$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/Ip8BYDgWehZpJUOA4-jV_EgZ4NY.roa File: Ip8BYDgWehZpJUOA4-jV_EgZ4NY.roa (raw, json) Hash identifier: 25i0RMnqhepNkT3jne+Cx/u++zsj61a/UUaU28v2rdk= Subject key identifier: 22:9F:01:60:38:16:7A:16:69:25:43:80:E3:E8:D5:FC:48:19:E0:D6 Certificate issuer: /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Certificate serial: 40 Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/Ip8BYDgWehZpJUOA4-jV_EgZ4NY.roa Signing time: Sun 31 Mar 2024 01:29:58 +0000 ROA not before: Sun 31 Mar 2024 01:29:58 +0000 ROA not after: Sat 15 Mar 2025 01:30:02 +0000 asID: 17948 IP address blocks: 218.219.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Jun 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058 Validity Not Before: Mar 31 01:29:58 2024 GMT Not After : Mar 15 01:30:02 2025 GMT Subject: CN=229F016038167A1669254380E3E8D5FC4819E0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:4c:8e:aa:e9:78:93:9a:f8:04:95:5f:8b: 91:88:9f:02:33:9b:68:2c:a4:f8:09:fc:31:e0:9f: 6b:77:93:73:4a:ce:8d:6d:d3:bd:27:24:da:55:6d: f9:8b:37:e8:47:e8:1f:c2:11:79:a1:f1:ce:a8:57: 3c:3e:e0:c6:af:aa:eb:32:90:36:ce:f3:e5:33:3a: 51:b5:2b:ba:df:90:ed:60:ac:96:a4:89:84:80:23: 4a:f9:c7:2f:82:f9:d4:c9:2b:38:f1:59:f0:5d:75: e6:96:94:bc:fd:3e:b8:68:b5:f5:34:b5:69:f2:d2: 60:a8:b5:b1:2f:8f:23:49:ce:fe:00:92:19:5f:e2: aa:c3:a7:16:f8:01:8d:b7:4e:48:e8:40:d4:c7:b3: 3a:a4:02:3a:23:14:eb:ef:27:a7:14:23:3c:5b:6c: cf:6d:4d:0d:07:a0:36:f2:70:3c:69:b9:68:09:fa: 92:8d:fb:82:8f:57:21:2b:ae:55:38:51:f8:c8:43: 1c:9a:98:8a:36:de:c4:6a:6e:4a:84:ea:16:34:52: cc:2c:f3:a4:29:c4:b9:17:79:08:ce:09:0f:89:52: da:c9:82:b2:a4:f5:40:c3:3d:83:ee:57:85:8c:9e: fe:5d:9f:df:e5:c4:77:82:ff:be:c7:c4:46:bb:c8: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9F:01:60:38:16:7A:16:69:25:43:80:E3:E8:D5:FC:48:19:E0:D6 X509v3 Authority Key Identifier: keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/Ip8BYDgWehZpJUOA4-jV_EgZ4NY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.219.144.0/20 Signature Algorithm: sha256WithRSAEncryption 71:0d:ab:c4:f0:37:74:6e:be:36:02:4c:da:1b:d9:22:a5:94: 51:b7:7d:ee:59:64:69:6b:d4:d9:25:c1:33:93:6c:77:3e:b3: 9f:8c:c1:fd:31:5f:7c:dd:c2:c6:3a:3d:6d:c3:8c:bc:22:d8: 38:b8:f6:30:6f:d8:17:e2:eb:31:47:84:65:01:9f:96:cb:74: 6b:5d:7e:25:ca:23:0c:91:e5:a0:d9:08:8d:2d:4e:be:53:39: 12:8e:ee:d6:77:3b:c7:5f:d0:82:f8:0f:b9:16:47:07:7e:51: 74:9c:1a:2d:59:f8:97:47:f8:d0:b2:ab:dd:43:54:db:38:5f: 34:73:60:13:1d:22:73:85:cc:46:6a:c1:0b:16:a8:86:9a:0d: ee:86:f6:6e:17:cc:6b:c7:ba:09:d8:00:99:53:4d:61:0a:83: 8d:a0:6a:85:f6:dc:7f:9d:af:93:76:cc:aa:b3:a6:9c:35:6e: 6a:d4:da:fe:10:58:a5:42:70:38:5f:ad:c7:3b:a4:c9:8c:58: 91:d9:bd:4c:f7:bf:6b:fa:c6:0b:c0:2c:8f:78:d8:2e:e3:6c: 26:42:55:d7:d4:bf:fc:e1:c0:49:73:9a:cc:d2:1f:72:53:e2: 8c:5b:f9:4c:2e:c8:8f:b9:ca:8d:92:b6:da:72:63:2e:db:c4: 19:86:c5:0c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNTU2 RUMzMzQxMDIwNDdCRURCQTBDMEREQjREQzkzMEUwN0E5MDU4MB4XDTI0MDMzMTAx Mjk1OFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjI5RjAxNjAzODE2N0Ex NjY5MjU0MzgwRTNFOEQ1RkM0ODE5RTBENjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANNfTI6q6XiTmvgElV+LkYifAjObaCyk+An8MeCfa3eTc0rOjW3T vSck2lVt+Ys36EfoH8IReaHxzqhXPD7gxq+q6zKQNs7z5TM6UbUrut+Q7WCslqSJ hIAjSvnHL4L51MkrOPFZ8F115paUvP0+uGi19TS1afLSYKi1sS+PI0nO/gCSGV/i qsOnFvgBjbdOSOhA1MezOqQCOiMU6+8npxQjPFtsz21NDQegNvJwPGm5aAn6ko37 go9XISuuVThR+MhDHJqYijbexGpuSoTqFjRSzCzzpCnEuRd5CM4JD4lS2smCsqT1 QMM9g+5XhYye/l2f3+XEd4L/vsfERrvIaa8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQinwFgOBZ6FmklQ4Dj6NX8SBng1jAfBgNVHSMEGDAWgBT1VuwzQQIEe+26DA3b Tckw4HqQWDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjY4LzlWYnNNMEVDQkh2dHVnd04yMDNKTU9CNmtGZy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzlWYnNNMEVDQkh2dHVnd04yMDNKTU9C NmtGZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NjgvSXA4QllEZ1dlaFpwSlVPQTQtalZfRWdaNE5ZLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNrbkDANBgkqhkiG9w0BAQsFAAOCAQEAcQ2rxPA3dG6+NgJM2hvZIqWUUbd9 7llkaWvU2SXBM5Nsdz6zn4zB/TFffN3Cxjo9bcOMvCLYOLj2MG/YF+LrMUeEZQGf lst0a11+JcojDJHloNkIjS1OvlM5Eo7u1nc7x1/QgvgPuRZHB35RdJwaLVn4l0f4 0LKr3UNU2zhfNHNgEx0ic4XMRmrBCxaohpoN7ob2bhfMa8e6CdgAmVNNYQqDjaBq hfbcf52vk3bMqrOmnDVuatTa/hBYpUJwOF+txzukyYxYkdm9TPe/a/rGC8Asj3jY LuNsJkJV19S//OHASXOazNIfclPijFv5TC7Ij7nKjZK22nJjLtvEGYbFDA== -----END CERTIFICATE-----Generated at Sat Jun 15 02:41:59 2024 by rpki-client on console-ams.rpki-client.org