$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30233/xhcWCjNZwaBa5L6f4Pg36NKV_k4.roa File: xhcWCjNZwaBa5L6f4Pg36NKV_k4.roa (raw, json) Hash identifier: sGTeIraEUbUY1oKtnxofIoprkcOe+BtbPe2IlXkguqo= Subject key identifier: C6:17:16:0A:33:59:C1:A0:5A:E4:BE:9F:E0:F8:37:E8:D2:95:FE:4E Certificate issuer: /CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1 Certificate serial: 2E Authority key identifier: 44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/xhcWCjNZwaBa5L6f4Pg36NKV_k4.roa Signing time: Tue 01 Jul 2025 01:28:29 +0000 ROA not before: Tue 01 Jul 2025 01:28:29 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 55900 IP address blocks: 2404:2d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1 Validity Not Before: Jul 1 01:28:29 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=C617160A3359C1A05AE4BE9FE0F837E8D295FE4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:fa:b2:03:48:51:44:4b:ee:2e:8c:c3:04: 98:cc:9a:de:5f:b1:db:5e:d3:27:5c:8e:2a:20:c2: a7:73:dd:37:05:cc:cd:78:71:0a:ec:99:07:c1:80: d3:1a:0c:1a:07:7c:23:1e:24:99:dc:05:c1:2d:03: 7d:06:a9:96:a0:6c:36:30:89:9c:ed:2b:b1:f4:00: 56:30:70:42:1d:71:d0:19:d3:e8:9c:0f:e9:14:e7: ce:c8:40:05:96:cb:57:7c:6e:b7:42:39:36:94:da: 26:85:4f:0e:ca:46:1d:4d:ae:ae:75:0f:43:7b:20: 6e:87:b6:06:42:a0:2a:ff:e8:2c:39:23:e6:7f:97: 94:4a:3b:5f:5b:dc:52:0b:82:93:95:5c:b4:ec:93: 12:58:2b:92:80:dc:8f:c7:dd:06:29:05:13:12:2b: 9b:0d:76:81:55:96:93:73:16:bb:4e:ee:e4:aa:be: 82:59:de:76:5f:d6:43:45:31:15:5c:a1:8e:3a:00: 3a:85:c4:3d:b4:1e:88:a0:fe:fc:e3:c0:78:c8:d7: da:a9:8e:ed:40:d5:03:a5:e0:c0:b8:57:f2:2d:bf: 5d:d4:68:0e:d9:ef:78:6b:1c:e5:2c:47:73:77:98: 4d:b4:04:44:15:ed:86:06:15:8f:ea:34:12:30:5c: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:17:16:0A:33:59:C1:A0:5A:E4:BE:9F:E0:F8:37:E8:D2:95:FE:4E X509v3 Authority Key Identifier: keyid:44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/xhcWCjNZwaBa5L6f4Pg36NKV_k4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:2d00::/32 Signature Algorithm: sha256WithRSAEncryption 18:f5:1f:d3:5c:bb:e2:f5:0e:28:28:72:e5:1c:18:b7:e7:3c: 06:89:e4:07:6e:c3:04:f5:dc:4d:0d:a2:2f:55:6e:69:18:25: d5:ed:ff:7a:36:8c:81:3f:e8:dd:36:06:e4:c1:af:b5:fd:bc: db:11:30:d6:4c:26:67:17:eb:0d:0b:4b:ac:9f:5c:3d:18:b3: 59:dd:b1:56:9c:87:dc:06:18:93:17:ed:6a:d0:d2:7a:37:78: fb:f8:76:19:dc:06:93:b1:7c:27:f5:e9:69:7f:5a:78:60:45: 44:54:a8:10:5b:8a:35:2a:ce:75:13:49:e7:18:a1:96:d2:5d: cd:c9:08:e4:ee:5a:8e:f8:20:b5:7b:93:a0:f4:1c:5e:6e:10: f5:77:14:41:e8:34:a0:8b:c7:4a:76:60:f0:ff:f6:44:29:7f: 11:31:2f:5d:ce:3e:84:94:fe:5d:4a:06:20:69:d4:c2:17:0e: c8:29:f5:58:b7:85:b2:43:0e:76:aa:12:61:04:3d:02:a3:96: 6c:b0:9c:e3:ba:72:92:1e:b1:24:3c:25:3d:58:33:0a:7f:d3: d7:a2:ea:45:f3:a9:03:50:94:5c:39:9a:41:66:a2:c3:12:e0: 29:e0:ba:4d:8c:be:9a:94:f6:88:f2:e6:c1:11:e9:f5:b7:e8: a2:37:c7:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NDc1 RjY1RDk2Q0E2OERDRDhFNzMwQUI3OUJGMjEzODhFRTQ4QUQxMB4XDTI1MDcwMTAx MjgyOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQzYxNzE2MEEzMzU5QzFB MDVBRTRCRTlGRTBGODM3RThEMjk1RkU0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANql+rIDSFFES+4ujMMEmMya3l+x217TJ1yOKiDCp3PdNwXMzXhx CuyZB8GA0xoMGgd8Ix4kmdwFwS0DfQaplqBsNjCJnO0rsfQAVjBwQh1x0BnT6JwP 6RTnzshABZbLV3xut0I5NpTaJoVPDspGHU2urnUPQ3sgboe2BkKgKv/oLDkj5n+X lEo7X1vcUguCk5VctOyTElgrkoDcj8fdBikFExIrmw12gVWWk3MWu07u5Kq+glne dl/WQ0UxFVyhjjoAOoXEPbQeiKD+/OPAeMjX2qmO7UDVA6XgwLhX8i2/XdRoDtnv eGsc5SxHc3eYTbQERBXthgYVj+o0EjBcZicCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTGFxYKM1nBoFrkvp/g+Dfo0pX+TjAfBgNVHSMEGDAWgBREdfZdlspo3NjnMKt5 vyE4juSK0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMzMvUkhYMlhaYkthTnpZNXpDcmViOGhPSTdraXRFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUkhYMlhaYkthTnpZNXpDcmViOGhP STdraXRFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjMzL3hoY1dDak5ad2FCYTVMNmY0UGczNk5LVl9rNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkBC0AMA0GCSqGSIb3DQEBCwUAA4IBAQAY9R/TXLvi9Q4oKHLlHBi3 5zwGieQHbsME9dxNDaIvVW5pGCXV7f96NoyBP+jdNgbkwa+1/bzbETDWTCZnF+sN C0usn1w9GLNZ3bFWnIfcBhiTF+1q0NJ6N3j7+HYZ3AaTsXwn9elpf1p4YEVEVKgQ W4o1Ks51E0nnGKGW0l3NyQjk7lqO+CC1e5Og9BxebhD1dxRB6DSgi8dKdmDw//ZE KX8RMS9dzj6ElP5dSgYgadTCFw7IKfVYt4WyQw52qhJhBD0Co5ZssJzjunKSHrEk PCU9WDMKf9PXoupF86kDUJRcOZpBZqLDEuAp4LpNjL6alPaI8ubBEen1t+iiN8eI -----END CERTIFICATE-----Generated at Sat Jul 5 00:27:14 2025 by rpki-client