$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/e0KkPB1LuhP2jCyop1RTfNYDzq0.roa File: e0KkPB1LuhP2jCyop1RTfNYDzq0.roa (raw, json) Hash identifier: s4ieM2LYp3iV2ZWpTiUKDjvuiJqGiRw7mHQ3czu6XD8= Subject key identifier: 7B:42:A4:3C:1D:4B:BA:13:F6:8C:2C:A8:A7:54:53:7C:D6:03:CE:AD Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: E8 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/e0KkPB1LuhP2jCyop1RTfNYDzq0.roa Signing time: Thu 19 Oct 2023 09:22:03 +0000 ROA not before: Thu 19 Oct 2023 09:22:03 +0000 ROA not after: Mon 14 Oct 2024 01:30:03 +0000 asID: 10021 IP address blocks: 114.31.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 19 09:22:03 2023 GMT Not After : Oct 14 01:30:03 2024 GMT Subject: CN=7B42A43C1D4BBA13F68C2CA8A754537CD603CEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:7c:8d:53:d3:7c:e4:6a:c7:5d:b8:6f:80: 8c:b9:d5:cd:00:75:44:5a:db:73:17:81:34:2b:49: 2f:06:51:50:a1:c7:cc:f7:61:c5:99:8a:35:f5:06: 63:89:f5:3b:ce:8e:04:53:21:e0:4b:b1:7b:65:9f: 96:34:42:50:a5:42:7b:01:e1:ef:35:42:f0:2e:43: 13:dc:68:29:01:3c:95:0c:68:1f:33:21:df:cd:79: 34:34:8d:3c:ee:3c:a3:a2:3e:8c:26:5a:6e:db:ff: 77:f2:26:16:9d:01:4a:fe:9f:9b:9b:6b:4d:d5:6b: a2:f0:6d:04:52:10:59:e0:67:aa:1f:13:e8:58:6e: c9:9e:ea:77:11:40:12:83:28:59:99:35:4a:64:7c: 64:ee:a2:50:c4:d5:f9:ad:fa:5b:cd:43:bb:37:43: 20:24:3e:4c:5f:aa:a0:b5:e2:1f:d3:4e:16:0b:50: 76:bf:67:c2:c1:64:ca:e3:27:68:8a:36:4a:ae:7b: 14:2c:46:cf:76:f8:7b:a1:38:c0:74:28:a3:47:3e: a0:48:fd:43:9b:76:50:0b:48:1d:be:ca:fd:60:99: b5:94:af:76:49:56:17:5a:0b:13:4c:ba:d0:c8:ba: 49:34:ff:47:51:51:5a:c1:98:d2:22:7b:71:08:47: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:A4:3C:1D:4B:BA:13:F6:8C:2C:A8:A7:54:53:7C:D6:03:CE:AD X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/e0KkPB1LuhP2jCyop1RTfNYDzq0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.31.80.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:f0:d2:f7:9c:ae:0d:e1:46:12:ca:48:57:67:6e:81:1c:b8: f4:f3:10:e1:8f:51:76:c8:74:55:71:40:c6:65:e3:46:7a:db: 6b:b8:84:a2:2c:81:6a:fb:04:a3:9b:59:ce:71:50:60:ee:ec: e7:4d:89:73:26:e6:c8:f3:fd:f6:56:c2:76:59:0a:d0:2a:41: b3:0b:54:92:04:08:6c:da:dd:b0:c2:40:ef:1a:20:88:f7:d6: 6f:49:e2:4b:3d:05:9d:28:d4:cf:a2:88:86:20:05:98:fe:bd: 35:40:b2:7f:31:39:ae:78:a3:24:8e:58:2f:ff:3d:39:d0:da: 4e:27:3a:f5:52:58:2d:eb:ea:ea:76:63:e5:ab:54:32:7a:cb: 8f:10:4e:c4:10:9c:f0:a1:d3:39:ad:52:09:a9:84:89:0c:28: 98:53:fc:92:49:71:1c:13:03:4a:75:d5:a7:c1:ea:53:ba:f4: d4:68:12:44:51:95:90:be:b2:55:61:a1:2e:7e:b7:57:5a:33: 01:05:c8:26:eb:27:ff:91:f9:15:da:71:cb:8d:3c:c6:c0:f8: 16:bf:a2:d6:cc:ff:70:3b:56:d1:80:1e:78:d3:65:e6:97:a6: aa:79:ac:c3:96:93:a4:4a:0a:04:8c:39:a0:ca:49:41:40:68: 7a:e0:21:31 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEwMTkw OTIyMDNaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdCNDJBNDNDMUQ0QkJB MTNGNjhDMkNBOEE3NTQ1MzdDRDYwM0NFQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrRXyNU9N85GrHXbhvgIy51c0AdURa23MXgTQrSS8GUVChx8z3 YcWZijX1BmOJ9TvOjgRTIeBLsXtln5Y0QlClQnsB4e81QvAuQxPcaCkBPJUMaB8z Id/NeTQ0jTzuPKOiPowmWm7b/3fyJhadAUr+n5uba03Va6LwbQRSEFngZ6ofE+hY bsme6ncRQBKDKFmZNUpkfGTuolDE1fmt+lvNQ7s3QyAkPkxfqqC14h/TThYLUHa/ Z8LBZMrjJ2iKNkquexQsRs92+HuhOMB0KKNHPqBI/UObdlALSB2+yv1gmbWUr3ZJ VhdaCxNMutDIukk0/0dRUVrBmNIie3EIRw0dAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUe0KkPB1LuhP2jCyop1RTfNYDzq0wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L2UwS2tQQjFMdWhQMmpDeW9wMVJUZk5ZRHpxMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARyH1AwDQYJKoZIhvcNAQELBQADggEBAD7w0vecrg3hRhLKSFdnboEcuPTz EOGPUXbIdFVxQMZl40Z622u4hKIsgWr7BKObWc5xUGDu7OdNiXMm5sjz/fZWwnZZ CtAqQbMLVJIECGza3bDCQO8aIIj31m9J4ks9BZ0o1M+iiIYgBZj+vTVAsn8xOa54 oySOWC//PTnQ2k4nOvVSWC3r6up2Y+WrVDJ6y48QTsQQnPCh0zmtUgmphIkMKJhT /JJJcRwTA0p11afB6lO69NRoEkRRlZC+slVhoS5+t1daMwEFyCbrJ/+R+RXaccuN PMbA+Ba/otbM/3A7VtGAHnjTZeaXpqp5rMOWk6RKCgSMOaDKSUFAaHrgITE= -----END CERTIFICATE-----Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org