$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30140/ISDvBxqX1dXlA5F7-QTrreIOZ_I.roa File: ISDvBxqX1dXlA5F7-QTrreIOZ_I.roa (raw, json) Hash identifier: DSWB08XbmFelE0Cj4Q8DXMJLBg0BpUnh5n6ZuBGkQXk= Subject key identifier: 21:20:EF:07:1A:97:D5:D5:E5:03:91:7B:F9:04:EB:AD:E2:0E:67:F2 Certificate issuer: /CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D Certificate serial: 49 Authority key identifier: A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/ISDvBxqX1dXlA5F7-QTrreIOZ_I.roa Signing time: Tue 10 Jun 2025 10:50:56 +0000 ROA not before: Tue 10 Jun 2025 10:50:56 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 17948 IP address blocks: 2402:d600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 05:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D Validity Not Before: Jun 10 10:50:56 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=2120EF071A97D5D5E503917BF904EBADE20E67F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:6e:0d:98:3d:8c:58:34:25:74:99:3a:38: 0c:ba:14:b5:24:74:12:dd:bc:3e:7f:f5:d4:ec:6d: bb:43:6d:8f:4a:e8:21:bd:63:d5:76:65:71:72:fc: 89:94:e3:fb:d2:3a:d4:8f:43:79:9d:6a:c9:15:f9: 13:24:16:36:9c:e7:c9:77:1a:16:91:e8:62:9c:00: 98:24:a7:33:30:76:b1:69:82:3d:fc:d5:71:9d:e9: 8f:e3:3a:1c:a1:71:99:57:22:68:f8:ed:2b:1d:b6: 04:ae:2d:56:2d:3f:3e:97:85:6a:00:17:69:bf:83: 93:d7:fd:ee:32:0c:1d:23:9b:7c:03:eb:1c:54:6e: e4:48:3d:5c:06:61:9a:08:0c:67:fe:bf:76:49:91: b5:65:cb:12:66:38:8d:44:ad:e8:99:4a:9d:22:8b: 05:a5:a1:df:35:88:39:19:23:59:a9:db:f2:83:f7: 6e:f7:aa:86:f0:f2:de:eb:58:30:89:a9:ee:dc:28: cc:39:7a:94:2b:ae:63:8d:c5:13:61:52:34:be:b4: 17:eb:92:3d:4e:7a:2f:4d:bc:25:bc:e2:c3:2f:4e: 15:d2:82:bc:91:34:42:7a:04:71:9b:02:c2:0d:b5: a9:28:55:a1:07:f4:23:cd:42:df:fb:9a:3f:7f:1e: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:EF:07:1A:97:D5:D5:E5:03:91:7B:F9:04:EB:AD:E2:0E:67:F2 X509v3 Authority Key Identifier: keyid:A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/ISDvBxqX1dXlA5F7-QTrreIOZ_I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:d600::/32 Signature Algorithm: sha256WithRSAEncryption af:c8:1d:09:cd:6b:94:f7:f5:22:bb:59:06:d8:4f:8d:9b:ec: 16:0b:54:42:71:5a:d6:6b:ae:97:b5:d0:ba:3c:84:5a:f9:84: 32:26:f6:c0:a1:d4:a1:11:cb:90:9d:90:1c:a9:60:b7:b2:8a: f2:09:21:1c:e2:d3:5a:1c:a7:c3:9a:2c:68:e5:da:b6:c3:cc: 1b:e3:69:8a:61:bf:c8:e5:47:b5:91:31:40:86:70:a7:fc:57: 3c:84:8f:c7:f2:b7:46:32:e7:d7:3c:cb:4c:70:97:37:41:27: bc:eb:e9:77:e5:1d:21:fe:62:31:a8:a5:1a:48:40:e2:ab:bb: 47:7c:fb:76:51:92:98:9e:b9:a8:95:fd:67:3d:ae:81:62:1a: be:2f:c8:fc:dc:b6:bd:94:c2:eb:47:d3:74:54:32:91:96:c9: 0d:8f:b2:d4:06:05:cc:66:72:52:67:c6:ff:d5:f2:45:8a:6c: e1:6f:2b:d4:90:16:59:3d:c0:ee:06:f3:ed:6b:02:77:54:31: de:2d:80:97:0f:c3:f7:97:47:d7:9b:7c:b8:7e:03:b0:c7:38: b5:bd:61:76:2e:10:7b:09:56:de:c4:56:32:a9:4f:ab:66:37: f3:1b:75:64:98:62:57:99:a9:7a:cc:c5:aa:0f:8c:4a:d6:63: 0e:1c:02:0a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjhF Q0EyOUQwNkNCNEMwMDYxMUJBNEFEODUyNkYwNDkwQ0M2RTdEMB4XDTI1MDYxMDEw NTA1NloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMjEyMEVGMDcxQTk3RDVE NUU1MDM5MTdCRjkwNEVCQURFMjBFNjdGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKe6bg2YPYxYNCV0mTo4DLoUtSR0Et28Pn/11Oxtu0Ntj0roIb1j 1XZlcXL8iZTj+9I61I9DeZ1qyRX5EyQWNpznyXcaFpHoYpwAmCSnMzB2sWmCPfzV cZ3pj+M6HKFxmVciaPjtKx22BK4tVi0/PpeFagAXab+Dk9f97jIMHSObfAPrHFRu 5Eg9XAZhmggMZ/6/dkmRtWXLEmY4jUSt6JlKnSKLBaWh3zWIORkjWanb8oP3bveq hvDy3utYMImp7twozDl6lCuuY43FE2FSNL60F+uSPU56L028Jbziwy9OFdKCvJE0 QnoEcZsCwg21qShVoQf0I81C3/uaP38eY2sCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQhIO8HGpfV1eUDkXv5BOut4g5n8jAfBgNVHSMEGDAWgBSmjsop0Gy0wAYRukrY Um8EkMxufTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNDAvcG83S0tkQnN0TUFHRWJwSzJGSnZCSkRNYm4wLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcG83S0tkQnN0TUFHRWJwSzJGSnZC SkRNYm4wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTQwL0lTRHZCeHFYMWRYbEE1RjctUVRycmVJT1pfSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAtYAMA0GCSqGSIb3DQEBCwUAA4IBAQCvyB0JzWuU9/Uiu1kG2E+N m+wWC1RCcVrWa66XtdC6PIRa+YQyJvbAodShEcuQnZAcqWC3soryCSEc4tNaHKfD mixo5dq2w8wb42mKYb/I5Ue1kTFAhnCn/Fc8hI/H8rdGMufXPMtMcJc3QSe86+l3 5R0h/mIxqKUaSEDiq7tHfPt2UZKYnrmolf1nPa6BYhq+L8j83La9lMLrR9N0VDKR lskNj7LUBgXMZnJSZ8b/1fJFimzhbyvUkBZZPcDuBvPtawJ3VDHeLYCXD8P3l0fX m3y4fgOwxzi1vWF2LhB7CVbexFYyqU+rZjfzG3VkmGJXmal6zMWqD4xK1mMOHAIK -----END CERTIFICATE-----Generated at Sat Jun 14 08:17:56 2025 by rpki-client