$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/o2dd3KNp_TrK6kSZnn47217PqhI.roa File: o2dd3KNp_TrK6kSZnn47217PqhI.roa (raw, json) Hash identifier: Mj9pbBVr8xhWGcH7FANzyowvUEXBmUyJdAxcGQaRs2Q= Subject key identifier: A3:67:5D:DC:A3:69:FD:3A:CA:EA:44:99:9E:7E:3B:DB:5E:CF:AA:12 Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: DA Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/o2dd3KNp_TrK6kSZnn47217PqhI.roa Signing time: Mon 01 Sep 2025 01:30:05 +0000 ROA not before: Mon 01 Sep 2025 01:30:05 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 131274 IP address blocks: 61.213.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 19:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Sep 1 01:30:05 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=A3675DDCA369FD3ACAEA44999E7E3BDB5ECFAA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:d1:d4:f4:56:cd:82:81:9d:73:5a:02:b9: ea:2a:69:87:9b:31:ca:24:fc:c7:f4:bc:49:c4:fe: 74:5f:e2:70:e4:f9:88:9d:d1:73:30:0d:1f:e7:f1: 70:c3:8a:b1:e2:a3:6e:c2:d2:50:c1:33:b9:2b:a5: dc:b6:c6:03:8c:fe:73:4f:58:16:50:59:bc:48:f7: 96:1d:59:c7:c8:1d:d3:ad:f3:9c:85:b6:b9:b0:08: af:9a:a1:ed:49:7b:b0:9a:06:81:4f:a9:2f:ce:8c: 8b:5e:14:5d:d6:d8:2d:96:49:64:a4:06:41:a8:6b: 12:a5:a3:00:94:ba:7e:98:ac:86:0f:4a:6c:3b:3e: 88:98:b5:fd:7f:86:17:0e:ed:55:fd:79:9a:16:f2: 10:97:0e:24:47:98:49:92:f6:2d:bd:d1:4f:91:97: 9e:f3:ea:30:79:98:32:ff:0c:37:79:95:f4:11:8e: fa:ae:f2:94:1b:04:3c:69:1a:53:a8:da:ba:c9:9c: 4b:06:b1:8a:66:b8:6c:83:86:44:45:bf:22:65:2e: 28:41:55:76:4c:58:45:b5:aa:fb:f2:36:0b:76:ec: 03:e5:d0:8e:f1:31:26:86:bc:35:14:5d:80:37:44: 04:9c:d0:df:ab:35:ad:e9:e8:ed:9f:cd:f0:a3:f8: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:5D:DC:A3:69:FD:3A:CA:EA:44:99:9E:7E:3B:DB:5E:CF:AA:12 X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/o2dd3KNp_TrK6kSZnn47217PqhI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.213.166.0/24 Signature Algorithm: sha256WithRSAEncryption b5:60:0a:d8:c1:0d:c4:3e:71:36:27:23:4d:05:3b:f6:92:fc: 06:f7:43:97:14:53:3d:d8:cd:bd:98:2d:93:a7:d4:33:f1:77: 59:a6:a6:a5:bd:7d:00:48:5f:bf:90:65:12:e5:b9:5e:63:07: 31:af:62:9e:1a:ec:d6:ea:8b:ad:a8:90:e7:99:6a:59:67:c9: 02:71:70:84:58:c3:8a:cf:f0:af:96:10:b9:df:cf:5d:86:fc: af:61:9e:1b:06:0b:98:ff:91:4b:0f:b3:a7:e6:77:4d:9c:97: b3:0f:e6:69:01:cf:0f:d0:7e:4b:e1:cd:32:7d:46:27:0d:2c: 6a:dd:28:1e:e4:f1:90:71:0c:66:45:80:5b:1d:1d:04:55:23: 74:f0:3a:09:88:21:b1:9a:c8:8d:f8:f8:b1:f9:33:ef:76:ee: cf:88:45:ab:d3:26:0d:62:d7:54:33:13:96:70:1b:5c:d7:c6: ee:6e:e9:15:d5:20:c8:b5:10:ac:84:d0:33:b1:be:e3:05:12: 85:f6:f9:1d:f1:36:be:25:96:35:b6:46:df:55:d8:6f:c0:c9: fd:19:2a:f5:a6:62:9c:10:10:c4:52:d3:64:3d:18:56:e2:47: 8a:06:61:c7:42:4c:b2:45:f6:13:2a:e7:c6:95:db:7c:7a:f5: 73:c9:3d:d0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTA5MDEw MTMwMDVaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzNjc1RERDQTM2OUZE M0FDQUVBNDQ5OTlFN0UzQkRCNUVDRkFBMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEXNHU9FbNgoGdc1oCueoqaYebMcok/Mf0vEnE/nRf4nDk+Yid 0XMwDR/n8XDDirHio27C0lDBM7krpdy2xgOM/nNPWBZQWbxI95YdWcfIHdOt85yF trmwCK+aoe1Je7CaBoFPqS/OjIteFF3W2C2WSWSkBkGoaxKlowCUun6YrIYPSmw7 PoiYtf1/hhcO7VX9eZoW8hCXDiRHmEmS9i290U+Rl57z6jB5mDL/DDd5lfQRjvqu 8pQbBDxpGlOo2rrJnEsGsYpmuGyDhkRFvyJlLihBVXZMWEW1qvvyNgt27APl0I7x MSaGvDUUXYA3RASc0N+rNa3p6O2fzfCj+KrTAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUo2dd3KNp/TrK6kSZnn47217PqhIwHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9vMmRkM0tOcF9Ucks2a1Nabm40NzIxN1BxaEku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAPdWmMA0GCSqGSIb3DQEBCwUAA4IBAQC1YArYwQ3EPnE2JyNNBTv2 kvwG90OXFFM92M29mC2Tp9Qz8XdZpqalvX0ASF+/kGUS5bleYwcxr2KeGuzW6out qJDnmWpZZ8kCcXCEWMOKz/CvlhC5389dhvyvYZ4bBguY/5FLD7On5ndNnJezD+Zp Ac8P0H5L4c0yfUYnDSxq3Sge5PGQcQxmRYBbHR0EVSN08DoJiCGxmsiN+Pix+TPv du7PiEWr0yYNYtdUMxOWcBtc18bubukV1SDItRCshNAzsb7jBRKF9vkd8Ta+JZY1 tkbfVdhvwMn9GSr1pmKcEBDEUtNkPRhW4keKBmHHQkyyRfYTKufGldt8evVzyT3Q -----END CERTIFICATE-----Generated at Fri Sep 5 21:12:29 2025 by rpki-client