$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/r3HdA5K5IIcdk22gHPBkUB2mIl8.roa File: r3HdA5K5IIcdk22gHPBkUB2mIl8.roa (raw, json) Hash identifier: 2BIywMv9Y1cLk44UTWGNz2gS5ZhWYC67n/CjF7YvETc= Subject key identifier: AF:71:DD:03:92:B9:20:87:1D:93:6D:A0:1C:F0:64:50:1D:A6:22:5F Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0110 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/r3HdA5K5IIcdk22gHPBkUB2mIl8.roa Signing time: Thu 24 Jul 2025 02:13:05 +0000 ROA not before: Thu 24 Jul 2025 02:13:05 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 61.121.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:13:05 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=AF71DD0392B920871D936DA01CF064501DA6225F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5a:97:28:80:f1:04:49:fe:75:4a:6c:1b:b3: c7:ef:d1:9a:96:3b:da:96:e9:c4:07:5e:90:be:b8: e6:96:8f:e5:a4:1e:c0:d7:9e:93:d6:56:07:f8:8d: 64:27:51:13:d1:ce:cc:b1:5b:f3:58:51:d5:2d:43: 46:72:85:c5:6e:fe:2d:49:d2:6c:e8:b4:c4:c9:d2: 90:16:cf:07:a8:30:a5:b5:b3:eb:31:a3:2b:39:b6: 80:4c:1a:7b:ad:55:c8:15:c6:7b:2d:47:6e:2e:d5: b5:57:f9:a2:fd:c1:42:41:e2:f7:ab:cc:e5:dc:e4: 90:f6:b2:88:d9:dd:5f:97:f7:04:01:9c:1c:1c:2b: 35:24:d4:64:5d:91:9c:70:3a:c0:de:29:b5:5d:07: da:7c:95:52:4d:c4:10:29:bf:61:61:11:b0:06:46: ba:4c:83:fd:0e:af:a5:4d:62:fa:61:59:4c:94:a6: 12:1b:79:b6:4a:39:d2:5a:71:55:c6:84:da:37:b8: b4:bd:01:d4:24:35:35:a2:2f:61:2c:01:4a:af:9a: 9c:36:1a:e6:78:b8:94:b9:6c:16:bd:8f:fd:e7:4b: ef:0e:e5:a0:06:16:c9:e8:56:f2:2d:b6:71:19:f3: f6:81:79:96:7c:e8:b8:4a:15:9f:9a:94:43:b1:2f: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:DD:03:92:B9:20:87:1D:93:6D:A0:1C:F0:64:50:1D:A6:22:5F X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/r3HdA5K5IIcdk22gHPBkUB2mIl8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption ba:5d:3e:bc:78:9b:19:46:7d:f5:ee:e8:71:24:ce:b6:99:e7: 54:67:1e:7e:73:6a:fb:e7:81:66:f0:bc:63:40:4c:0e:11:86: e5:22:4b:42:53:53:3b:d3:3e:bb:b0:bd:4a:5c:a2:af:31:f0: 12:97:07:2d:df:d6:c9:63:a2:1e:31:a3:bf:9f:6d:ce:64:67: ef:59:63:59:47:3e:80:9c:1b:8c:b5:a5:db:36:c9:0b:18:59: 1b:c6:99:b3:ea:49:40:fb:8f:e6:da:5d:dd:03:dd:16:95:ed: c0:3f:b6:e9:74:e2:a5:fb:d2:7a:49:ee:5f:1e:fd:0e:c9:3b: b9:b8:75:39:2d:01:04:ce:55:ac:c0:c7:12:4f:64:30:2c:67: 3a:26:a0:af:40:c8:1d:79:54:89:e0:af:cb:27:04:a4:f2:46: 69:38:4f:b4:04:50:62:62:ce:71:fe:dd:c2:a9:8c:e9:37:8c: 49:b5:ab:d5:1e:34:00:7e:68:4d:c3:a2:f2:48:e2:0b:33:94: fe:65:a1:5c:29:9e:09:da:de:45:36:33:7c:c9:3d:28:61:02: 2c:ac:61:50:11:00:20:4a:d7:dd:35:d3:af:17:91:28:9f:85: c2:f3:7c:e6:c6:4b:bf:2e:1b:87:d4:19:a8:e4:b3:a0:68:57: fb:14:ae:b3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjEzMDVaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEFGNzFERDAzOTJCOTIw ODcxRDkzNkRBMDFDRjA2NDUwMURBNjIyNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaWpcogPEESf51Smwbs8fv0ZqWO9qW6cQHXpC+uOaWj+WkHsDX npPWVgf4jWQnURPRzsyxW/NYUdUtQ0ZyhcVu/i1J0mzotMTJ0pAWzweoMKW1s+sx oys5toBMGnutVcgVxnstR24u1bVX+aL9wUJB4verzOXc5JD2sojZ3V+X9wQBnBwc KzUk1GRdkZxwOsDeKbVdB9p8lVJNxBApv2FhEbAGRrpMg/0Or6VNYvphWUyUphIb ebZKOdJacVXGhNo3uLS9AdQkNTWiL2EsAUqvmpw2GuZ4uJS5bBa9j/3nS+8O5aAG FsnoVvIttnEZ8/aBeZZ86LhKFZ+alEOxL+rVAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUr3HdA5K5IIcdk22gHPBkUB2mIl8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9yM0hkQTVLNUlJY2RrMjJnSFBCa1VCMm1JbDgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEPXnwMA0GCSqGSIb3DQEBCwUAA4IBAQC6XT68eJsZRn317uhxJM62 medUZx5+c2r754Fm8LxjQEwOEYblIktCU1M70z67sL1KXKKvMfASlwct39bJY6Ie MaO/n23OZGfvWWNZRz6AnBuMtaXbNskLGFkbxpmz6klA+4/m2l3dA90Wle3AP7bp dOKl+9J6Se5fHv0OyTu5uHU5LQEEzlWswMcST2QwLGc6JqCvQMgdeVSJ4K/LJwSk 8kZpOE+0BFBiYs5x/t3CqYzpN4xJtavVHjQAfmhNw6LySOILM5T+ZaFcKZ4J2t5F NjN8yT0oYQIsrGFQEQAgStfdNdOvF5Eon4XC83zmxku/LhuH1Bmo5LOgaFf7FK6z -----END CERTIFICATE-----Generated at Wed Jul 30 03:04:45 2025 by rpki-client