$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa File: 2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa (raw, json) Hash identifier: G7rHAA+yEIQWlHqf1BGTytkURNHQ2ZKgc1/qGVfaowc= Subject key identifier: D8:24:5B:92:88:94:71:9C:BD:F2:5C:A3:BC:C7:B7:96:AB:4A:89:84 Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Certificate serial: 022B Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa Signing time: Thu 01 May 2025 01:31:42 +0000 ROA not before: Thu 01 May 2025 01:31:42 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 4713 IP address blocks: 210.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 12:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B Validity Not Before: May 1 01:31:42 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=D8245B928894719CBDF25CA3BCC7B796AB4A8984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:fe:b3:77:90:06:8c:93:de:33:e6:62:1c: 12:9b:d2:1e:61:c2:0e:77:7a:36:b4:81:71:af:ca: cb:fa:08:27:78:85:0a:6a:47:91:3f:2a:b9:cf:a8: e1:a2:52:43:51:6d:ab:54:54:4b:1a:fc:a0:e3:f8: 81:9e:a5:a9:24:96:57:e3:ac:ec:b3:52:24:00:ca: c3:a8:82:7b:19:ed:02:f4:4e:08:18:11:4f:bf:58: 2d:f2:3e:67:19:2d:8c:63:cc:59:e8:01:df:b3:79: 49:0d:74:f2:6d:49:4b:60:1e:c8:40:7e:88:df:c8: 33:9a:4f:ed:a5:16:47:49:b1:16:4b:e0:1e:e4:8d: 17:3d:0c:cb:a6:69:a3:32:e6:38:3f:e2:c4:a9:55: 11:c9:37:7e:d1:e5:31:cd:fe:cf:25:07:27:07:b1: ae:3b:2a:74:0d:6d:ea:84:9a:1e:4d:be:e7:24:78: 13:b5:11:24:1c:f9:d3:ba:90:85:08:15:69:04:55: 0a:1e:65:1d:8a:7a:a1:c4:73:0d:0a:43:b6:c0:da: ed:2b:31:b7:5f:09:6f:90:30:81:92:fd:ad:96:f9: 8c:c9:6f:43:4c:d0:a2:df:1b:a4:e1:85:34:a9:94: 33:76:b8:91:53:23:4b:0a:3a:0b:85:55:93:c8:cf: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:24:5B:92:88:94:71:9C:BD:F2:5C:A3:BC:C7:B7:96:AB:4A:89:84 X509v3 Authority Key Identifier: keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/2CRbkoiUcZy98lyjvMe3lqtKiYQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:5c:27:89:ce:05:3d:f3:c6:68:4a:9b:66:59:7d:00:f4:78: c9:bc:f4:26:ea:c4:b8:61:5c:ca:2b:2e:3b:4f:00:fd:d3:0f: 06:cc:d6:2c:07:b6:6e:a9:9f:b4:84:9b:db:1e:b2:4b:b1:46: 25:5a:de:b3:81:94:9c:0e:94:f2:d1:f8:41:50:99:c4:ed:1a: b9:26:59:5d:d1:ed:11:09:d1:93:6a:c0:a0:f0:90:1a:95:fd: 4e:b7:06:70:60:7b:94:84:31:bd:3f:75:88:c5:0d:6f:7f:98: 3d:5d:fc:47:28:e3:3a:66:b5:38:6e:77:ef:07:40:e4:15:bf: 6e:2c:56:5e:d0:a7:d5:bc:3c:1f:41:4a:ad:06:80:0c:ae:21: 22:74:ec:2b:8e:27:0f:8b:03:dc:0c:8d:d1:24:83:5e:01:ac: 89:b4:16:97:8a:48:e5:cf:75:b9:58:08:7d:b8:c5:aa:c1:fb: 9f:e3:90:ae:c5:af:3b:45:e4:68:a3:5b:71:57:0b:a2:77:16: 2b:27:b9:1f:b0:c7:1f:b2:a0:77:fc:a4:fa:43:85:18:aa:a7: 35:1b:bc:aa:3a:e1:82:22:7e:9d:d0:e6:7d:86:b8:98:ef:f8: dd:e4:6d:99:ec:72:f6:b4:04:75:7e:8b:d0:10:f1:5d:5a:d7: fe:9e:bd:d7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICAiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNTA1MDEw MTMxNDJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4MjQ1QjkyODg5NDcx OUNCREYyNUNBM0JDQzdCNzk2QUI0QTg5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAnv6zd5AGjJPeM+ZiHBKb0h5hwg53eja0gXGvysv6CCd4hQpq R5E/KrnPqOGiUkNRbatUVEsa/KDj+IGepakkllfjrOyzUiQAysOognsZ7QL0TggY EU+/WC3yPmcZLYxjzFnoAd+zeUkNdPJtSUtgHshAfojfyDOaT+2lFkdJsRZL4B7k jRc9DMumaaMy5jg/4sSpVRHJN37R5THN/s8lBycHsa47KnQNbeqEmh5NvuckeBO1 ESQc+dO6kIUIFWkEVQoeZR2KeqHEcw0KQ7bA2u0rMbdfCW+QMIGS/a2W+YzJb0NM 0KLfG6ThhTSplDN2uJFTI0sKOguFVZPIz7n3AgMBAAGjggIjMIICHzAdBgNVHQ4E FgQU2CRbkoiUcZy98lyjvMe3lqtKiYQwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5 RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTMxLzJDUmJrb2lVY1p5OThseWp2TWUzbHF0S2lZUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDS+DANBgkqhkiG9w0BAQsFAAOCAQEAc1wnic4FPfPGaEqbZll9APR4ybz0 JurEuGFcyisuO08A/dMPBszWLAe2bqmftISb2x6yS7FGJVres4GUnA6U8tH4QVCZ xO0auSZZXdHtEQnRk2rAoPCQGpX9TrcGcGB7lIQxvT91iMUNb3+YPV38RyjjOma1 OG537wdA5BW/bixWXtCn1bw8H0FKrQaADK4hInTsK44nD4sD3AyN0SSDXgGsibQW l4pI5c91uVgIfbjFqsH7n+OQrsWvO0XkaKNbcVcLoncWKye5H7DHH7Kgd/yk+kOF GKqnNRu8qjrhgiJ+ndDmfYa4mO/43eRtmexy9rQEdX6L0BDxXVrX/p691w== -----END CERTIFICATE-----Generated at Mon Oct 27 14:37:00 2025 by rpki-client