$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa File: opmYDIxN--IeoPkwkk3WNJ8Zj20.roa (raw, json) Hash identifier: d4mTgAC4k8ZGIefSzgSUVhlDxevCG4dEwHaquIkdtA0= Subject key identifier: A2:99:98:0C:8C:4D:FB:E2:1E:A0:F9:30:92:4D:D6:34:9F:19:8F:6D Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5 Certificate serial: 0E Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa Signing time: Thu 03 Jul 2025 03:30:35 +0000 ROA not before: Thu 03 Jul 2025 03:30:35 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 146979 IP address blocks: 2001:cd0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5 Validity Not Before: Jul 3 03:30:35 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A299980C8C4DFBE21EA0F930924DD6349F198F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:43:39:34:fd:92:3a:5f:b6:88:ba:5a:c7:40: f5:e6:ff:9f:6d:76:3e:ac:3d:b4:9d:09:3a:5a:2f: 6d:de:08:d0:7a:65:bb:67:d8:1f:43:6a:2e:ac:cd: c2:bd:7e:99:2b:a9:55:7c:fb:44:06:31:15:85:46: 28:7d:1e:2c:96:d5:97:0f:b8:1f:a9:4a:05:d6:fc: 5f:cd:72:09:44:84:43:13:26:ec:38:5f:36:d7:93: 77:3f:6d:5e:2b:fb:54:d8:bc:a3:80:f8:3c:07:7b: 17:57:d3:91:0d:3c:1a:1e:83:7e:c5:df:b1:a2:9a: 63:05:15:a5:ca:2c:7f:f1:58:82:c3:5c:7b:a7:5f: 6e:a4:f2:45:6e:7d:63:aa:71:b7:80:18:3f:e3:5a: 16:81:f1:04:a9:39:b1:78:e4:f3:47:c0:17:69:ef: c2:32:39:ff:64:9b:8d:f3:88:8c:38:56:31:2d:f2: d1:31:5c:64:35:19:d9:96:04:8a:60:2c:92:85:e8: 74:b2:45:8e:d5:4a:6d:2e:be:61:da:24:6e:fe:a6: 8a:60:eb:90:55:4f:d5:eb:73:a4:20:05:c4:3f:22: 3a:64:7c:b1:66:f2:a5:bf:d1:b3:3d:6f:99:07:f4: 2d:76:7e:28:01:83:ab:87:90:b6:53:99:a3:60:b7: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:98:0C:8C:4D:FB:E2:1E:A0:F9:30:92:4D:D6:34:9F:19:8F:6D X509v3 Authority Key Identifier: keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/opmYDIxN--IeoPkwkk3WNJ8Zj20.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:cd0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:fa:59:0a:4d:84:a0:52:c6:13:31:21:0b:cd:c5:44:e2:b4: 28:71:b0:9a:32:b5:42:e0:db:f9:c9:4e:14:0c:d3:a8:60:3d: d7:6a:47:68:69:a5:f8:4b:1c:17:c5:24:7c:47:f7:5c:b9:a4: 3f:13:bd:c6:8e:7b:03:54:ab:1b:f7:31:97:b5:3e:f2:7b:58: 45:70:44:9b:93:5f:9e:2b:75:d3:d4:0b:a7:f3:d4:d0:61:80: 9e:96:b1:30:f5:d1:f4:4c:c1:50:5d:0d:ee:dc:2a:4c:69:0e: 33:16:37:3a:6e:fa:9a:24:30:2a:df:32:eb:5a:e5:37:ae:d1: c1:6d:0b:63:49:24:13:84:99:42:19:93:54:52:eb:84:da:bd: 5b:09:c1:bc:43:9d:bd:48:6f:ba:33:0a:06:fc:50:1b:e5:8b: d4:84:4d:ae:8b:d0:0b:38:2b:be:9c:3e:53:94:53:cd:a6:c6: 98:28:10:42:d1:9b:ae:cb:fc:19:5a:db:f6:fc:3b:32:bb:fc: 17:d1:8b:b8:f0:85:12:a3:ed:cb:1d:5a:8d:21:53:9d:62:10: c8:60:44:6c:6d:c8:a6:97:a5:9e:df:32:75:28:5f:99:11:32: 9f:ef:dc:0c:31:5b:f3:24:54:11:30:29:7b:72:03:d6:07:9b: 68:04:ef:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMjI5 OTQ4NzlDMjU4MTIzRkZBMDk3RTg0RTA1Mzc1RjYwQTU5MUE1MB4XDTI1MDcwMzAz MzAzNVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTI5OTk4MEM4QzRERkJF MjFFQTBGOTMwOTI0REQ2MzQ5RjE5OEY2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOtDOTT9kjpftoi6WsdA9eb/n212Pqw9tJ0JOlovbd4I0Hplu2fY H0NqLqzNwr1+mSupVXz7RAYxFYVGKH0eLJbVlw+4H6lKBdb8X81yCUSEQxMm7Dhf NteTdz9tXiv7VNi8o4D4PAd7F1fTkQ08Gh6DfsXfsaKaYwUVpcosf/FYgsNce6df bqTyRW59Y6pxt4AYP+NaFoHxBKk5sXjk80fAF2nvwjI5/2SbjfOIjDhWMS3y0TFc ZDUZ2ZYEimAskoXodLJFjtVKbS6+Ydokbv6mimDrkFVP1etzpCAFxD8iOmR8sWby pb/Rsz1vmQf0LXZ+KAGDq4eQtlOZo2C3ZeUCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSimZgMjE374h6g+TCSTdY0nxmPbTAfBgNVHSMEGDAWgBTSKZSHnCWBI/+gl+hO BTdfYKWRpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTMvMGltVWg1d2xnU1Bfb0pmb1RnVTNYMkNsa2FVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMGltVWg1d2xnU1Bfb0pmb1RnVTNY MkNsa2FVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTEzL29wbVlESXhOLS1JZW9Qa3drazNXTko4WmoyMC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQzQMA0GCSqGSIb3DQEBCwUAA4IBAQBN+lkKTYSgUsYTMSELzcVE 4rQocbCaMrVC4Nv5yU4UDNOoYD3XakdoaaX4SxwXxSR8R/dcuaQ/E73GjnsDVKsb 9zGXtT7ye1hFcESbk1+eK3XT1Aun89TQYYCelrEw9dH0TMFQXQ3u3CpMaQ4zFjc6 bvqaJDAq3zLrWuU3rtHBbQtjSSQThJlCGZNUUuuE2r1bCcG8Q529SG+6MwoG/FAb 5YvUhE2ui9ALOCu+nD5TlFPNpsaYKBBC0Zuuy/wZWtv2/Dsyu/wX0Yu48IUSo+3L HVqNIVOdYhDIYERsbciml6We3zJ1KF+ZETKf79wMMVvzJFQRMCl7cgPWB5toBO8z -----END CERTIFICATE-----Generated at Sat Jul 5 00:34:34 2025 by rpki-client