$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa File: 8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa (raw, json) Hash identifier: rcYvgYPpZAJSsyyCJllulEFshkpQR45dQhf6swzvsjg= Subject key identifier: F0:FE:AD:0F:E6:DF:73:2D:D3:0C:0F:04:72:C2:68:3C:D5:E2:E4:B3 Certificate issuer: /CN=711F626595BDEABE9334C61D729C4DA254CED91C Certificate serial: 52 Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa Signing time: Thu 01 May 2025 01:29:00 +0000 ROA not before: Thu 01 May 2025 01:29:00 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 131949 IP address blocks: 202.226.8.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 22:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C Validity Not Before: May 1 01:29:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F0FEAD0FE6DF732DD30C0F0472C2683CD5E2E4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:6e:c8:c9:20:50:49:bf:f0:5e:1b:6b:e0: 49:cc:05:9b:9d:d4:fa:c4:a1:0f:d1:af:ce:4e:15: 1d:53:2f:d4:42:a2:ad:45:b3:23:98:c6:b8:4e:97: e7:5d:41:be:29:5e:19:ee:22:75:32:f4:0f:83:b8: 40:61:87:02:76:95:90:0f:be:91:a8:d6:dd:fc:f7: 9c:73:6b:ef:84:76:e2:55:ac:f6:48:f5:64:2e:22: 54:d3:ad:eb:16:b2:57:41:57:f5:ff:27:0b:01:2f: 49:73:fc:82:ea:75:d7:fb:ce:1b:39:b5:60:b7:be: 80:0b:47:fa:c2:ab:48:ba:1d:eb:5b:4b:30:67:78: 2d:01:da:58:aa:66:b4:c4:1e:03:f5:4d:97:1a:17: 65:df:9a:4b:ee:5e:16:f0:82:64:38:26:b7:68:6a: 9b:ab:3f:5d:5b:51:e3:4a:6c:8b:0e:7f:4e:55:a4: 97:2d:9b:8d:a0:83:2a:13:25:61:4d:db:4d:27:e8: 18:f2:6a:0e:79:44:bd:08:be:06:d9:12:3b:c6:9c: 1d:43:5f:07:47:fd:04:20:15:8e:0d:4a:c0:05:8a: 41:4a:38:bc:b7:53:52:c8:1b:b5:f7:23:73:ff:fd: 0f:ee:fc:6e:da:75:55:b3:ef:96:9b:be:39:e9:24: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:AD:0F:E6:DF:73:2D:D3:0C:0F:04:72:C2:68:3C:D5:E2:E4:B3 X509v3 Authority Key Identifier: keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/8P6tD-bfcy3TDA8EcsJoPNXi5LM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.226.8.0/22 Signature Algorithm: sha256WithRSAEncryption a4:97:4e:d1:55:1c:8d:bc:bb:70:17:b8:5e:f9:c8:39:7b:5d: 85:62:a0:c7:3e:32:04:11:70:be:3a:03:b5:56:3e:37:f9:c3: c8:c9:e6:a5:e7:03:34:db:b8:51:b3:eb:13:19:e2:08:e6:2b: df:c3:91:af:ea:0f:33:7b:46:e4:f0:c1:10:2d:63:da:55:ef: da:02:99:a2:88:15:aa:07:0e:82:c3:52:db:45:2e:39:d3:c3: 49:30:fd:3b:24:30:a5:4b:25:4e:2a:0e:6e:c8:b9:43:7b:49: e6:e0:a9:3c:bf:18:9d:2f:19:d5:1e:4f:83:04:0d:8e:1a:1e: 0e:83:1c:92:66:be:6a:03:57:95:1d:18:61:b1:61:c7:82:a5: f3:79:7a:fb:81:cd:19:8e:0f:b4:e8:77:96:0d:56:c7:38:65: a9:67:96:b8:ca:fc:cc:a8:9b:cb:72:e6:61:ea:a7:84:4b:71: 6d:83:91:c6:48:f4:8d:e6:3b:76:ae:50:bc:89:d9:30:0a:a0: 99:22:33:b7:1f:ed:83:8d:48:c2:4e:77:a5:eb:46:80:b4:c8: 2e:9c:bd:e4:90:04:5d:f6:ef:8c:53:d9:56:34:c7:9c:7a:6c: b8:4f:5d:e5:73:29:60:25:36:61:19:1a:1a:ed:35:86:f9:06: b6:1c:96:66 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTFG NjI2NTk1QkRFQUJFOTMzNEM2MUQ3MjlDNERBMjU0Q0VEOTFDMB4XDTI1MDUwMTAx MjkwMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRjBGRUFEMEZFNkRGNzMy REQzMEMwRjA0NzJDMjY4M0NENUUyRTRCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALRcbsjJIFBJv/BeG2vgScwFm53U+sShD9Gvzk4VHVMv1EKirUWz I5jGuE6X511BvileGe4idTL0D4O4QGGHAnaVkA++kajW3fz3nHNr74R24lWs9kj1 ZC4iVNOt6xayV0FX9f8nCwEvSXP8gup11/vOGzm1YLe+gAtH+sKrSLod61tLMGd4 LQHaWKpmtMQeA/VNlxoXZd+aS+5eFvCCZDgmt2hqm6s/XVtR40psiw5/TlWkly2b jaCDKhMlYU3bTSfoGPJqDnlEvQi+BtkSO8acHUNfB0f9BCAVjg1KwAWKQUo4vLdT Usgbtfcjc//9D+78btp1VbPvlpu+OekkkQ8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBTw/q0P5t9zLdMMDwRywmg81eLkszAfBgNVHSMEGDAWgBRxH2Jllb3qvpM0xh1y nE2iVM7ZHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTMvY1I5aVpaVzk2cjZUTk1ZZGNweE5vbFRPMlJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1I5aVpaVzk2cjZUTk1ZZGNweE5v bFRPMlJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDkzLzhQNnRELWJmY3kzVERBOEVjc0pvUE5YaTVMTS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALK4ggwDQYJKoZIhvcNAQELBQADggEBAKSXTtFVHI28u3AXuF75yDl7 XYVioMc+MgQRcL46A7VWPjf5w8jJ5qXnAzTbuFGz6xMZ4gjmK9/Dka/qDzN7RuTw wRAtY9pV79oCmaKIFaoHDoLDUttFLjnTw0kw/TskMKVLJU4qDm7IuUN7SebgqTy/ GJ0vGdUeT4MEDY4aHg6DHJJmvmoDV5UdGGGxYceCpfN5evuBzRmOD7Tod5YNVsc4 ZalnlrjK/Myom8ty5mHqp4RLcW2DkcZI9I3mO3auULyJ2TAKoJkiM7cf7YONSMJO d6XrRoC0yC6cveSQBF3274xT2VY0x5x6bLhPXeVzKWAlNmEZGhrtNYb5BrYclmY= -----END CERTIFICATE-----Generated at Mon May 19 01:16:41 2025 by rpki-client