$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/HbFxuFQwTHnXOXEKOfjEoyZhj34.roa File: HbFxuFQwTHnXOXEKOfjEoyZhj34.roa (raw, json) Hash identifier: qd5LJ37ydca3Pefv3pEIPCW8GCMxYiXjOgC28+APxBc= Subject key identifier: 1D:B1:71:B8:54:30:4C:79:D7:39:71:0A:39:F8:C4:A3:26:61:8F:7E Certificate issuer: /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C Certificate serial: 03 Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/HbFxuFQwTHnXOXEKOfjEoyZhj34.roa Signing time: Fri 09 Aug 2024 13:51:11 +0000 ROA not before: Fri 09 Aug 2024 13:51:11 +0000 ROA not after: Sat 09 Aug 2025 13:02:58 +0000 asID: 45691 IP address blocks: 2401:b420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Sep 2024 01:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C Validity Not Before: Aug 9 13:51:11 2024 GMT Not After : Aug 9 13:02:58 2025 GMT Subject: CN=1DB171B854304C79D739710A39F8C4A326618F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:da:c2:f4:8c:f0:a7:31:21:5b:38:55:13: 78:a8:3b:c4:6e:35:e6:5f:a0:0d:fe:57:42:d8:42: 48:db:8b:3b:9e:e7:0e:01:3f:e7:25:66:72:1e:57: 82:75:b3:b6:dc:e1:c2:2b:91:4a:f6:51:af:db:70: 83:7d:df:c3:fa:66:58:4e:09:0f:08:e2:85:c7:47: 6b:53:db:9d:5e:43:26:20:9f:8e:60:8c:be:fc:6e: 45:00:a5:ec:52:b2:5d:ff:91:7c:01:c7:a2:53:18: 04:6b:68:d7:06:8d:58:01:dd:7d:b3:68:61:1b:44: 0b:9d:4d:1e:c9:54:31:c0:c4:76:1e:dd:8d:68:57: c3:eb:33:b5:a5:56:0e:a0:94:85:eb:85:55:8d:4a: c7:cf:6b:c3:2c:08:f5:fc:3a:8b:80:17:34:82:b5: 35:b9:a6:05:f3:62:79:c3:7a:af:fd:f3:11:f1:b4: 89:d5:23:af:5d:65:33:a9:db:20:63:23:9b:55:08: 52:78:19:02:20:ab:85:cf:cb:cd:34:d2:24:02:62: e6:bd:74:7f:f4:96:52:dd:f5:c4:94:6f:3e:86:a8: 46:d6:5c:10:cd:b3:c3:d1:39:59:f6:36:67:0c:5e: 05:10:5c:6f:5d:1b:55:be:e6:36:7f:45:2f:aa:a6: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B1:71:B8:54:30:4C:79:D7:39:71:0A:39:F8:C4:A3:26:61:8F:7E X509v3 Authority Key Identifier: keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/HbFxuFQwTHnXOXEKOfjEoyZhj34.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b420::/32 Signature Algorithm: sha256WithRSAEncryption 59:a5:97:f8:dc:1d:d6:00:48:ac:fb:11:60:27:42:35:a1:ed: 88:90:52:5c:73:3a:43:f3:7c:b1:09:2c:bf:18:39:d0:33:2c: f8:97:c6:f8:a1:84:a8:79:06:8b:1e:a4:0e:1e:0a:72:69:de: b0:74:42:8c:88:2a:db:6e:b3:82:19:83:74:0a:e3:e5:fe:32: ad:f8:10:81:13:b1:53:61:34:53:68:8d:b5:1d:8f:9f:dd:9c: 97:fc:d0:66:b7:16:10:51:0f:95:e8:bf:8b:59:2c:ac:13:11: 91:71:b7:ce:da:39:b8:1f:b5:c9:ec:4e:84:58:fe:c1:55:34: 8b:34:6b:86:a4:4f:14:f8:cf:e9:b8:e5:93:b7:1d:6d:95:ff: ba:10:52:73:dc:f1:c5:8e:5c:83:8f:f4:66:42:38:9a:b1:4a: c3:8c:66:36:ef:8e:cd:01:81:82:3a:a1:76:87:92:96:8a:26: 43:d6:a5:aa:5d:01:40:cf:3c:64:b8:b4:a6:17:fa:6c:ea:a7: 67:70:75:8a:9f:0f:c9:0a:3a:b4:27:b0:42:9b:15:f1:8c:36: 09:4d:e8:92:6d:34:a8:14:61:db:30:82:0a:8f:37:d5:53:b9: 24:0d:5d:50:0f:e7:c1:9b:e1:92:93:bb:bc:0f:22:2a:c4:59: 37:d9:f7:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDAy MEE4OEZDQTBGNUFEQkI1QTU5OEFBODEyNTUzNEU1NzVDMTNDMB4XDTI0MDgwOTEz NTExMVoXDTI1MDgwOTEzMDI1OFowMzExMC8GA1UEAxMoMURCMTcxQjg1NDMwNEM3 OUQ3Mzk3MTBBMzlGOEM0QTMyNjYxOEY3RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMCx2sL0jPCnMSFbOFUTeKg7xG415l+gDf5XQthCSNuLO57nDgE/ 5yVmch5XgnWzttzhwiuRSvZRr9twg33fw/pmWE4JDwjihcdHa1PbnV5DJiCfjmCM vvxuRQCl7FKyXf+RfAHHolMYBGto1waNWAHdfbNoYRtEC51NHslUMcDEdh7djWhX w+sztaVWDqCUheuFVY1Kx89rwywI9fw6i4AXNIK1NbmmBfNiecN6r/3zEfG0idUj r11lM6nbIGMjm1UIUngZAiCrhc/LzTTSJAJi5r10f/SWUt31xJRvPoaoRtZcEM2z w9E5WfY2ZwxeBRBcb10bVb7mNn9FL6qmoaMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQdsXG4VDBMedc5cQo5+MSjJmGPfjAfBgNVHSMEGDAWgBSNAgqI/KD1rbtaWYqo ElU05XXBPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MzkvalFJS2lQeWc5YTI3V2xtS3FCSlZOT1Yxd1R3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalFJS2lQeWc5YTI3V2xtS3FCSlZO T1Yxd1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDM5L0hiRnh1RlF3VEhuWE9YRUtPZmpFb3laaGozNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAbQgMA0GCSqGSIb3DQEBCwUAA4IBAQBZpZf43B3WAEis+xFgJ0I1 oe2IkFJcczpD83yxCSy/GDnQMyz4l8b4oYSoeQaLHqQOHgpyad6wdEKMiCrbbrOC GYN0CuPl/jKt+BCBE7FTYTRTaI21HY+f3ZyX/NBmtxYQUQ+V6L+LWSysExGRcbfO 2jm4H7XJ7E6EWP7BVTSLNGuGpE8U+M/puOWTtx1tlf+6EFJz3PHFjlyDj/RmQjia sUrDjGY2747NAYGCOqF2h5KWiiZD1qWqXQFAzzxkuLSmF/ps6qdncHWKnw/JCjq0 J7BCmxXxjDYJTeiSbTSoFGHbMIIKjzfVU7kkDV1QD+fBm+GSk7u8DyIqxFk32fdD -----END CERTIFICATE-----Generated at Wed Sep 18 16:41:31 2024 by rpki-client on console-ams.rpki-client.org