$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/61XowUV7qNNKUl7CsUHMPwErbs4.roa File: 61XowUV7qNNKUl7CsUHMPwErbs4.roa (raw, json) Hash identifier: j+VanMEN/2kAPSW1KhW3B85Zs1kkmqcZwbQtdxGKX+I= Subject key identifier: EB:55:E8:C1:45:7B:A8:D3:4A:52:5E:C2:B1:41:CC:3F:01:2B:6E:CE Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 025D Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/61XowUV7qNNKUl7CsUHMPwErbs4.roa Signing time: Mon 01 Sep 2025 01:29:10 +0000 ROA not before: Mon 01 Sep 2025 01:29:10 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 1 01:29:10 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=EB55E8C1457BA8D34A525EC2B141CC3F012B6ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:19:9d:8d:6d:4f:ff:d9:07:6f:ad:24:07: 04:30:9d:7c:74:b2:97:c3:d1:b1:ca:b1:79:2f:0e: 10:22:f3:e8:42:12:be:ec:d4:4b:f4:c4:2f:82:73: 61:f3:11:62:bb:58:fd:50:91:a8:ab:85:dc:6d:f9: 1a:a3:9a:e5:36:16:d1:a8:00:7b:37:b9:68:c4:ee: c3:15:19:be:7d:38:47:66:d1:80:59:2b:b5:51:12: ab:a7:ec:72:cf:c8:53:d7:78:8b:d8:df:20:a7:cd: 2d:38:5c:9f:8c:f1:12:12:50:af:49:9f:ad:d4:2b: dc:f2:8a:77:7d:c6:b3:11:4a:73:bf:1c:45:65:d3: 35:ec:84:01:81:0b:07:68:90:c7:46:ab:a1:d7:77: 70:c3:e5:5e:d1:06:9f:6e:dd:f1:6f:d8:12:89:ac: bb:2a:0e:e8:2b:16:b5:55:cb:aa:4d:1a:b7:36:0a: da:d8:7f:de:64:a9:69:77:9a:75:79:7e:7d:18:c2: 4e:77:ab:87:a6:82:ab:4d:c6:4d:16:3e:47:38:e8: ab:4d:08:2f:77:a3:3a:a2:65:5d:26:e5:fe:7f:31: 55:0a:11:d0:10:9a:73:4e:34:c6:15:47:20:a0:a0: 8e:8a:12:ec:e3:ac:17:4c:af:57:97:87:d5:3e:2b: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:55:E8:C1:45:7B:A8:D3:4A:52:5E:C2:B1:41:CC:3F:01:2B:6E:CE X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/61XowUV7qNNKUl7CsUHMPwErbs4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.168.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:0b:3e:46:f2:d0:cd:3b:2b:bf:f5:2f:68:8e:ee:29:30:11: 8b:ba:05:5b:c7:29:40:05:e5:6e:30:19:06:e2:61:58:b8:82: 9b:5f:55:be:3e:05:a8:75:df:89:50:95:60:d2:7b:9c:6c:47: 50:e8:88:8f:06:e7:03:8a:23:c3:e6:ff:6b:2e:d4:d0:f9:28: 98:50:1f:c8:d7:b6:ac:fa:ed:1d:7e:13:2c:c4:ca:47:21:f8: 49:b8:c4:27:87:83:20:ab:c6:55:cf:1b:39:4c:c2:fc:7c:48: 22:c0:13:08:e2:33:ed:7e:65:11:fa:82:05:0b:21:f2:c4:20: c2:49:be:ea:8a:7d:c9:75:8d:53:ec:6b:d7:8d:cf:73:26:20: 91:3b:ac:27:a3:af:b6:2b:9f:8b:b7:d6:27:98:83:e1:03:39: 44:54:27:3b:89:71:5c:09:1e:27:15:cd:23:a7:88:bb:bc:87: cd:fc:2b:ac:0f:28:d7:2b:ba:5f:2e:2e:c3:02:5e:8b:18:f8: 41:af:b6:c1:e9:47:b6:e6:55:7b:d6:9d:ae:a8:fb:67:eb:f0: 7f:d9:77:28:8f:7d:11:ea:ca:21:49:64:f2:b7:27:89:71:8a: 43:a3:b3:84:53:6e:9f:a9:9a:64:34:fb:b6:c9:59:ea:f3:63: 5f:47:a2:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw MTI5MTBaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVCNTVFOEMxNDU3QkE4 RDM0QTUyNUVDMkIxNDFDQzNGMDEyQjZFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4lxmdjW1P/9kHb60kBwQwnXx0spfD0bHKsXkvDhAi8+hCEr7s 1Ev0xC+Cc2HzEWK7WP1Qkairhdxt+RqjmuU2FtGoAHs3uWjE7sMVGb59OEdm0YBZ K7VREqun7HLPyFPXeIvY3yCnzS04XJ+M8RISUK9Jn63UK9zyind9xrMRSnO/HEVl 0zXshAGBCwdokMdGq6HXd3DD5V7RBp9u3fFv2BKJrLsqDugrFrVVy6pNGrc2CtrY f95kqWl3mnV5fn0Ywk53q4emgqtNxk0WPkc46KtNCC93ozqiZV0m5f5/MVUKEdAQ mnNONMYVRyCgoI6KEuzjrBdMr1eXh9U+K47fAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU61XowUV7qNNKUl7CsUHMPwErbs4wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny82MVhvd1VWN3FOTktVbDdDc1VITVB3RXJiczQu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdSoMA0GCSqGSIb3DQEBCwUAA4IBAQCLCz5G8tDNOyu/9S9oju4p MBGLugVbxylABeVuMBkG4mFYuIKbX1W+PgWodd+JUJVg0nucbEdQ6IiPBucDiiPD 5v9rLtTQ+SiYUB/I17as+u0dfhMsxMpHIfhJuMQnh4Mgq8ZVzxs5TML8fEgiwBMI 4jPtfmUR+oIFCyHyxCDCSb7qin3JdY1T7GvXjc9zJiCRO6wno6+2K5+Lt9YnmIPh AzlEVCc7iXFcCR4nFc0jp4i7vIfN/CusDyjXK7pfLi7DAl6LGPhBr7bB6Ue25lV7 1p2uqPtn6/B/2Xcoj30R6sohSWTytyeJcYpDo7OEU26fqZpkNPu2yVnq82NfR6JD -----END CERTIFICATE-----Generated at Tue Sep 9 12:44:54 2025 by rpki-client