$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/XNQq6-4JOvlO7x1r_4C-BP4w1lE.roa File: XNQq6-4JOvlO7x1r_4C-BP4w1lE.roa (raw, json) Hash identifier: FSX9QlJn56GbBQqdh7b4bRQL9zgIpLSibWKHGDLPd3o= Subject key identifier: 5C:D4:2A:EB:EE:09:3A:F9:4E:EF:1D:6B:FF:80:BE:04:FE:30:D6:51 Certificate issuer: /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C Certificate serial: 35 Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/XNQq6-4JOvlO7x1r_4C-BP4w1lE.roa Signing time: Tue 01 Jul 2025 01:28:37 +0000 ROA not before: Tue 01 Jul 2025 01:28:37 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 17682 IP address blocks: 2402:1580:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C Validity Not Before: Jul 1 01:28:37 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=5CD42AEBEE093AF94EEF1D6BFF80BE04FE30D651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:d0:bc:95:09:5a:c2:5a:7a:39:d5:be:ef: 7a:73:c4:ef:d6:65:50:6d:b9:e1:5d:b8:6f:16:e7: c6:00:e2:e0:cc:25:d1:fd:e3:71:ce:a6:02:38:58: 15:ee:9e:6d:4b:c8:9c:9c:46:5c:56:10:9a:f4:78: 0c:6f:1c:c2:3a:e4:76:ab:b5:e6:bd:07:1c:06:b7: a1:46:28:4b:da:80:0b:a6:a4:c2:14:63:24:84:6e: c3:c6:ae:4c:fa:47:54:99:af:51:d9:34:eb:cc:16: 4a:60:17:3c:a4:97:fa:7c:96:9e:58:f1:a0:2b:a4: 64:84:25:00:e2:22:50:d7:50:47:55:f0:a5:e3:aa: ac:9f:e9:04:c8:b7:1d:4d:fe:43:cd:a9:ef:42:39: d3:e0:e0:5c:64:a1:54:e3:c3:1c:da:3a:74:93:94: 10:8d:e0:90:da:b8:cb:f8:f5:5f:11:c3:24:4d:32: be:32:a3:8b:77:b2:05:4d:59:20:2f:5f:69:50:e4: a2:20:e9:32:da:99:50:ba:ed:ea:e8:10:ff:34:82: 0c:1a:39:fe:43:bd:17:66:e5:40:48:49:9c:ce:f7: 92:36:2b:59:be:ab:71:32:50:1d:83:e3:12:a3:e9: 78:2d:5d:16:71:f9:4a:32:be:e4:ea:cd:8b:5e:ab: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D4:2A:EB:EE:09:3A:F9:4E:EF:1D:6B:FF:80:BE:04:FE:30:D6:51 X509v3 Authority Key Identifier: keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/XNQq6-4JOvlO7x1r_4C-BP4w1lE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1580:2000::/40 Signature Algorithm: sha256WithRSAEncryption 21:9e:13:7c:86:58:08:62:f4:f7:77:55:3e:89:64:4a:a9:be: 95:b9:79:86:5f:d8:1b:2e:b2:33:c9:2b:36:76:ea:53:29:3b: ef:1a:a6:03:9d:62:2e:0b:2c:74:62:1c:b4:b8:a6:a2:15:d2: 5e:4d:67:ea:22:37:61:3c:e3:86:5e:ab:18:27:1a:23:fa:8b: 93:d1:d6:c2:ca:32:99:72:92:15:ab:e7:68:28:f2:90:af:23: 79:b2:48:75:db:ba:44:81:31:4d:d6:98:44:4e:5f:50:0d:8e: ad:fd:30:a8:3b:84:04:17:5e:db:f7:64:54:74:82:a0:f6:f4: 1d:90:6d:58:45:7c:c7:f1:21:db:86:b3:ad:95:8a:90:f2:da: 85:43:43:31:8c:a4:cc:6f:9b:af:32:03:8b:5b:34:9e:11:bf: 9a:40:5f:b2:f0:13:4e:d0:8d:ba:4d:a3:ec:f9:f2:67:d5:6e: f2:48:07:82:58:6d:36:26:db:49:2c:b8:2e:41:4b:14:f9:e1: 1b:77:55:89:ad:f1:9f:e0:ae:a8:f7:00:73:3e:e0:cb:8e:3b: 58:b4:cb:90:4d:e9:09:fa:6d:f9:1e:ff:69:44:17:99:75:21: 32:7e:c1:47:f3:0e:64:56:63:fb:1a:51:88:cb:20:8c:d3:89: 13:ce:cb:22 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjQ2 OEIzMURCMjc1QTVEREFFN0E1NDlBQzA1OERDMjBEN0Y4QzlDMB4XDTI1MDcwMTAx MjgzN1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNUNENDJBRUJFRTA5M0FG OTRFRUYxRDZCRkY4MEJFMDRGRTMwRDY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOz10LyVCVrCWno51b7venPE79ZlUG254V24bxbnxgDi4Mwl0f3j cc6mAjhYFe6ebUvInJxGXFYQmvR4DG8cwjrkdqu15r0HHAa3oUYoS9qAC6akwhRj JIRuw8auTPpHVJmvUdk068wWSmAXPKSX+nyWnljxoCukZIQlAOIiUNdQR1XwpeOq rJ/pBMi3HU3+Q82p70I50+DgXGShVOPDHNo6dJOUEI3gkNq4y/j1XxHDJE0yvjKj i3eyBU1ZIC9faVDkoiDpMtqZULrt6ugQ/zSCDBo5/kO9F2blQEhJnM73kjYrWb6r cTJQHYPjEqPpeC1dFnH5SjK+5OrNi16rmJECAwEAAaOCAiowggImMB0GA1UdDgQW BBRc1Crr7gk6+U7vHWv/gL4E/jDWUTAfBgNVHSMEGDAWgBRfRosx2ydaXdrnpUms BY3CDX+MnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNzIvWDBhTE1kc25XbDNhNTZWSnJBV053ZzFfakp3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWDBhTE1kc25XbDNhNTZWSnJBV053 ZzFfakp3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjcyL1hOUXE2LTRKT3ZsTzd4MXJfNEMtQlA0dzFsRS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkAhWAIDANBgkqhkiG9w0BAQsFAAOCAQEAIZ4TfIZYCGL093dVPolk Sqm+lbl5hl/YGy6yM8krNnbqUyk77xqmA51iLgssdGIctLimohXSXk1n6iI3YTzj hl6rGCcaI/qLk9HWwsoymXKSFavnaCjykK8jebJIddu6RIExTdaYRE5fUA2Orf0w qDuEBBde2/dkVHSCoPb0HZBtWEV8x/Eh24azrZWKkPLahUNDMYykzG+brzIDi1s0 nhG/mkBfsvATTtCNuk2j7PnyZ9Vu8kgHglhtNibbSSy4LkFLFPnhG3dVia3xn+Cu qPcAcz7gy447WLTLkE3pCfpt+R7/aUQXmXUhMn7BR/MOZFZj+xpRiMsgjNOJE87L Ig== -----END CERTIFICATE-----Generated at Fri Jul 4 19:43:17 2025 by rpki-client