$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/910/h8CDOM4459cRbN-ar-QWQk81YaU.roa File: h8CDOM4459cRbN-ar-QWQk81YaU.roa (raw, json) Hash identifier: 9ArUbvF07zyfYBFoReUhy1eSxbY/Ny7/OYR85J4bMY0= Subject key identifier: 87:C0:83:38:CE:38:E7:D7:11:6C:DF:9A:AF:E4:16:42:4F:35:61:A5 Certificate issuer: /CN=8D53E0BD233DF0962808D396EAE952150C2A5BD8 Certificate serial: 13 Authority key identifier: 8D:53:E0:BD:23:3D:F0:96:28:08:D3:96:EA:E9:52:15:0C:2A:5B:D8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVPgvSM98JYoCNOW6ulSFQwqW9g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/h8CDOM4459cRbN-ar-QWQk81YaU.roa Signing time: Wed 21 May 2025 00:59:27 +0000 ROA not before: Wed 21 May 2025 00:59:27 +0000 ROA not after: Fri 15 May 2026 01:30:03 +0000 asID: 24262 IP address blocks: 202.122.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/jVPgvSM98JYoCNOW6ulSFQwqW9g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/jVPgvSM98JYoCNOW6ulSFQwqW9g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVPgvSM98JYoCNOW6ulSFQwqW9g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D53E0BD233DF0962808D396EAE952150C2A5BD8 Validity Not Before: May 21 00:59:27 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=87C08338CE38E7D7116CDF9AAFE416424F3561A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1d:84:63:ce:7e:9b:09:aa:82:45:9a:2a:60: 18:47:56:3e:e7:a5:92:ea:da:44:30:eb:2e:5a:23: 11:1a:fb:cb:e3:95:7b:62:61:d9:35:9f:04:50:c4: bc:28:98:8b:1d:34:6e:59:90:98:1b:34:81:8a:ab: 42:77:35:6e:a2:d6:eb:40:9f:0c:77:16:d5:f6:c9: 0e:a8:97:db:d3:c3:8b:2d:ad:26:b7:1d:eb:af:5f: a9:80:2e:bc:78:20:b4:95:11:9a:72:9b:cc:e9:ee: b4:49:21:ad:01:0c:3e:32:0e:f4:cd:f3:a2:02:90: a2:8f:04:16:d5:c7:47:2c:3d:09:77:28:93:de:dc: bc:2a:c2:a3:18:85:df:62:c0:44:b5:97:26:37:1e: 18:27:1a:e2:bb:45:fe:7c:d0:30:46:3f:90:bd:fa: ff:46:e2:92:8f:96:50:c4:e0:b7:96:b6:4d:cc:4e: a0:5d:5f:01:5b:1a:4d:ff:60:b4:97:82:2e:15:54: b4:ba:59:a4:71:45:b3:96:0c:bb:5d:ac:55:b2:c2: 07:f9:89:94:ed:8f:63:1e:1b:bf:0f:58:23:70:ee: 51:bc:92:e2:e0:a1:ca:db:e9:25:cb:a3:ee:6a:7d: 53:71:21:31:14:5b:a6:74:e4:b4:de:99:01:6d:c5: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:83:38:CE:38:E7:D7:11:6C:DF:9A:AF:E4:16:42:4F:35:61:A5 X509v3 Authority Key Identifier: keyid:8D:53:E0:BD:23:3D:F0:96:28:08:D3:96:EA:E9:52:15:0C:2A:5B:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/jVPgvSM98JYoCNOW6ulSFQwqW9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVPgvSM98JYoCNOW6ulSFQwqW9g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/910/h8CDOM4459cRbN-ar-QWQk81YaU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.122.136.0/21 Signature Algorithm: sha256WithRSAEncryption 35:42:a5:9d:fc:89:2d:cc:35:54:2d:5e:68:cb:a5:2a:21:8d: ea:5a:90:70:43:b2:6e:68:76:0c:f6:5e:b7:64:90:bd:ff:74: 4b:b4:28:7b:8b:58:dc:1b:a8:b9:42:43:c0:c2:05:56:9a:cf: 75:53:74:94:a4:32:07:10:ed:b4:3e:9a:c9:75:dd:9b:51:cf: 15:a0:1f:8f:0a:41:13:d8:9e:33:3a:a8:b9:8f:00:3b:43:8f: ee:51:81:a6:ae:e4:05:89:bc:c2:b2:6f:56:5a:4f:41:b6:95: 8a:7a:ac:6b:a0:be:60:96:8a:d0:5d:7c:fd:0f:41:c8:ab:2f: 0a:07:3b:a5:93:2d:27:f5:3c:83:11:8f:a8:76:c3:1b:3f:08: 4d:4c:f9:c2:0a:51:1e:81:c8:17:4c:bf:ea:e1:56:b1:bb:2e: 1e:f7:32:93:17:90:0f:73:cd:ea:dd:0a:c5:91:ef:91:7b:bd: fd:47:c9:a6:74:c9:0b:78:b7:fd:49:81:c7:ff:f1:28:ac:27: 32:46:d3:9f:7c:9e:43:2d:c5:d3:52:e3:b8:90:61:1b:b3:07: 85:46:7d:0a:b5:c6:b2:1b:f9:6c:68:6a:bf:68:df:35:7e:d9: 06:b2:f2:a9:9c:8d:41:02:fe:80:46:92:f6:63:d1:87:c9:52: 4b:69:a1:79 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDUz RTBCRDIzM0RGMDk2MjgwOEQzOTZFQUU5NTIxNTBDMkE1QkQ4MB4XDTI1MDUyMTAw NTkyN1oXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoODdDMDgzMzhDRTM4RTdE NzExNkNERjlBQUZFNDE2NDI0RjM1NjFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPUdhGPOfpsJqoJFmipgGEdWPuelkuraRDDrLlojERr7y+OVe2Jh 2TWfBFDEvCiYix00blmQmBs0gYqrQnc1bqLW60CfDHcW1fbJDqiX29PDiy2tJrcd 669fqYAuvHggtJURmnKbzOnutEkhrQEMPjIO9M3zogKQoo8EFtXHRyw9CXcok97c vCrCoxiF32LARLWXJjceGCca4rtF/nzQMEY/kL36/0biko+WUMTgt5a2TcxOoF1f AVsaTf9gtJeCLhVUtLpZpHFFs5YMu12sVbLCB/mJlO2PYx4bvw9YI3DuUbyS4uCh ytvpJcuj7mp9U3EhMRRbpnTktN6ZAW3FR28CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSHwIM4zjjn1xFs35qv5BZCTzVhpTAfBgNVHSMEGDAWgBSNU+C9Iz3wligI05bq 6VIVDCpb2DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTEwL2pWUGd2U005OEpZb0NOT1c2dWxTRlF3cVc5Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pWUGd2U005OEpZb0NOT1c2dWxTRlF3 cVc5Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MTAvaDhDRE9NNDQ1OWNSYk4tYXItUVdRazgxWWFVLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8p6iDANBgkqhkiG9w0BAQsFAAOCAQEANUKlnfyJLcw1VC1eaMulKiGN6lqQ cEOybmh2DPZet2SQvf90S7Qoe4tY3BuouUJDwMIFVprPdVN0lKQyBxDttD6ayXXd m1HPFaAfjwpBE9ieMzqouY8AO0OP7lGBpq7kBYm8wrJvVlpPQbaVinqsa6C+YJaK 0F18/Q9ByKsvCgc7pZMtJ/U8gxGPqHbDGz8ITUz5wgpRHoHIF0y/6uFWsbsuHvcy kxeQD3PN6t0KxZHvkXu9/UfJpnTJC3i3/UmBx//xKKwnMkbTn3yeQy3F01LjuJBh G7MHhUZ9CrXGshv5bGhqv2jfNX7ZBrLyqZyNQQL+gEaS9mPRh8lSS2mheQ== -----END CERTIFICATE-----Generated at Wed Jun 4 02:14:06 2025 by rpki-client