$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/fbUuI-zEz0EC9-NRk-4oBS9pPps.roa File: fbUuI-zEz0EC9-NRk-4oBS9pPps.roa (raw, json) Hash identifier: ldmQEPQxupfNsZG/EZuuvFTzLZs9Ya6MugxL45H5wQg= Subject key identifier: 7D:B5:2E:23:EC:C4:CF:41:02:F7:E3:51:93:EE:28:05:2F:69:3E:9B Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 86 Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/fbUuI-zEz0EC9-NRk-4oBS9pPps.roa Signing time: Tue 10 Jun 2025 10:50:47 +0000 ROA not before: Tue 10 Jun 2025 10:50:47 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38631 IP address blocks: 119.235.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Jun 10 10:50:47 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7DB52E23ECC4CF4102F7E35193EE28052F693E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:54:91:d8:53:9b:23:bd:16:10:47:13:fc: 02:15:cf:bf:c2:43:86:76:69:c5:20:e8:8f:de:0b: d7:d9:1f:79:59:38:e6:53:54:db:4c:f6:a4:e6:03: e0:4d:7d:00:cb:3c:00:f8:99:60:24:86:5c:1c:51: 22:3a:b2:18:13:3d:f5:b1:8b:64:9a:80:d4:96:92: d0:44:c2:c1:bd:96:7e:ed:83:a7:b6:14:9e:fb:04: 83:73:9f:31:e7:a7:bf:78:97:60:c2:e3:12:73:af: 80:7f:dc:76:5b:07:5c:f3:ee:b5:78:4a:bc:aa:b6: 5e:7a:3d:96:7d:79:b9:52:60:77:1a:4a:23:80:a7: af:e7:01:6a:f9:55:4e:c2:45:e8:71:da:30:b2:76: 4b:14:30:07:5a:37:2f:4b:c8:80:a3:70:86:a0:c3: fe:28:9b:87:93:4e:b5:2b:2f:d5:14:57:43:ae:2f: 63:3f:07:22:35:53:44:fb:43:29:a7:f6:36:7b:9c: 3a:40:1b:1a:64:56:cc:85:53:13:80:d5:2e:13:20: cb:c2:42:fc:a8:94:df:92:fd:28:6d:b6:39:f4:d7: 74:6f:6b:0f:95:55:fa:e5:95:95:0c:c1:82:13:e0: 6a:a3:38:1e:01:b7:d7:da:3a:1f:d7:74:c8:3a:02: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B5:2E:23:EC:C4:CF:41:02:F7:E3:51:93:EE:28:05:2F:69:3E:9B X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/fbUuI-zEz0EC9-NRk-4oBS9pPps.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.235.224.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b9:65:be:dd:d8:01:e0:22:ad:3c:de:b6:06:f0:07:9c:5f: 88:ec:f2:d9:46:1a:85:47:f5:54:62:9d:2e:46:28:fd:10:1e: 17:db:bc:e6:93:e4:83:14:bb:1d:64:3b:35:33:5e:48:c6:27: d9:52:c6:e3:8a:db:7b:4f:84:34:fe:7e:d5:96:8f:bf:f9:a9: 41:42:12:41:02:68:a4:99:5f:ba:8f:d4:e7:dc:6b:d2:d1:07: bc:2b:5d:71:a7:1d:b8:fb:aa:77:fc:ab:1e:c1:b8:14:29:a1: eb:e4:b2:5f:42:14:8e:62:ac:fc:8c:2b:70:b8:4e:c5:ab:8f: 6c:48:b1:a5:76:7e:fe:c9:e7:2b:00:2b:c7:02:ba:5a:a5:6c: e0:bc:d0:8c:d0:e5:73:a7:89:bb:87:22:f4:b9:1e:2d:17:b7: 6c:b6:3d:dd:a7:df:31:f7:a4:23:a6:8d:d6:48:e7:cd:52:44: 0e:04:c6:ac:94:09:97:fd:9e:43:4a:ae:48:e1:81:4e:cf:23: 65:ee:37:e1:2b:f2:d8:8e:59:0c:70:59:9f:58:69:cc:25:62: f6:4a:6e:96:35:7f:2e:84:23:d9:43:d0:9a:4d:77:5b:82:78: 5e:06:da:69:1d:7f:df:8b:c2:4d:cb:6c:db:d8:28:e0:a0:0e: c7:90:3c:6c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNTA2MTAx MDUwNDdaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDdEQjUyRTIzRUNDNENG NDEwMkY3RTM1MTkzRUUyODA1MkY2OTNFOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBHVSR2FObI70WEEcT/AIVz7/CQ4Z2acUg6I/eC9fZH3lZOOZT VNtM9qTmA+BNfQDLPAD4mWAkhlwcUSI6shgTPfWxi2SagNSWktBEwsG9ln7tg6e2 FJ77BINznzHnp794l2DC4xJzr4B/3HZbB1zz7rV4Sryqtl56PZZ9eblSYHcaSiOA p6/nAWr5VU7CRehx2jCydksUMAdaNy9LyICjcIagw/4om4eTTrUrL9UUV0OuL2M/ ByI1U0T7Qymn9jZ7nDpAGxpkVsyFUxOA1S4TIMvCQvyolN+S/Shttjn013Rvaw+V VfrllZUMwYIT4GqjOB4Bt9faOh/XdMg6AnIDAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUfbUuI+zEz0EC9+NRk+4oBS9pPpswHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDExNi9mYlV1SS16RXowRUM5LU5Say00b0JTOXBQcHMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAd+vgMA0GCSqGSIb3DQEBCwUAA4IBAQBNuWW+3dgB4CKtPN62BvAH nF+I7PLZRhqFR/VUYp0uRij9EB4X27zmk+SDFLsdZDs1M15IxifZUsbjitt7T4Q0 /n7Vlo+/+alBQhJBAmikmV+6j9Tn3GvS0Qe8K11xpx24+6p3/KsewbgUKaHr5LJf QhSOYqz8jCtwuE7Fq49sSLGldn7+yecrACvHArpapWzgvNCM0OVzp4m7hyL0uR4t F7dstj3dp98x96Qjpo3WSOfNUkQOBMaslAmX/Z5DSq5I4YFOzyNl7jfhK/LYjlkM cFmfWGnMJWL2Sm6WNX8uhCPZQ9CaTXdbgnheBtppHX/fi8JNy2zb2CjgoA7HkDxs -----END CERTIFICATE-----Generated at Sat Jul 5 19:30:42 2025 by rpki-client