$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yYcSOB58AgAJ5kxaA2akDUsSudM.roa File: yYcSOB58AgAJ5kxaA2akDUsSudM.roa (raw, json) Hash identifier: gH1PY08WaRL7b9SSk0GlaWlTy4c7XbiwLv57D4XaFXA= Subject key identifier: C9:87:12:38:1E:7C:02:00:09:E6:4C:5A:03:66:A4:0D:4B:12:B9:D3 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: C5 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yYcSOB58AgAJ5kxaA2akDUsSudM.roa Signing time: Thu 24 Jul 2025 01:16:51 +0000 ROA not before: Thu 24 Jul 2025 01:16:51 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.152.186.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:16:51 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=C98712381E7C020009E64C5A0366A40D4B12B9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:4f:e4:a3:ba:34:22:2a:4b:89:1b:32:61: 0d:9e:a8:59:00:62:6d:87:24:17:de:e0:ff:f0:0b: fa:63:bf:8d:d7:8d:3d:69:39:bd:54:7e:08:24:9f: 49:48:a8:01:c4:01:5d:6a:1d:d9:fe:2c:d2:3a:3d: 43:2c:6d:df:66:c2:09:59:2f:6f:42:94:18:6c:4b: b2:91:84:83:55:f6:36:de:df:96:23:27:13:6d:94: 63:c9:74:01:07:9f:ec:e6:c5:cd:9d:58:7f:fe:e7: 64:68:92:a6:73:ff:5d:2b:55:97:ea:8d:20:f6:d2: 8e:f4:9a:35:8c:41:c4:1e:00:8b:d4:66:7a:76:05: 19:44:af:a3:9b:81:1b:b7:a2:df:64:f6:ea:24:4b: 6a:6f:4d:3f:76:ad:0b:0a:68:99:ab:11:1e:b4:b8: 91:46:23:18:5e:01:13:c2:98:4a:3a:d7:eb:54:2f: 15:07:ab:0f:9e:7a:18:65:48:ca:5d:4c:5b:6d:8b: 12:8d:d7:d6:7f:78:aa:14:da:34:6a:c3:97:b7:fe: d1:f4:58:80:81:dd:91:5e:84:be:f8:63:d6:1c:45: fd:00:aa:e0:52:5e:2c:29:59:07:33:95:18:20:ac: 80:a2:30:8e:b0:d9:4b:93:94:6f:47:eb:02:fc:2b: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:87:12:38:1E:7C:02:00:09:E6:4C:5A:03:66:A4:0D:4B:12:B9:D3 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yYcSOB58AgAJ5kxaA2akDUsSudM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.152.186.0/23 Signature Algorithm: sha256WithRSAEncryption b9:68:c3:04:e3:49:8d:34:ab:64:07:16:75:cf:ff:d9:ce:2f: b3:bc:64:f2:09:5b:c6:4a:83:aa:0c:dc:73:b4:1b:70:e4:62: 8d:02:bd:a6:c7:91:0b:17:ab:b6:91:1d:e9:50:89:bb:24:89: a0:ef:3c:5c:7e:6f:60:eb:d9:76:14:1d:2c:9d:c1:e0:ea:f9: fe:b8:61:87:24:ab:65:49:98:b3:33:3e:01:6d:7f:ef:28:2e: 17:49:60:21:e5:84:ca:10:65:26:14:d0:45:e5:bd:96:2c:e9: ff:fd:d4:d1:7a:28:4c:3a:d1:e5:38:23:29:07:65:0b:bf:38: 06:d9:e8:04:4d:ed:d2:c1:12:6d:2c:8e:58:4b:1a:db:25:67: 69:68:1c:71:1f:cd:d0:57:66:53:4b:b1:b5:6a:8c:13:f2:2d: 9f:34:5b:4c:ad:a2:87:4a:8f:3e:f5:ef:a9:8f:1b:fa:e7:4b: ff:b4:76:5d:bf:e3:d9:83:85:68:90:d6:00:c7:99:f8:01:07: dc:43:67:04:44:24:93:b2:ac:0f:ad:50:00:fd:67:00:ec:4d: 4e:91:a8:fe:c5:b3:b3:6e:d1:2f:8b:6d:39:62:f6:c8:b2:47: f3:91:fa:f5:49:e9:20:69:9f:5f:09:79:70:5f:aa:90:15:a8: 91:72:22:12 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTE2NTFaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEM5ODcxMjM4MUU3QzAy MDAwOUU2NEM1QTAzNjZBNDBENEIxMkI5RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtrE/ko7o0IipLiRsyYQ2eqFkAYm2HJBfe4P/wC/pjv43XjT1p Ob1Ufggkn0lIqAHEAV1qHdn+LNI6PUMsbd9mwglZL29ClBhsS7KRhINV9jbe35Yj JxNtlGPJdAEHn+zmxc2dWH/+52RokqZz/10rVZfqjSD20o70mjWMQcQeAIvUZnp2 BRlEr6ObgRu3ot9k9uokS2pvTT92rQsKaJmrER60uJFGIxheARPCmEo61+tULxUH qw+eehhlSMpdTFttixKN19Z/eKoU2jRqw5e3/tH0WICB3ZFehL74Y9YcRf0AquBS XiwpWQczlRggrICiMI6w2UuTlG9H6wL8K1DhAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUyYcSOB58AgAJ5kxaA2akDUsSudMwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My95WWNTT0I1OEFnQUo1a3hhQTJha0RVc1N1ZE0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0pi6MA0GCSqGSIb3DQEBCwUAA4IBAQC5aMME40mNNKtkBxZ1z//Z zi+zvGTyCVvGSoOqDNxztBtw5GKNAr2mx5ELF6u2kR3pUIm7JImg7zxcfm9g69l2 FB0sncHg6vn+uGGHJKtlSZizMz4BbX/vKC4XSWAh5YTKEGUmFNBF5b2WLOn//dTR eihMOtHlOCMpB2ULvzgG2egETe3SwRJtLI5YSxrbJWdpaBxxH83QV2ZTS7G1aowT 8i2fNFtMraKHSo8+9e+pjxv650v/tHZdv+PZg4VokNYAx5n4AQfcQ2cERCSTsqwP rVAA/WcA7E1Okaj+xbOzbtEvi205YvbIskfzkfr1SekgaZ9fCXlwX6qQFaiRciIS -----END CERTIFICATE-----Generated at Wed Jul 30 03:04:45 2025 by rpki-client