$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/5qTOU7bdk1WRq2Gycy7urmnITyE.roa File: 5qTOU7bdk1WRq2Gycy7urmnITyE.roa (raw, json) Hash identifier: bikd3MzbRO2hNo333K8Ymi847fR1Hq9rgkTm35kIzcA= Subject key identifier: E6:A4:CE:53:B6:DD:93:55:91:AB:61:B2:73:2E:EE:AE:69:C8:4F:21 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 026B Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/5qTOU7bdk1WRq2Gycy7urmnITyE.roa Signing time: Mon 01 Sep 2025 01:35:18 +0000 ROA not before: Mon 01 Sep 2025 01:35:18 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 1 01:35:18 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=E6A4CE53B6DD935591AB61B2732EEEAE69C84F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:0c:b9:2a:6c:5c:2b:d9:33:b6:08:f1:bb: 26:81:33:82:3b:98:19:ff:16:1a:73:9c:9a:0d:80: 48:fa:3b:94:9c:03:f2:1c:c1:3b:a3:bb:7b:28:d1: ff:eb:a2:08:02:15:cd:93:2c:2b:30:ff:4c:bf:bb: d4:f5:f9:20:27:a9:97:76:07:79:5a:22:05:b8:b2: 5e:4a:20:69:6f:2c:43:02:3e:8d:87:15:23:be:b0: 86:02:18:ef:ac:d4:bc:a0:bb:9f:30:a8:1c:93:f4: 1c:67:c8:a3:4e:a2:04:22:f2:16:df:f8:38:c6:d0: c9:0f:77:8b:4a:3e:6d:1e:03:50:76:f1:1a:7d:1b: f7:a0:a0:e2:40:1e:67:aa:13:4f:3b:f9:61:ec:23: 8e:ed:54:b2:a9:1d:f4:f2:ea:e2:f8:f0:00:4a:ce: 96:d5:33:84:be:9e:95:15:e9:b5:6d:a5:77:92:22: a1:43:02:af:52:44:89:63:cd:ab:f1:69:ee:7c:3e: 75:b9:37:be:49:af:67:8e:ed:e0:38:f3:c1:d2:fa: 57:f1:00:27:be:be:23:f3:2c:5a:a0:d2:7b:39:a4: c0:72:1a:9c:ab:f9:f4:4d:02:62:20:ff:43:f1:58: f2:d9:aa:f1:97:84:15:cd:58:ca:d0:e1:3c:ca:be: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:CE:53:B6:DD:93:55:91:AB:61:B2:73:2E:EE:AE:69:C8:4F:21 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/5qTOU7bdk1WRq2Gycy7urmnITyE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.228.0/24 Signature Algorithm: sha256WithRSAEncryption c8:70:77:e0:cd:a1:a5:6a:5e:b1:e1:15:e7:5e:45:21:5b:50: bb:46:1e:42:95:63:5e:65:85:f9:06:85:05:bb:aa:9f:56:f7: ca:66:39:92:9c:6a:02:22:3f:98:71:8c:32:bd:c2:f1:bf:5c: 4d:f4:22:09:68:25:2a:b5:dc:9c:34:bc:cb:7a:72:bc:99:a6: 8d:ad:46:d2:a6:de:c4:b4:cb:05:89:ec:5d:29:2b:fe:59:b3: 1a:0e:9b:eb:dc:85:aa:b1:de:9f:0e:23:8b:bc:0b:21:52:e1: 50:e6:6f:47:35:0e:2c:44:4d:ed:40:10:c7:0d:20:c7:a8:c1: 45:70:f3:a6:b6:ac:51:6c:8c:b7:37:ea:a2:65:27:51:1d:78: 79:68:df:fe:36:10:0a:49:ef:7f:b8:72:ba:5d:83:8b:4f:d1: f5:ba:99:97:75:fb:c2:3c:ea:a0:1c:a1:0d:74:89:11:87:a3: ba:4f:b3:60:56:af:37:f6:7b:59:ca:e4:a1:c5:5f:02:9f:6e: 69:fc:35:56:c1:1d:92:8e:45:27:a1:97:1a:e7:3f:ed:5c:0e: bb:13:61:48:3f:f3:a0:0f:92:d8:89:1c:38:64:d1:b8:98:69: fa:37:88:c0:f1:3d:8e:2a:5d:b7:5d:ec:ef:ac:a7:f9:66:b2: 30:44:56:cb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw MTM1MThaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2QTRDRTUzQjZERDkz NTU5MUFCNjFCMjczMkVFRUFFNjlDODRGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJvwy5KmxcK9kztgjxuyaBM4I7mBn/FhpznJoNgEj6O5ScA/Ic wTuju3so0f/roggCFc2TLCsw/0y/u9T1+SAnqZd2B3laIgW4sl5KIGlvLEMCPo2H FSO+sIYCGO+s1Lygu58wqByT9BxnyKNOogQi8hbf+DjG0MkPd4tKPm0eA1B28Rp9 G/egoOJAHmeqE087+WHsI47tVLKpHfTy6uL48ABKzpbVM4S+npUV6bVtpXeSIqFD Aq9SRIljzavxae58PnW5N75Jr2eO7eA488HS+lfxACe+viPzLFqg0ns5pMByGpyr +fRNAmIg/0PxWPLZqvGXhBXNWMrQ4TzKvgi/AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU5qTOU7bdk1WRq2Gycy7urmnITyEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny81cVRPVTdiZGsxV1JxMkd5Y3k3dXJtbklUeUUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdTkMA0GCSqGSIb3DQEBCwUAA4IBAQDIcHfgzaGlal6x4RXnXkUh W1C7Rh5ClWNeZYX5BoUFu6qfVvfKZjmSnGoCIj+YcYwyvcLxv1xN9CIJaCUqtdyc NLzLenK8maaNrUbSpt7EtMsFiexdKSv+WbMaDpvr3IWqsd6fDiOLvAshUuFQ5m9H NQ4sRE3tQBDHDSDHqMFFcPOmtqxRbIy3N+qiZSdRHXh5aN/+NhAKSe9/uHK6XYOL T9H1upmXdfvCPOqgHKENdIkRh6O6T7NgVq839ntZyuShxV8Cn25p/DVWwR2SjkUn oZca5z/tXA67E2FIP/OgD5LYiRw4ZNG4mGn6N4jA8T2OKl23XezvrKf5ZrIwRFbL -----END CERTIFICATE-----Generated at Tue Sep 9 12:44:54 2025 by rpki-client