$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/Ewfr1ctQ5UKvqA54J6pUd2LwUzE.roa File: Ewfr1ctQ5UKvqA54J6pUd2LwUzE.roa (raw, json) Hash identifier: BctNXStazMQE+WQRwmJ12taLzpw59zRcY0a79Qr5HE4= Subject key identifier: 13:07:EB:D5:CB:50:E5:42:AF:A8:0E:78:27:AA:54:77:62:F0:53:31 Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B Certificate serial: 21 Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Ewfr1ctQ5UKvqA54J6pUd2LwUzE.roa Signing time: Mon 20 May 2024 06:51:54 +0000 ROA not before: Mon 20 May 2024 06:51:54 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 7672 IP address blocks: 113.197.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2222A4C3961E467181A78700B960718846C8404B Validity Not Before: May 20 06:51:54 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=1307EBD5CB50E542AFA80E7827AA547762F05331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:07:4e:8d:18:62:32:13:ae:7e:e2:a2:38: de:d1:06:7c:45:11:4b:43:41:f5:26:a0:ba:c8:fb: a7:85:7d:c3:bb:3f:45:3f:d5:1f:5a:00:42:6e:40: 28:9a:80:e3:43:dc:3f:69:8b:17:65:a3:a5:0a:09: 37:74:2d:6e:ee:a1:3d:6d:ed:7a:4f:73:86:71:47: 4a:79:be:e9:dc:2c:7a:72:b8:ab:94:f4:13:9d:6e: b5:29:4b:77:86:44:18:d8:a1:a5:9c:4a:48:b5:67: 25:52:4a:41:3f:95:25:51:55:28:3b:62:ca:e2:09: b4:7b:ab:86:55:0c:6c:d7:c5:b5:8c:02:bf:dc:da: d4:82:7a:1f:14:97:df:2a:8e:e8:27:9f:6c:85:a1: 55:58:8a:cc:46:bc:38:3c:b8:3a:e6:81:68:6a:c2: 84:c8:2a:7f:d2:6c:83:91:b7:ad:bb:e0:63:c6:e7: 9f:f6:0a:39:f9:cd:c2:13:8d:83:dd:92:6f:76:6f: 74:57:7a:2c:c7:05:ed:3c:b8:6a:aa:36:2a:a9:39: 20:e0:d7:97:e3:68:29:b6:fc:1d:f2:8e:40:e7:c6: 1d:e2:8b:2d:7c:64:f8:f1:84:c2:75:0d:9f:8b:2b: 9e:bb:f9:19:93:25:39:60:e4:2a:f9:9d:8f:72:ca: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:EB:D5:CB:50:E5:42:AF:A8:0E:78:27:AA:54:77:62:F0:53:31 X509v3 Authority Key Identifier: keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Ewfr1ctQ5UKvqA54J6pUd2LwUzE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.197.56.0/21 Signature Algorithm: sha256WithRSAEncryption 06:a0:f4:65:4e:9a:f5:69:32:b4:cc:c2:cf:9b:6d:92:28:15: 0b:aa:83:3a:29:b7:56:00:e5:5e:03:ea:63:78:9b:dc:06:d9: 15:b1:76:9d:f5:f0:98:46:5b:11:b8:8a:14:d3:65:d0:25:c3: 9c:da:c2:fa:cc:a4:bc:39:df:cd:8e:45:ca:cb:db:bd:1c:3b: 7b:a8:99:cf:e7:0c:65:25:5b:99:5c:85:4c:5e:fb:a8:03:34: 43:9d:40:fa:b0:65:91:27:6f:2f:e3:70:39:04:43:5d:dd:a4: 79:02:16:e4:3c:0b:b6:01:01:c2:cb:b4:03:85:0b:c6:4b:fb: 1e:59:00:af:b4:7e:d2:69:ab:8c:84:6f:d0:71:0d:ac:5f:cc: b9:ac:5a:a1:22:12:7e:ad:51:93:e8:04:e0:a8:dd:41:b6:e0: c8:ac:24:3d:6f:2a:bc:46:47:05:20:a5:14:da:b9:2a:04:65: 67:85:56:c1:9d:90:a2:d4:ce:90:14:be:a9:da:36:00:34:03: b9:0d:fb:70:4d:fa:00:cc:42:e7:4a:63:90:21:c7:b9:69:91: 56:f2:dc:41:f2:f4:cf:ed:60:f2:ba:c2:38:6c:7e:d9:26:85: c0:0d:7b:54:c9:31:16:7c:1c:7e:08:a7:ff:33:53:c8:55:4b: 99:69:29:21 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMjIy QTRDMzk2MUU0NjcxODFBNzg3MDBCOTYwNzE4ODQ2Qzg0MDRCMB4XDTI0MDUyMDA2 NTE1NFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMTMwN0VCRDVDQjUwRTU0 MkFGQTgwRTc4MjdBQTU0Nzc2MkYwNTMzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9ZB06NGGIyE65+4qI43tEGfEURS0NB9Sagusj7p4V9w7s/RT/V H1oAQm5AKJqA40PcP2mLF2WjpQoJN3Qtbu6hPW3tek9zhnFHSnm+6dwsenK4q5T0 E51utSlLd4ZEGNihpZxKSLVnJVJKQT+VJVFVKDtiyuIJtHurhlUMbNfFtYwCv9za 1IJ6HxSX3yqO6CefbIWhVViKzEa8ODy4OuaBaGrChMgqf9Jsg5G3rbvgY8bnn/YK OfnNwhONg92Sb3ZvdFd6LMcF7Ty4aqo2Kqk5IODXl+NoKbb8HfKOQOfGHeKLLXxk +PGEwnUNn4srnrv5GZMlOWDkKvmdj3LK4v8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQTB+vVy1DlQq+oDngnqlR3YvBTMTAfBgNVHSMEGDAWgBQiIqTDlh5GcYGnhwC5 YHGIRshASzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUViSVFFcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lpS2t3NVllUm5HQnA0Y0F1V0J4aUVi SVFFcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvRXdmcjFjdFE1VUt2cUE1NEo2cFVkMkx3VXpFLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3HFODANBgkqhkiG9w0BAQsFAAOCAQEABqD0ZU6a9WkytMzCz5ttkigVC6qD Oim3VgDlXgPqY3ib3AbZFbF2nfXwmEZbEbiKFNNl0CXDnNrC+sykvDnfzY5Fysvb vRw7e6iZz+cMZSVbmVyFTF77qAM0Q51A+rBlkSdvL+NwOQRDXd2keQIW5DwLtgEB wsu0A4ULxkv7HlkAr7R+0mmrjIRv0HENrF/MuaxaoSISfq1Rk+gE4KjdQbbgyKwk PW8qvEZHBSClFNq5KgRlZ4VWwZ2QotTOkBS+qdo2ADQDuQ37cE36AMxC50pjkCHH uWmRVvLcQfL0z+1g8rrCOGx+2SaFwA17VMkxFnwcfgin/zNTyFVLmWkpIQ== -----END CERTIFICATE-----Generated at Sun Feb 16 22:21:08 2025 by rpki-client