$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aS9T3WSCiOLMdUcqCii9iOjlVac.roa File: aS9T3WSCiOLMdUcqCii9iOjlVac.roa (raw, json) Hash identifier: 7Y4VB3uMdf0gZD+EW0rw2gEs4qVu+dXPgdYOdKEnljA= Subject key identifier: 69:2F:53:DD:64:82:88:E2:CC:75:47:2A:0A:28:BD:88:E8:E5:55:A7 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: F0 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aS9T3WSCiOLMdUcqCii9iOjlVac.roa Signing time: Thu 24 Jul 2025 01:58:23 +0000 ROA not before: Thu 24 Jul 2025 01:58:23 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 211.2.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:58:23 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=692F53DD648288E2CC75472A0A28BD88E8E555A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3f:bc:58:88:a3:c1:54:d3:fe:63:04:a8:a5: e3:47:3a:73:8f:1f:4d:a5:ae:c5:a4:65:4a:24:b4: cb:90:ce:ec:ac:6f:b2:0c:4b:16:1e:45:c9:38:9f: 71:35:aa:b0:e7:25:f4:cc:31:0b:e0:91:01:d0:26: 9f:eb:8b:b9:b8:3c:e2:a5:7d:49:da:b0:91:03:f1: 12:05:f1:17:40:2a:3c:d1:0e:e0:30:89:b9:53:c2: fd:30:38:2b:a4:ca:d9:ba:8e:61:b5:4d:a6:f9:90: 19:a8:f4:5f:2b:7b:40:e4:5f:96:df:b1:f8:e3:d7: 98:d6:a6:50:78:ea:dd:87:6b:96:ec:a6:00:38:db: 8e:87:a8:23:9b:af:66:9c:e6:57:44:ab:22:10:c0: 67:28:5b:f9:5f:da:bf:2f:da:22:42:1d:7b:16:13: 7d:93:d5:b7:17:66:d6:07:67:cb:b7:94:0b:62:11: 04:43:98:25:55:85:70:81:41:d3:87:c4:a9:bf:c1: 2c:fc:c7:31:ca:31:10:ce:5f:5a:05:4c:e4:e7:a7: b5:b2:ff:4a:a8:74:5d:56:5d:4d:fc:cb:d6:7d:16: 15:71:d5:e3:b6:d9:87:fb:aa:7d:31:a1:c2:4e:0f: 9f:4e:bf:20:8a:f6:1e:57:7e:0c:00:72:f1:16:6d: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:53:DD:64:82:88:E2:CC:75:47:2A:0A:28:BD:88:E8:E5:55:A7 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/aS9T3WSCiOLMdUcqCii9iOjlVac.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.2.192.0/21 Signature Algorithm: sha256WithRSAEncryption cd:c9:1c:93:d1:0e:db:f1:3f:64:03:37:b1:8c:c2:56:bb:e2: 42:c1:43:e1:a7:df:c9:67:ea:2f:9b:bf:4e:bf:0f:1d:3d:b5: f5:7e:2d:8a:62:96:28:6b:d1:bf:ac:35:8d:c9:4a:47:d2:5e: 50:f2:1b:c0:f4:57:f8:d0:39:a0:f2:86:c5:c8:5e:62:07:5f: 81:eb:15:c0:d4:3b:be:73:e3:a7:e2:59:56:9e:ef:e5:08:57: f8:d2:1a:ed:7d:28:90:62:fc:39:83:5d:26:c9:3e:6e:51:8d: 1d:09:63:7d:b8:1f:fa:6c:b4:24:8b:67:bf:8e:fa:b0:c8:7c: 3c:68:8e:54:3f:fb:44:5f:d1:b2:4b:f6:fd:f4:2a:6d:f8:2a: 16:59:82:a5:26:f4:ed:7d:d5:e2:0e:37:c2:6c:26:27:4f:59: c9:8e:79:8c:52:4a:44:9f:cc:94:0b:ff:0f:bb:d8:1f:57:4b: 57:22:58:15:ee:e1:e1:1c:df:a8:9a:e2:a5:a8:a2:d6:c7:d1: 49:24:03:57:e2:17:3e:e2:c6:82:ba:1d:de:5c:57:a6:db:5d: d9:f6:04:c1:93:fc:9c:58:1f:5a:0a:ab:b9:ec:05:00:50:f3: 17:21:2f:7d:7a:c9:5c:cb:9b:9e:a5:75:94:7e:8f:5f:dd:ad: df:29:72:5b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTU4MjNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDY5MkY1M0RENjQ4Mjg4 RTJDQzc1NDcyQTBBMjhCRDg4RThFNTU1QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNP7xYiKPBVNP+YwSopeNHOnOPH02lrsWkZUoktMuQzuysb7IM SxYeRck4n3E1qrDnJfTMMQvgkQHQJp/ri7m4POKlfUnasJED8RIF8RdAKjzRDuAw iblTwv0wOCukytm6jmG1Tab5kBmo9F8re0DkX5bfsfjj15jWplB46t2Ha5bspgA4 246HqCObr2ac5ldEqyIQwGcoW/lf2r8v2iJCHXsWE32T1bcXZtYHZ8u3lAtiEQRD mCVVhXCBQdOHxKm/wSz8xzHKMRDOX1oFTOTnp7Wy/0qodF1WXU38y9Z9FhVx1eO2 2Yf7qn0xocJOD59OvyCK9h5XfgwAcvEWbX3fAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUaS9T3WSCiOLMdUcqCii9iOjlVacwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9hUzlUM1dTQ2lPTE1kVWNxQ2lpOWlPamxWYWMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0wLAMA0GCSqGSIb3DQEBCwUAA4IBAQDNyRyT0Q7b8T9kAzexjMJW u+JCwUPhp9/JZ+ovm79Ovw8dPbX1fi2KYpYoa9G/rDWNyUpH0l5Q8hvA9Ff40Dmg 8obFyF5iB1+B6xXA1Du+c+On4llWnu/lCFf40hrtfSiQYvw5g10myT5uUY0dCWN9 uB/6bLQki2e/jvqwyHw8aI5UP/tEX9GyS/b99Cpt+CoWWYKlJvTtfdXiDjfCbCYn T1nJjnmMUkpEn8yUC/8Pu9gfV0tXIlgV7uHhHN+omuKlqKLWx9FJJANX4hc+4saC uh3eXFem213Z9gTBk/ycWB9aCqu57AUAUPMXIS99eslcy5uepXWUfo9f3a3fKXJb -----END CERTIFICATE-----Generated at Wed Jul 30 03:11:07 2025 by rpki-client