$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30442/y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa File: y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa (raw, json) Hash identifier: jMDF/N1RbFU6eZIF3hb5Mi8G2lBm7OKGGPyaEOL/rGE= Subject key identifier: CB:49:77:BC:5A:EC:3E:03:4D:F5:9B:2A:14:61:33:3E:BE:B9:97:15 Certificate issuer: /CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Certificate serial: 02 Authority key identifier: FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa Signing time: Mon 18 Nov 2024 06:28:58 +0000 ROA not before: Mon 18 Nov 2024 06:28:58 +0000 ROA not after: Tue 18 Nov 2025 06:20:16 +0000 asID: 45681 IP address blocks: 2401:d220::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 00:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Validity Not Before: Nov 18 06:28:58 2024 GMT Not After : Nov 18 06:20:16 2025 GMT Subject: CN=CB4977BC5AEC3E034DF59B2A1461333EBEB99715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:f9:b4:43:13:11:51:ab:9d:ff:0f:0c:6a: 9f:5b:ce:0d:13:0d:70:03:7c:4c:f9:85:ff:f9:10: 73:01:8b:80:bb:7c:13:0f:d8:08:a5:6c:08:74:b1: 20:39:91:76:ed:5f:59:3f:89:18:f4:3a:8e:9a:75: a2:83:e2:80:bf:0c:22:c7:3c:aa:83:76:aa:81:bb: 86:c2:38:db:5f:f6:51:20:42:7a:d2:ef:53:06:76: 06:4d:43:25:de:6a:72:43:8b:f2:99:60:ba:92:4b: 57:a7:83:22:88:8b:0a:f6:95:c4:f6:0f:dd:10:c1: f4:09:ae:01:17:29:b6:e1:27:61:ce:e4:0f:52:c6: bb:fe:e7:0d:dd:38:d5:96:f4:30:6e:b8:c4:58:a7: 7a:3a:75:21:56:1d:31:1b:af:fd:31:88:a6:19:eb: f4:ca:ed:99:c2:7e:de:43:4c:71:c0:df:cb:f1:35: d3:fc:d7:06:5f:e8:4d:53:55:1b:ea:04:b8:95:17: 52:09:1f:da:c1:e4:46:b1:76:1c:37:61:7f:fc:7b: 9c:b6:13:f8:fa:08:c4:0f:dc:30:41:86:17:fb:87: 31:6d:fc:e7:91:7b:21:e5:f9:bf:99:83:5a:fe:5d: 6c:66:09:d7:06:3a:71:a7:c2:15:f8:3b:c5:77:ab: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:77:BC:5A:EC:3E:03:4D:F5:9B:2A:14:61:33:3E:BE:B9:97:15 X509v3 Authority Key Identifier: keyid:FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d220::/32 Signature Algorithm: sha256WithRSAEncryption 11:47:b9:d4:99:01:21:5a:3a:4f:bb:86:8d:e2:12:04:9f:f7: 18:26:26:91:ca:db:af:3a:21:71:a5:01:37:1e:6a:70:12:7d: 5c:4b:50:ca:82:83:8b:ef:16:5a:c1:1f:41:8b:99:e6:31:1f: b7:0a:ce:da:09:43:0a:f7:0a:84:1b:3a:2d:74:39:3d:f5:32: d1:53:a9:b9:c7:39:b5:50:70:65:96:7d:9f:ab:3d:a8:48:2d: 82:ac:de:9f:f8:c7:ae:7a:34:0c:86:63:a8:4b:57:5e:83:e1: f2:fa:59:ce:01:e5:26:75:ed:90:fe:0e:12:c8:b8:b9:63:fe: f5:5c:68:bd:cd:04:80:da:fe:e5:ed:a5:7f:d9:4f:d1:39:b0: 73:b9:1a:5d:41:13:0e:1b:be:ac:23:f5:97:f9:f6:57:57:34: 5e:a3:36:f5:3e:45:99:ae:ce:e7:3e:a3:c5:6d:54:31:d9:00: f5:8f:cd:6f:07:54:da:76:da:51:b8:55:c6:dd:21:79:81:8f: e9:74:d2:7b:0b:d8:86:4d:7b:63:19:79:81:f0:df:81:bd:7a: 49:ba:73:0d:41:cd:cb:80:fa:b4:5e:07:e6:40:46:72:1a:46: 97:d3:04:16:ab:cd:b8:f7:44:de:08:51:d8:dc:37:11:1b:3f: a9:1b:2e:4f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzBC MDM3MjY0N0EyNDREMTBCOEQ4MjRBRTBCNTA3NzZENjQ2NUVBMB4XDTI0MTExODA2 Mjg1OFoXDTI1MTExODA2MjAxNlowMzExMC8GA1UEAxMoQ0I0OTc3QkM1QUVDM0Uw MzRERjU5QjJBMTQ2MTMzM0VCRUI5OTcxNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzJ+bRDExFRq53/Dwxqn1vODRMNcAN8TPmF//kQcwGLgLt8Ew/Y CKVsCHSxIDmRdu1fWT+JGPQ6jpp1ooPigL8MIsc8qoN2qoG7hsI421/2USBCetLv UwZ2Bk1DJd5qckOL8plgupJLV6eDIoiLCvaVxPYP3RDB9AmuARcptuEnYc7kD1LG u/7nDd041Zb0MG64xFinejp1IVYdMRuv/TGIphnr9MrtmcJ+3kNMccDfy/E10/zX Bl/oTVNVG+oEuJUXUgkf2sHkRrF2HDdhf/x7nLYT+PoIxA/cMEGGF/uHMW3855F7 IeX5v5mDWv5dbGYJ1wY6cafCFfg7xXeruikCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTLSXe8Wuw+A031myoUYTM+vrmXFTAfBgNVHSMEGDAWgBT8CwNyZHokTRC42CSu C1B3bWRl6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NDIvX0FzRGNtUjZKRTBRdU5na3JndFFkMjFrWmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0FzRGNtUjZKRTBRdU5na3JndFFk MjFrWmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDQyL3kwbDN2RnJzUGdOTjlac3FGR0V6UHI2NWx4VS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAdIgMA0GCSqGSIb3DQEBCwUAA4IBAQARR7nUmQEhWjpPu4aN4hIE n/cYJiaRytuvOiFxpQE3HmpwEn1cS1DKgoOL7xZawR9Bi5nmMR+3Cs7aCUMK9wqE GzotdDk99TLRU6m5xzm1UHBlln2fqz2oSC2CrN6f+MeuejQMhmOoS1deg+Hy+lnO AeUmde2Q/g4SyLi5Y/71XGi9zQSA2v7l7aV/2U/RObBzuRpdQRMOG76sI/WX+fZX VzReozb1PkWZrs7nPqPFbVQx2QD1j81vB1TadtpRuFXG3SF5gY/pdNJ7C9iGTXtj GXmB8N+BvXpJunMNQc3LgPq0XgfmQEZyGkaX0wQWq82490TeCFHY3DcRGz+pGy5P -----END CERTIFICATE-----Generated at Tue Nov 26 02:27:13 2024 by rpki-client on console-ams.rpki-client.org