$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa File: Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa (raw, json) Hash identifier: J/9L2ss10CUbaiYAvD2BzWwZb9c6BB9og0n011qJXHc= Subject key identifier: 59:CC:BD:47:DD:4B:D3:3E:A6:5E:A4:26:3F:CF:F5:3D:3F:28:46:D1 Certificate issuer: /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3 Certificate serial: 25 Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa Signing time: Mon 01 Sep 2025 01:34:34 +0000 ROA not before: Mon 01 Sep 2025 01:34:34 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 4685 IP address blocks: 2001:c28::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3 Validity Not Before: Sep 1 01:34:34 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=59CCBD47DD4BD33EA65EA4263FCFF53D3F2846D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:99:ff:a2:56:a2:6a:8a:20:5f:0a:0e:e4: 33:fe:5d:03:ce:08:06:b0:b4:b6:f8:2e:95:d0:af: 10:90:83:2d:3f:ae:ad:00:29:01:bd:82:4d:15:a8: 66:5f:20:eb:33:50:d6:02:5f:5e:f0:38:ab:40:72: f6:90:94:48:97:fc:70:a3:57:f8:50:53:f9:0d:c4: 08:4d:2b:2d:25:73:8c:e1:15:a5:6f:23:4c:7d:53: 1a:27:94:5b:2c:c5:ef:90:85:0f:5f:8e:e0:68:5f: 2f:20:4f:76:b8:b9:8f:40:59:97:c8:d9:da:19:f2: 2e:c6:08:16:ee:d1:bf:21:e5:4a:12:26:1c:47:aa: a5:9d:87:62:b0:74:22:aa:2b:a9:da:c1:ac:d2:fd: 70:10:12:50:36:a6:d5:be:25:15:60:f9:53:10:90: ef:0a:a8:8e:56:1f:98:f3:5d:4a:e9:1e:e1:78:48: 13:30:63:cd:11:38:7d:94:34:51:4f:90:21:f6:59: d6:93:13:4b:34:2d:c4:94:1a:ef:0f:05:f5:51:28: 5c:24:26:25:d4:91:93:bb:1e:06:8d:f9:9b:da:a2: 24:ec:25:fc:47:74:a3:79:22:89:09:eb:24:df:3b: c4:54:c2:e3:a3:95:e3:f3:9d:ce:b5:f1:37:96:81: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CC:BD:47:DD:4B:D3:3E:A6:5E:A4:26:3F:CF:F5:3D:3F:28:46:D1 X509v3 Authority Key Identifier: keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/Wcy9R91L0z6mXqQmP8_1PT8oRtE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:c28::/32 Signature Algorithm: sha256WithRSAEncryption 70:c2:46:9b:20:3c:0c:ba:7e:2f:77:5d:49:86:50:57:a8:29: 9c:7c:de:5d:3f:e1:87:70:d1:eb:15:17:24:68:4b:c7:f0:e7: b4:1d:45:54:64:86:9b:54:14:86:fc:a4:8c:9e:a5:f2:a4:cc: ff:e6:70:d8:40:57:a3:ab:8a:ef:de:8b:80:43:ed:f3:fd:a4: 76:b1:a3:0e:1a:67:b4:ce:36:42:a2:cd:fb:82:50:d2:06:6f: 7a:7d:b6:ec:a1:33:5c:d1:eb:7a:d7:fa:1d:b4:82:1c:03:18: e3:ba:ee:6a:aa:b1:06:e7:cf:cf:f6:85:14:4d:26:cd:d3:6a: 37:8a:b6:c2:59:35:70:14:92:7d:e2:aa:2c:fa:db:e4:d1:c4: 88:2b:21:b0:1d:f2:fc:be:2c:c4:a8:ba:55:c4:e8:f4:66:5a: cf:26:37:69:e5:e5:5c:a7:32:7b:66:c4:e7:11:5d:6f:c2:eb: 40:4c:40:d5:db:bd:c9:6d:41:93:b0:15:89:85:a8:f9:90:8e: 7e:21:33:38:03:9d:a6:2d:5a:17:82:27:fd:91:65:5e:5c:a5: 06:e2:6a:ab:fe:42:58:bc:bd:7e:72:d8:7e:3a:6d:20:4b:eb: 1f:37:89:77:d1:27:a1:0c:44:55:64:06:aa:04:c7:62:03:73: 2f:28:c2:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTgx NkY1REVGMDIzQTlDQjRBNDBCQkQzQ0M2M0ZGREY5MTAzRUEzMB4XDTI1MDkwMTAx MzQzNFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNTlDQ0JENDdERDRCRDMz RUE2NUVBNDI2M0ZDRkY1M0QzRjI4NDZEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKXSmf+iVqJqiiBfCg7kM/5dA84IBrC0tvguldCvEJCDLT+urQAp Ab2CTRWoZl8g6zNQ1gJfXvA4q0By9pCUSJf8cKNX+FBT+Q3ECE0rLSVzjOEVpW8j TH1TGieUWyzF75CFD1+O4GhfLyBPdri5j0BZl8jZ2hnyLsYIFu7RvyHlShImHEeq pZ2HYrB0IqorqdrBrNL9cBASUDam1b4lFWD5UxCQ7wqojlYfmPNdSuke4XhIEzBj zRE4fZQ0UU+QIfZZ1pMTSzQtxJQa7w8F9VEoXCQmJdSRk7seBo35m9qiJOwl/Ed0 o3kiiQnrJN87xFTC46OV4/OdzrXxN5aBY/kCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRZzL1H3UvTPqZepCY/z/U9PyhG0TAfBgNVHSMEGDAWgBRegW9d7wI6nLSkC708 xj/9+RA+ozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjUvWG9GdlhlOENPcHkwcEF1OVBNWV9fZmtRUHFNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWG9GdlhlOENPcHkwcEF1OVBNWV9f ZmtRUHFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDY1L1djeTlSOTFMMHo2bVhxUW1QOF8xUFQ4b1J0RS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQwoMA0GCSqGSIb3DQEBCwUAA4IBAQBwwkabIDwMun4vd11JhlBX qCmcfN5dP+GHcNHrFRckaEvH8Oe0HUVUZIabVBSG/KSMnqXypMz/5nDYQFejq4rv 3ouAQ+3z/aR2saMOGme0zjZCos37glDSBm96fbbsoTNc0et61/odtIIcAxjjuu5q qrEG58/P9oUUTSbN02o3irbCWTVwFJJ94qos+tvk0cSIKyGwHfL8vizEqLpVxOj0 ZlrPJjdp5eVcpzJ7ZsTnEV1vwutATEDV273JbUGTsBWJhaj5kI5+ITM4A52mLVoX gif9kWVeXKUG4mqr/kJYvL1+cth+Om0gS+sfN4l30SehDERVZAaqBMdiA3MvKML3 -----END CERTIFICATE-----Generated at Mon Sep 8 19:16:48 2025 by rpki-client