$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/ewkMJJbDZQhNZBeV2IE8H_PD44c.roa File: ewkMJJbDZQhNZBeV2IE8H_PD44c.roa (raw, json) Hash identifier: gj1Y0EaQOlu9/ZYx3scd8GA+BOm5KD/6vZ6bfkKE8sw= Subject key identifier: 7B:09:0C:24:96:C3:65:08:4D:64:17:95:D8:81:3C:1F:F3:C3:E3:87 Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Certificate serial: 20 Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ewkMJJbDZQhNZBeV2IE8H_PD44c.roa Signing time: Fri 31 May 2024 01:29:04 +0000 ROA not before: Fri 31 May 2024 01:29:04 +0000 ROA not after: Thu 15 May 2025 01:30:03 +0000 asID: 23808 IP address blocks: 103.40.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Validity Not Before: May 31 01:29:04 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=7B090C2496C365084D641795D8813C1FF3C3E387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:f2:84:aa:d2:b5:71:50:f5:32:bc:fd:e5: 26:37:44:c4:a3:e1:1b:fd:33:77:48:b1:94:68:7c: f1:ad:1e:35:cd:d9:d9:f4:82:f4:aa:70:c1:66:6d: e3:5e:6b:f0:0d:14:d6:6b:de:87:5a:60:85:43:34: 53:86:6e:33:2b:26:4d:f3:9e:df:82:31:7a:54:a4: e1:73:f8:74:79:d0:c1:7e:45:5d:1b:1a:7a:48:fd: e1:d0:c4:ce:8c:96:c1:8d:e2:f2:11:1b:23:03:42: 74:47:e1:7e:bf:33:5b:d7:49:78:0f:70:75:b5:a7: 0c:a5:bb:fb:40:4f:6d:ed:d7:7c:cd:37:30:cc:dc: a8:ed:e3:a1:1f:c8:74:8a:cb:34:ba:68:c5:d8:97: e1:79:46:98:95:28:f8:6a:d1:4e:06:86:d3:18:17: d7:02:4a:f7:3f:5c:b4:c8:47:4a:71:da:53:1c:46: 02:c9:6c:3a:19:7a:35:74:20:78:8f:1c:04:9c:af: ea:02:47:28:80:1b:d6:be:7d:29:37:f3:2c:a8:1a: 16:5f:d6:9c:33:92:4c:e3:d6:ce:78:62:9d:f6:d3: 17:37:6a:c4:a7:0b:aa:c2:ac:3e:04:77:b9:fe:9d: 2f:81:f6:4b:46:97:ee:a4:51:e6:54:ef:71:86:10: 97:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:09:0C:24:96:C3:65:08:4D:64:17:95:D8:81:3C:1F:F3:C3:E3:87 X509v3 Authority Key Identifier: keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ewkMJJbDZQhNZBeV2IE8H_PD44c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.128.0/22 Signature Algorithm: sha256WithRSAEncryption c4:40:46:c2:7f:76:11:a9:85:4c:5f:5d:ec:85:4d:70:e1:e1: 45:24:9a:fc:32:93:ff:b0:27:0f:c5:bf:40:da:20:ec:82:76: d6:4c:c2:1e:35:7a:95:49:f5:1f:1c:04:7f:ed:7d:99:a5:44: 53:d8:68:ba:92:fe:a5:f4:57:a5:77:28:47:42:0f:d2:32:0f: 50:15:15:f9:af:9b:fc:54:2c:96:a0:63:30:77:ac:1d:77:9c: 41:4e:89:4f:9a:23:eb:4d:32:63:96:cb:03:c5:35:5c:0d:71: 72:90:30:75:d7:b9:b4:8a:b2:52:4a:c3:bb:8e:14:7e:75:a0: cf:c3:1c:2c:78:5f:5c:f2:d3:b5:b6:c3:13:a7:10:da:cb:a5: b7:c5:40:e1:ac:f8:a9:27:e8:78:3d:68:09:14:14:dd:7e:81: aa:a3:76:e8:cb:ff:c3:48:57:2a:aa:ee:21:31:2e:56:a0:93: c1:7c:f5:53:b0:09:4c:87:c5:96:14:d5:4b:55:17:1a:b6:05: d9:03:58:03:2c:0c:20:d9:e1:b5:2c:38:14:e2:58:4f:c8:fa: 3e:37:c5:e3:c0:45:cb:e7:29:49:81:85:0f:e3:f3:0d:38:db: 74:c9:47:f6:06:31:ac:c6:13:a5:ed:0f:4a:29:61:22:c5:fc: 9f:65:27:ed -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUY0 MjBGMTkyMDBFMTFCRTRBRThEOTE0RUJBMkFDQjQyOTE3QjZFMB4XDTI0MDUzMTAx MjkwNFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoN0IwOTBDMjQ5NkMzNjUw ODRENjQxNzk1RDg4MTNDMUZGM0MzRTM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKP48oSq0rVxUPUyvP3lJjdExKPhG/0zd0ixlGh88a0eNc3Z2fSC 9KpwwWZt415r8A0U1mveh1pghUM0U4ZuMysmTfOe34IxelSk4XP4dHnQwX5FXRsa ekj94dDEzoyWwY3i8hEbIwNCdEfhfr8zW9dJeA9wdbWnDKW7+0BPbe3XfM03MMzc qO3joR/IdIrLNLpoxdiX4XlGmJUo+GrRTgaG0xgX1wJK9z9ctMhHSnHaUxxGAsls Ohl6NXQgeI8cBJyv6gJHKIAb1r59KTfzLKgaFl/WnDOSTOPWznhinfbTFzdqxKcL qsKsPgR3uf6dL4H2S0aX7qRR5lTvcYYQl28CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR7CQwklsNlCE1kF5XYgTwf88PjhzAfBgNVHSMEGDAWgBSK9CDxkgDhG+SujZFO uirLQpF7bjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODg0L2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBLUmUyNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBL UmUyNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODQvZXdrTUpKYkRaUWhOWkJlVjJJRThIX1BENDRjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcogDANBgkqhkiG9w0BAQsFAAOCAQEAxEBGwn92EamFTF9d7IVNcOHhRSSa /DKT/7AnD8W/QNog7IJ21kzCHjV6lUn1HxwEf+19maVEU9houpL+pfRXpXcoR0IP 0jIPUBUV+a+b/FQslqBjMHesHXecQU6JT5oj600yY5bLA8U1XA1xcpAwdde5tIqy UkrDu44UfnWgz8McLHhfXPLTtbbDE6cQ2sult8VA4az4qSfoeD1oCRQU3X6BqqN2 6Mv/w0hXKqruITEuVqCTwXz1U7AJTIfFlhTVS1UXGrYF2QNYAywMINnhtSw4FOJY T8j6PjfF48BFy+cpSYGFD+PzDTjbdMlH9gYxrMYTpe0PSilhIsX8n2Un7Q== -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:21 2024 by rpki-client on console-ams.rpki-client.org