$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/itaHhTT8qdBb4FxszR6ejk9ulgE.roa File: itaHhTT8qdBb4FxszR6ejk9ulgE.roa (raw, json) Hash identifier: 51kSRqmuwnFIy7fmY9EprUT/GGMjMXIsXrIxEYwEZJY= Subject key identifier: 8A:D6:87:85:34:FC:A9:D0:5B:E0:5C:6C:CD:1E:9E:8E:4F:6E:96:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F42 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/itaHhTT8qdBb4FxszR6ejk9ulgE.roa Signing time: Tue 10 Jun 2025 11:24:41 +0000 ROA not before: Tue 10 Jun 2025 11:24:41 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3906 (0xf42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:41 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8AD6878534FCA9D05BE05C6CCD1E9E8E4F6E9601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:04:b8:92:77:d3:7e:39:3c:fa:87:c3:b3:02: 97:f8:0c:82:f5:e7:28:82:d5:3b:14:06:b9:a4:c4: 6d:ee:ad:3b:c3:6f:69:7e:c0:1a:dc:72:94:09:e5: 91:21:4c:af:79:7a:00:76:0c:80:ec:cf:f9:8b:32: bd:2e:9a:bd:df:87:58:3d:d9:f6:e5:76:5d:4a:f3: 37:73:cd:b4:d7:98:3b:a1:85:e9:3a:71:48:0f:12: 6e:16:da:76:ac:05:dd:c3:7e:78:3a:17:b3:03:ca: a5:22:7e:a2:c1:47:07:32:28:02:43:5b:11:79:f4: 3f:81:b8:98:5f:cc:23:a3:b4:b2:c3:9c:d5:91:91: a9:88:81:c4:07:ee:cb:56:af:c8:d1:0d:cc:48:19: 08:9d:61:67:18:16:4c:bb:9d:d6:69:f1:38:16:3b: 4b:b6:83:52:53:ea:55:e3:5c:e9:b1:00:26:15:3c: f9:79:11:62:9b:b2:67:36:26:a3:55:6c:53:3f:6a: 0b:f7:9e:21:48:97:63:2d:43:18:d3:cb:4e:91:bd: e6:cb:db:92:b5:e4:64:1d:af:3a:fb:39:13:0a:57: b4:f1:97:3d:06:88:66:62:6e:0c:75:92:6a:6d:99: b5:f6:e9:a6:61:36:ae:02:51:15:f3:b7:3e:1d:f6: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D6:87:85:34:FC:A9:D0:5B:E0:5C:6C:CD:1E:9E:8E:4F:6E:96:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/itaHhTT8qdBb4FxszR6ejk9ulgE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.110.0/23 Signature Algorithm: sha256WithRSAEncryption 99:60:df:d3:c1:3a:f4:5e:b4:63:ad:85:6c:bd:b1:36:0a:dd: 6e:2d:62:18:ae:b4:13:a8:7f:1e:c6:87:a8:5c:cb:2b:cb:16: b9:8b:c0:4a:60:77:8e:5f:86:1f:3b:07:41:4a:60:6b:f3:fa: 47:39:48:a3:f0:bc:c6:0b:21:34:fe:3a:55:30:c8:63:fd:9c: 54:d3:2d:15:08:28:10:a3:d8:3a:a4:3b:62:eb:a6:3d:aa:39: 13:88:b9:3d:3f:b3:2e:a9:9f:65:b6:f2:6b:ce:9d:e2:94:05: a4:4d:7a:cb:f9:17:4b:2f:c3:fc:72:11:a8:37:22:0b:c8:72: 51:04:13:e4:32:75:a1:d7:dd:99:8a:b1:e6:af:c9:93:8a:06: d1:97:61:8a:fb:66:27:d2:45:b1:1e:d3:97:07:f1:17:a8:71: 82:43:ee:73:79:9c:b0:9c:8b:89:b6:af:6d:6e:ee:79:54:be: 89:7a:87:3e:e1:24:4d:25:fd:97:62:4f:65:6b:25:cf:21:38: f1:37:af:8f:48:ba:c6:4e:9a:0c:5b:57:70:0c:2d:e0:3d:b2: 10:4c:f1:f4:84:f0:78:dd:5b:66:17:5f:b2:1c:51:5f:3e:18: f3:85:97:59:ce:76:5f:b0:cf:47:56:4a:79:cc:92:5b:7d:29: 18:bc:8a:0c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0NDFaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhBRDY4Nzg1MzRGQ0E5 RDA1QkUwNUM2Q0NEMUU5RThFNEY2RTk2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgBLiSd9N+OTz6h8OzApf4DIL15yiC1TsUBrmkxG3urTvDb2l+ wBrccpQJ5ZEhTK95egB2DIDsz/mLMr0umr3fh1g92fbldl1K8zdzzbTXmDuhhek6 cUgPEm4W2nasBd3Dfng6F7MDyqUifqLBRwcyKAJDWxF59D+BuJhfzCOjtLLDnNWR kamIgcQH7stWr8jRDcxIGQidYWcYFky7ndZp8TgWO0u2g1JT6lXjXOmxACYVPPl5 EWKbsmc2JqNVbFM/agv3niFIl2MtQxjTy06RvebL25K15GQdrzr7ORMKV7Txlz0G iGZibgx1kmptmbX26aZhNq4CURXztz4d9ihHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUitaHhTT8qdBb4FxszR6ejk9ulgEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2l0YUhoVFQ4cWRCYjRGeHN6UjZlams5dWxnRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQm4wDQYJKoZIhvcNAQELBQADggEBAJlg39PBOvRetGOthWy9sTYK3W4t YhiutBOofx7Gh6hcyyvLFrmLwEpgd45fhh87B0FKYGvz+kc5SKPwvMYLITT+OlUw yGP9nFTTLRUIKBCj2DqkO2Lrpj2qOROIuT0/sy6pn2W28mvOneKUBaRNesv5F0sv w/xyEag3IgvIclEEE+QydaHX3ZmKseavyZOKBtGXYYr7ZifSRbEe05cH8ReocYJD 7nN5nLCci4m2r21u7nlUvol6hz7hJE0l/ZdiT2VrJc8hOPE3r49IusZOmgxbV3AM LeA9shBM8fSE8HjdW2YXX7IcUV8+GPOFl1nOdl+wz0dWSnnMklt9KRi8igw= -----END CERTIFICATE-----Generated at Sun Jun 22 02:31:12 2025 by rpki-client