$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YaINHnbwnaZsFXDiQjjfp3puMJ0.roa File: YaINHnbwnaZsFXDiQjjfp3puMJ0.roa (raw, json) Hash identifier: h7AILs/ANAm3FeUbcLQBlQSj+GeAHcdCVlzgeMRBm50= Subject key identifier: 61:A2:0D:1E:76:F0:9D:A6:6C:15:70:E2:42:38:DF:A7:7A:6E:30:9D Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0B02 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YaINHnbwnaZsFXDiQjjfp3puMJ0.roa Signing time: Fri 31 Jan 2025 01:34:19 +0000 ROA not before: Fri 31 Jan 2025 01:34:19 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2818 (0xb02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:34:19 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=61A20D1E76F09DA66C1570E24238DFA77A6E309D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:29:44:c9:fe:2b:ee:f3:2b:0d:a7:6d:47: ee:dd:1c:3d:a3:db:75:e2:12:60:aa:26:0a:62:91: de:be:4b:c2:37:5d:3e:c4:2b:01:da:4a:da:7b:cc: 27:e1:0b:20:17:85:f4:cb:8a:e7:15:11:64:5b:1c: fd:fc:a0:be:de:88:19:d6:9a:e2:0f:39:a7:2d:05: 76:cc:5d:da:c6:87:3d:5d:2d:56:d8:ee:00:a5:68: ee:10:f1:5b:07:f7:bc:91:52:51:73:4c:c3:d6:23: 34:ce:56:ea:99:9f:a1:95:31:62:06:88:26:4e:7e: 4e:1e:86:09:46:9b:3e:37:f4:8d:65:ba:f0:8b:0d: 9e:d0:8d:74:67:93:70:ca:f7:b1:ac:13:f0:2e:04: 8e:ae:26:f9:c5:b1:18:3c:55:7a:b7:e3:c9:eb:2d: a5:66:70:9f:2b:8a:1c:b6:b7:c0:8a:64:69:be:a2: 20:7b:a5:1c:00:24:63:3f:70:93:dc:03:bb:f6:96: 32:bc:81:ac:99:f0:34:d1:6f:6a:ce:b0:3e:b0:4b: ba:d6:ea:78:bb:fd:bd:84:97:c2:63:72:a4:7b:6d: 98:03:b3:90:60:08:69:7f:37:44:37:ea:b5:e5:6a: c4:93:27:2f:9b:75:f9:fa:cf:da:0d:ec:f6:f9:ad: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:0D:1E:76:F0:9D:A6:6C:15:70:E2:42:38:DF:A7:7A:6E:30:9D X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YaINHnbwnaZsFXDiQjjfp3puMJ0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.96.0/21 Signature Algorithm: sha256WithRSAEncryption 07:a0:8e:a3:dc:fe:cf:8f:a5:44:07:51:91:2c:75:44:d6:c5: dc:3e:5f:b2:30:18:fd:2e:c4:70:b0:76:25:12:2b:78:02:0f: 04:8c:77:e6:8b:93:2e:3b:6e:af:7c:66:6b:d1:07:43:6a:18: 32:19:f0:c0:db:7a:1b:38:cc:3c:56:41:35:8a:8c:7e:d8:84: e5:03:b5:04:ae:eb:a1:c5:b3:fd:40:b4:4d:e6:ce:1a:e5:40: b3:b8:8e:fc:9e:5c:fe:07:17:ee:4e:7c:ad:74:05:c7:e0:fb: 3c:df:da:36:4a:86:6b:96:30:0a:ec:d9:c5:16:6a:de:71:fe: 3e:a4:e5:92:cc:4c:2f:49:79:77:f5:bb:82:86:67:d0:97:b3: ea:34:21:63:d1:7b:4d:cc:9f:fd:ec:ab:6c:94:f8:06:1f:64: c8:37:4d:9e:ff:d9:55:71:c8:be:ca:48:58:b6:0a:6c:94:b8: 8a:01:37:7d:d4:f1:d9:c5:3a:bf:22:74:26:2f:db:af:36:2c: f2:6b:7f:42:64:1a:55:3e:23:59:3e:e8:81:c6:bc:de:ae:0f: b4:43:ec:e4:6b:0d:ae:a6:78:33:bb:15:5e:bf:db:cf:4c:ae: 5a:60:6d:e4:df:6b:ba:f3:d4:22:74:36:34:43:ba:5b:b5:6f: 5a:07:d3:f2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTM0MTlaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYxQTIwRDFFNzZGMDlE QTY2QzE1NzBFMjQyMzhERkE3N0E2RTMwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfjylEyf4r7vMrDadtR+7dHD2j23XiEmCqJgpikd6+S8I3XT7E KwHaStp7zCfhCyAXhfTLiucVEWRbHP38oL7eiBnWmuIPOactBXbMXdrGhz1dLVbY 7gClaO4Q8VsH97yRUlFzTMPWIzTOVuqZn6GVMWIGiCZOfk4ehglGmz439I1luvCL DZ7QjXRnk3DK97GsE/AuBI6uJvnFsRg8VXq348nrLaVmcJ8rihy2t8CKZGm+oiB7 pRwAJGM/cJPcA7v2ljK8gayZ8DTRb2rOsD6wS7rW6ni7/b2El8JjcqR7bZgDs5Bg CGl/N0Q36rXlasSTJy+bdfn6z9oN7Pb5rV0VAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUYaINHnbwnaZsFXDiQjjfp3puMJ0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L1lhSU5IbmJ3bmFac0ZYRGlRampmcDNwdU1KMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMBQmAwDQYJKoZIhvcNAQELBQADggEBAAegjqPc/s+PpUQHUZEsdUTWxdw+ X7IwGP0uxHCwdiUSK3gCDwSMd+aLky47bq98ZmvRB0NqGDIZ8MDbehs4zDxWQTWK jH7YhOUDtQSu66HFs/1AtE3mzhrlQLO4jvyeXP4HF+5OfK10Bcfg+zzf2jZKhmuW MArs2cUWat5x/j6k5ZLMTC9JeXf1u4KGZ9CXs+o0IWPRe03Mn/3sq2yU+AYfZMg3 TZ7/2VVxyL7KSFi2CmyUuIoBN33U8dnFOr8idCYv2682LPJrf0JkGlU+I1k+6IHG vN6uD7RD7ORrDa6meDO7FV6/289MrlpgbeTfa7rz1CJ0NjRDulu1b1oH0/I= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:09 2025 by rpki-client