$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/F3B3F3ccAUgr1rvJXZAZrjKBsis.roa File: F3B3F3ccAUgr1rvJXZAZrjKBsis.roa (raw, json) Hash identifier: MiQi7sSOSSLVtbcNL2IKcd8MnhranQk/0L46E94Gepk= Subject key identifier: 17:70:77:17:77:1C:01:48:2B:D6:BB:C9:5D:90:19:AE:32:81:B2:2B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0A38 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F3B3F3ccAUgr1rvJXZAZrjKBsis.roa Signing time: Sun 30 Jun 2024 01:46:36 +0000 ROA not before: Sun 30 Jun 2024 01:46:36 +0000 ROA not after: Tue 24 Jun 2025 10:46:45 +0000 asID: 9605 IP address blocks: 1.66.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 30 01:46:36 2024 GMT Not After : Jun 24 10:46:45 2025 GMT Subject: CN=17707717771C01482BD6BBC95D9019AE3281B22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:a2:2e:89:6c:e4:15:f3:e0:d4:dd:62:fd: 96:87:2a:f5:e8:7e:37:4d:b8:7e:f8:98:50:11:0e: 21:d1:2a:ed:34:55:8a:53:59:e6:bb:5d:6c:95:74: a9:43:79:92:19:17:15:a9:f4:9e:55:7d:d0:0e:13: 93:8d:9b:28:b3:77:72:b5:be:71:c4:57:dd:3b:ae: 07:41:a9:2e:8d:16:9e:bc:9a:1d:ab:de:8f:cb:31: da:7f:98:e4:2d:6d:94:df:e1:97:c1:e0:ae:cb:3f: cb:1c:14:47:9e:47:76:4a:d7:b7:af:22:05:9a:9f: 00:b5:00:09:11:e2:8f:dd:34:16:cd:9b:cd:e7:36: 94:bb:43:49:2d:2e:d3:d8:66:21:3a:4f:9e:22:0b: 70:56:64:50:3a:d0:9f:13:6f:2d:25:40:d3:11:70: 55:04:53:23:f7:89:8b:66:ec:33:7a:60:7b:d1:cb: 29:9f:8c:95:62:ce:f1:b5:8f:5a:f6:82:ed:12:46: bf:5f:33:76:9a:1a:fe:6f:aa:a4:72:84:9c:14:df: 04:ca:73:16:fe:2c:f2:56:ed:4d:df:12:5e:b9:a6: 39:18:b2:dd:8e:ab:a7:9d:2a:63:dd:32:d8:3c:77: 3b:0a:9f:1a:79:2d:e6:ad:4c:df:00:c5:b5:3e:a5: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:77:17:77:1C:01:48:2B:D6:BB:C9:5D:90:19:AE:32:81:B2:2B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/F3B3F3ccAUgr1rvJXZAZrjKBsis.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.110.0/23 Signature Algorithm: sha256WithRSAEncryption 63:20:f8:86:b7:44:dc:73:f2:de:69:f5:75:c5:28:d2:fb:93: 23:4e:da:13:f0:a7:a2:c9:2b:d9:11:f7:39:54:84:33:24:bc: 99:72:f1:17:0e:80:b6:09:83:77:2d:35:a6:03:17:be:da:d9: 18:1d:91:73:41:07:a4:fa:ae:8c:0f:cc:57:0a:7e:c2:3f:af: 63:03:f8:9e:62:c1:4c:cd:c6:57:d4:1a:70:ab:4c:a1:5d:9e: 61:7f:f5:5c:eb:63:72:88:bd:65:4a:47:0b:09:ef:d2:da:d3: 5b:77:6c:24:a4:5e:8e:ee:13:5a:7e:61:f0:38:bd:d4:0d:ee: 4d:35:d4:ec:72:bb:3d:1e:ad:78:a2:b0:9a:c5:d0:a0:ed:f1: 3f:c1:40:e5:ca:fb:13:36:c1:4a:17:d6:3b:a9:84:75:ad:d0: 40:02:7a:a2:bf:47:51:bd:6a:ae:0e:20:b7:07:35:fe:b8:5f: b5:39:2f:63:b4:89:53:31:37:95:85:f3:e1:31:6f:9e:e6:ec: 33:e9:d2:4f:8c:c8:40:6d:d4:1a:4b:c2:81:e0:40:b9:2f:ec: 95:a8:7b:5e:7d:2b:14:f8:19:c6:66:c2:5f:24:e8:80:5a:17: ec:36:17:4e:20:74:29:95:93:56:fe:5b:ca:ff:21:cb:1d:74: c7:c2:79:94 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw MTQ2MzZaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDE3NzA3NzE3NzcxQzAx NDgyQkQ2QkJDOTVEOTAxOUFFMzI4MUIyMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmyaIuiWzkFfPg1N1i/ZaHKvXofjdNuH74mFARDiHRKu00VYpT Wea7XWyVdKlDeZIZFxWp9J5VfdAOE5ONmyizd3K1vnHEV907rgdBqS6NFp68mh2r 3o/LMdp/mOQtbZTf4ZfB4K7LP8scFEeeR3ZK17evIgWanwC1AAkR4o/dNBbNm83n NpS7Q0ktLtPYZiE6T54iC3BWZFA60J8Tby0lQNMRcFUEUyP3iYtm7DN6YHvRyymf jJVizvG1j1r2gu0SRr9fM3aaGv5vqqRyhJwU3wTKcxb+LPJW7U3fEl65pjkYst2O q6edKmPdMtg8dzsKnxp5LeatTN8AxbU+pSZdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUF3B3F3ccAUgr1rvJXZAZrjKBsiswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0YzQjNGM2NjQVVncjFydkpYWkFacmpLQnNpcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEBQm4wDQYJKoZIhvcNAQELBQADggEBAGMg+Ia3RNxz8t5p9XXFKNL7kyNO 2hPwp6LJK9kR9zlUhDMkvJly8RcOgLYJg3ctNaYDF77a2RgdkXNBB6T6rowPzFcK fsI/r2MD+J5iwUzNxlfUGnCrTKFdnmF/9VzrY3KIvWVKRwsJ79La01t3bCSkXo7u E1p+YfA4vdQN7k011Oxyuz0erXiisJrF0KDt8T/BQOXK+xM2wUoX1juphHWt0EAC eqK/R1G9aq4OILcHNf64X7U5L2O0iVMxN5WF8+Exb57m7DPp0k+MyEBt1BpLwoHg QLkv7JWoe159KxT4GcZmwl8k6IBaF+w2F04gdCmVk1b+W8r/IcsddMfCeZQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:40:18 2025 by rpki-client