$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5NSoiXSBAPI8QTVyQWVxI1WP5Rw.roa File: 5NSoiXSBAPI8QTVyQWVxI1WP5Rw.roa (raw, json) Hash identifier: BelUo+QgJJ/IC4GJlmrmZhp2nRFnAgLz9QNpvHYbq44= Subject key identifier: E4:D4:A8:89:74:81:00:F2:3C:41:35:72:41:65:71:23:55:8F:E5:1C Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: DE Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5NSoiXSBAPI8QTVyQWVxI1WP5Rw.roa Signing time: Thu 24 Jul 2025 01:51:00 +0000 ROA not before: Thu 24 Jul 2025 01:51:00 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.235.16.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:51:00 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=E4D4A889748100F23C41357241657123558FE51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:58:c8:3e:26:2f:18:1d:23:0a:f2:2a:71: 44:d3:64:50:4d:57:5d:df:58:ab:c3:2e:29:2f:05: 09:8f:25:42:1f:1c:76:10:c8:43:e1:a4:86:83:8b: df:4d:9e:3d:1c:23:1b:55:10:bf:6e:c5:96:12:dd: 15:9a:69:0c:a6:cf:d3:52:1e:b8:91:ad:21:8d:8f: 3a:2b:c6:4a:9a:69:2b:96:54:6b:6a:97:c8:11:89: 50:9c:1a:fa:8b:81:d2:91:fd:6e:e5:fc:7d:c4:21: cc:08:34:ef:3f:65:a6:a0:cb:67:45:75:5d:18:50: 9f:f2:01:a8:45:2f:aa:c2:e0:c8:a5:08:11:9d:c4: be:1e:b8:bd:df:00:a3:6b:c7:00:a4:95:ed:68:b9: 22:86:a5:ac:8f:ec:15:fb:90:a0:15:91:55:ae:f6: 13:9d:9d:d5:c8:95:b9:c9:02:d5:8a:4b:d6:c4:62: 40:dc:53:e4:3e:00:58:be:41:52:14:56:e0:8c:db: ef:6f:ac:ba:7a:e3:79:0b:c9:9d:51:38:54:6e:eb: 01:1d:5e:e4:ca:2a:aa:f3:50:79:bb:76:5d:c7:30: a1:d5:18:75:99:99:de:d8:f9:18:a0:cd:88:96:57: c8:24:89:bf:2c:0c:1d:4d:c7:57:db:7d:fd:f6:32: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D4:A8:89:74:81:00:F2:3C:41:35:72:41:65:71:23:55:8F:E5:1C X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5NSoiXSBAPI8QTVyQWVxI1WP5Rw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.235.16.0/21 Signature Algorithm: sha256WithRSAEncryption 19:ee:1f:e3:e0:53:06:15:5b:0c:64:fe:ea:15:26:87:bd:ec: 6a:c6:99:f3:94:cd:dc:f6:40:f6:bd:30:0b:fa:c4:80:bb:36: 6c:68:f1:9f:9a:f0:b4:1c:40:08:fb:4d:2f:f3:8c:82:71:65: 29:a9:0d:4f:00:23:01:2b:a9:d3:fe:26:5c:1f:70:11:03:04: c1:a9:a6:82:f3:a8:8d:e2:a5:5d:86:79:16:75:34:e1:7d:ab: 80:92:02:7d:79:4a:50:cc:0d:21:c3:59:cd:77:7f:96:00:ef: 4e:8d:2a:0e:c0:b6:85:ed:39:87:0d:f5:0a:6d:8c:5e:2f:31: eb:e8:7d:50:64:a1:26:21:0f:d5:01:87:9e:74:ea:81:ee:97: bc:7d:f1:8d:48:fc:ae:1a:0a:a8:5a:98:14:9b:dc:97:66:15: 4e:e7:58:f4:bf:93:99:3f:28:f6:51:9e:d1:c8:ce:f3:1f:0b: ea:70:9e:73:89:23:d4:0d:bf:b3:6c:62:18:a5:48:37:99:e2: 92:e4:7e:3e:1c:83:89:30:76:d0:96:0c:97:a9:7f:85:f0:59: 99:67:b6:06:19:0a:ab:53:ee:f2:a7:88:e8:d0:b6:3b:b6:40: 3c:b7:96:d5:6a:ef:79:93:b2:fc:03:4a:6d:25:70:fd:90:9a: 29:fa:61:b3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTUxMDBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEU0RDRBODg5NzQ4MTAw RjIzQzQxMzU3MjQxNjU3MTIzNTU4RkU1MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4KljIPiYvGB0jCvIqcUTTZFBNV13fWKvDLikvBQmPJUIfHHYQ yEPhpIaDi99Nnj0cIxtVEL9uxZYS3RWaaQymz9NSHriRrSGNjzorxkqaaSuWVGtq l8gRiVCcGvqLgdKR/W7l/H3EIcwINO8/Zaagy2dFdV0YUJ/yAahFL6rC4MilCBGd xL4euL3fAKNrxwCkle1ouSKGpayP7BX7kKAVkVWu9hOdndXIlbnJAtWKS9bEYkDc U+Q+AFi+QVIUVuCM2+9vrLp643kLyZ1ROFRu6wEdXuTKKqrzUHm7dl3HMKHVGHWZ md7Y+RigzYiWV8gkib8sDB1Nx1fbff32MrchAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU5NSoiXSBAPI8QTVyQWVxI1WP5RwwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My81TlNvaVhTQkFQSThRVFZ5UVdWeEkxV1A1Uncu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0usQMA0GCSqGSIb3DQEBCwUAA4IBAQAZ7h/j4FMGFVsMZP7qFSaH vexqxpnzlM3c9kD2vTAL+sSAuzZsaPGfmvC0HEAI+00v84yCcWUpqQ1PACMBK6nT /iZcH3ARAwTBqaaC86iN4qVdhnkWdTThfauAkgJ9eUpQzA0hw1nNd3+WAO9OjSoO wLaF7TmHDfUKbYxeLzHr6H1QZKEmIQ/VAYeedOqB7pe8ffGNSPyuGgqoWpgUm9yX ZhVO51j0v5OZPyj2UZ7RyM7zHwvqcJ5ziSPUDb+zbGIYpUg3meKS5H4+HIOJMHbQ lgyXqX+F8FmZZ7YGGQqrU+7yp4jo0LY7tkA8t5bVau95k7L8A0ptJXD9kJop+mGz -----END CERTIFICATE-----Generated at Wed Jul 30 03:06:47 2025 by rpki-client