$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/NesXXLgkubRwCIW_jamI5fIak8A.roa File: NesXXLgkubRwCIW_jamI5fIak8A.roa (raw, json) Hash identifier: qqIYCXPXGgOMiN2WWkBFXHs1oSg7cPmtzpRz1+O57RM= Subject key identifier: 35:EB:17:5C:B8:24:B9:B4:70:08:85:BF:8D:A9:88:E5:F2:1A:93:C0 Certificate issuer: /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Certificate serial: 49 Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/NesXXLgkubRwCIW_jamI5fIak8A.roa Signing time: Wed 01 Oct 2025 01:31:32 +0000 ROA not before: Wed 01 Oct 2025 01:31:32 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 7511 IP address blocks: 124.146.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 20:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE Validity Not Before: Oct 1 01:31:32 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=35EB175CB824B9B4700885BF8DA988E5F21A93C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:cb:43:d9:c3:6b:8b:25:ef:d2:ce:ba:13: 8d:d7:4f:42:a4:f8:9a:86:2f:25:82:f8:94:d0:04: 61:8c:0a:d9:64:54:ef:12:0a:96:c1:ec:e6:0b:1e: 85:66:04:06:de:92:e9:fb:d9:da:31:e8:86:e3:34: cf:5a:19:12:e2:4e:91:c4:db:dc:82:51:c4:05:12: 4a:ac:21:20:09:3a:6c:7e:59:54:b3:5b:d8:3c:73: 24:02:5e:51:5e:05:94:61:5c:d9:18:53:9a:5c:d6: 85:d4:d0:bc:be:35:c1:91:9d:43:c3:7c:3b:32:fe: e0:45:14:a7:28:74:f2:fa:43:f6:c0:c8:bb:55:5c: 68:98:47:bb:36:cf:d3:20:3b:23:71:b6:3b:d4:8f: 39:c5:42:8a:cd:7c:6e:8f:d6:f9:b9:b9:b4:a1:fa: 44:3f:91:dc:f6:3d:9d:4b:53:c6:ef:51:23:66:4d: 50:07:a3:a1:a7:68:ad:26:75:ae:6b:c8:9a:03:61: 7e:d6:7d:10:91:a3:7b:b4:09:ba:fb:5e:e5:05:68: a1:ec:ca:6f:91:6f:37:ed:2d:72:e7:f4:60:a6:07: c4:b6:06:b6:81:6f:c5:65:8c:b3:56:76:40:89:9f: 9d:03:9c:3f:67:f0:ab:26:bc:65:0e:29:6c:d9:c4: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EB:17:5C:B8:24:B9:B4:70:08:85:BF:8D:A9:88:E5:F2:1A:93:C0 X509v3 Authority Key Identifier: keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/NesXXLgkubRwCIW_jamI5fIak8A.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.146.96.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:62:cc:87:cb:3e:e7:6e:38:ae:b9:04:bd:bd:35:33:03:11: 84:1b:83:1a:4d:0b:dd:49:85:5b:30:8c:65:ea:56:ff:90:bb: 65:c8:e4:02:df:a2:77:69:f6:9d:df:9f:f7:69:f3:4b:bf:4b: 1d:d9:c6:d8:b2:5d:25:ac:a3:02:23:16:81:d6:a0:92:2a:1a: 12:4b:7d:00:ea:ea:81:cb:3a:cb:31:aa:5c:42:1e:8a:d8:c6: ab:b0:60:2b:6c:9d:e5:12:08:2c:da:18:99:1e:7a:a3:33:24: 67:91:82:60:34:cf:90:3f:32:f7:7e:d1:0b:e5:e2:48:12:e2: fe:bc:41:c4:f2:ee:9e:eb:65:83:f3:3d:c5:a2:ee:cf:0d:73: d0:8c:a9:ab:5c:e7:68:31:28:a1:08:05:6d:37:8d:72:73:a2: dd:1c:72:0c:47:84:87:0b:80:ff:a4:83:7a:bb:c0:ec:cc:b5: 66:84:c1:a7:fa:26:d7:f2:d9:e1:b0:cf:be:52:2f:52:48:45: 7f:3d:0c:ce:8d:b3:0d:0a:91:0d:2c:44:66:00:72:e7:37:e9: b3:55:43:d6:54:7f:ae:7b:e2:16:43:d3:ba:d4:e9:a9:6c:7f: 05:b7:ed:12:5a:ac:18:db:38:a8:3d:62:e9:0f:e1:d8:27:87: 8d:ad:ab:34 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTI1MTAwMTAx MzEzMloXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMzVFQjE3NUNCODI0QjlC NDcwMDg4NUJGOERBOTg4RTVGMjFBOTNDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKi1y0PZw2uLJe/SzroTjddPQqT4moYvJYL4lNAEYYwK2WRU7xIK lsHs5gsehWYEBt6S6fvZ2jHohuM0z1oZEuJOkcTb3IJRxAUSSqwhIAk6bH5ZVLNb 2DxzJAJeUV4FlGFc2RhTmlzWhdTQvL41wZGdQ8N8OzL+4EUUpyh08vpD9sDIu1Vc aJhHuzbP0yA7I3G2O9SPOcVCis18bo/W+bm5tKH6RD+R3PY9nUtTxu9RI2ZNUAej oadorSZ1rmvImgNhftZ9EJGje7QJuvte5QVooezKb5FvN+0tcuf0YKYHxLYGtoFv xWWMs1Z2QImfnQOcP2fwqya8ZQ4pbNnEPm8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBQ16xdcuCS5tHAIhb+NqYjl8hqTwDAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDMxL05lc1hYTGdrdWJSd0NJV19qYW1JNWZJYWs4QS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAV8kmAwDQYJKoZIhvcNAQELBQADggEBAF1izIfLPuduOK65BL29NTMD EYQbgxpNC91JhVswjGXqVv+Qu2XI5ALfondp9p3fn/dp80u/Sx3ZxtiyXSWsowIj FoHWoJIqGhJLfQDq6oHLOssxqlxCHorYxquwYCtsneUSCCzaGJkeeqMzJGeRgmA0 z5A/Mvd+0Qvl4kgS4v68QcTy7p7rZYPzPcWi7s8Nc9CMqatc52gxKKEIBW03jXJz ot0ccgxHhIcLgP+kg3q7wOzMtWaEwaf6Jtfy2eGwz75SL1JIRX89DM6Nsw0KkQ0s RGYAcuc36bNVQ9ZUf6574hZD07rU6alsfwW37RJarBjbOKg9YukP4dgnh42tqzQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:33 2025 by rpki-client