$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/a8vTnHEuXQdQMz1hdsqJhpLWovs.roa File: a8vTnHEuXQdQMz1hdsqJhpLWovs.roa (raw, json) Hash identifier: IsHdrXMLkx2xctsVKiNrEbXqUcKB0pTNkb8UnLWpGWg= Subject key identifier: 6B:CB:D3:9C:71:2E:5D:07:50:33:3D:61:76:CA:89:86:92:D6:A2:FB Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Certificate serial: 1E Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/a8vTnHEuXQdQMz1hdsqJhpLWovs.roa Signing time: Sat 30 Nov 2024 01:32:23 +0000 ROA not before: Sat 30 Nov 2024 01:32:23 +0000 ROA not after: Sat 15 Nov 2025 01:30:03 +0000 asID: 59125 IP address blocks: 2400:a140::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D Validity Not Before: Nov 30 01:32:23 2024 GMT Not After : Nov 15 01:30:03 2025 GMT Subject: CN=6BCBD39C712E5D0750333D6176CA898692D6A2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a1:9a:40:8a:89:48:90:68:d2:dc:51:83:de: 57:9f:19:fc:3d:d9:ea:98:ba:07:b5:fc:03:fa:e1: 11:ca:32:0e:4e:88:ae:18:38:b9:e5:1d:9e:b5:88: 99:92:0a:7a:6b:c7:8f:66:49:65:c4:4b:e6:7c:ad: e3:0f:a6:95:c3:2d:4f:90:b7:d7:11:55:02:ca:c9: 7e:b7:f7:34:7c:39:ba:96:84:bd:94:d3:99:c4:17: 44:f7:be:22:43:c5:55:c7:c1:8a:f7:ef:df:d8:74: d2:97:90:98:31:74:27:e6:fc:be:8e:fb:99:45:53: 7d:32:6a:c4:77:7c:cc:5b:55:39:19:d6:90:f8:f7: 5e:1e:44:dc:94:89:a2:b7:45:3a:6a:e8:5a:ff:be: e9:d8:af:ad:da:e3:fb:a5:03:bb:6d:26:7c:31:b2: 99:24:2b:fa:b6:43:cd:6d:67:b4:74:0b:00:f0:92: e7:63:fb:96:c0:92:45:e7:00:43:a6:94:b1:69:df: 5a:99:35:36:21:db:88:f6:79:e4:d7:b8:3f:cf:3f: 3c:4e:a3:e1:54:be:b4:11:e0:c8:40:09:72:58:3c: 29:aa:b1:1e:e5:a3:cd:5e:8c:07:67:6b:54:e3:6f: 07:b8:fd:c7:19:d8:dc:66:da:c3:20:18:6f:17:d1: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:D3:9C:71:2E:5D:07:50:33:3D:61:76:CA:89:86:92:D6:A2:FB X509v3 Authority Key Identifier: keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/a8vTnHEuXQdQMz1hdsqJhpLWovs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:a140::/32 Signature Algorithm: sha256WithRSAEncryption 09:e3:28:85:ae:7d:b6:80:95:0e:22:db:9d:d3:15:5e:85:1f: 5b:e8:1e:db:86:6e:26:22:40:66:a3:92:c4:e0:cd:99:ea:d8: c3:05:68:65:5d:7a:1d:40:9e:6f:57:68:ca:a0:ef:66:3a:49: 95:c2:b9:14:7c:24:5c:b8:92:69:13:4b:88:e5:88:a4:96:3c: 74:f3:54:ee:e5:56:49:ef:2e:10:e3:94:98:41:75:f9:5b:82: 97:ae:b4:c6:5e:b2:3a:77:65:3d:4f:92:8a:7e:7d:94:c4:c9: 2d:a2:e9:f2:dc:2e:68:6b:57:4d:13:47:48:48:b4:67:80:d8: dd:12:6b:e3:76:cd:fd:86:d4:d1:f7:37:41:87:6d:f9:eb:87: 47:e8:9c:d9:94:58:3d:b4:35:34:47:1f:97:59:4c:da:af:b3: f6:37:32:ad:a3:0c:1d:5c:81:6b:74:85:7c:87:67:43:e0:e5: d3:68:39:60:c6:83:76:d9:78:90:f9:22:14:b1:08:00:1f:94: e4:b3:72:c7:a4:5e:4d:b9:82:71:a0:48:24:52:b7:a5:56:0e: d2:9f:cd:23:cf:ab:80:4c:66:08:51:0b:d6:08:a9:83:aa:ca: 2e:8a:91:5c:44:fc:c2:b6:a2:3d:55:ed:03:86:80:b9:5a:5c: 3f:82:72:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQ0I2 MEI0MEE5OEFFQUUwNTRDQUVFNEMwOUNCN0Q5QUVBREUzRTlEMB4XDTI0MTEzMDAx MzIyM1oXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoNkJDQkQzOUM3MTJFNUQw NzUwMzMzRDYxNzZDQTg5ODY5MkQ2QTJGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOChmkCKiUiQaNLcUYPeV58Z/D3Z6pi6B7X8A/rhEcoyDk6Irhg4 ueUdnrWImZIKemvHj2ZJZcRL5nyt4w+mlcMtT5C31xFVAsrJfrf3NHw5upaEvZTT mcQXRPe+IkPFVcfBivfv39h00peQmDF0J+b8vo77mUVTfTJqxHd8zFtVORnWkPj3 Xh5E3JSJordFOmroWv++6divrdrj+6UDu20mfDGymSQr+rZDzW1ntHQLAPCS52P7 lsCSRecAQ6aUsWnfWpk1NiHbiPZ55Ne4P88/PE6j4VS+tBHgyEAJclg8KaqxHuWj zV6MB2drVONvB7j9xxnY3GbawyAYbxfRW48CAwEAAaOCAikwggIlMB0GA1UdDgQW BBRry9OccS5dB1AzPWF2yomGktai+zAfBgNVHSMEGDAWgBQctgtAqYrq4FTK7kwJ y32a6t4+nTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTEvSExZTFFLbUs2dUJVeXU1TUNjdDltdXJlUHAwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSExZTFFLbUs2dUJVeXU1TUNjdDlt dXJlUHAwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjkxL2E4dlRuSEV1WFFkUU16MWhkc3FKaHBMV292cy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAKFAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ4yiFrn22gJUOItud0xVe hR9b6B7bhm4mIkBmo5LE4M2Z6tjDBWhlXXodQJ5vV2jKoO9mOkmVwrkUfCRcuJJp E0uI5Yikljx081Tu5VZJ7y4Q45SYQXX5W4KXrrTGXrI6d2U9T5KKfn2UxMktouny 3C5oa1dNE0dISLRngNjdEmvjds39htTR9zdBh23564dH6JzZlFg9tDU0Rx+XWUza r7P2NzKtowwdXIFrdIV8h2dD4OXTaDlgxoN22XiQ+SIUsQgAH5Tks3LHpF5NuYJx oEgkUrelVg7Sn80jz6uATGYIUQvWCKmDqsouipFcRPzCtqI9Ve0DhoC5Wlw/gnLY -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:32 2025 by rpki-client on console.sobornost.net