAaOCAikwggIlMB0GA1UdDgQW BBSZE0zvNc29adKAseiZCegoaHmJLjAfBgNVHSMEGDAWgBTLqrbpAqdUqyD/Elai r8Z5xBM3PjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjgveTZxMjZRS25WS3NnX3hKV29xX0dlY1FUTno0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveTZxMjZRS25WS3NnX3hKV29xX0dl Y1FUTno0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDI4L21STk03elhOdlduU2dMSG9tUW5vS0doNWlTNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAS8gMA0GCSqGSIb3DQEBCwUAA4IBAQAPyQAPa2qxPZ39Z1U+L8dF miU4fYn91gZDdZ+z8iQySqUB/3h3WXaTh7gQn0znmgrUndhaSF2K2cFvG86mfTzS RTMXvY5fRvK3JCYS0wXJYhtkghxZCrYJGIslyyG5N/0PywqQE9k/HgphTMdKyUfj cqKpFZQ0Orh0ob19G+T+O6crXsjMPT9yEt9LBgYMcWDbQzcmmbHcgSzMBIzqPt/Z 9Yxaxhm+XXjwv9MJZWFClS4cyUsxah7lthy9se2AsWIYd2XCAK/ozREbBsLbdlI0 lOXC02jf80AJcVp1dho7CfMbLfAXnNXOtZYLRDNu1+Zw4yRrOXOasRgO3rz1Y/Uz -----END CERTIFICATE-----Generated at Fri Nov 22 13:33:15 2024 by rpki-client on console-fra.rpki-client.org