$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DmhLeLxGAdorvCBpeEd5hmetAtU.roa File: DmhLeLxGAdorvCBpeEd5hmetAtU.roa (raw, json) Hash identifier: bzlVICaCzMh44pUbEs19KBVeuhr5GobaTeam3vmA5tM= Subject key identifier: 0E:68:4B:78:BC:46:01:DA:2B:BC:20:69:78:47:79:86:67:AD:02:D5 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: AB Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DmhLeLxGAdorvCBpeEd5hmetAtU.roa Signing time: Thu 24 Jul 2025 01:04:23 +0000 ROA not before: Thu 24 Jul 2025 01:04:23 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 203.183.192.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:04:23 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=0E684B78BC4601DA2BBC20697847798667AD02D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:ec:4b:23:92:68:ac:58:27:78:27:ab:7d: f5:39:15:12:4e:c0:7b:ab:b1:29:5b:dd:cd:f3:ed: ef:68:1b:f1:86:05:05:b5:e2:69:15:d4:fe:c6:42: 77:af:4d:e3:f5:e2:84:7a:55:3d:77:f2:5e:1a:dd: 9c:ff:83:fd:53:9f:f8:59:3f:1c:20:b6:cf:88:a6: 42:2e:d6:f2:4b:31:39:24:ee:ca:78:1e:3d:f8:09: 33:0a:19:be:90:b6:ab:6f:ba:58:8d:fd:10:ea:7c: a5:2d:23:8e:e6:1c:5f:50:2a:b0:9a:ec:87:fe:ad: 57:61:b2:88:ef:0e:44:52:cb:e9:e5:8e:0d:de:f7: 00:dd:57:19:cc:a1:02:29:3d:57:97:1e:d8:8c:6f: 92:c2:e8:5a:90:85:ee:5b:e6:3b:05:bd:86:5d:66: f2:a7:8c:83:1d:7e:af:5a:c7:e1:f0:b0:e8:ae:13: 0b:d6:a3:33:ab:97:ee:ed:f7:3a:25:eb:57:83:9f: e4:1d:03:a1:0f:46:84:53:29:5f:b2:7f:d3:85:16: 4f:c1:9f:e7:47:c1:fc:79:e5:7f:65:0c:df:88:ba: 3b:75:f7:b1:03:49:74:0b:05:0b:5d:bd:37:ff:c7: 48:a4:0a:69:1a:6f:27:bc:79:62:11:3d:1f:16:bc: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:4B:78:BC:46:01:DA:2B:BC:20:69:78:47:79:86:67:AD:02:D5 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DmhLeLxGAdorvCBpeEd5hmetAtU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.183.192.0/18 Signature Algorithm: sha256WithRSAEncryption 68:1f:79:7f:fa:dd:5b:1f:7e:d8:22:e4:1f:cb:81:8a:40:fb: 73:78:7d:e3:75:18:0b:e1:89:02:14:7e:ff:9f:26:8e:32:bf: b7:96:32:48:27:e9:30:d4:a5:c0:ca:7d:d3:66:ef:4a:a2:00: dc:71:a5:c1:e6:5c:b2:c8:cf:d9:fb:b3:a5:97:00:25:72:44: 56:89:f5:e5:aa:28:88:64:5c:c2:ab:8b:72:38:15:61:ce:42: 0c:8d:81:3d:bb:e9:1f:6d:ef:b5:5b:75:9d:49:a3:97:60:63: eb:74:67:2a:82:b2:d9:40:76:6a:25:80:39:a1:6f:c3:c0:b7: 84:8a:56:9a:65:45:57:af:ad:93:b0:29:43:e4:dd:cb:54:fa: 0f:5c:44:85:e0:28:87:81:57:3f:6f:bf:62:e7:89:a7:64:71: df:8c:a4:73:98:a8:37:c2:4a:0d:d9:28:df:87:fa:90:01:c0: 3a:80:3c:58:95:32:f9:16:79:72:30:3a:2c:de:36:22:d8:97: 4e:da:6c:26:90:f2:ca:ea:fe:36:53:7e:6d:4f:90:c2:d3:1b: 82:f6:cb:d4:33:cb:37:81:68:12:5d:e9:f6:36:04:ec:cf:3d: 30:58:3c:33:2a:93:df:1a:60:47:68:a3:a7:7e:36:c0:09:93: 9e:5f:08:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTA0MjNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDBFNjg0Qjc4QkM0NjAx REEyQkJDMjA2OTc4NDc3OTg2NjdBRDAyRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC90exLI5JorFgneCerffU5FRJOwHursSlb3c3z7e9oG/GGBQW1 4mkV1P7GQnevTeP14oR6VT138l4a3Zz/g/1Tn/hZPxwgts+IpkIu1vJLMTkk7sp4 Hj34CTMKGb6QtqtvuliN/RDqfKUtI47mHF9QKrCa7If+rVdhsojvDkRSy+nljg3e 9wDdVxnMoQIpPVeXHtiMb5LC6FqQhe5b5jsFvYZdZvKnjIMdfq9ax+HwsOiuEwvW ozOrl+7t9zol61eDn+QdA6EPRoRTKV+yf9OFFk/Bn+dHwfx55X9lDN+Iujt197ED SXQLBQtdvTf/x0ikCmkabye8eWIRPR8WvGtVAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUDmhLeLxGAdorvCBpeEd5hmetAtUwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9EbWhMZUx4R0Fkb3J2Q0JwZUVkNWhtZXRBdFUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGy7fAMA0GCSqGSIb3DQEBCwUAA4IBAQBoH3l/+t1bH37YIuQfy4GK QPtzeH3jdRgL4YkCFH7/nyaOMr+3ljJIJ+kw1KXAyn3TZu9KogDccaXB5lyyyM/Z +7OllwAlckRWifXlqiiIZFzCq4tyOBVhzkIMjYE9u+kfbe+1W3WdSaOXYGPrdGcq grLZQHZqJYA5oW/DwLeEilaaZUVXr62TsClD5N3LVPoPXESF4CiHgVc/b79i54mn ZHHfjKRzmKg3wkoN2Sjfh/qQAcA6gDxYlTL5FnlyMDos3jYi2JdO2mwmkPLK6v42 U35tT5DC0xuC9svUM8s3gWgSXen2NgTszz0wWDwzKpPfGmBHaKOnfjbACZOeXwj7 -----END CERTIFICATE-----Generated at Wed Jul 30 03:07:30 2025 by rpki-client