$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20041/OnwiyGUxqdaS2KP3gPbJaSZcaDo.roa File: OnwiyGUxqdaS2KP3gPbJaSZcaDo.roa (raw, json) Hash identifier: OQNq0tCKu5fvpF1MpyuREk3kk7a+rvy/knB4HWGExTI= Subject key identifier: 3A:7C:22:C8:65:31:A9:D6:92:D8:A3:F7:80:F6:C9:69:26:5C:68:3A Certificate issuer: /CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9 Certificate serial: 4C Authority key identifier: 28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/OnwiyGUxqdaS2KP3gPbJaSZcaDo.roa Signing time: Tue 10 Jun 2025 10:46:44 +0000 ROA not before: Tue 10 Jun 2025 10:46:44 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 63771 IP address blocks: 202.223.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9 Validity Not Before: Jun 10 10:46:44 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=3A7C22C86531A9D692D8A3F780F6C969265C683A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:24:13:98:eb:07:6d:84:b8:3f:a8:79:62: 85:c6:48:66:7e:9a:a8:63:6c:68:0f:bf:df:f9:c5: 92:14:21:9d:b6:a9:47:ff:14:46:47:7b:41:d5:d5: 8b:06:fc:64:32:ea:47:b3:d6:93:52:7d:72:85:a7: fb:0a:35:67:89:73:64:da:de:7e:ae:b4:9a:a0:e1: e7:90:6b:7a:5a:1e:d2:8f:22:d5:d0:20:6a:1c:b3: 36:48:56:2e:a9:26:41:c6:cb:7e:0b:f5:e1:ba:d4: f6:d5:fc:d8:60:03:8f:30:c7:99:cc:f2:4b:0b:34: 9f:ea:10:47:f5:36:bd:04:8b:b1:9e:f8:9b:fe:85: 25:b2:f9:51:0b:67:2d:2a:78:ab:21:10:a9:9d:a3: f3:e1:38:0e:77:45:9e:28:09:87:48:21:33:fa:28: d5:85:06:37:e5:68:53:cd:ad:73:28:be:40:68:b9: 34:db:14:14:a4:72:83:33:71:7c:24:ea:f8:5d:23: 8c:c9:5e:27:e8:b2:b5:0d:28:56:de:8a:6c:63:86: 80:a7:dd:de:ce:b0:c6:5a:66:e8:67:3a:55:c1:e2: 1c:01:fb:28:ad:df:7b:00:4b:b1:03:7a:be:ef:e2: 2b:43:db:ad:55:7b:3f:ec:02:84:c8:c6:82:15:c8: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7C:22:C8:65:31:A9:D6:92:D8:A3:F7:80:F6:C9:69:26:5C:68:3A X509v3 Authority Key Identifier: keyid:28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/OnwiyGUxqdaS2KP3gPbJaSZcaDo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.223.56.0/22 Signature Algorithm: sha256WithRSAEncryption ca:e4:0d:48:73:51:6e:74:b2:fd:3f:c3:b9:cd:5b:5b:e2:e0: c9:9b:13:1e:cb:d1:22:a1:45:a5:77:64:3f:23:f9:03:12:34: 34:c4:d4:1b:88:f7:1e:50:26:2f:9f:26:6e:fe:ec:46:ad:54: cb:21:1b:c5:f3:c0:7e:68:60:74:48:bb:ac:52:6b:aa:b8:77: 8c:65:db:21:71:76:04:7c:49:67:63:63:45:ad:2e:8d:47:00: ec:ce:35:9b:88:01:4e:cd:60:6c:48:2c:72:b6:f4:60:b0:29: 15:f5:eb:4c:06:d9:5f:84:d0:19:85:6d:d1:5b:54:a6:5c:a4: df:53:ab:79:04:d5:d8:01:3b:aa:d1:f7:38:ab:d0:3e:e9:7b: 22:6e:3d:a7:be:4c:82:86:2a:9e:11:70:61:f3:e5:3e:d7:5e: a8:ea:e2:79:d1:9d:6e:1a:21:1c:c3:58:61:ef:9f:de:07:36: ac:12:4d:c4:9d:17:df:25:7e:bf:3d:d3:4f:81:8c:b6:2e:41: b4:8b:91:05:84:76:5e:36:67:3b:1e:eb:73:20:be:80:d3:e0: e4:4f:b7:c3:b6:4a:f7:8f:d3:50:28:09:f3:08:70:d8:5c:8a: 2e:b1:dc:17:6c:a2:5c:a5:2f:d2:c1:6f:d1:46:5d:29:ec:34: d1:d6:20:b9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOEU2 OTE1MkJBM0Y3QTU3QTFCOTkxMDAwMTU2RTU4MkFEMEVDOUQ5MB4XDTI1MDYxMDEw NDY0NFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoM0E3QzIyQzg2NTMxQTlE NjkyRDhBM0Y3ODBGNkM5NjkyNjVDNjgzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKsUJBOY6wdthLg/qHlihcZIZn6aqGNsaA+/3/nFkhQhnbapR/8U Rkd7QdXViwb8ZDLqR7PWk1J9coWn+wo1Z4lzZNrefq60mqDh55Breloe0o8i1dAg ahyzNkhWLqkmQcbLfgv14brU9tX82GADjzDHmczySws0n+oQR/U2vQSLsZ74m/6F JbL5UQtnLSp4qyEQqZ2j8+E4DndFnigJh0ghM/oo1YUGN+VoU82tcyi+QGi5NNsU FKRygzNxfCTq+F0jjMleJ+iytQ0oVt6KbGOGgKfd3s6wxlpm6Gc6VcHiHAH7KK3f ewBLsQN6vu/iK0PbrVV7P+wChMjGghXIVlMCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQ6fCLIZTGp1pLYo/eA9slpJlxoOjAfBgNVHSMEGDAWgBQo5pFSuj96V6G5kQAB VuWCrQ7J2TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDEvS09hUlVyb19lbGVodVpFQUFWYmxncTBPeWRrLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS09hUlVyb19lbGVodVpFQUFWYmxn cTBPeWRrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQxL09ud2l5R1V4cWRhUzJLUDNnUGJKYVNaY2FEby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALK3zgwDQYJKoZIhvcNAQELBQADggEBAMrkDUhzUW50sv0/w7nNW1vi 4MmbEx7L0SKhRaV3ZD8j+QMSNDTE1BuI9x5QJi+fJm7+7EatVMshG8XzwH5oYHRI u6xSa6q4d4xl2yFxdgR8SWdjY0WtLo1HAOzONZuIAU7NYGxILHK29GCwKRX160wG 2V+E0BmFbdFbVKZcpN9Tq3kE1dgBO6rR9zir0D7peyJuPae+TIKGKp4RcGHz5T7X Xqjq4nnRnW4aIRzDWGHvn94HNqwSTcSdF98lfr8900+BjLYuQbSLkQWEdl42Zzse 63MgvoDT4ORPt8O2SveP01AoCfMIcNhcii6x3BdsolylL9LBb9FGXSnsNNHWILk= -----END CERTIFICATE-----Generated at Sat Jul 5 00:02:24 2025 by rpki-client