$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Oxv2jFSQYNdCwil_oWRcfPNdsUo.roa File: Oxv2jFSQYNdCwil_oWRcfPNdsUo.roa (raw, json) Hash identifier: uLO71Ddi2GO75MGTVaJmI3qALP4O8ockVslZMRQGWI0= Subject key identifier: 3B:1B:F6:8C:54:90:60:D7:42:C2:29:7F:A1:64:5C:7C:F3:5D:B1:4A Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: B0 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Oxv2jFSQYNdCwil_oWRcfPNdsUo.roa Signing time: Thu 24 Jul 2025 01:04:25 +0000 ROA not before: Thu 24 Jul 2025 01:04:25 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.129.186.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:04:25 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=3B1BF68C549060D742C2297FA1645C7CF35DB14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:57:b7:2e:30:61:5b:f3:f2:c1:c6:1f:cf: 64:cd:41:06:3b:18:1b:d4:73:4d:d3:ec:9a:c1:69: a6:33:98:8f:69:ef:f0:b8:5a:48:48:a9:a0:1e:3e: 43:03:c0:02:b4:36:ac:00:55:aa:98:06:4f:36:51: 50:d5:df:18:0e:26:f3:ee:0d:70:e0:82:e9:3e:93: f3:54:28:56:cb:e6:1e:b4:7e:91:ce:04:23:2b:ca: ac:2b:62:2d:57:8e:7e:a5:57:e8:0a:ec:5d:1b:be: 94:6a:49:3a:48:9a:cf:a0:e5:ca:64:cb:b8:1c:63: 03:1e:51:65:29:b5:ea:83:99:97:d1:17:ac:1c:c6: 00:69:a9:cc:bb:c5:6c:60:ed:97:be:15:f4:4d:59: 5d:33:f4:dd:25:65:90:68:c1:16:ba:0e:aa:b0:96: 05:7d:8b:47:18:51:95:95:3b:e4:56:90:f3:30:84: 8f:8a:ea:2a:a3:74:72:a4:b3:32:dc:f8:d0:c6:60: c6:ea:a1:4e:ed:1c:f2:70:0a:46:f2:b0:8d:3a:6d: 95:2b:ba:6e:94:36:31:fe:fb:96:cc:cd:56:78:12: 16:ba:d9:9f:08:e9:e0:78:ba:4d:63:97:82:7f:b9: fc:f0:d0:e9:c3:88:19:07:0d:dd:6c:ef:26:28:66: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1B:F6:8C:54:90:60:D7:42:C2:29:7F:A1:64:5C:7C:F3:5D:B1:4A X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Oxv2jFSQYNdCwil_oWRcfPNdsUo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.129.186.0/23 Signature Algorithm: sha256WithRSAEncryption 40:79:32:0b:ed:21:0f:1d:eb:0e:dc:cc:42:41:62:d5:3b:bb: 87:4c:00:21:89:14:a0:5a:22:81:d9:08:56:85:0b:08:db:48: 91:62:35:d6:ad:ee:d6:04:9b:98:25:32:e5:c1:a4:aa:42:3d: 08:75:17:9e:16:fd:35:6e:0e:d1:ce:4d:77:02:f9:13:74:f5: 7c:a7:9d:9a:8d:87:55:c3:55:0c:4a:4a:d8:d6:25:18:e6:6b: 38:00:90:27:11:d8:e3:5e:6f:37:30:ff:22:1f:9e:33:d1:36: cf:91:92:01:ff:ab:02:7d:e1:77:c9:f9:17:43:ad:df:d8:58: 8d:ae:36:65:4d:b8:5d:62:df:a4:56:19:63:bf:1c:3e:40:59: 7f:8b:80:48:f3:05:d3:2a:f1:11:98:c8:82:19:fb:43:5d:f3: f1:9b:e8:aa:3e:a2:b7:68:e9:7f:88:76:d9:b3:fe:ef:40:d9: 31:5d:eb:3a:2a:e4:ee:90:ea:26:66:c5:de:0e:a7:06:d9:6f: e1:d6:82:98:fe:48:4c:21:af:ad:0a:dd:73:7f:d7:cc:c6:31: 44:9f:54:f1:ac:d2:6a:8d:4e:51:9b:f1:f6:fb:9f:00:25:96: fb:60:65:d0:b7:be:da:6d:79:e4:55:6c:e4:a3:c7:2c:d6:7a: 62:a8:4c:36 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTA0MjVaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDNCMUJGNjhDNTQ5MDYw RDc0MkMyMjk3RkExNjQ1QzdDRjM1REIxNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+Yle3LjBhW/PywcYfz2TNQQY7GBvUc03T7JrBaaYzmI9p7/C4 WkhIqaAePkMDwAK0NqwAVaqYBk82UVDV3xgOJvPuDXDgguk+k/NUKFbL5h60fpHO BCMryqwrYi1Xjn6lV+gK7F0bvpRqSTpIms+g5cpky7gcYwMeUWUpteqDmZfRF6wc xgBpqcy7xWxg7Ze+FfRNWV0z9N0lZZBowRa6DqqwlgV9i0cYUZWVO+RWkPMwhI+K 6iqjdHKkszLc+NDGYMbqoU7tHPJwCkbysI06bZUrum6UNjH++5bMzVZ4Eha62Z8I 6eB4uk1jl4J/ufzw0OnDiBkHDd1s7yYoZsp1AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUOxv2jFSQYNdCwil/oWRcfPNdsUowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9PeHYyakZTUVlOZEN3aWxfb1dSY2ZQTmRzVW8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0oG6MA0GCSqGSIb3DQEBCwUAA4IBAQBAeTIL7SEPHesO3MxCQWLV O7uHTAAhiRSgWiKB2QhWhQsI20iRYjXWre7WBJuYJTLlwaSqQj0IdReeFv01bg7R zk13AvkTdPV8p52ajYdVw1UMSkrY1iUY5ms4AJAnEdjjXm83MP8iH54z0TbPkZIB /6sCfeF3yfkXQ63f2FiNrjZlTbhdYt+kVhljvxw+QFl/i4BI8wXTKvERmMiCGftD XfPxm+iqPqK3aOl/iHbZs/7vQNkxXes6KuTukOomZsXeDqcG2W/h1oKY/khMIa+t Ct1zf9fMxjFEn1TxrNJqjU5Rm/H2+58AJZb7YGXQt77abXnkVWzko8cs1npiqEw2 -----END CERTIFICATE-----Generated at Wed Jul 30 03:01:17 2025 by rpki-client