$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30410/QL8Kh8Afpr5z-TNFAE05WgkHD0w.roa File: QL8Kh8Afpr5z-TNFAE05WgkHD0w.roa (raw, json) Hash identifier: OW6mY8qqErVOcwLnAoef+6LSSGN1ZmvT+cZfNvBmHzg= Subject key identifier: 40:BF:0A:87:C0:1F:A6:BE:73:F9:33:45:00:4D:39:5A:09:07:0F:4C Certificate issuer: /CN=93BCDB433396C43EAB076DCDC7AF462C22B50176 Certificate serial: 22 Authority key identifier: 93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/QL8Kh8Afpr5z-TNFAE05WgkHD0w.roa Signing time: Sun 01 Jun 2025 01:28:32 +0000 ROA not before: Sun 01 Jun 2025 01:28:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 150359 IP address blocks: 2400:c0a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93BCDB433396C43EAB076DCDC7AF462C22B50176 Validity Not Before: Jun 1 01:28:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=40BF0A87C01FA6BE73F93345004D395A09070F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:96:7f:0d:fb:41:ae:5d:18:88:c3:19:d5: ef:96:8d:b3:c5:25:64:61:d3:91:bf:3b:d3:ae:35: 48:7f:cf:44:6f:29:cb:0e:03:bc:4d:28:c2:b6:a8: 60:e9:56:f6:e9:37:cb:5d:56:bb:64:d2:7f:3f:bf: 7c:40:27:7b:36:3a:2e:6b:25:5d:0a:db:af:9d:43: ca:a7:2e:67:d5:99:c7:42:cc:b9:95:a6:f6:cb:44: 4f:c6:1b:31:52:16:6a:35:67:33:db:57:25:e2:df: e7:b5:8b:6d:af:d4:a7:35:e2:65:d9:ce:dd:2c:af: 3e:cf:ec:7f:7b:d3:bd:ae:c1:fb:78:a2:71:94:49: 52:57:d2:9c:b4:ff:01:fd:1d:75:aa:48:e1:4b:bd: a8:67:fe:d7:89:d8:65:7e:22:ee:53:92:e5:4a:84: 98:2a:93:e0:e0:e5:4b:3b:26:58:50:49:86:20:c3: 2b:c2:02:ce:30:8e:63:7d:d9:65:ff:c7:05:87:ee: c2:24:84:90:32:1b:aa:bd:a1:ae:c6:9d:8f:ae:b2: 1b:57:14:5d:6e:6f:06:a6:2b:2b:ab:4c:d6:79:e3: 52:5f:1f:fb:9b:e8:e4:79:1d:3d:44:98:d3:27:6e: 6e:50:47:05:14:d7:71:50:e7:e0:be:d2:d8:b7:0e: 09:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BF:0A:87:C0:1F:A6:BE:73:F9:33:45:00:4D:39:5A:09:07:0F:4C X509v3 Authority Key Identifier: keyid:93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/QL8Kh8Afpr5z-TNFAE05WgkHD0w.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:c0a0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:d3:a0:92:62:52:55:63:5b:7c:94:0c:79:0a:6a:bc:a0:13: 69:90:04:5a:49:e5:d3:7b:ab:77:4e:01:64:d9:e8:ce:ca:9d: c8:fe:e1:11:d5:42:5c:33:e1:a4:f9:05:5e:96:fb:f6:b7:11: 37:a4:40:8a:b3:7b:ec:07:5b:02:6c:23:36:3c:d1:7c:a8:56: 25:4f:0f:f3:fb:45:08:b5:f1:5a:d5:87:b3:0e:32:ae:85:59: 4b:72:bb:07:81:17:a1:f9:f4:df:64:68:10:02:e5:a4:eb:b1: ed:16:c4:6a:41:19:e0:65:73:0e:a0:13:e3:ae:90:9e:bd:3d: a2:d1:3e:7f:ed:cd:ab:c4:82:2d:6c:54:95:86:08:99:ff:65: 80:51:f7:c2:eb:d2:d2:70:41:4c:7a:78:d9:b1:57:c7:af:43: e5:c4:89:ec:a9:c5:f5:53:cd:b8:19:58:88:9a:bf:77:56:0f: c9:d2:a6:78:89:e7:be:a1:65:0f:76:05:f7:7a:75:a5:67:e2: 7e:49:ec:f2:41:c6:9c:d6:3b:34:cc:eb:58:ba:b5:53:9e:65: 39:39:0c:c3:f1:eb:aa:55:c9:80:19:56:0b:c6:3b:4d:8e:0c: 40:cb:b2:fb:5d:66:1f:f1:8e:e4:4f:c6:67:55:a0:e4:38:90: a5:a1:11:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0JD REI0MzMzOTZDNDNFQUIwNzZEQ0RDN0FGNDYyQzIyQjUwMTc2MB4XDTI1MDYwMTAx MjgzMloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoNDBCRjBBODdDMDFGQTZC RTczRjkzMzQ1MDA0RDM5NUEwOTA3MEY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANGkln8N+0GuXRiIwxnV75aNs8UlZGHTkb870641SH/PRG8pyw4D vE0owraoYOlW9uk3y11Wu2TSfz+/fEAnezY6LmslXQrbr51DyqcuZ9WZx0LMuZWm 9stET8YbMVIWajVnM9tXJeLf57WLba/UpzXiZdnO3SyvPs/sf3vTva7B+3iicZRJ UlfSnLT/Af0ddapI4Uu9qGf+14nYZX4i7lOS5UqEmCqT4ODlSzsmWFBJhiDDK8IC zjCOY33ZZf/HBYfuwiSEkDIbqr2hrsadj66yG1cUXW5vBqYrK6tM1nnjUl8f+5vo 5HkdPUSY0ydublBHBRTXcVDn4L7S2LcOCfcCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRAvwqHwB+mvnP5M0UATTlaCQcPTDAfBgNVHSMEGDAWgBSTvNtDM5bEPqsHbc3H r0YsIrUBdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MTAvazd6YlF6T1d4RDZyQjIzTng2OUdMQ0sxQVhZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvazd6YlF6T1d4RDZyQjIzTng2OUdM Q0sxQVhZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDEwL1FMOEtoOEFmcHI1ei1UTkZBRTA1V2drSEQwdy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAMCgMA0GCSqGSIb3DQEBCwUAA4IBAQBr06CSYlJVY1t8lAx5Cmq8 oBNpkARaSeXTe6t3TgFk2ejOyp3I/uER1UJcM+Gk+QVelvv2txE3pECKs3vsB1sC bCM2PNF8qFYlTw/z+0UItfFa1YezDjKuhVlLcrsHgReh+fTfZGgQAuWk67HtFsRq QRngZXMOoBPjrpCevT2i0T5/7c2rxIItbFSVhgiZ/2WAUffC69LScEFMenjZsVfH r0PlxInsqcX1U824GViImr93Vg/J0qZ4iee+oWUPdgX3enWlZ+J+SezyQcac1js0 zOtYurVTnmU5OQzD8euqVcmAGVYLxjtNjgxAy7L7XWYf8Y7kT8ZnVaDkOJCloRFD -----END CERTIFICATE-----Generated at Sat Jul 5 12:46:07 2025 by rpki-client