$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30315/xGnyDPXgD2-cfXb2TZeyUAit72g.roa File: xGnyDPXgD2-cfXb2TZeyUAit72g.roa (raw, json) Hash identifier: zJD8LTRP5f/jArX4Pn8ggQcK4r9Yj3fFMMmbHsnHvj0= Subject key identifier: C4:69:F2:0C:F5:E0:0F:6F:9C:7D:76:F6:4D:97:B2:50:08:AD:EF:68 Certificate issuer: /CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Certificate serial: 2D Authority key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/xGnyDPXgD2-cfXb2TZeyUAit72g.roa Signing time: Tue 01 Jul 2025 01:28:30 +0000 ROA not before: Tue 01 Jul 2025 01:28:30 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 10011 IP address blocks: 2402:2840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Validity Not Before: Jul 1 01:28:30 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=C469F20CF5E00F6F9C7D76F64D97B25008ADEF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:e5:df:80:07:5e:35:54:90:d5:ee:e0:da: ad:c5:17:24:1c:a8:57:52:23:db:fd:bc:12:5c:7d: e2:1f:45:de:cd:fc:29:3c:79:2a:a1:8b:79:2f:d6: 60:a5:f2:03:35:b3:8e:1a:74:e6:64:27:0a:0f:40: 62:1b:8b:3e:20:17:e1:83:5a:74:c8:68:e4:06:18: 8e:95:22:a5:ce:20:3d:d2:9e:19:6f:d1:4c:5d:85: 6b:c3:87:32:e4:c3:a2:33:7a:32:fe:b9:a6:b6:32: 3c:b5:d8:ed:b9:2e:ce:ce:a8:27:ca:ca:5a:61:9b: 6f:ba:b8:57:ca:53:5c:f7:ca:27:7d:2e:34:57:24: e8:0a:b1:ca:66:e1:98:4b:ee:4b:18:9c:7c:aa:58: 67:56:eb:48:cc:37:0b:ef:3e:f8:82:df:3b:f9:b2: a0:97:1e:73:d9:0b:8c:3c:93:3c:32:78:d6:56:28: cf:ed:12:00:60:60:96:87:52:2a:58:57:5a:0c:3d: 44:76:b0:ae:68:a9:58:80:b4:69:32:39:1e:bc:15: c3:18:9b:5e:67:f8:d1:de:62:57:73:9c:36:d0:75: 38:8e:df:2a:68:df:a3:24:97:31:f4:56:7d:1e:41: eb:d5:39:7c:bf:26:7b:e8:8e:60:a4:84:d5:44:7a: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:F2:0C:F5:E0:0F:6F:9C:7D:76:F6:4D:97:B2:50:08:AD:EF:68 X509v3 Authority Key Identifier: keyid:98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/xGnyDPXgD2-cfXb2TZeyUAit72g.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2840::/32 Signature Algorithm: sha256WithRSAEncryption 7a:41:22:68:b7:cf:16:d1:b4:13:68:af:e8:b5:13:75:a7:55: d6:32:58:8a:b5:cc:df:38:be:b4:c4:ec:ac:13:b8:b5:20:09: d8:ac:89:d8:31:19:84:38:6b:6a:b1:de:32:2f:34:be:10:b9: d2:24:67:be:8e:89:2b:28:81:74:c9:e6:04:b3:13:60:75:6e: 02:ec:71:34:c8:be:37:d0:f7:00:1d:52:74:f1:b2:5c:08:52: ee:b1:24:e8:2d:32:b3:b3:bf:63:7e:36:67:ba:c0:12:ef:2b: de:08:c5:9d:85:ba:81:d5:23:a6:01:d5:ab:ad:dc:4d:ef:aa: 96:34:3d:02:f4:af:d5:ad:f3:9f:c0:38:fc:9f:2c:05:bc:6b: bb:bb:33:13:e1:49:14:a5:f9:aa:14:c5:30:76:ef:77:cd:1e: c2:e4:b9:6f:60:56:2f:45:b2:ad:fe:b8:55:03:fc:39:03:42: e8:52:6e:a9:3b:54:fe:d2:ba:0d:8e:2c:37:cb:e8:f8:82:66: ad:be:b4:fb:29:84:de:56:13:2b:53:e1:ef:28:23:15:9c:8d: 3e:28:9b:af:6e:a3:fd:18:78:05:4a:95:b0:28:3f:00:60:05: 14:10:66:a2:f5:30:35:d6:e8:3a:61:10:24:0c:52:e2:5d:7b: f5:12:66:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODAz NUMxRUI2MUVEOEVFRjE1M0Q4RjMyQkRBMTNCREFENzQyRUM1MB4XDTI1MDcwMTAx MjgzMFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQzQ2OUYyMENGNUUwMEY2 RjlDN0Q3NkY2NEQ5N0IyNTAwOEFERUY2ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJqi5d+AB141VJDV7uDarcUXJByoV1Ij2/28Elx94h9F3s38KTx5 KqGLeS/WYKXyAzWzjhp05mQnCg9AYhuLPiAX4YNadMho5AYYjpUipc4gPdKeGW/R TF2Fa8OHMuTDojN6Mv65prYyPLXY7bkuzs6oJ8rKWmGbb7q4V8pTXPfKJ30uNFck 6AqxymbhmEvuSxicfKpYZ1brSMw3C+8++ILfO/myoJcec9kLjDyTPDJ41lYoz+0S AGBglodSKlhXWgw9RHawrmipWIC0aTI5HrwVwxibXmf40d5iV3OcNtB1OI7fKmjf oySXMfRWfR5B69U5fL8me+iOYKSE1UR62kkCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTEafIM9eAPb5x9dvZNl7JQCK3vaDAfBgNVHSMEGDAWgBSYA1weth7Y7vFT2PMr 2hO9rXQuxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMTUvbUFOY0hyWWUyTzd4VTlqeks5b1R2YTEwTHNVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbUFOY0hyWWUyTzd4VTlqeks5b1R2 YTEwTHNVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzE1L3hHbnlEUFhnRDItY2ZYYjJUWmV5VUFpdDcyZy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAihAMA0GCSqGSIb3DQEBCwUAA4IBAQB6QSJot88W0bQTaK/otRN1 p1XWMliKtczfOL60xOysE7i1IAnYrInYMRmEOGtqsd4yLzS+ELnSJGe+jokrKIF0 yeYEsxNgdW4C7HE0yL430PcAHVJ08bJcCFLusSToLTKzs79jfjZnusAS7yveCMWd hbqB1SOmAdWrrdxN76qWND0C9K/VrfOfwDj8nywFvGu7uzMT4UkUpfmqFMUwdu93 zR7C5LlvYFYvRbKt/rhVA/w5A0LoUm6pO1T+0roNjiw3y+j4gmatvrT7KYTeVhMr U+HvKCMVnI0+KJuvbqP9GHgFSpWwKD8AYAUUEGai9TA11ug6YRAkDFLiXXv1Emb5 -----END CERTIFICATE-----Generated at Fri Jul 4 23:14:30 2025 by rpki-client