$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/66wQaAdRGZfE2uOnipU0S2YvDTI.roa File: 66wQaAdRGZfE2uOnipU0S2YvDTI.roa (raw, json) Hash identifier: W+jiq5j4iXkZCz89E22T0yNn1XBR9y1kFo7otAzYGhI= Subject key identifier: EB:AC:10:68:07:51:19:97:C4:DA:E3:A7:8A:95:34:4B:66:2F:0D:32 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0D29 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/66wQaAdRGZfE2uOnipU0S2YvDTI.roa Signing time: Tue 01 Apr 2025 02:13:50 +0000 ROA not before: Tue 01 Apr 2025 02:13:50 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 49.101.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:13:50 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=EBAC106807511997C4DAE3A78A95344B662F0D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:01:ea:a1:20:74:14:d3:7b:2f:7b:e3:9f: 57:9d:3c:92:89:05:93:1b:91:cf:26:1d:c6:7c:b6: 8d:83:c4:33:bb:65:45:21:a2:e5:88:1f:af:9c:74: 9d:95:37:b1:e7:51:b8:0f:0a:59:14:65:19:a3:fc: bf:ed:04:74:55:21:4a:13:4d:3c:34:c3:43:b4:18: a9:37:a2:7f:4f:b4:fc:0b:43:de:be:88:97:c2:b2: 3d:37:3e:50:ed:f0:eb:6c:0a:9e:5d:8f:a1:96:09: 01:04:5a:d3:a8:7a:f5:af:f3:00:30:a0:d9:6d:35: 0c:58:35:c3:55:7a:10:1c:2c:9f:39:b6:29:a9:c9: b2:39:e4:2d:a6:23:5e:84:2d:ab:97:d1:d1:f3:53: db:7f:05:a8:ab:4e:43:90:84:74:ee:74:a9:28:70: 40:b9:c2:56:89:a6:66:44:55:ba:c9:f4:9a:16:0b: 3c:3b:37:2e:72:06:df:67:ad:e6:d2:05:22:c4:c8: 7d:51:fd:6e:74:19:8d:09:4b:48:5c:59:5f:a7:2e: 23:3a:39:ed:b2:57:bd:33:9b:c1:8c:6f:9f:cd:60: 57:7f:ed:cf:0b:74:f4:78:fe:3f:11:4a:05:98:80: c8:57:d1:56:0f:1a:fa:ee:93:be:63:16:70:fe:0e: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AC:10:68:07:51:19:97:C4:DA:E3:A7:8A:95:34:4B:66:2F:0D:32 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/66wQaAdRGZfE2uOnipU0S2YvDTI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.101.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3d:2a:5b:04:61:c6:44:64:eb:55:1f:2b:26:7c:b4:fb:e2:28: 77:2f:99:e3:9f:86:ff:cd:37:88:bf:f1:80:39:d8:1b:c6:b8: 78:ca:20:2b:b2:1a:cc:8a:3f:72:b7:50:64:5c:90:95:70:eb: 64:38:28:da:be:a6:d4:b2:de:7a:cf:21:12:c0:c2:3b:da:6b: d9:4e:96:43:ca:b3:0b:bc:ef:57:75:fd:d6:e9:2e:e9:80:0f: d5:57:a1:65:03:87:1a:9b:31:15:8e:02:ce:d5:82:b7:0f:fc: d9:33:47:20:c8:82:b0:de:19:2a:11:d6:83:81:d5:a1:07:6b: cc:d0:f9:b2:57:ee:ce:35:e8:67:8c:50:48:10:7b:58:5f:fc: 15:0d:dc:55:70:86:a5:a3:88:31:d8:64:26:85:b2:bd:02:d4: 74:bf:ee:7e:67:fb:3f:1d:65:e7:6e:ff:1a:8a:42:0c:fe:87: d1:8d:2e:3a:ab:83:05:e9:8c:25:74:2b:aa:06:74:a6:71:bd: 34:8e:f6:ca:78:fa:7d:e9:17:a2:20:12:75:57:25:52:46:e9: 13:eb:f5:f0:9a:7f:59:e0:70:bc:34:7f:c8:5a:69:ba:6d:8c: 16:28:f4:09:69:53:ab:05:4e:74:10:58:fe:ac:19:af:ee:d8: d2:f9:61:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjEzNTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEVCQUMxMDY4MDc1MTE5 OTdDNERBRTNBNzhBOTUzNDRCNjYyRjBEMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAPwHqoSB0FNN7L3vjn1edPJKJBZMbkc8mHcZ8to2DxDO7ZUUh ouWIH6+cdJ2VN7HnUbgPClkUZRmj/L/tBHRVIUoTTTw0w0O0GKk3on9PtPwLQ96+ iJfCsj03PlDt8OtsCp5dj6GWCQEEWtOoevWv8wAwoNltNQxYNcNVehAcLJ85timp ybI55C2mI16ELauX0dHzU9t/BairTkOQhHTudKkocEC5wlaJpmZEVbrJ9JoWCzw7 Ny5yBt9nrebSBSLEyH1R/W50GY0JS0hcWV+nLiM6Oe2yV70zm8GMb5/NYFd/7c8L dPR4/j8RSgWYgMhX0VYPGvruk75jFnD+DklpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU66wQaAdRGZfE2uOnipU0S2YvDTIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzY2d1FhQWRSR1pmRTJ1T25pcFUwUzJZdkRUSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcxZQAwDQYJKoZIhvcNAQELBQADggEBAD0qWwRhxkRk61UfKyZ8tPviKHcv meOfhv/NN4i/8YA52BvGuHjKICuyGsyKP3K3UGRckJVw62Q4KNq+ptSy3nrPIRLA wjvaa9lOlkPKswu871d1/dbpLumAD9VXoWUDhxqbMRWOAs7VgrcP/NkzRyDIgrDe GSoR1oOB1aEHa8zQ+bJX7s416GeMUEgQe1hf/BUN3FVwhqWjiDHYZCaFsr0C1HS/ 7n5n+z8dZedu/xqKQgz+h9GNLjqrgwXpjCV0K6oGdKZxvTSO9sp4+n3pF6IgEnVX JVJG6RPr9fCaf1ngcLw0f8haabptjBYo9AlpU6sFTnQQWP6sGa/u2NL5YeU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:15:33 2025 by rpki-client