$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F-b6MOT4HI1IJ48WAVlayEoHD1Q.roa File: F-b6MOT4HI1IJ48WAVlayEoHD1Q.roa (raw, json) Hash identifier: GI7SQ/ztGzTKvjPt9apaEZJ2X6yusQpnoIMqjrT+PsM= Subject key identifier: 17:E6:FA:30:E4:F8:1C:8D:48:27:8F:16:01:59:5A:C8:4A:07:0F:54 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E91 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F-b6MOT4HI1IJ48WAVlayEoHD1Q.roa Signing time: Tue 10 Jun 2025 10:56:55 +0000 ROA not before: Tue 10 Jun 2025 10:56:55 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 10:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3729 (0xe91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:56:55 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=17E6FA30E4F81C8D48278F1601595AC84A070F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:c3:72:38:01:8a:c2:5a:d7:1d:11:c7:67: 1f:c3:e1:d1:61:66:af:1a:1a:af:fa:a6:28:f4:d9: 87:9f:da:da:c8:9e:66:2f:0e:88:bb:3b:7c:d4:e1: b9:3b:9b:9c:6e:1c:40:e1:95:89:2b:bc:43:df:78: d4:13:80:15:b7:73:ea:0d:47:f8:27:40:9c:20:49: 88:df:d5:01:32:ce:13:f1:dc:92:ea:fe:14:4c:c5: 17:5d:7a:96:17:53:df:70:72:97:4e:01:46:ab:b7: 4f:91:b6:d0:0e:03:96:07:38:e7:b2:5b:4c:51:22: 33:a9:27:09:aa:8b:54:10:c0:e0:e1:3c:09:bd:ff: cb:db:8c:46:6d:9f:3a:13:23:9e:0d:1f:ce:45:fd: b2:8e:2e:10:46:e1:3f:6d:0d:d0:ac:89:47:82:48: 27:2a:d7:f4:45:8d:e5:52:9c:19:02:66:59:12:05: 61:90:00:67:d9:61:f2:05:34:8c:00:fc:30:97:ef: 10:a8:3f:77:e8:4e:fc:22:d1:e9:1b:e1:ce:0b:2d: 6a:c4:67:58:88:2e:a0:2c:b1:2c:b2:12:81:db:29: fc:01:4a:e1:d1:11:70:0e:40:88:43:fa:ea:6f:7d: ff:76:1b:cf:30:e7:47:7a:10:97:7a:83:1c:c5:70: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E6:FA:30:E4:F8:1C:8D:48:27:8F:16:01:59:5A:C8:4A:07:0F:54 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F-b6MOT4HI1IJ48WAVlayEoHD1Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.107.0/24 Signature Algorithm: sha256WithRSAEncryption 18:bd:d9:88:2e:53:b1:62:e9:6b:ef:ed:66:6a:7e:ee:67:09: 73:7e:54:e5:4d:e0:ea:3b:42:bd:28:d2:46:73:c3:0e:de:18: 35:1c:54:a0:5e:52:f1:98:d1:b9:0c:d7:6d:d8:61:84:3e:b0: a3:54:7b:69:79:50:c5:f4:85:37:14:7f:bd:a8:71:ee:28:55: 37:d0:16:20:aa:d1:eb:27:80:aa:b3:f0:8a:9d:3b:ca:8d:8c: a2:f4:e6:d2:d5:2e:41:24:36:be:4b:cb:71:9b:33:49:80:f6: e5:ab:6b:cb:35:a5:90:85:8f:12:db:b8:86:b8:95:d9:59:60: 39:93:ea:e1:74:a6:a6:d4:5d:9a:2f:93:3e:0e:3e:11:f6:9a: ec:b6:f5:1c:a1:30:03:df:83:c6:39:d4:28:33:a6:0e:c4:f7: ac:a1:93:7f:6e:9f:fd:34:6f:e9:f5:8a:3e:f4:2b:cf:aa:1a: 67:ce:15:f6:b1:c3:0e:19:bf:c2:35:ca:b3:72:51:0f:7d:31: 52:e4:d1:0b:40:99:50:37:75:1c:4d:ed:1c:c2:c3:ad:5c:7d: 4f:59:b4:f7:4e:14:4b:a8:88:22:bd:f0:8a:d3:e7:e1:d0:30: 0a:77:d8:00:a3:1e:4a:6f:9f:03:27:75:b6:ff:ad:f7:d4:9c: 9d:d7:c5:c5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDpEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDU2NTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDE3RTZGQTMwRTRGODFD OEQ0ODI3OEYxNjAxNTk1QUM4NEEwNzBGNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuPcNyOAGKwlrXHRHHZx/D4dFhZq8aGq/6pij02Yef2trInmYv Doi7O3zU4bk7m5xuHEDhlYkrvEPfeNQTgBW3c+oNR/gnQJwgSYjf1QEyzhPx3JLq /hRMxRddepYXU99wcpdOAUart0+RttAOA5YHOOeyW0xRIjOpJwmqi1QQwODhPAm9 /8vbjEZtnzoTI54NH85F/bKOLhBG4T9tDdCsiUeCSCcq1/RFjeVSnBkCZlkSBWGQ AGfZYfIFNIwA/DCX7xCoP3foTvwi0ekb4c4LLWrEZ1iILqAssSyyEoHbKfwBSuHR EXAOQIhD+upvff92G88w50d6EJd6gxzFcKKfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUF+b6MOT4HI1IJ48WAVlayEoHD1QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0YtYjZNT1Q0SEkxSUo0OFdBVmxheUVvSEQxUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQmswDQYJKoZIhvcNAQELBQADggEBABi92YguU7Fi6Wvv7WZqfu5nCXN+ VOVN4Oo7Qr0o0kZzww7eGDUcVKBeUvGY0bkM123YYYQ+sKNUe2l5UMX0hTcUf72o ce4oVTfQFiCq0esngKqz8IqdO8qNjKL05tLVLkEkNr5Ly3GbM0mA9uWra8s1pZCF jxLbuIa4ldlZYDmT6uF0pqbUXZovkz4OPhH2muy29RyhMAPfg8Y51Cgzpg7E96yh k39un/00b+n1ij70K8+qGmfOFfaxww4Zv8I1yrNyUQ99MVLk0QtAmVA3dRxN7RzC w61cfU9ZtPdOFEuoiCK98IrT5+HQMAp32ACjHkpvnwMndbb/rffUnJ3XxcU= -----END CERTIFICATE-----Generated at Sat Jun 21 14:51:47 2025 by rpki-client