$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30331/2PuJO1qIeq80KfzF_jZld1VxcW0.roa File: 2PuJO1qIeq80KfzF_jZld1VxcW0.roa (raw, json) Hash identifier: JMCNQE8Kcc5vEQs88SxK8LtjjbM+iyYsoHM2a/b4v0o= Subject key identifier: D8:FB:89:3B:5A:88:7A:AF:34:29:FC:C5:FE:36:65:77:55:71:71:6D Certificate issuer: /CN=AE2818DA3193BD99DFE7C17BAF79C3803B2FD0E2 Certificate serial: 2C Authority key identifier: AE:28:18:DA:31:93:BD:99:DF:E7:C1:7B:AF:79:C3:80:3B:2F:D0:E2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/2PuJO1qIeq80KfzF_jZld1VxcW0.roa Signing time: Thu 24 Jul 2025 02:39:50 +0000 ROA not before: Thu 24 Jul 2025 02:39:50 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 2001:310::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2818DA3193BD99DFE7C17BAF79C3803B2FD0E2 Validity Not Before: Jul 24 02:39:50 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=D8FB893B5A887AAF3429FCC5FE3665775571716D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:a8:5f:d7:27:4b:e7:b0:ea:21:a9:62:07: 25:b3:6d:40:cf:f6:e4:1b:c5:6c:4d:39:b7:9d:9c: b1:b7:f3:47:84:0b:21:c0:6b:11:fe:28:f9:fc:b9: 6c:de:5d:7d:73:c8:61:e4:3c:c0:a3:6b:2a:66:7c: 80:6d:6c:1a:79:9f:fa:65:9a:01:10:0a:7a:61:8a: 2a:6b:7c:ca:5d:9e:7e:e0:84:ab:ad:ec:80:d7:a3: 5a:15:b7:ea:8c:45:4b:a0:0f:fe:53:a8:4d:08:f8: 67:43:c1:1c:48:2b:0c:2d:60:41:9c:56:ad:e4:02: 39:0a:6e:69:cc:bf:8f:0c:b6:61:7b:28:bd:bb:cf: fc:15:9d:52:9e:51:4f:3e:e4:d4:4f:ef:82:26:6f: 96:43:6b:5b:41:e6:ae:5f:7e:fc:02:75:bb:29:2d: 43:01:bd:8a:4c:26:e4:73:2f:9b:37:1b:2e:85:bc: 16:3f:9d:89:45:48:aa:08:27:fa:1c:2f:5b:c1:7b: d8:50:5f:52:9d:93:66:86:b8:ad:16:af:ea:23:93: ba:5c:41:fe:84:9d:d9:7a:f5:c9:19:c3:c3:c0:79: 04:53:01:06:04:16:46:f8:64:64:b8:bf:d4:3b:2e: 74:75:01:2a:95:bf:17:c9:56:8f:63:dd:a4:73:5f: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FB:89:3B:5A:88:7A:AF:34:29:FC:C5:FE:36:65:77:55:71:71:6D X509v3 Authority Key Identifier: keyid:AE:28:18:DA:31:93:BD:99:DF:E7:C1:7B:AF:79:C3:80:3B:2F:D0:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/rigY2jGTvZnf58F7r3nDgDsv0OI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rigY2jGTvZnf58F7r3nDgDsv0OI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30331/2PuJO1qIeq80KfzF_jZld1VxcW0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:310::/32 Signature Algorithm: sha256WithRSAEncryption 52:2b:6e:39:a0:e5:48:03:5d:f4:70:c4:35:23:c3:66:e7:f1: ea:ca:9c:71:68:16:7a:22:b3:22:76:03:bd:9e:6f:88:37:02: 63:34:03:c9:f9:97:48:af:47:ed:eb:32:f7:c2:37:4d:d0:fa: 41:dd:ae:81:2a:4f:85:b2:00:ea:f3:b1:c5:90:78:3a:2c:35: 43:91:eb:ae:6f:10:b2:73:bf:29:40:54:0f:f9:ba:b6:20:5a: 60:8a:19:f8:8a:a2:bf:e9:98:40:ae:54:2c:88:7c:0c:7f:f4: 0f:0d:c9:5f:ab:34:f0:1e:43:fb:27:0a:41:6e:d3:9b:92:6c: 27:aa:96:21:06:6a:1d:2b:2c:82:e4:a4:14:8b:10:d6:24:91: 16:a5:64:e7:4d:79:79:0c:74:ab:aa:f9:46:75:40:61:bf:40: 99:fa:c3:2b:1b:f3:39:06:03:b4:75:df:58:0c:dc:0c:87:88: 42:44:d3:ea:42:37:36:58:01:f9:67:e5:b8:ec:45:07:32:95: 27:1e:f5:f2:11:19:c2:b5:72:d9:2e:80:31:b5:37:20:08:dc: b0:cb:50:c3:e6:5f:ee:3e:7f:05:b8:05:2e:82:c3:b5:21:ea: 6a:04:a6:a3:0c:91:38:a2:cc:87:be:eb:5c:d6:ab:48:84:0b: 5f:d6:0f:c6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRTI4 MThEQTMxOTNCRDk5REZFN0MxN0JBRjc5QzM4MDNCMkZEMEUyMB4XDTI1MDcyNDAy Mzk1MFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRDhGQjg5M0I1QTg4N0FB RjM0MjlGQ0M1RkUzNjY1Nzc1NTcxNzE2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANImqF/XJ0vnsOohqWIHJbNtQM/25BvFbE05t52csbfzR4QLIcBr Ef4o+fy5bN5dfXPIYeQ8wKNrKmZ8gG1sGnmf+mWaARAKemGKKmt8yl2efuCEq63s gNejWhW36oxFS6AP/lOoTQj4Z0PBHEgrDC1gQZxWreQCOQpuacy/jwy2YXsovbvP /BWdUp5RTz7k1E/vgiZvlkNrW0Hmrl9+/AJ1uyktQwG9ikwm5HMvmzcbLoW8Fj+d iUVIqggn+hwvW8F72FBfUp2TZoa4rRav6iOTulxB/oSd2Xr1yRnDw8B5BFMBBgQW RvhkZLi/1DsudHUBKpW/F8lWj2PdpHNfrycCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTY+4k7Woh6rzQp/MX+NmV3VXFxbTAfBgNVHSMEGDAWgBSuKBjaMZO9md/nwXuv ecOAOy/Q4jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMzEvcmlnWTJqR1R2Wm5mNThGN3IzbkRnRHN2ME9JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcmlnWTJqR1R2Wm5mNThGN3IzbkRn RHN2ME9JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzMxLzJQdUpPMXFJZXE4MEtmekZfalpsZDFWeGNXMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQMQMA0GCSqGSIb3DQEBCwUAA4IBAQBSK245oOVIA130cMQ1I8Nm 5/HqypxxaBZ6IrMidgO9nm+INwJjNAPJ+ZdIr0ft6zL3wjdN0PpB3a6BKk+FsgDq 87HFkHg6LDVDkeuubxCyc78pQFQP+bq2IFpgihn4iqK/6ZhArlQsiHwMf/QPDclf qzTwHkP7JwpBbtObkmwnqpYhBmodKyyC5KQUixDWJJEWpWTnTXl5DHSrqvlGdUBh v0CZ+sMrG/M5BgO0dd9YDNwMh4hCRNPqQjc2WAH5Z+W47EUHMpUnHvXyERnCtXLZ LoAxtTcgCNywy1DD5l/uPn8FuAUugsO1IepqBKajDJE4osyHvutc1qtIhAtf1g/G -----END CERTIFICATE-----Generated at Wed Jul 30 03:10:26 2025 by rpki-client