$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/kdTBI5hWDnc6cf3uojvQWy4q1Po.roa File: kdTBI5hWDnc6cf3uojvQWy4q1Po.roa (raw, json) Hash identifier: M3BpSHQBkh2DNWPUnOhtMcyUZnq32u+kIfZNa4Je/gI= Subject key identifier: 91:D4:C1:23:98:56:0E:77:3A:71:FD:EE:A2:3B:D0:5B:2E:2A:D4:FA Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0C13 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kdTBI5hWDnc6cf3uojvQWy4q1Po.roa Signing time: Tue 01 Apr 2025 01:51:37 +0000 ROA not before: Tue 01 Apr 2025 01:51:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 01:51:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=91D4C12398560E773A71FDEEA23BD05B2E2AD4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:f9:76:f0:81:b0:d5:ab:19:c7:d7:d2:01: 85:92:34:16:8a:59:c1:e6:4e:4c:2b:bd:60:4d:8c: f9:59:66:4e:7b:a4:c9:95:de:64:53:1d:c4:e6:e8: b4:2e:92:e7:3f:57:00:84:25:01:e3:74:9f:b3:29: 9e:b8:b0:62:2b:40:a7:6e:fc:23:5d:ac:61:a0:3c: b9:a8:e8:fd:4f:b8:4e:20:b2:a7:bb:a0:43:88:cd: 03:99:d4:e1:08:a9:97:6d:a6:d6:65:c6:28:d4:a3: 2c:51:3b:20:56:4a:0c:bc:f6:38:a6:9b:c4:bf:46: ab:10:00:f0:fb:d8:93:8b:df:b9:5b:de:40:ea:5d: d2:88:aa:86:24:e5:db:79:68:bd:78:11:61:be:42: dc:8d:e8:0c:07:63:3b:6d:c3:52:90:bb:8f:a9:ba: c4:5b:e7:b0:eb:5c:95:01:5c:f4:d9:c9:01:c6:65: 45:37:46:1e:a0:0b:00:4d:bd:49:d2:94:a8:1a:1a: 42:60:46:db:e4:f9:89:ee:d7:8c:88:75:da:e2:c1: 21:8d:5f:f8:ad:fc:01:e5:51:87:5b:8b:4e:62:c6: c8:02:8e:b7:39:51:1d:c2:df:72:ad:fb:c9:2e:f3: 8b:88:b1:1f:71:b9:c5:a9:47:18:50:24:28:25:9d: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:C1:23:98:56:0E:77:3A:71:FD:EE:A2:3B:D0:5B:2E:2A:D4:FA X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/kdTBI5hWDnc6cf3uojvQWy4q1Po.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.20.0/22 Signature Algorithm: sha256WithRSAEncryption 33:8e:01:12:df:e8:d1:a0:71:11:fc:df:16:35:7c:bb:cb:6f: b0:89:38:dc:4e:a7:75:f1:d4:4a:88:30:9f:0f:38:c6:ba:22: ba:1b:e2:14:f8:7d:97:32:52:8b:db:47:cc:3e:ad:a8:14:5b: 28:9d:5b:40:a3:00:d2:7a:1a:27:4f:84:50:70:7a:1d:29:33: 9b:fb:d5:0a:41:35:92:52:f0:88:97:b1:a5:04:59:ca:f6:ba: 94:c0:1f:18:b7:10:c6:e8:ea:7f:32:b7:57:01:10:4b:c5:08: 61:b7:c1:0b:d3:ee:46:82:3e:d6:7a:ae:6a:2a:0e:e9:07:58: 8f:a7:c8:fe:1f:e9:e3:b5:af:69:84:e4:b8:1f:ee:23:0e:d8: fc:63:4b:11:67:f7:c2:d7:56:8d:7e:c9:76:3b:23:9d:99:2e: 31:25:9b:f9:61:2e:8a:7e:10:dc:9f:59:4c:37:8e:16:ff:28: 80:b7:9f:28:d5:74:e6:25:c4:bd:4b:96:08:01:93:5c:65:aa: 77:77:46:66:73:c8:1a:6d:b4:b7:5f:b4:70:7f:cc:dc:b4:aa: 4c:37:17:88:e5:e8:9a:e2:98:9e:55:ab:af:46:93:fc:eb:06: 54:4d:c2:18:ee:f8:9b:75:f8:d0:b6:9f:92:7e:45:b4:39:3d: 0c:07:84:19 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MTUxMzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkxRDRDMTIzOTg1NjBF NzczQTcxRkRFRUEyM0JEMDVCMkUyQUQ0RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDHfl28IGw1asZx9fSAYWSNBaKWcHmTkwrvWBNjPlZZk57pMmV 3mRTHcTm6LQukuc/VwCEJQHjdJ+zKZ64sGIrQKdu/CNdrGGgPLmo6P1PuE4gsqe7 oEOIzQOZ1OEIqZdtptZlxijUoyxROyBWSgy89jimm8S/RqsQAPD72JOL37lb3kDq XdKIqoYk5dt5aL14EWG+QtyN6AwHYzttw1KQu4+pusRb57DrXJUBXPTZyQHGZUU3 Rh6gCwBNvUnSlKgaGkJgRtvk+Ynu14yIddriwSGNX/it/AHlUYdbi05ixsgCjrc5 UR3C33Kt+8ku84uIsR9xucWpRxhQJCglnRpVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkdTBI5hWDnc6cf3uojvQWy4q1PowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2tkVEJJNWhXRG5jNmNmM3VvanZRV3k0cTFQby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQhQwDQYJKoZIhvcNAQELBQADggEBADOOARLf6NGgcRH83xY1fLvLb7CJ ONxOp3Xx1EqIMJ8POMa6Irob4hT4fZcyUovbR8w+ragUWyidW0CjANJ6GidPhFBw eh0pM5v71QpBNZJS8IiXsaUEWcr2upTAHxi3EMbo6n8yt1cBEEvFCGG3wQvT7kaC PtZ6rmoqDukHWI+nyP4f6eO1r2mE5Lgf7iMO2PxjSxFn98LXVo1+yXY7I52ZLjEl m/lhLop+ENyfWUw3jhb/KIC3nyjVdOYlxL1LlggBk1xlqnd3RmZzyBpttLdftHB/ zNy0qkw3F4jl6JrimJ5Vq69Gk/zrBlRNwhju+Jt1+NC2n5J+RbQ5PQwHhBk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:13 2025 by rpki-client