$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa File: xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa (raw, json) Hash identifier: cMpvDwGoZ9aKKzVF9CaeeYpoF7AUFGU04HCYBUylyMw= Subject key identifier: C4:70:CF:65:50:3B:66:21:DE:DD:B6:73:A8:96:ED:B2:75:D3:7D:74 Certificate issuer: /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Certificate serial: 33 Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa Signing time: Wed 31 Jul 2024 01:29:26 +0000 ROA not before: Wed 31 Jul 2024 01:29:26 +0000 ROA not after: Tue 15 Jul 2025 01:30:02 +0000 asID: 4721 IP address blocks: 2001:c30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261 Validity Not Before: Jul 31 01:29:26 2024 GMT Not After : Jul 15 01:30:02 2025 GMT Subject: CN=C470CF65503B6621DEDDB673A896EDB275D37D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:e3:2f:01:c6:ec:9a:81:1d:02:1b:a2:ca: c5:73:dc:4a:31:c5:b4:53:f9:0a:4c:9e:f2:60:96: a3:e0:28:10:e2:03:00:57:8f:f4:79:87:04:6e:f6: 66:e3:52:fe:42:67:8e:2d:88:86:24:ed:61:d0:39: ba:30:d8:a5:0c:d9:17:3e:45:cd:6b:81:04:b4:bb: b8:18:0d:50:bd:7f:f8:71:47:a0:42:16:06:b9:f5: e1:b7:60:d7:cf:5f:9e:3f:19:95:95:50:22:47:c5: dc:b7:72:de:5c:3c:84:89:2c:f2:69:fb:7d:6c:c7: bd:3b:b3:f4:59:7a:d2:7c:83:7f:ad:a3:25:3f:7c: ea:c9:3b:1c:9e:2a:8b:9d:90:0e:9b:a1:42:1d:33: ca:c8:43:10:18:cf:e9:3a:7a:2e:a6:d8:4d:b6:80: 81:be:75:65:a4:a6:6e:c7:79:c3:4a:ee:57:d9:cf: bc:61:d7:fc:24:9c:c3:0d:eb:65:3a:e7:69:c4:d4: af:fc:f8:32:ef:41:ad:fc:b3:a8:bc:41:7d:d6:0e: da:f6:36:18:05:15:61:77:71:9a:54:e0:bf:b6:10: 0c:b8:44:fa:89:3d:02:0b:52:b1:56:c8:5e:8d:ff: d1:92:d0:63:e0:f4:ec:d5:cd:09:6d:1d:00:ab:50: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:70:CF:65:50:3B:66:21:DE:DD:B6:73:A8:96:ED:B2:75:D3:7D:74 X509v3 Authority Key Identifier: keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:c30::/32 Signature Algorithm: sha256WithRSAEncryption 2d:a1:09:be:30:ea:11:97:f8:f6:0a:26:27:c3:62:0b:ee:76: 88:65:1a:cf:ad:e6:9d:53:6a:07:d5:b9:8d:e1:7f:90:bd:b5: 91:c6:75:e5:75:a7:b1:25:49:23:fd:c3:d8:2e:34:32:de:fc: 55:c8:ec:c2:93:6b:b7:ea:d0:fe:c6:07:54:f5:45:4e:8d:bc: 6f:01:1d:e1:8a:c8:2a:6a:38:d2:d7:68:85:c3:b5:8b:03:af: f8:18:b5:7b:ba:c6:8a:40:d1:08:68:55:87:f5:8c:08:3f:d3: 44:64:8e:ff:1f:be:f4:f5:d0:97:4a:5c:86:3a:b4:f1:e2:14: dd:ff:0d:1f:28:d0:5c:84:6f:f9:a8:f0:d9:14:8c:59:a7:bf: d7:64:d2:fd:bf:02:8d:c9:64:7e:41:2d:53:fa:a8:9c:ad:f5: 6b:33:0c:85:e6:24:ca:45:5c:d3:fa:14:38:4c:8d:60:cc:d3: 36:a5:15:fb:87:60:72:0c:aa:2e:d7:54:18:02:1d:d8:25:c7: fa:6b:3a:ad:84:ef:3d:42:6e:d3:c5:d5:04:73:ac:73:2f:32: 2b:6b:a8:39:99:f3:63:47:ef:cb:0c:3f:be:19:be:34:20:73: 78:cf:0d:bb:bb:b2:3b:d9:c4:03:23:1b:d6:cc:7a:05:93:6e: fc:23:0a:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTI0MDczMTAx MjkyNloXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoQzQ3MENGNjU1MDNCNjYy MURFRERCNjczQTg5NkVEQjI3NUQzN0Q3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJrA4y8BxuyagR0CG6LKxXPcSjHFtFP5Ckye8mCWo+AoEOIDAFeP 9HmHBG72ZuNS/kJnji2IhiTtYdA5ujDYpQzZFz5FzWuBBLS7uBgNUL1/+HFHoEIW Brn14bdg189fnj8ZlZVQIkfF3Ldy3lw8hIks8mn7fWzHvTuz9Fl60nyDf62jJT98 6sk7HJ4qi52QDpuhQh0zyshDEBjP6Tp6LqbYTbaAgb51ZaSmbsd5w0ruV9nPvGHX /CScww3rZTrnacTUr/z4Mu9BrfyzqLxBfdYO2vY2GAUVYXdxmlTgv7YQDLhE+ok9 AgtSsVbIXo3/0ZLQY+D07NXNCW0dAKtQ+/cCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTEcM9lUDtmId7dtnOolu2yddN9dDAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK 0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDcyL3hIRFBaVkE3WmlIZTNiWnpxSmJ0c25YVGZYUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQwwMA0GCSqGSIb3DQEBCwUAA4IBAQAtoQm+MOoRl/j2CiYnw2IL 7naIZRrPreadU2oH1bmN4X+QvbWRxnXldaexJUkj/cPYLjQy3vxVyOzCk2u36tD+ xgdU9UVOjbxvAR3hisgqajjS12iFw7WLA6/4GLV7usaKQNEIaFWH9YwIP9NEZI7/ H7709dCXSlyGOrTx4hTd/w0fKNBchG/5qPDZFIxZp7/XZNL9vwKNyWR+QS1T+qic rfVrMwyF5iTKRVzT+hQ4TI1gzNM2pRX7h2ByDKou11QYAh3YJcf6azqthO89Qm7T xdUEc6xzLzIra6g5mfNjR+/LDD++Gb40IHN4zw27u7I72cQDIxvWzHoFk278IwqR -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:23 2025 by rpki-client on console.sobornost.net