$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/K9tgEZdC6KdIsEErkCIW9cmcNko.roa File: K9tgEZdC6KdIsEErkCIW9cmcNko.roa (raw, json) Hash identifier: 1PBngLcewCOFglCP7yUnf+rTGq4BKIKscPgFyK307is= Subject key identifier: 2B:DB:60:11:97:42:E8:A7:48:B0:41:2B:90:22:16:F5:C9:9C:36:4A Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 5C Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/K9tgEZdC6KdIsEErkCIW9cmcNko.roa Signing time: Thu 01 May 2025 01:32:33 +0000 ROA not before: Thu 01 May 2025 01:32:33 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 24295 IP address blocks: 122.200.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 11:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: May 1 01:32:33 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=2BDB60119742E8A748B0412B902216F5C99C364A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:75:73:ee:9c:ef:a5:cf:69:82:ae:9b:75: 8b:df:0f:34:2e:5d:5b:5e:97:1e:01:f2:13:50:a0: cd:2d:c7:55:7b:a2:8b:5a:fc:09:e6:48:6c:e3:db: 1e:e4:f5:5d:77:8a:e5:ef:17:72:20:00:5a:0d:25: 42:01:f6:de:ec:09:3b:bf:ee:39:e9:b3:4e:9c:75: f8:fc:15:02:8c:68:9c:39:c5:ee:2b:73:17:5b:69: d4:1d:72:15:7f:a3:38:72:5c:38:cd:13:86:6a:16: ec:1b:16:99:6b:8d:22:51:e9:4a:43:a3:35:c2:84: 62:e4:25:b2:38:84:8a:a5:d9:8d:70:91:40:9b:f2: 05:ea:41:f5:0e:5f:cc:81:62:64:0a:1d:1b:a3:2e: 20:75:ca:94:1a:13:f5:f8:9c:ed:a7:ac:77:c2:8f: da:55:0f:62:2b:c8:ce:fb:64:f2:5e:bd:72:c3:5a: d4:f0:24:4d:9a:a9:8e:d7:a6:fd:bd:a5:5f:1c:6d: 73:43:ba:60:bd:39:bf:ce:0c:44:0c:43:45:d9:84: b9:da:0b:4b:26:d6:7a:a3:22:05:21:fa:a0:c1:1c: 56:fd:12:f6:26:bd:47:78:ac:26:85:42:7a:de:67: 5a:8c:25:87:c0:04:c1:24:69:d4:eb:f3:8e:f1:92: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:60:11:97:42:E8:A7:48:B0:41:2B:90:22:16:F5:C9:9C:36:4A X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/K9tgEZdC6KdIsEErkCIW9cmcNko.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.32.0/22 Signature Algorithm: sha256WithRSAEncryption 78:19:4e:1a:6a:09:6c:41:03:39:40:d0:f2:c8:46:25:db:b7: 27:79:25:db:4c:8f:d2:66:c3:fb:70:00:57:8b:fd:22:04:0c: ba:0a:df:74:bb:49:a5:37:b2:80:db:ff:ff:2e:4d:06:74:ba: d0:62:14:48:b3:be:91:d4:30:95:54:9e:4e:0d:69:9d:d4:40: 49:f9:ff:41:f4:b9:dc:3d:9f:83:fe:b3:2a:a3:48:46:e7:2b: 76:d8:c5:ef:b1:51:e4:67:84:4a:01:f0:bc:d0:94:0e:0a:52: 92:10:b6:41:eb:5d:3a:1f:cf:eb:63:94:f7:6a:06:ea:9a:d8: 97:f7:80:e8:62:a3:b4:60:53:04:8d:21:74:c9:eb:e4:23:70: 2e:95:f6:d5:f0:4e:55:26:82:37:54:2b:af:c6:8f:91:c7:18: cd:bf:d2:c5:53:f8:74:3f:64:b8:53:4d:72:6a:04:27:fd:b8: 8a:c1:5a:f0:64:42:d4:8a:86:38:70:a6:cd:43:33:bc:d4:b3: f2:51:f6:4a:7c:26:7c:01:70:30:6b:25:2d:38:6b:2f:2a:e6: d5:76:dc:fb:b8:b8:04:31:f7:2b:b3:71:15:30:f9:97:9f:28: b5:9f:54:d5:d3:15:f4:78:08:74:32:c4:88:a2:5c:1e:fd:2a: 83:40:9e:32 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI1MDUwMTAx MzIzM1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMkJEQjYwMTE5NzQyRThB NzQ4QjA0MTJCOTAyMjE2RjVDOTlDMzY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN3tdXPunO+lz2mCrpt1i98PNC5dW16XHgHyE1CgzS3HVXuii1r8 CeZIbOPbHuT1XXeK5e8XciAAWg0lQgH23uwJO7/uOemzTpx1+PwVAoxonDnF7itz F1tp1B1yFX+jOHJcOM0ThmoW7BsWmWuNIlHpSkOjNcKEYuQlsjiEiqXZjXCRQJvy BepB9Q5fzIFiZAodG6MuIHXKlBoT9fic7aesd8KP2lUPYivIzvtk8l69csNa1PAk TZqpjtem/b2lXxxtc0O6YL05v84MRAxDRdmEudoLSybWeqMiBSH6oMEcVv0S9ia9 R3isJoVCet5nWowlh8AEwSRp1OvzjvGSfRkCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQr22ARl0Lop0iwQSuQIhb1yZw2SjAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjAyL0s5dGdFWmRDNktkSXNFRXJrQ0lXOWNtY05rby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJ6yCAwDQYJKoZIhvcNAQELBQADggEBAHgZThpqCWxBAzlA0PLIRiXb tyd5JdtMj9Jmw/twAFeL/SIEDLoK33S7SaU3soDb//8uTQZ0utBiFEizvpHUMJVU nk4NaZ3UQEn5/0H0udw9n4P+syqjSEbnK3bYxe+xUeRnhEoB8LzQlA4KUpIQtkHr XTofz+tjlPdqBuqa2Jf3gOhio7RgUwSNIXTJ6+QjcC6V9tXwTlUmgjdUK6/Gj5HH GM2/0sVT+HQ/ZLhTTXJqBCf9uIrBWvBkQtSKhjhwps1DM7zUs/JR9kp8JnwBcDBr JS04ay8q5tV23Pu4uAQx9yuzcRUw+ZefKLWfVNXTFfR4CHQyxIiiXB79KoNAnjI= -----END CERTIFICATE-----Generated at Fri Oct 24 12:54:45 2025 by rpki-client