$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/bOCnaQh8l-5LSGT9k8TfYXtqQD0.roa File: bOCnaQh8l-5LSGT9k8TfYXtqQD0.roa (raw, json) Hash identifier: znjoRd9dfBFOydAyPjYRo08DKyaGrn/gHh0axAOoQ04= Subject key identifier: 6C:E0:A7:69:08:7C:97:EE:4B:48:64:FD:93:C4:DF:61:7B:6A:40:3D Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: E2 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/bOCnaQh8l-5LSGT9k8TfYXtqQD0.roa Signing time: Thu 24 Jul 2025 01:51:02 +0000 ROA not before: Thu 24 Jul 2025 01:51:02 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.236.232.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:51:02 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=6CE0A769087C97EE4B4864FD93C4DF617B6A403D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:5d:36:a0:2d:fb:61:ab:ab:a2:e9:35:c5: 6c:b8:d3:f0:95:26:ce:8c:08:bd:76:04:03:0b:8a: e2:7a:f5:21:d9:33:b8:b8:81:0c:40:a8:b9:36:16: 22:ec:1f:2c:32:95:63:53:d7:b1:b7:c0:61:b0:15: 7d:e6:4e:2b:45:a9:5f:33:6f:14:97:4b:ff:0c:a2: 4a:d1:19:35:1a:2d:6e:b1:94:e9:cb:20:37:d7:d2: 3e:77:f0:bc:0d:95:74:79:73:df:aa:f1:84:38:f6: b2:ac:c5:58:9e:b3:5c:1c:25:10:42:cc:28:3b:94: 2e:d6:2a:d4:14:57:fe:2f:77:b8:09:63:21:a7:f5: 13:86:37:4a:20:8b:21:8a:c1:01:77:27:c5:77:14: bd:2a:47:c8:e1:6d:26:b0:91:bd:30:a6:f1:22:01: 13:60:78:3b:e9:22:93:f3:3f:1b:20:5f:32:10:65: bf:80:ae:57:69:53:e7:4a:3f:8b:0e:cc:df:89:55: 8a:48:bd:23:96:1a:52:33:47:a2:0d:a3:90:1b:51: 58:c8:89:4a:df:13:be:0a:52:bc:db:23:e3:f0:fa: 8a:3b:4e:bf:51:8d:55:d3:eb:52:82:f0:e3:cd:85: dd:2b:3d:b7:11:3a:b9:02:e5:d3:05:99:a2:a3:1f: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E0:A7:69:08:7C:97:EE:4B:48:64:FD:93:C4:DF:61:7B:6A:40:3D X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/bOCnaQh8l-5LSGT9k8TfYXtqQD0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.236.232.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:98:d0:dd:73:e3:26:be:8d:ef:23:89:34:44:fc:06:95:a2: db:1e:f6:51:dc:fb:cf:a2:eb:ba:e3:b7:ba:ff:8b:28:c4:5b: 32:fc:32:aa:32:c1:f5:c9:1f:59:94:7a:d2:d3:58:9d:fd:0e: 28:5b:89:57:c5:ea:6a:58:7f:70:d3:4c:33:14:b3:62:a4:5e: 43:a3:f4:f2:c9:bf:17:d9:90:f5:bc:69:d4:1a:b9:0e:10:37: 77:1c:c7:ba:b2:2a:e7:1d:c1:78:ba:3d:96:f4:64:a0:bc:7d: ad:12:48:7d:f2:fd:b2:23:0c:56:56:a7:77:6e:35:9f:5d:6f: 87:10:1d:8e:0d:4a:e4:74:0a:49:c5:18:f6:d3:dc:92:6f:d1: 6b:50:8e:4c:b2:6d:16:38:7f:5f:a0:e8:d3:ad:e1:9b:bb:e3: 46:9b:f7:ce:ac:56:2c:81:c3:91:35:20:b2:a2:d1:8a:82:26: 19:9d:da:e7:fb:f9:88:7b:9f:41:2f:48:b1:98:bc:44:7e:eb: 08:5d:0b:19:29:0b:23:7a:ac:d6:f6:4f:9c:62:de:70:f5:35: 8d:74:5b:c0:2d:d6:6b:53:30:57:59:9e:0b:3b:86:18:97:34: 52:ec:60:d0:a0:f3:07:8d:39:3f:72:63:36:5a:be:e5:04:fe: 23:33:29:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTUxMDJaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDZDRTBBNzY5MDg3Qzk3 RUU0QjQ4NjRGRDkzQzRERjYxN0I2QTQwM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiwF02oC37Yaurouk1xWy40/CVJs6MCL12BAMLiuJ69SHZM7i4 gQxAqLk2FiLsHywylWNT17G3wGGwFX3mTitFqV8zbxSXS/8MokrRGTUaLW6xlOnL IDfX0j538LwNlXR5c9+q8YQ49rKsxVies1wcJRBCzCg7lC7WKtQUV/4vd7gJYyGn 9ROGN0ogiyGKwQF3J8V3FL0qR8jhbSawkb0wpvEiARNgeDvpIpPzPxsgXzIQZb+A rldpU+dKP4sOzN+JVYpIvSOWGlIzR6INo5AbUVjIiUrfE74KUrzbI+Pw+oo7Tr9R jVXT61KC8OPNhd0rPbcROrkC5dMFmaKjH6p5AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUbOCnaQh8l+5LSGT9k8TfYXtqQD0wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9iT0NuYVFoOGwtNUxTR1Q5azhUZllYdHFRRDAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0uzoMA0GCSqGSIb3DQEBCwUAA4IBAQBdmNDdc+Mmvo3vI4k0RPwG laLbHvZR3PvPouu647e6/4soxFsy/DKqMsH1yR9ZlHrS01id/Q4oW4lXxepqWH9w 00wzFLNipF5Do/Tyyb8X2ZD1vGnUGrkOEDd3HMe6sirnHcF4uj2W9GSgvH2tEkh9 8v2yIwxWVqd3bjWfXW+HEB2ODUrkdApJxRj209ySb9FrUI5Msm0WOH9foOjTreGb u+NGm/fOrFYsgcORNSCyotGKgiYZndrn+/mIe59BL0ixmLxEfusIXQsZKQsjeqzW 9k+cYt5w9TWNdFvALdZrUzBXWZ4LO4YYlzRS7GDQoPMHjTk/cmM2Wr7lBP4jMyk/ -----END CERTIFICATE-----Generated at Wed Jul 30 03:04:44 2025 by rpki-client