$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AIuRHmsP2-5WmOD-p9Y3QIUno8U.roa File: AIuRHmsP2-5WmOD-p9Y3QIUno8U.roa (raw, json) Hash identifier: NKFrRMg2uN0l6YoLN1NR1/xHQ99FBRUrd3VftOF/bVI= Subject key identifier: 00:8B:91:1E:6B:0F:DB:EE:56:98:E0:FE:A7:D6:37:40:85:27:A3:C5 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AIuRHmsP2-5WmOD-p9Y3QIUno8U.roa Signing time: Fri 31 Jan 2025 01:28:32 +0000 ROA not before: Fri 31 Jan 2025 01:28:32 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:32 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=008B911E6B0FDBEE5698E0FEA7D637408527A3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:6d:48:76:3d:d0:40:99:0e:54:91:c4:17: e4:1e:85:24:13:16:40:1d:88:a9:22:3d:53:49:a2: c6:83:d0:77:1b:fb:0c:36:52:09:51:5c:7a:60:93: f3:95:e4:7b:ed:39:da:d7:66:b2:3a:52:9e:01:27: e9:34:af:68:b2:c0:04:11:d1:41:65:9b:52:ba:be: cb:f6:20:b8:c5:86:5d:52:b4:85:8e:4c:23:f0:87: f9:cf:f1:94:1c:10:2d:96:e5:ad:6f:84:bf:e5:d5: 1c:71:82:38:0a:94:e9:32:a1:4d:c8:78:27:56:66: eb:3d:8e:51:20:7a:1f:da:1b:ad:b3:53:fc:be:38: 53:b9:28:04:ca:85:8d:52:a0:5f:0d:9c:6a:30:04: 79:4a:1f:24:a9:b2:ee:7b:ce:cb:9f:8e:65:5f:10: 22:f6:5b:24:2c:bf:3f:64:73:32:67:74:c3:de:75: 75:2e:c5:0f:e8:65:17:80:e2:24:92:5e:5a:14:32: 6a:10:df:ae:8c:db:b4:8f:e9:71:87:da:17:a4:d5: 04:bf:58:2b:2f:b3:32:7a:00:77:a4:a6:5a:0c:44: f0:72:36:f0:dc:61:32:18:ac:48:f0:33:55:3d:46: d8:24:2e:c4:34:89:f9:35:44:02:b8:94:a2:3d:dc: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8B:91:1E:6B:0F:DB:EE:56:98:E0:FE:A7:D6:37:40:85:27:A3:C5 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AIuRHmsP2-5WmOD-p9Y3QIUno8U.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.104.0/24 Signature Algorithm: sha256WithRSAEncryption 33:f6:3e:35:9f:77:82:b8:f5:57:26:94:22:b4:eb:73:f3:8e: 64:c9:5e:dd:bc:6d:57:77:d1:2f:a6:d1:14:4e:21:f6:aa:d9: 1f:29:cf:92:74:16:b3:b3:15:65:67:05:c6:26:b4:81:87:b2: c0:bf:9f:71:73:0f:bf:42:3f:ea:2f:d5:f0:76:65:ca:ad:93: ff:eb:7f:6a:4b:8c:8a:84:0c:91:1c:41:0f:38:3c:07:b2:f7: 3e:41:f1:8e:cb:7d:e2:22:ea:af:bd:d0:4e:45:d0:ec:ac:9b: 27:4e:b5:57:7b:7f:f7:ff:0f:b6:6b:6b:5f:06:2f:6c:67:85: f8:aa:d1:b2:58:84:09:20:37:35:17:ef:59:b8:7f:69:74:01: 9a:81:68:11:68:f8:07:72:96:76:38:cd:82:c0:f2:a4:d5:c6: 61:a8:3c:31:72:70:43:35:44:7f:67:e5:eb:b3:7b:99:45:56: 21:df:87:cf:71:88:f4:9d:29:81:92:92:aa:ab:be:97:1d:93: 35:fe:07:ec:04:43:4f:19:64:43:5b:13:49:d4:19:46:48:7e: cb:af:c9:50:85:7f:a5:a4:3b:41:bb:27:c5:86:0c:64:7e:9a: 0a:0a:21:70:33:63:52:13:f6:44:e7:18:56:f0:ae:07:fe:86: 3f:b1:82:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzJaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAwOEI5MTFFNkIwRkRC RUU1Njk4RTBGRUE3RDYzNzQwODUyN0EzQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp9m1Idj3QQJkOVJHEF+QehSQTFkAdiKkiPVNJosaD0Hcb+ww2 UglRXHpgk/OV5HvtOdrXZrI6Up4BJ+k0r2iywAQR0UFlm1K6vsv2ILjFhl1StIWO TCPwh/nP8ZQcEC2W5a1vhL/l1RxxgjgKlOkyoU3IeCdWZus9jlEgeh/aG62zU/y+ OFO5KATKhY1SoF8NnGowBHlKHySpsu57zsufjmVfECL2WyQsvz9kczJndMPedXUu xQ/oZReA4iSSXloUMmoQ366M27SP6XGH2hek1QS/WCsvszJ6AHekploMRPByNvDc YTIYrEjwM1U9RtgkLsQ0ifk1RAK4lKI93CLdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAIuRHmsP2+5WmOD+p9Y3QIUno8UwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0FJdVJIbXNQMi01V21PRC1wOVkzUUlVbm84VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQmgwDQYJKoZIhvcNAQELBQADggEBADP2PjWfd4K49VcmlCK063PzjmTJ Xt28bVd30S+m0RROIfaq2R8pz5J0FrOzFWVnBcYmtIGHssC/n3FzD79CP+ov1fB2 Zcqtk//rf2pLjIqEDJEcQQ84PAey9z5B8Y7LfeIi6q+90E5F0OysmydOtVd7f/f/ D7Zra18GL2xnhfiq0bJYhAkgNzUX71m4f2l0AZqBaBFo+AdylnY4zYLA8qTVxmGo PDFycEM1RH9n5euze5lFViHfh89xiPSdKYGSkqqrvpcdkzX+B+wEQ08ZZENbE0nU GUZIfsuvyVCFf6WkO0G7J8WGDGR+mgoKIXAzY1IT9kTnGFbwrgf+hj+xgrw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:44 2025 by rpki-client