$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/4F8N65lgp7Iv0ERiAYDtXF4K1dg.roa File: 4F8N65lgp7Iv0ERiAYDtXF4K1dg.roa (raw, json) Hash identifier: rIjfzY/2McNpdr0uHKFvyBUmuOcdAPxif8VzHt3Bh2s= Subject key identifier: E0:5F:0D:EB:99:60:A7:B2:2F:D0:44:62:01:80:ED:5C:5E:0A:D5:D8 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0E75 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4F8N65lgp7Iv0ERiAYDtXF4K1dg.roa Signing time: Tue 10 Jun 2025 10:53:34 +0000 ROA not before: Tue 10 Jun 2025 10:53:34 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 1.66.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3701 (0xe75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 10:53:34 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E05F0DEB9960A7B22FD044620180ED5C5E0AD5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:42:02:d8:76:ba:fb:fc:ab:5b:bd:25:b4:c8: 6d:da:7a:b4:f1:2b:8f:79:5b:61:58:94:d8:f5:aa: a9:ef:5b:f5:18:cd:75:9f:91:61:64:1b:1d:a0:bd: 69:b8:0e:01:db:f4:9c:9a:bc:8b:2b:c3:0e:36:97: a0:a8:f4:66:aa:6d:3a:6d:37:7a:de:da:3b:eb:bc: 85:82:a9:a9:3c:46:31:9c:91:03:ec:83:a0:9b:85: 43:e5:86:e6:1c:f5:57:e4:42:d8:56:57:7e:a3:3b: 88:27:6c:38:67:8d:76:29:3f:98:3b:ed:4f:6e:7d: 12:f6:87:bb:1f:b3:86:91:a4:ab:0b:b4:da:90:3d: 25:03:14:67:ba:69:68:ed:66:65:91:6d:46:92:a3: 85:09:4c:5a:eb:e5:4b:fd:80:6f:dd:02:aa:9a:6f: 6d:b8:01:e1:a7:f6:27:b9:16:ea:21:15:c3:22:53: 3d:8a:51:02:c0:da:e0:31:36:bb:c9:87:5d:67:84: 73:d2:d3:7e:c2:01:f5:fd:0a:ef:b9:3b:de:85:85: 9b:9b:12:ea:70:a3:e1:f6:38:db:d8:5c:a0:20:5f: d2:19:cf:a5:e5:1e:ed:09:a8:88:8c:90:83:27:dd: eb:39:1b:01:74:e0:e5:41:a6:6e:b2:ee:70:46:db: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5F:0D:EB:99:60:A7:B2:2F:D0:44:62:01:80:ED:5C:5E:0A:D5:D8 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/4F8N65lgp7Iv0ERiAYDtXF4K1dg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.66.106.0/24 Signature Algorithm: sha256WithRSAEncryption 06:b8:90:ad:b8:b4:7e:2a:f0:11:53:52:e0:52:b7:83:1c:3b: b3:65:5a:b9:36:56:50:ac:21:3e:e2:c5:44:cf:f1:d3:47:ed: 99:3f:41:f8:a7:95:89:1c:56:a3:0b:48:ec:ba:93:4b:ab:44: 8b:1a:d6:96:1b:c3:f9:63:39:ed:ac:0e:d7:1a:07:68:60:39: 40:d3:03:cb:c8:39:a9:92:17:98:1a:b2:29:0a:64:5f:4c:77: 22:f6:c4:2b:82:e4:8e:19:c2:06:61:e0:ce:12:af:37:20:ae: 05:0d:3d:4b:9f:61:ae:59:15:8d:f3:83:4d:b4:cf:60:a9:96: 0c:79:92:9f:7e:e4:db:06:9a:94:c6:f3:ac:2f:e5:f8:03:a5: 5d:7d:a4:43:22:55:41:2d:f2:83:d0:83:78:32:47:df:0f:84: 22:88:d7:9b:35:5c:a9:c0:ba:38:c7:94:11:42:da:cd:d8:3b: 2e:1e:38:c5:d1:13:b7:d2:7c:46:67:cb:db:c4:38:5f:6f:ef: 70:59:bf:99:b3:70:51:c0:e7:5e:bb:25:40:a5:2d:a3:4f:8d: ec:c0:f1:d8:43:4f:76:13:b4:ce:7f:ea:f5:7d:4d:a8:db:ea: 78:5e:09:87:eb:50:cd:af:f2:8b:ac:9e:bf:e6:b0:6b:b7:1b: cb:e1:65:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MDUzMzRaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEUwNUYwREVCOTk2MEE3 QjIyRkQwNDQ2MjAxODBFRDVDNUUwQUQ1RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaQgLYdrr7/KtbvSW0yG3aerTxK495W2FYlNj1qqnvW/UYzXWf kWFkGx2gvWm4DgHb9JyavIsrww42l6Co9GaqbTptN3re2jvrvIWCqak8RjGckQPs g6CbhUPlhuYc9VfkQthWV36jO4gnbDhnjXYpP5g77U9ufRL2h7sfs4aRpKsLtNqQ PSUDFGe6aWjtZmWRbUaSo4UJTFrr5Uv9gG/dAqqab224AeGn9ie5FuohFcMiUz2K UQLA2uAxNrvJh11nhHPS037CAfX9Cu+5O96FhZubEupwo+H2ONvYXKAgX9IZz6Xl Hu0JqIiMkIMn3es5GwF04OVBpm6y7nBG2xpZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU4F8N65lgp7Iv0ERiAYDtXF4K1dgwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5LzRGOE42NWxncDdJdjBFUmlBWUR0WEY0SzFkZy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAABQmowDQYJKoZIhvcNAQELBQADggEBAAa4kK24tH4q8BFTUuBSt4McO7Nl Wrk2VlCsIT7ixUTP8dNH7Zk/QfinlYkcVqMLSOy6k0urRIsa1pYbw/ljOe2sDtca B2hgOUDTA8vIOamSF5gasikKZF9MdyL2xCuC5I4ZwgZh4M4SrzcgrgUNPUufYa5Z FY3zg020z2Cplgx5kp9+5NsGmpTG86wv5fgDpV19pEMiVUEt8oPQg3gyR98PhCKI 15s1XKnAujjHlBFC2s3YOy4eOMXRE7fSfEZny9vEOF9v73BZv5mzcFHA5167JUCl LaNPjezA8dhDT3YTtM5/6vV9Tajb6nheCYfrUM2v8ousnr/msGu3G8vhZe8= -----END CERTIFICATE-----Generated at Thu Jul 3 15:50:43 2025 by rpki-client