$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/C9SN32Takx9TOUK4_HirB-PSA-o.roa File: C9SN32Takx9TOUK4_HirB-PSA-o.roa (raw, json) Hash identifier: d8jJ8QTEM5a3xkzWhXwt1/ioiqPg4UTCc+pLIVdA4Qw= Subject key identifier: 0B:D4:8D:DF:64:DA:93:1F:53:39:42:B8:FC:78:AB:07:E3:D2:03:EA Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Certificate serial: 8D Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/C9SN32Takx9TOUK4_HirB-PSA-o.roa Signing time: Mon 01 Sep 2025 01:29:32 +0000 ROA not before: Mon 01 Sep 2025 01:29:32 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 17675 IP address blocks: 61.211.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542 Validity Not Before: Sep 1 01:29:32 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=0BD48DDF64DA931F533942B8FC78AB07E3D203EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:11:f6:e0:b6:58:99:05:3c:6f:1a:12:be: a1:e8:c7:27:92:b1:32:4a:74:8c:8a:74:58:55:28: 24:17:46:f7:1b:3f:0c:da:27:71:78:e7:62:59:3c: ad:74:b4:90:5e:ef:cb:b1:01:3a:28:c8:5b:ec:22: d9:4b:dd:c3:ab:2c:c0:4f:a4:69:5c:18:c9:32:15: 74:dd:a2:68:d4:bb:2a:a7:63:2c:df:35:bf:29:55: 61:8c:d7:73:f2:98:25:ca:9d:a1:d1:cc:74:7b:cc: 78:fd:f1:cd:68:89:c5:66:68:3a:58:1a:03:19:4b: 34:b9:44:e3:09:52:df:82:3a:03:99:0b:ad:97:f7: 29:88:7a:4f:72:ac:92:c1:32:1a:4c:aa:b7:bc:76: 54:c6:62:f8:c0:d3:26:cb:93:78:31:e2:ce:df:f7: 29:45:96:2c:02:0b:e2:d1:b7:27:d5:c1:bb:c3:a8: 6e:b0:31:63:78:3c:61:07:ff:17:c1:c5:6a:69:ea: 39:34:15:ce:1b:c8:d2:3c:f3:ed:4a:e2:ef:8b:c6: e6:83:0a:99:93:23:6d:98:d6:97:7f:99:75:d1:d3: 91:e1:5a:e3:54:aa:ff:09:5d:50:0b:a2:51:cf:30: 3d:83:ec:e6:9f:c2:bb:b6:70:2f:e1:fb:9e:10:0f: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:8D:DF:64:DA:93:1F:53:39:42:B8:FC:78:AB:07:E3:D2:03:EA X509v3 Authority Key Identifier: keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/C9SN32Takx9TOUK4_HirB-PSA-o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.211.165.0/24 Signature Algorithm: sha256WithRSAEncryption 33:29:e3:b1:68:88:a4:a5:c4:b1:b9:62:0e:f5:bc:83:18:ff: 2f:0d:b0:a9:64:5a:91:e9:8a:22:31:72:db:49:b3:ab:6b:01: 93:a8:ca:17:97:7c:bc:5d:b5:70:e2:b6:a1:da:64:50:b4:95: a2:98:1d:79:ad:32:04:be:a6:6c:ed:01:3d:c8:64:6e:e4:41: 51:4d:29:98:98:57:b2:0e:7e:06:45:43:37:53:74:11:3d:16: c7:82:94:76:db:fe:57:cd:d9:6a:6d:37:c2:ad:b5:29:50:bf: bc:d1:2a:6d:0e:c5:e4:a3:35:a7:b1:0e:55:77:63:6d:44:5a: 30:29:ea:85:57:04:0a:45:8f:c4:fe:d8:be:c9:1b:f8:b5:c1: 0d:0b:dc:82:99:da:0e:81:60:bc:cf:c6:69:32:44:13:07:65: d4:a0:ec:d1:58:b6:da:3e:45:fd:a2:e1:21:ee:f0:aa:d3:6a: 46:86:94:89:0a:37:ad:ba:53:21:15:5a:79:ec:a1:25:6a:5a: 68:00:f5:52:7d:15:11:5a:42:76:4f:8a:ac:38:03:ef:47:58: 4b:60:d8:1b:36:6a:cf:74:db:42:f2:1d:c9:26:3a:dd:f6:4e: a8:13:de:80:3f:a9:4a:cb:42:fa:b5:8f:0e:5b:70:18:45:b0: db:62:b2:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEVG RjFBQjZFQURBMjczQkEwNjZEQjBGNzdCNzlENkEwRDkwMTU0MjAeFw0yNTA5MDEw MTI5MzJaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBCRDQ4RERGNjREQTkz MUY1MzM5NDJCOEZDNzhBQjA3RTNEMjAzRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCffxH24LZYmQU8bxoSvqHoxyeSsTJKdIyKdFhVKCQXRvcbPwza J3F452JZPK10tJBe78uxATooyFvsItlL3cOrLMBPpGlcGMkyFXTdomjUuyqnYyzf Nb8pVWGM13PymCXKnaHRzHR7zHj98c1oicVmaDpYGgMZSzS5ROMJUt+COgOZC62X 9ymIek9yrJLBMhpMqre8dlTGYvjA0ybLk3gx4s7f9ylFliwCC+LRtyfVwbvDqG6w MWN4PGEH/xfBxWpp6jk0Fc4byNI88+1K4u+LxuaDCpmTI22Y1pd/mXXR05HhWuNU qv8JXVALolHPMD2D7Oafwru2cC/h+54QD4m/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUC9SN32Takx9TOUK4/HirB+PSA+owHwYDVR0jBBgwFoAUTv8aturaJzugZtsP d7edag2QFUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYwMi9UdjhhdHVyYUp6dWdadHNQZDdlZGFnMlFGVUkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9UdjhhdHVyYUp6dWdadHNQZDdlZGFn MlFGVUkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjAyL0M5U04zMlRha3g5VE9VSzRfSGlyQi1QU0Etby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA906UwDQYJKoZIhvcNAQELBQADggEBADMp47FoiKSlxLG5Yg71vIMY/y8N sKlkWpHpiiIxcttJs6trAZOoyheXfLxdtXDitqHaZFC0laKYHXmtMgS+pmztAT3I ZG7kQVFNKZiYV7IOfgZFQzdTdBE9FseClHbb/lfN2WptN8KttSlQv7zRKm0OxeSj NaexDlV3Y21EWjAp6oVXBApFj8T+2L7JG/i1wQ0L3IKZ2g6BYLzPxmkyRBMHZdSg 7NFYtto+Rf2i4SHu8KrTakaGlIkKN626UyEVWnnsoSVqWmgA9VJ9FRFaQnZPiqw4 A+9HWEtg2Bs2as9020LyHckmOt32TqgT3oA/qUrLQvq1jw5bcBhFsNtisiE= -----END CERTIFICATE-----Generated at Sat Sep 6 09:31:50 2025 by rpki-client