$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gFW5Ak6cDEUVa5iLgRCDo4pmS1s.roa File: gFW5Ak6cDEUVa5iLgRCDo4pmS1s.roa (raw, json) Hash identifier: 7HVkejd4arSh3Yk+Eewa58ZqRx1RqjWnD1F0xXV+u54= Subject key identifier: 80:55:B9:02:4E:9C:0C:45:15:6B:98:8B:81:10:83:A3:8A:66:4B:5B Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0AF4 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gFW5Ak6cDEUVa5iLgRCDo4pmS1s.roa Signing time: Fri 31 Jan 2025 01:28:34 +0000 ROA not before: Fri 31 Jan 2025 01:28:34 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 9605 IP address blocks: 1.66.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 20:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2804 (0xaf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jan 31 01:28:34 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=8055B9024E9C0C45156B988B811083A38A664B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:46:6c:3d:c6:41:2f:dd:87:22:4f:ea:5f: c1:90:e5:41:9f:64:ff:1f:2c:c8:8f:40:0c:a4:fc: 17:de:bf:6a:c8:29:06:60:75:b2:d5:65:c1:1a:2b: 7b:1d:e1:f6:b5:81:b6:73:76:33:bd:8b:3e:7f:b3: 87:6e:d3:2a:a6:54:8a:82:cf:76:b5:87:7f:fd:8e: 0e:a7:8c:4f:b9:69:7c:ad:6f:be:06:5a:7c:09:44: 3e:c9:6d:7c:b4:fa:3f:99:77:4a:e7:0a:cd:69:0d: 44:a0:5b:81:eb:82:60:fa:dd:1b:fb:d2:08:14:d4: 7d:b1:87:8b:1a:13:ed:75:4f:c6:74:06:29:b4:9f: 13:7c:9a:0c:c8:f4:48:0f:6c:47:bc:07:5b:97:43: 29:b9:a0:65:e4:43:e2:a6:64:97:44:e7:ed:38:6b: 03:c4:87:db:67:cc:d7:8f:e2:12:d6:1c:df:a7:e3: 6d:79:35:52:b9:e0:59:a8:85:d3:f2:60:da:2f:04: de:a5:1e:1d:6d:6d:87:62:12:13:db:b6:f4:2a:f5: 2f:f9:e6:68:a8:33:2c:ff:18:b8:25:bb:d7:ad:c7: 5e:8e:8e:51:b4:65:7e:95:c6:48:84:b6:fe:41:04: c1:02:75:17:e4:a6:1f:82:d4:4f:d9:51:87:e1:72: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:55:B9:02:4E:9C:0C:45:15:6B:98:8B:81:10:83:A3:8A:66:4B:5B X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gFW5Ak6cDEUVa5iLgRCDo4pmS1s.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.100.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:2b:d1:22:f0:34:6d:11:9f:4d:33:9c:d2:40:02:80:83:99: 12:62:dc:e4:1d:b4:f9:0a:6d:42:94:dd:d6:4c:bd:4c:ff:d5: 19:c7:cd:77:2d:29:c8:e8:ad:be:a0:1b:b4:4c:f4:b4:0f:de: 25:e4:f8:5f:63:4c:0c:8a:21:fd:cf:9a:32:d6:55:b4:90:b6: d6:7f:29:b8:2a:46:c4:39:f2:39:d7:34:80:65:2a:ef:76:8a: e9:77:0d:4a:b6:21:98:89:11:23:f3:6d:00:3f:08:ce:39:11: dc:5a:24:53:7e:1d:20:90:87:ac:24:85:e8:0d:ed:3e:4a:49: 65:82:f4:17:0e:71:ed:fb:34:0b:21:9c:b2:a1:45:30:2c:89: cb:3e:3d:f4:e5:cc:c3:1c:00:c0:cc:5a:ae:8c:7d:e0:ec:7b: f8:18:35:8b:0e:17:84:65:74:6f:87:36:ff:ac:bb:25:cb:69: 53:df:fe:69:f9:5b:83:16:65:ec:60:51:b0:80:f6:6d:7d:f6: 18:b8:e8:4c:e7:07:1c:e3:84:f0:48:35:9f:31:cf:69:b6:62: 58:8f:b0:c5:19:f7:7f:bb:13:c2:cf:99:7b:ca:95:d9:e4:82: c0:62:df:3d:6e:42:80:22:c1:05:2d:07:11:37:12:4e:52:3f: f5:df:5c:dd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTAxMzEw MTI4MzRaFw0yNjAxMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwNTVCOTAyNEU5QzBD NDUxNTZCOTg4QjgxMTA4M0EzOEE2NjRCNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDmUZsPcZBL92HIk/qX8GQ5UGfZP8fLMiPQAyk/Bfev2rIKQZg dbLVZcEaK3sd4fa1gbZzdjO9iz5/s4du0yqmVIqCz3a1h3/9jg6njE+5aXytb74G WnwJRD7JbXy0+j+Zd0rnCs1pDUSgW4HrgmD63Rv70ggU1H2xh4saE+11T8Z0Bim0 nxN8mgzI9EgPbEe8B1uXQym5oGXkQ+KmZJdE5+04awPEh9tnzNeP4hLWHN+n4215 NVK54FmohdPyYNovBN6lHh1tbYdiEhPbtvQq9S/55mioMyz/GLglu9etx16OjlG0 ZX6VxkiEtv5BBMECdRfkph+C1E/ZUYfhcnlJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgFW5Ak6cDEUVa5iLgRCDo4pmS1swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2dGVzVBazZjREVVVmE1aUxnUkNEbzRwbVMxcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIBQmQwDQYJKoZIhvcNAQELBQADggEBAD8r0SLwNG0Rn00znNJAAoCDmRJi 3OQdtPkKbUKU3dZMvUz/1RnHzXctKcjorb6gG7RM9LQP3iXk+F9jTAyKIf3PmjLW VbSQttZ/KbgqRsQ58jnXNIBlKu92iul3DUq2IZiJESPzbQA/CM45EdxaJFN+HSCQ h6wkhegN7T5KSWWC9BcOce37NAshnLKhRTAsics+PfTlzMMcAMDMWq6MfeDse/gY NYsOF4RldG+HNv+suyXLaVPf/mn5W4MWZexgUbCA9m199hi46EznBxzjhPBINZ8x z2m2YliPsMUZ93+7E8LPmXvKldnkgsBi3z1uQoAiwQUtBxE3Ek5SP/XfXN0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:09 2025 by rpki-client