$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/OYcoZhY0Y6K1_xEEFd0SmU1OSLc.roa File: OYcoZhY0Y6K1_xEEFd0SmU1OSLc.roa (raw, json) Hash identifier: BQUV1leWp9FT8yPWEmIC5MAFoSf1LKHzMCXj2zJw9gw= Subject key identifier: 39:87:28:66:16:34:63:A2:B5:FF:11:04:15:DD:12:99:4D:4E:48:B7 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F89 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OYcoZhY0Y6K1_xEEFd0SmU1OSLc.roa Signing time: Tue 10 Jun 2025 11:36:17 +0000 ROA not before: Tue 10 Jun 2025 11:36:17 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 05:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3977 (0xf89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:36:17 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=39872866163463A2B5FF110415DD12994D4E48B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:80:d6:64:81:30:d4:47:f5:0e:c0:79:bd: 53:5b:7d:ef:19:84:d7:d0:6e:db:b1:6e:ff:87:92: 66:66:fe:bc:83:75:34:86:c9:bd:a0:2d:07:b4:89: fd:a8:e3:45:26:91:fa:6e:99:5d:1d:81:2a:de:15: 5d:de:f5:8d:82:b8:12:ea:55:46:01:35:fa:7d:52: d7:64:eb:dc:2f:73:d7:b1:1a:d1:6f:04:d6:e5:41: 30:5e:91:c5:21:96:66:61:80:f6:26:e7:b2:8f:55: ab:c9:a2:31:92:cb:d0:4b:d2:a3:2b:99:77:05:42: f4:5b:7d:ae:e9:08:24:6d:97:e6:ce:3a:3a:0b:30: 76:c6:e4:00:15:93:6e:67:0f:cd:e7:27:c2:e4:54: 51:32:a3:f6:56:e4:8c:43:85:d0:e3:fa:d3:a9:2d: 39:a7:c9:6f:6e:a4:8e:31:73:04:b6:43:23:94:f6: da:3a:cc:57:06:8b:89:4d:c0:af:e2:4c:59:d7:ac: 8d:45:a5:f3:53:fb:86:cb:bd:10:60:f8:b5:c7:2f: 03:b4:3d:d2:7a:06:31:16:d9:87:f6:fa:69:c7:2a: 50:7e:f2:b1:f6:a2:3b:63:35:d3:6c:f2:db:61:89: f1:90:98:7b:11:42:38:e0:5c:1b:02:40:2f:fc:43: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:87:28:66:16:34:63:A2:B5:FF:11:04:15:DD:12:99:4D:4E:48:B7 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/OYcoZhY0Y6K1_xEEFd0SmU1OSLc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.128.0/18 Signature Algorithm: sha256WithRSAEncryption a4:e4:0e:be:d4:fc:7f:7d:77:16:0a:8d:ed:15:6f:00:16:fd: 86:54:0b:c7:cc:b7:bd:58:bd:2a:61:a4:3c:c4:e2:57:d8:6b: 3b:8d:5b:fa:92:59:eb:a5:80:16:e0:7d:0e:84:28:58:bb:96: 71:99:23:7d:f9:63:32:48:0d:e8:10:9b:e4:e6:ba:2a:28:6b: a0:3c:69:6d:2d:c7:7c:1a:9f:5f:05:4f:49:90:f9:e8:f1:62: 59:f4:28:30:8a:99:43:25:f5:de:d2:23:89:b0:7b:e4:1b:31: 38:04:57:e0:8c:e5:ea:a5:5e:e9:df:71:a3:51:f7:87:71:26: 57:6e:62:59:ce:22:5b:05:0d:f2:cf:f3:37:21:d1:2b:bc:8d: 3e:77:95:e8:b3:cb:16:15:a6:dc:01:c8:58:38:9d:35:24:e5: 08:72:56:7c:6b:47:89:06:b2:80:55:bf:c5:58:9d:ba:03:77: 24:e4:64:ea:34:0c:9a:7b:29:6f:b0:03:56:84:dd:64:54:07: 77:3c:56:9f:d4:77:1d:7d:c6:d7:bb:17:3c:27:d2:39:7c:78: 97:71:16:9d:6e:6f:c7:cd:36:ae:fc:33:62:a9:86:00:50:d3: bb:82:58:f9:18:7b:30:52:81:9b:d5:72:d4:74:3b:56:ec:40: 2c:15:0e:e9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTM2MTdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDM5ODcyODY2MTYzNDYz QTJCNUZGMTEwNDE1REQxMjk5NEQ0RTQ4QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9/IDWZIEw1Ef1DsB5vVNbfe8ZhNfQbtuxbv+HkmZm/ryDdTSG yb2gLQe0if2o40UmkfpumV0dgSreFV3e9Y2CuBLqVUYBNfp9Utdk69wvc9exGtFv BNblQTBekcUhlmZhgPYm57KPVavJojGSy9BL0qMrmXcFQvRbfa7pCCRtl+bOOjoL MHbG5AAVk25nD83nJ8LkVFEyo/ZW5IxDhdDj+tOpLTmnyW9upI4xcwS2QyOU9to6 zFcGi4lNwK/iTFnXrI1FpfNT+4bLvRBg+LXHLwO0PdJ6BjEW2Yf2+mnHKlB+8rH2 ojtjNdNs8tthifGQmHsRQjjgXBsCQC/8QwORAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUOYcoZhY0Y6K1/xEEFd0SmU1OSLcwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L09ZY29aaFkwWTZLMV94RUVGZDBTbVUxT1NMYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYBQoAwDQYJKoZIhvcNAQELBQADggEBAKTkDr7U/H99dxYKje0VbwAW/YZU C8fMt71YvSphpDzE4lfYazuNW/qSWeulgBbgfQ6EKFi7lnGZI335YzJIDegQm+Tm uiooa6A8aW0tx3wan18FT0mQ+ejxYln0KDCKmUMl9d7SI4mwe+QbMTgEV+CM5eql XunfcaNR94dxJlduYlnOIlsFDfLP8zch0Su8jT53leizyxYVptwByFg4nTUk5Qhy VnxrR4kGsoBVv8VYnboDdyTkZOo0DJp7KW+wA1aE3WRUB3c8Vp/Udx19xte7Fzwn 0jl8eJdxFp1ub8fNNq78M2KphgBQ07uCWPkYezBSgZvVctR0O1bsQCwVDuk= -----END CERTIFICATE-----Generated at Fri Jun 20 10:21:09 2025 by rpki-client