$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yyyU1bojuNtD8JuMeoEh3iA3pEY.roa File: yyyU1bojuNtD8JuMeoEh3iA3pEY.roa (raw, json) Hash identifier: luYUag403OkFBSbjcaacBTfIRC/4TSb2t1iXmPPHZc8= Subject key identifier: CB:2C:94:D5:BA:23:B8:DB:43:F0:9B:8C:7A:81:21:DE:20:37:A4:46 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: DC Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yyyU1bojuNtD8JuMeoEh3iA3pEY.roa Signing time: Thu 24 Jul 2025 01:50:59 +0000 ROA not before: Thu 24 Jul 2025 01:50:59 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.235.4.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:50:59 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=CB2C94D5BA23B8DB43F09B8C7A8121DE2037A446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6a:a3:66:07:f8:a0:7a:3f:8f:7c:40:e9:45: 9b:b1:18:60:72:b1:76:58:39:96:81:e0:ae:97:9e: 96:82:3f:10:1e:96:a7:18:6f:cf:cd:ca:55:70:3d: ab:0a:e7:06:be:36:e7:cc:42:fd:7c:3d:60:82:71: a9:55:b2:64:30:da:49:81:48:86:09:04:35:6d:48: e5:92:a6:2e:71:c6:6e:7a:d1:67:e3:c8:63:e8:4c: aa:f4:9e:3b:bf:c3:e0:50:91:b8:00:bf:38:f9:09: 53:dd:6a:a6:31:ce:3d:8b:42:d7:7c:46:55:91:c9: bd:ac:b8:da:78:a8:55:d2:72:4f:c0:50:9a:c1:40: 12:0d:d2:34:d2:dd:71:27:c3:bc:fb:6d:9a:5c:00: ac:79:b1:76:0f:37:c5:d5:00:2a:cc:b3:39:35:6f: 7f:af:be:c3:7f:07:2b:bd:bd:ac:65:71:53:33:1d: 37:90:5a:75:00:f9:36:4c:33:fe:02:68:0a:05:1c: 13:d0:4b:0b:7b:e5:3f:b1:c1:2f:08:e7:5b:e0:63: 82:8c:86:6f:cc:ad:85:d3:d4:95:c2:a8:92:87:0e: bc:10:36:3d:3a:e2:fd:84:fd:7e:13:75:36:96:83: 39:ca:45:a9:7f:62:62:69:cb:8b:0e:15:17:d2:7f: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:94:D5:BA:23:B8:DB:43:F0:9B:8C:7A:81:21:DE:20:37:A4:46 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yyyU1bojuNtD8JuMeoEh3iA3pEY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.235.4.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:71:eb:0b:9c:75:c6:89:b6:06:a0:99:aa:25:34:12:75:c8: eb:49:f4:a8:f3:a0:a2:0d:92:3c:67:21:1e:0b:8d:cf:ae:f2: 2f:43:c9:e9:03:e6:5d:cd:9f:dc:64:28:02:b6:5d:3d:68:d4: f3:75:eb:65:39:20:c4:00:1a:15:e4:2b:0e:7f:e4:b5:ad:24: bb:c3:26:6a:26:ef:d2:fc:dd:43:60:cc:08:dc:b2:5e:22:2f: 2b:45:31:d8:01:06:d9:74:32:66:90:06:f7:d4:cd:b4:19:ec: 65:8e:ef:3f:fe:6d:88:ad:b5:a8:2e:5a:67:c1:7f:e9:2e:3a: 70:95:04:b1:ef:83:5c:61:40:4b:d0:55:30:1d:e6:74:c6:ef: 64:a8:0b:8e:e4:77:d6:bd:2d:34:ef:82:c0:75:9d:2e:2d:98: 17:88:ce:80:75:5b:67:e1:98:ec:b7:23:e2:b7:a9:9e:bb:32: 14:08:87:5a:ba:9d:ce:4b:64:03:c3:53:e8:20:a3:0d:41:9d: 12:82:ea:01:0d:c0:56:ce:b8:2c:b6:5f:e1:13:bd:06:36:e1: 33:6a:a8:f1:a0:53:38:50:7b:fa:e7:7c:7c:cf:7b:1b:d7:12: 4f:9b:79:cf:50:17:7f:91:15:67:c1:ef:30:77:a6:40:3b:cf: 08:3d:83:78 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTUwNTlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKENCMkM5NEQ1QkEyM0I4 REI0M0YwOUI4QzdBODEyMURFMjAzN0E0NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWaqNmB/igej+PfEDpRZuxGGBysXZYOZaB4K6XnpaCPxAelqcY b8/NylVwPasK5wa+NufMQv18PWCCcalVsmQw2kmBSIYJBDVtSOWSpi5xxm560Wfj yGPoTKr0nju/w+BQkbgAvzj5CVPdaqYxzj2LQtd8RlWRyb2suNp4qFXSck/AUJrB QBIN0jTS3XEnw7z7bZpcAKx5sXYPN8XVACrMszk1b3+vvsN/Byu9vaxlcVMzHTeQ WnUA+TZMM/4CaAoFHBPQSwt75T+xwS8I51vgY4KMhm/MrYXT1JXCqJKHDrwQNj06 4v2E/X4TdTaWgznKRal/YmJpy4sOFRfSf/L3AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUyyyU1bojuNtD8JuMeoEh3iA3pEYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My95eXlVMWJvanVOdEQ4SnVNZW9FaDNpQTNwRVku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0usEMA0GCSqGSIb3DQEBCwUAA4IBAQB+cesLnHXGibYGoJmqJTQS dcjrSfSo86CiDZI8ZyEeC43PrvIvQ8npA+ZdzZ/cZCgCtl09aNTzdetlOSDEABoV 5CsOf+S1rSS7wyZqJu/S/N1DYMwI3LJeIi8rRTHYAQbZdDJmkAb31M20Gexlju8/ /m2IrbWoLlpnwX/pLjpwlQSx74NcYUBL0FUwHeZ0xu9kqAuO5HfWvS0074LAdZ0u LZgXiM6AdVtn4ZjstyPit6meuzIUCIdaup3OS2QDw1PoIKMNQZ0SguoBDcBWzrgs tl/hE70GNuEzaqjxoFM4UHv653x8z3sb1xJPm3nPUBd/kRVnwe8wd6ZAO88IPYN4 -----END CERTIFICATE-----Generated at Wed Jul 30 03:22:06 2025 by rpki-client