$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/hwaIaGZwuJktFgS66h9lPBrS5Z0.roa File: hwaIaGZwuJktFgS66h9lPBrS5Z0.roa (raw, json) Hash identifier: qBQlDK6SmhZBTl7yANhk4ISrK/lfa7QIlaMzH48J6i0= Subject key identifier: 87:06:88:68:66:70:B8:99:2D:16:04:BA:EA:1F:65:3C:1A:D2:E5:9D Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Certificate serial: 88 Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/hwaIaGZwuJktFgS66h9lPBrS5Z0.roa Signing time: Tue 10 Jun 2025 10:50:48 +0000 ROA not before: Tue 10 Jun 2025 10:50:48 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38631 IP address blocks: 119.235.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E Validity Not Before: Jun 10 10:50:48 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=870688686670B8992D1604BAEA1F653C1AD2E59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:34:c3:ba:3f:49:01:15:f6:b8:01:f5:b8: 56:d7:2b:14:b1:c9:4e:68:6c:84:49:18:5e:e2:5a: c8:85:51:30:55:7d:fd:58:fd:e1:d8:36:7d:9f:d9: 3b:64:e0:30:bd:22:4d:0f:a7:7d:aa:0a:e6:5d:e2: d9:b4:ef:41:23:53:f4:ba:22:9b:3c:8d:9d:ab:0d: 56:66:78:09:ea:e2:52:f9:1b:9a:ef:74:5e:b4:a6: 56:2f:cc:69:f1:b9:3b:cd:67:50:54:f7:24:79:b1: 03:4e:00:3f:d2:b7:0d:48:d8:f1:1a:1f:c1:31:53: 65:96:c5:ba:a2:49:4e:8f:2f:63:3f:ab:f4:61:e6: 20:b6:9a:81:fb:69:b6:84:da:01:b1:28:19:94:b8: 29:0a:82:30:c8:ce:bf:d9:31:fe:36:87:74:21:ff: 7f:be:01:fd:55:a5:bd:cd:2c:75:d5:c1:33:09:8c: dc:5d:b5:c1:39:30:ac:fa:2e:3e:fb:96:5b:1c:e1: d6:3d:c9:07:f7:90:f8:06:e7:92:3c:e6:ee:7d:20: 54:22:e0:0d:8d:09:98:ec:12:42:ed:5b:a6:21:e7: 02:84:88:19:1a:37:4b:75:81:2b:69:2c:d2:81:40: 99:03:49:8c:8a:f9:69:41:59:ed:8f:ad:b8:22:1b: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:06:88:68:66:70:B8:99:2D:16:04:BA:EA:1F:65:3C:1A:D2:E5:9D X509v3 Authority Key Identifier: keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/hwaIaGZwuJktFgS66h9lPBrS5Z0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.235.235.0/24 Signature Algorithm: sha256WithRSAEncryption 74:6d:02:dd:08:ed:67:8e:7b:8f:c3:01:f2:b1:46:25:92:f9: 97:aa:f3:32:b7:ad:d3:ed:3e:af:c9:d1:48:5f:6f:dc:f6:6f: 9e:c7:e1:77:47:fb:58:ec:d4:d5:d6:7b:ab:31:f7:f2:a6:1e: 4b:15:23:36:e0:ab:f7:61:7f:da:48:5e:e8:a1:35:f2:26:1f: 51:28:a0:79:aa:7d:25:be:e0:33:c2:04:19:6c:72:b6:d4:f0: bd:21:a4:c2:cc:f9:88:ea:06:21:44:ef:97:b0:96:ff:98:40: f9:e0:b0:ff:c3:d1:31:c8:c9:4e:f9:18:d5:e6:d5:7d:91:d9: ab:33:1d:a3:00:46:68:07:fe:08:19:01:26:5a:27:77:0d:62: 59:c6:0e:c1:7b:78:37:d4:e7:6d:1a:d7:9c:58:d4:8e:cf:46: 34:95:d2:b4:c6:8d:4d:82:47:8a:0e:cf:f9:84:cd:e4:e7:be: 5f:3f:7f:20:90:26:08:56:ad:88:27:41:66:6e:54:0c:ad:80: 34:86:b8:ab:10:ba:c0:2d:31:4a:dc:e5:f4:d4:73:e2:09:94: bf:da:b3:dd:97:09:86:fe:4b:7f:da:b2:c6:2d:23:ee:b5:b3: 48:0f:28:28:a6:71:76:6e:e2:ab:b8:fd:46:fa:78:12:4a:55: 37:7e:d5:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5 RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNTA2MTAx MDUwNDhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDg3MDY4ODY4NjY3MEI4 OTkyRDE2MDRCQUVBMUY2NTNDMUFEMkU1OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+eTTDuj9JARX2uAH1uFbXKxSxyU5obIRJGF7iWsiFUTBVff1Y /eHYNn2f2Ttk4DC9Ik0Pp32qCuZd4tm070EjU/S6Ips8jZ2rDVZmeAnq4lL5G5rv dF60plYvzGnxuTvNZ1BU9yR5sQNOAD/Stw1I2PEaH8ExU2WWxbqiSU6PL2M/q/Rh 5iC2moH7abaE2gGxKBmUuCkKgjDIzr/ZMf42h3Qh/3++Af1Vpb3NLHXVwTMJjNxd tcE5MKz6Lj77llsc4dY9yQf3kPgG55I85u59IFQi4A2NCZjsEkLtW6Yh5wKEiBka N0t1gStpLNKBQJkDSYyK+WlBWe2PrbgiG4ilAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUhwaIaGZwuJktFgS66h9lPBrS5Z0wHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDExNi9od2FJYUdad3VKa3RGZ1M2Nmg5bFBCclM1WjAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAd+vrMA0GCSqGSIb3DQEBCwUAA4IBAQB0bQLdCO1njnuPwwHysUYl kvmXqvMyt63T7T6vydFIX2/c9m+ex+F3R/tY7NTV1nurMffyph5LFSM24Kv3YX/a SF7ooTXyJh9RKKB5qn0lvuAzwgQZbHK21PC9IaTCzPmI6gYhRO+XsJb/mED54LD/ w9ExyMlO+RjV5tV9kdmrMx2jAEZoB/4IGQEmWid3DWJZxg7Be3g31OdtGtecWNSO z0Y0ldK0xo1NgkeKDs/5hM3k575fP38gkCYIVq2IJ0FmblQMrYA0hrirELrALTFK 3OX01HPiCZS/2rPdlwmG/kt/2rLGLSPutbNIDygopnF2buKruP1G+ngSSlU3ftVf -----END CERTIFICATE-----Generated at Sat Jul 5 19:59:09 2025 by rpki-client