$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/s31W95XZ9tSQlAbyvnLGcsiROUk.roa File: s31W95XZ9tSQlAbyvnLGcsiROUk.roa (raw, json) Hash identifier: dkmf/zeRZcgok4tlAagiZXrh8IeOaO61QXrZRVDY+pY= Subject key identifier: B3:7D:56:F7:95:D9:F6:D4:90:94:06:F2:BE:72:C6:72:C8:91:39:49 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: E8 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/s31W95XZ9tSQlAbyvnLGcsiROUk.roa Signing time: Thu 24 Jul 2025 01:58:19 +0000 ROA not before: Thu 24 Jul 2025 01:58:19 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.239.88.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:58:19 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=B37D56F795D9F6D4909406F2BE72C672C8913949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:71:3a:6c:06:f3:c3:4d:f7:89:98:95:51: 87:b4:20:1a:1d:40:0d:32:89:3b:f2:1f:54:71:b1: d9:b3:bb:50:00:33:3e:cb:b5:ad:61:dc:18:48:ba: e4:56:d1:fc:52:31:e7:64:60:6e:31:41:8b:a5:0d: 55:72:2c:81:05:d5:f9:39:1b:35:32:e9:48:e5:61: b3:16:a5:d1:23:e8:59:00:4f:6f:17:64:c7:43:cc: 06:f3:59:bc:17:8f:b7:eb:b5:7c:bf:08:48:e0:ce: d1:24:3d:56:4c:cf:a2:38:ba:e0:5d:40:af:ae:26: 78:82:b8:da:ca:93:29:d9:2d:7b:20:d1:54:7a:da: 89:2f:0c:6e:a2:90:08:4c:7c:75:7d:a7:92:f9:27: d8:e8:df:78:29:2c:52:59:f2:9b:3c:5c:d5:ef:c8: cf:59:4b:b6:b0:af:50:6c:47:18:5c:a9:2c:8a:83: c2:5b:4d:2f:4c:4d:e1:65:aa:4b:96:10:d8:58:2f: 59:2b:e1:ab:9c:42:a3:01:73:50:4a:1b:ec:ae:78: 34:a2:b9:d0:3f:48:28:0c:8c:8c:ba:5d:95:df:1f: c0:9c:cd:02:a9:ec:ae:19:9c:de:24:e6:e1:c9:48: 9f:33:21:99:39:80:e3:6b:92:1f:9e:f4:d3:75:41: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:56:F7:95:D9:F6:D4:90:94:06:F2:BE:72:C6:72:C8:91:39:49 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/s31W95XZ9tSQlAbyvnLGcsiROUk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.239.88.0/22 Signature Algorithm: sha256WithRSAEncryption 62:72:e9:8a:5c:3c:51:5b:77:ea:94:47:6e:70:d8:42:3a:c3: b9:e4:d9:a4:e6:c0:55:5c:ed:87:50:5f:e3:a4:e8:3c:da:1f: dc:f9:66:c4:59:7d:73:b4:79:0c:63:2b:bb:4a:78:1e:23:12: 0c:59:ae:ea:45:9e:1c:15:03:ab:9a:5d:49:08:aa:08:4a:69: 6a:9b:bb:2c:c4:f2:0f:ef:e9:6a:a6:42:ef:5f:3e:d9:bf:14: 1a:94:6b:c8:ff:6f:65:8e:48:ec:41:cb:45:b6:6a:8d:9a:76: 6f:fb:d9:82:7a:b7:d7:3f:ff:f4:0e:56:80:8e:b2:3d:8d:3d: 27:b1:b2:6c:87:aa:dd:84:4b:5f:dc:c2:25:8d:8a:f9:04:79: a7:de:0d:31:5c:d7:f7:e1:28:e8:d3:96:3e:9f:cb:3b:11:62: 36:3c:dc:94:9a:dd:f1:db:06:ae:da:21:7f:8c:4b:4c:90:bb: 1f:48:cc:b1:4c:2d:7b:26:88:8d:74:07:2a:e0:b4:14:d1:a0: a4:f3:1d:42:e7:da:50:6b:6a:b8:88:a0:4f:cc:1c:95:69:22: 0f:04:18:13:96:fe:d6:02:e5:cb:24:65:b1:16:e3:bd:e0:3b: ce:8a:9b:27:31:43:84:81:1e:33:21:00:2a:a3:13:c6:02:8b: c8:de:3e:56 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTU4MTlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEIzN0Q1NkY3OTVEOUY2 RDQ5MDk0MDZGMkJFNzJDNjcyQzg5MTM5NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEs3E6bAbzw033iZiVUYe0IBodQA0yiTvyH1Rxsdmzu1AAMz7L ta1h3BhIuuRW0fxSMedkYG4xQYulDVVyLIEF1fk5GzUy6UjlYbMWpdEj6FkAT28X ZMdDzAbzWbwXj7frtXy/CEjgztEkPVZMz6I4uuBdQK+uJniCuNrKkynZLXsg0VR6 2okvDG6ikAhMfHV9p5L5J9jo33gpLFJZ8ps8XNXvyM9ZS7awr1BsRxhcqSyKg8Jb TS9MTeFlqkuWENhYL1kr4aucQqMBc1BKG+yueDSiudA/SCgMjIy6XZXfH8CczQKp 7K4ZnN4k5uHJSJ8zIZk5gONrkh+e9NN1QU19AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUs31W95XZ9tSQlAbyvnLGcsiROUkwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9zMzFXOTVYWjl0U1FsQWJ5dm5MR2NzaVJPVWsu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC0u9YMA0GCSqGSIb3DQEBCwUAA4IBAQBicumKXDxRW3fqlEducNhC OsO55Nmk5sBVXO2HUF/jpOg82h/c+WbEWX1ztHkMYyu7SngeIxIMWa7qRZ4cFQOr ml1JCKoISmlqm7ssxPIP7+lqpkLvXz7ZvxQalGvI/29ljkjsQctFtmqNmnZv+9mC erfXP//0DlaAjrI9jT0nsbJsh6rdhEtf3MIljYr5BHmn3g0xXNf34Sjo05Y+n8s7 EWI2PNyUmt3x2wau2iF/jEtMkLsfSMyxTC17JoiNdAcq4LQU0aCk8x1C59pQa2q4 iKBPzByVaSIPBBgTlv7WAuXLJGWxFuO94DvOipsnMUOEgR4zIQAqoxPGAovI3j5W -----END CERTIFICATE-----Generated at Wed Jul 30 03:22:07 2025 by rpki-client