$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4WxGT8f0MdXQdBka2b1a3DzNHHU.roa File: 4WxGT8f0MdXQdBka2b1a3DzNHHU.roa (raw, json) Hash identifier: q0ugJ8xLkuKACqHrZcphHAYQ94vT7UV3pyA91foVrzg= Subject key identifier: E1:6C:46:4F:C7:F4:31:D5:D0:74:19:1A:D9:BD:5A:DC:3C:CD:1C:75 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 94 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4WxGT8f0MdXQdBka2b1a3DzNHHU.roa Signing time: Thu 24 Jul 2025 00:39:49 +0000 ROA not before: Thu 24 Jul 2025 00:39:49 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.230.16.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 00:39:49 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=E16C464FC7F431D5D074191AD9BD5ADC3CCD1C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:8b:77:70:5d:e9:21:2a:6a:c1:b0:17:16: 4a:74:75:06:da:4d:e6:03:8d:b1:7f:26:be:a3:0a: 80:3d:46:c4:46:36:64:41:4d:a3:2f:74:d5:52:c1: 7c:b9:6b:d2:f4:a1:0b:b1:ea:a2:49:20:a3:04:55: 27:13:b2:af:62:ea:ae:e3:9f:ef:31:bd:e1:76:32: 0b:8e:42:71:0b:4e:c4:71:fa:f4:5c:ce:d8:ce:e5: a4:19:58:4e:a0:39:cd:b1:8c:9d:c4:08:f1:00:4e: 5f:b9:0b:b9:61:8d:51:9b:b2:a4:02:ac:a9:f0:01: 42:7d:38:0d:13:00:03:21:19:6c:ba:51:24:ff:14: de:83:0b:0f:a0:5f:41:d9:25:dd:a7:37:13:e2:93: 0a:af:a6:60:c4:31:24:8f:3f:ef:c7:a5:91:cd:1c: 6d:05:4c:6b:5b:3e:cc:e7:27:6b:d3:06:d6:0d:3a: 8b:de:a3:b7:56:8e:50:da:7b:16:ba:c9:6f:2a:4d: 8d:9f:a6:67:96:a1:38:f5:f5:71:dc:53:dc:25:50: 30:18:2c:9b:b1:45:43:6c:8c:60:c8:4f:ea:b0:f7: cc:08:1b:f3:10:85:3e:49:b3:24:c8:3b:d9:e6:ea: 14:92:fb:04:f3:a7:0e:29:00:ce:3d:72:32:4b:fa: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6C:46:4F:C7:F4:31:D5:D0:74:19:1A:D9:BD:5A:DC:3C:CD:1C:75 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/4WxGT8f0MdXQdBka2b1a3DzNHHU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.230.16.0/23 Signature Algorithm: sha256WithRSAEncryption 50:21:40:33:2f:fb:e9:58:6b:d6:4d:af:7b:21:63:89:a1:7b: 88:8a:6e:f6:7f:06:1b:c5:eb:83:01:78:c4:e0:23:8a:58:4e: 3a:25:96:81:a1:6f:a1:6e:3b:d0:30:ca:8d:ea:0e:b6:fa:ae: 10:47:66:a1:b6:a6:70:aa:46:1b:8c:26:62:59:d3:fa:15:87: d5:d0:38:0b:02:10:25:97:60:50:e4:bf:1e:76:2c:cf:e0:3a: 3b:ae:9b:d3:cf:0b:b7:45:25:db:c2:8f:41:16:89:51:15:1a: 6e:70:68:b5:3a:63:84:63:ef:28:c3:2e:1f:4e:fd:39:93:91: 6b:04:09:b0:ed:63:5c:7b:ea:f0:4a:67:a7:4c:e4:24:bb:8c: 3f:14:31:37:8e:72:95:21:55:30:0a:98:c8:87:f2:32:05:9c: 2c:a9:61:23:84:11:9f:82:95:be:d2:58:0d:8f:b7:af:7e:7f: 36:f3:87:d2:5e:c1:ab:ed:2f:72:07:ad:11:f8:eb:b1:c8:26: d0:3c:36:a8:14:71:6a:0e:10:5c:2a:4f:f4:a7:0c:0d:81:4f: 92:43:9b:51:0d:57:d3:1e:a3:2d:06:c3:4a:8d:50:cb:a9:39: 4b:e4:ef:8d:b2:e1:e8:c0:9a:f7:61:70:df:bc:4a:0a:18:4d: 22:6a:50:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MDM5NDlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEUxNkM0NjRGQzdGNDMx RDVEMDc0MTkxQUQ5QkQ1QURDM0NDRDFDNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+zIt3cF3pISpqwbAXFkp0dQbaTeYDjbF/Jr6jCoA9RsRGNmRB TaMvdNVSwXy5a9L0oQux6qJJIKMEVScTsq9i6q7jn+8xveF2MguOQnELTsRx+vRc ztjO5aQZWE6gOc2xjJ3ECPEATl+5C7lhjVGbsqQCrKnwAUJ9OA0TAAMhGWy6UST/ FN6DCw+gX0HZJd2nNxPikwqvpmDEMSSPP+/HpZHNHG0FTGtbPsznJ2vTBtYNOove o7dWjlDaexa6yW8qTY2fpmeWoTj19XHcU9wlUDAYLJuxRUNsjGDIT+qw98wIG/MQ hT5JsyTIO9nm6hSS+wTzpw4pAM49cjJL+m+9AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU4WxGT8f0MdXQdBka2b1a3DzNHHUwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My80V3hHVDhmME1kWFFkQmthMmIxYTNEek5ISFUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByuYQMA0GCSqGSIb3DQEBCwUAA4IBAQBQIUAzL/vpWGvWTa97IWOJ oXuIim72fwYbxeuDAXjE4COKWE46JZaBoW+hbjvQMMqN6g62+q4QR2ahtqZwqkYb jCZiWdP6FYfV0DgLAhAll2BQ5L8edizP4Do7rpvTzwu3RSXbwo9BFolRFRpucGi1 OmOEY+8owy4fTv05k5FrBAmw7WNce+rwSmenTOQku4w/FDE3jnKVIVUwCpjIh/Iy BZwsqWEjhBGfgpW+0lgNj7evfn8284fSXsGr7S9yB60R+OuxyCbQPDaoFHFqDhBc Kk/0pwwNgU+SQ5tRDVfTHqMtBsNKjVDLqTlL5O+NsuHowJr3YXDfvEoKGE0ialB2 -----END CERTIFICATE-----Generated at Wed Jul 30 03:05:29 2025 by rpki-client