$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9-3TO1NPLyvMI2RkTIh_zpDm338.roa File: 9-3TO1NPLyvMI2RkTIh_zpDm338.roa (raw, json) Hash identifier: gYjkuLeck+PDBiniFpvE3TTesTqAf10/jN4GM6py9+Y= Subject key identifier: F7:ED:D3:3B:53:4F:2F:2B:CC:23:64:64:4C:88:7F:CE:90:E6:DF:7F Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: EB Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9-3TO1NPLyvMI2RkTIh_zpDm338.roa Signing time: Thu 24 Jul 2025 01:58:21 +0000 ROA not before: Thu 24 Jul 2025 01:58:21 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.252.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:58:21 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=F7EDD33B534F2F2BCC2364644C887FCE90E6DF7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:2a:2a:3f:ed:a0:c9:dd:08:02:34:fb:ec: 92:45:03:d3:29:c2:8c:31:11:b2:ae:62:e8:eb:7f: 3e:62:2c:8f:4d:50:47:1e:9b:f5:ca:79:88:d3:6d: 18:45:0f:67:4c:4b:1a:a1:14:0c:4e:0e:83:c3:1f: 29:4a:c4:ba:eb:d0:d7:48:d0:de:37:86:63:29:50: cf:f2:f0:ac:c8:23:a6:b0:c6:ee:17:8d:83:f7:3e: ec:7b:3d:f9:e4:7e:b0:85:ab:9c:10:fb:b6:1c:ee: c6:51:f9:9e:5e:45:94:16:79:af:3a:78:ab:f2:e3: 50:3b:71:56:bc:61:bc:b0:e6:78:90:68:96:79:a9: 67:ae:55:13:7d:84:54:97:03:fd:d6:c0:10:cf:5a: d7:6d:68:84:b4:f4:3f:88:d4:bc:03:ee:52:8c:70: 76:8c:b4:38:e1:ef:25:bc:e3:78:91:92:36:f4:9e: ba:8a:e1:e7:56:77:f4:e3:95:11:54:6d:00:b2:36: f3:56:13:af:1b:42:d7:fb:06:f7:bc:9a:1a:cb:f3: d5:18:40:e6:40:01:9c:97:9a:99:97:50:2c:07:c5: 60:9f:fa:a4:06:87:6e:c6:87:56:0d:bb:16:1b:40: 43:c8:5e:d1:f0:d7:4f:6b:63:12:07:99:de:15:f2: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:ED:D3:3B:53:4F:2F:2B:CC:23:64:64:4C:88:7F:CE:90:E6:DF:7F X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9-3TO1NPLyvMI2RkTIh_zpDm338.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.252.96.0/22 Signature Algorithm: sha256WithRSAEncryption 46:e9:a0:41:38:68:c0:56:4e:a3:f2:c9:83:33:29:10:15:11: 78:b8:39:6c:0a:0c:fb:40:d3:61:33:7b:ec:47:a8:37:4b:0f: 7c:19:09:a5:fb:b7:c9:19:a1:ee:a0:4d:75:8e:f9:5f:de:71: fd:51:d5:fb:88:c5:2d:64:43:59:90:15:87:be:90:ec:ca:1d: e1:67:e8:39:3a:b6:af:16:3f:bf:4e:0a:91:20:e6:b5:b0:be: fb:43:57:bc:e7:d3:fa:7c:72:9b:23:e9:99:75:d4:dc:8d:b9: e0:9e:0d:0d:36:6f:63:5b:b6:09:97:d6:19:8b:9f:81:35:43: f5:4b:b0:0d:2b:2a:e8:88:07:76:a1:8b:83:93:80:94:29:11: d9:b5:88:bc:5f:fb:50:ac:2f:d3:68:1f:e6:44:93:45:90:56: e5:31:bd:57:f1:95:eb:7a:d4:38:a3:de:75:b6:fa:bb:3b:fa: 52:50:03:af:08:9c:0b:9a:6e:5a:86:8d:83:da:c8:34:06:ab: 92:2e:e4:1c:f3:74:c8:e3:49:8c:15:3b:c4:cd:6c:85:2e:64: 6e:e6:02:98:2c:f8:6a:76:03:d7:cf:90:55:dd:36:0d:ee:7c: 51:77:ab:36:cf:67:c8:d6:92:5a:b8:96:db:e7:5a:39:30:8d: e6:3d:dc:b9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTU4MjFaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEY3RUREMzNCNTM0RjJG MkJDQzIzNjQ2NDRDODg3RkNFOTBFNkRGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgvioqP+2gyd0IAjT77JJFA9MpwowxEbKuYujrfz5iLI9NUEce m/XKeYjTbRhFD2dMSxqhFAxODoPDHylKxLrr0NdI0N43hmMpUM/y8KzII6awxu4X jYP3Pux7PfnkfrCFq5wQ+7Yc7sZR+Z5eRZQWea86eKvy41A7cVa8Ybyw5niQaJZ5 qWeuVRN9hFSXA/3WwBDPWtdtaIS09D+I1LwD7lKMcHaMtDjh7yW843iRkjb0nrqK 4edWd/TjlRFUbQCyNvNWE68bQtf7Bve8mhrL89UYQOZAAZyXmpmXUCwHxWCf+qQG h27Gh1YNuxYbQEPIXtHw109rYxIHmd4V8lpvAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU9+3TO1NPLyvMI2RkTIh/zpDm338wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My85LTNUTzFOUEx5dk1JMlJrVEloX3pwRG0zMzgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC0vxgMA0GCSqGSIb3DQEBCwUAA4IBAQBG6aBBOGjAVk6j8smDMykQ FRF4uDlsCgz7QNNhM3vsR6g3Sw98GQml+7fJGaHuoE11jvlf3nH9UdX7iMUtZENZ kBWHvpDsyh3hZ+g5OravFj+/TgqRIOa1sL77Q1e859P6fHKbI+mZddTcjbngng0N Nm9jW7YJl9YZi5+BNUP1S7ANKyroiAd2oYuDk4CUKRHZtYi8X/tQrC/TaB/mRJNF kFblMb1X8ZXretQ4o951tvq7O/pSUAOvCJwLmm5aho2D2sg0BquSLuQc83TI40mM FTvEzWyFLmRu5gKYLPhqdgPXz5BV3TYN7nxRd6s2z2fI1pJauJbb51o5MI3mPdy5 -----END CERTIFICATE-----Generated at Wed Jul 30 03:19:51 2025 by rpki-client