$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/8Et0ptT8pHG-88-ps4WLusIk1a4.roa File: 8Et0ptT8pHG-88-ps4WLusIk1a4.roa (raw, json) Hash identifier: BTM98fPmtH+yt/DeR33KDprSqUtdTPUeWwKHlYkh+64= Subject key identifier: F0:4B:74:A6:D4:FC:A4:71:BE:F3:CF:A9:B3:85:8B:BA:C2:24:D5:AE Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C Certificate serial: 21 Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/8Et0ptT8pHG-88-ps4WLusIk1a4.roa Signing time: Mon 01 Sep 2025 01:31:52 +0000 ROA not before: Mon 01 Sep 2025 01:31:52 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9354 IP address blocks: 221.118.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Validity Not Before: Sep 1 01:31:52 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=F04B74A6D4FCA471BEF3CFA9B3858BBAC224D5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:2d:91:00:e4:fe:f2:23:22:01:a2:d5:b3: 6d:00:08:f4:f1:35:83:a0:76:9e:a3:a7:30:53:0f: 72:1c:ba:c1:49:7a:0e:2e:f3:2d:0d:51:4d:ec:1b: 22:0d:f6:7d:e3:92:62:e7:58:92:98:12:56:e6:4d: a8:46:5c:14:25:79:8c:9b:2a:11:7b:a5:cd:10:a7: 5e:2e:4d:47:12:7b:70:b2:9b:7d:1e:54:21:0b:a6: 28:7e:4f:fc:ff:90:13:b9:14:83:e7:10:f4:97:6e: b3:41:60:12:33:97:c3:fe:9f:dd:b3:67:be:42:c7: d5:86:d2:bc:0a:0a:ef:0c:ce:09:eb:57:a6:59:b5: 4f:39:e0:e4:4b:30:85:12:58:44:61:68:ca:34:13: 5d:8f:1a:f2:c4:a4:50:1d:77:b9:28:1f:14:dc:a6: 59:76:83:a5:0d:51:f3:ae:16:18:d2:e6:87:0f:c0: e7:ce:af:b0:71:f5:b1:b3:ae:10:a0:da:8f:97:7a: 39:28:82:d4:f3:03:1e:c1:d3:67:b4:c4:d0:9e:1b: 6b:a8:82:ae:3a:76:ca:a9:2d:2e:22:8b:98:74:0f: 2f:3f:ef:5c:b4:92:5d:ce:dd:bc:1d:58:e4:42:cd: d7:f8:e4:8f:14:e0:f4:76:84:ca:d5:f2:fe:df:30: f7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4B:74:A6:D4:FC:A4:71:BE:F3:CF:A9:B3:85:8B:BA:C2:24:D5:AE X509v3 Authority Key Identifier: keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/8Et0ptT8pHG-88-ps4WLusIk1a4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.118.64.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:01:9d:78:37:8b:b8:c7:a7:83:b1:7b:75:66:1f:d9:54:0a: b4:f1:db:5c:22:23:ac:ef:54:74:d5:99:ef:26:8f:67:7f:ea: 0e:5f:ab:19:85:7c:47:06:d7:fb:61:bf:d7:dd:05:2e:90:c7: f7:12:c0:0d:cc:07:c1:ff:8c:ed:b4:5c:23:28:84:a9:e9:0f: de:6c:9c:50:c5:ff:4d:41:d4:c9:42:a2:92:4c:02:37:f9:f0: c2:43:6a:6c:03:df:e0:ab:77:68:78:f4:1d:f0:27:18:48:a5: 65:73:6d:8e:3c:b8:0f:3a:07:12:00:ac:e9:32:d6:3c:32:1a: c7:55:28:99:b5:f5:1d:64:33:4e:2c:d1:a2:49:ee:f4:c9:2e: b3:74:55:67:d0:65:89:fd:1d:bb:23:bd:e9:16:61:17:69:45: 17:d6:6b:27:6e:24:46:ab:1d:b7:62:2c:ff:35:af:08:7b:99: 2e:a4:36:9a:d0:fc:4c:42:44:20:6c:1e:96:f0:4a:77:f8:d1: 04:44:e5:13:b9:e3:e1:51:2b:23:74:c3:a6:a0:89:66:da:e0: 6a:33:4d:18:30:74:7a:ac:1e:69:83:de:7c:f0:a8:29:62:4d: d1:3f:0c:a8:6d:f1:1c:84:46:e1:0e:ff:f6:d0:09:bb:c1:7e: 8d:45:89:3a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI1MDkwMTAx MzE1MloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjA0Qjc0QTZENEZDQTQ3 MUJFRjNDRkE5QjM4NThCQkFDMjI0RDVBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMOnLZEA5P7yIyIBotWzbQAI9PE1g6B2nqOnMFMPchy6wUl6Di7z LQ1RTewbIg32feOSYudYkpgSVuZNqEZcFCV5jJsqEXulzRCnXi5NRxJ7cLKbfR5U IQumKH5P/P+QE7kUg+cQ9Jdus0FgEjOXw/6f3bNnvkLH1YbSvAoK7wzOCetXplm1 Tzng5EswhRJYRGFoyjQTXY8a8sSkUB13uSgfFNymWXaDpQ1R864WGNLmhw/A586v sHH1sbOuEKDaj5d6OSiC1PMDHsHTZ7TE0J4ba6iCrjp2yqktLiKLmHQPLz/vXLSS Xc7dvB1Y5ELN1/jkjxTg9HaEytXy/t8w94sCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTwS3Sm1Pykcb7zz6mzhYu6wiTVrjAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD +TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMTEvOEV0MHB0VDhwSEctODgtcHM0V0x1c0lrMWE0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBt12QDANBgkqhkiG9w0BAQsFAAOCAQEAagGdeDeLuMeng7F7dWYf2VQKtPHb XCIjrO9UdNWZ7yaPZ3/qDl+rGYV8RwbX+2G/190FLpDH9xLADcwHwf+M7bRcIyiE qekP3mycUMX/TUHUyUKikkwCN/nwwkNqbAPf4Kt3aHj0HfAnGEilZXNtjjy4DzoH EgCs6TLWPDIax1UombX1HWQzTizRoknu9Mkus3RVZ9Blif0duyO96RZhF2lFF9Zr J24kRqsdt2Is/zWvCHuZLqQ2mtD8TEJEIGwelvBKd/jRBETlE7nj4VErI3TDpqCJ ZtrgajNNGDB0eqweaYPefPCoKWJN0T8MqG3xHIRG4Q7/9tAJu8F+jUWJOg== -----END CERTIFICATE-----Generated at Wed Sep 10 10:28:14 2025 by rpki-client