$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/lHZ2NNrPHr1OMza0WLXrRcpPQpo.roa File: lHZ2NNrPHr1OMza0WLXrRcpPQpo.roa (raw, json) Hash identifier: POFTcg5VSB5cG1Bv4dEFgSJMjGfYw1dyksg66ObL3iE= Subject key identifier: 94:76:76:34:DA:CF:1E:BD:4E:33:36:B4:58:B5:EB:45:CA:4F:42:9A Certificate issuer: /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833 Certificate serial: 1C Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/lHZ2NNrPHr1OMza0WLXrRcpPQpo.roa Signing time: Tue 10 Jun 2025 10:49:37 +0000 ROA not before: Tue 10 Jun 2025 10:49:37 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 55911 IP address blocks: 2401:98a0:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833 Validity Not Before: Jun 10 10:49:37 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=94767634DACF1EBD4E3336B458B5EB45CA4F429A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:c5:2c:fd:22:3b:d6:c9:2c:61:1a:e1:a0: ec:80:6c:41:0d:19:ff:15:8a:64:74:50:cd:56:ff: 55:67:e0:6d:68:19:a1:7b:af:04:1e:19:99:14:4e: fa:ed:f6:f5:8b:e9:a0:40:15:59:4d:55:37:a9:d8: 3a:8a:03:a5:78:7f:69:b5:1e:e7:fd:7c:3b:cb:91: 3f:be:de:34:19:d7:ba:cf:09:dc:d7:47:1f:e9:18: bd:28:ee:22:04:4b:46:eb:80:78:12:33:7c:b3:e8: 03:3d:56:8c:cc:b7:2a:cc:f7:d0:fa:41:85:c8:d9: d8:92:ec:e1:42:e0:d4:8f:ea:8f:30:10:5c:0e:76: 6e:a0:4e:ac:f2:be:e8:20:f4:fc:fb:10:b0:4a:df: 8b:f3:fa:6b:63:de:c2:0a:33:48:72:62:df:58:ba: f7:a4:60:b5:43:81:e0:84:32:4a:df:dc:00:a9:06: dd:f5:36:f1:66:62:a4:96:1b:7d:68:03:9e:38:66: a2:4d:6b:de:48:b0:62:3d:89:5c:98:72:e8:6f:80: a8:c5:88:19:08:64:b8:cb:7b:a5:dc:30:90:b0:d5: 7d:12:9a:39:05:88:ac:1e:af:b5:ec:35:39:1f:82: 4c:b8:4c:af:d9:21:a0:3e:e3:07:80:3b:7c:99:93: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:76:76:34:DA:CF:1E:BD:4E:33:36:B4:58:B5:EB:45:CA:4F:42:9A X509v3 Authority Key Identifier: keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/lHZ2NNrPHr1OMza0WLXrRcpPQpo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:98a0:100::/40 Signature Algorithm: sha256WithRSAEncryption 3d:85:b8:11:39:35:2b:66:6e:20:78:10:fb:c1:45:c6:f4:45: 3e:c8:43:00:f3:33:54:d6:35:fc:0e:e7:86:8d:13:13:45:e8: af:d4:bf:53:ba:a6:32:82:de:79:54:b5:4a:e9:cf:5f:8c:2b: 20:dc:99:aa:76:0d:73:53:f0:4b:bd:01:83:51:a4:4c:5d:9c: c5:85:57:7b:73:f2:b5:b3:41:be:83:ad:5b:c2:87:ba:a7:2c: 16:ac:10:6a:8e:00:7b:17:f8:04:29:ba:12:f1:0d:8f:34:47: be:5f:2f:19:20:f5:98:bb:6d:b1:ea:65:8f:e7:c2:25:61:10: d5:0b:42:4e:16:78:0d:f9:6c:72:92:69:53:5f:6c:9d:05:4f: 88:88:0d:b1:68:3e:49:d8:4b:f0:c0:6b:7e:d9:39:7e:a9:fb: fe:39:2d:21:35:c1:29:68:17:11:75:fd:30:b3:20:17:89:96: 12:f4:b4:52:d9:ea:bb:a3:29:4a:49:f5:1d:ef:6d:ce:8f:c2: 1a:ef:1c:12:7f:ac:4e:47:7f:48:92:ad:af:f1:24:99:be:ca: 36:87:bc:e1:a2:72:0a:2c:66:ea:db:f5:45:94:6c:57:e7:13: 5f:32:b6:9f:6c:45:44:fa:8b:0b:a3:9c:91:c8:05:b6:f7:88: 0b:50:49:ca -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzVD NzlGOTREMEVFNTRGMUMwOEI0N0M2QkEwMEY3NUVEMDUyODMzMB4XDTI1MDYxMDEw NDkzN1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoOTQ3Njc2MzREQUNGMUVC RDRFMzMzNkI0NThCNUVCNDVDQTRGNDI5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMotxSz9IjvWySxhGuGg7IBsQQ0Z/xWKZHRQzVb/VWfgbWgZoXuv BB4ZmRRO+u329YvpoEAVWU1VN6nYOooDpXh/abUe5/18O8uRP77eNBnXus8J3NdH H+kYvSjuIgRLRuuAeBIzfLPoAz1WjMy3Ksz30PpBhcjZ2JLs4ULg1I/qjzAQXA52 bqBOrPK+6CD0/PsQsErfi/P6a2PewgozSHJi31i696RgtUOB4IQySt/cAKkG3fU2 8WZipJYbfWgDnjhmok1r3kiwYj2JXJhy6G+AqMWIGQhkuMt7pdwwkLDVfRKaOQWI rB6vtew1OR+CTLhMr9khoD7jB4A7fJmT4FkCAwEAAaOCAiowggImMB0GA1UdDgQW BBSUdnY02s8evU4zNrRYtetFyk9CmjAfBgNVHSMEGDAWgBTHXHn5TQ7lTxwItHxr oA917QUoMzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MzUveDF4NS1VME81VThjQ0xSOGE2QVBkZTBGS0RNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDF4NS1VME81VThjQ0xSOGE2QVBk ZTBGS0RNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDM1L2xIWjJOTnJQSHIxT016YTBXTFhyUmNwUFFwby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAkAZigATANBgkqhkiG9w0BAQsFAAOCAQEAPYW4ETk1K2ZuIHgQ+8FF xvRFPshDAPMzVNY1/A7nho0TE0Xor9S/U7qmMoLeeVS1SunPX4wrINyZqnYNc1Pw S70Bg1GkTF2cxYVXe3PytbNBvoOtW8KHuqcsFqwQao4Aexf4BCm6EvENjzRHvl8v GSD1mLttseplj+fCJWEQ1QtCThZ4DflscpJpU19snQVPiIgNsWg+SdhL8MBrftk5 fqn7/jktITXBKWgXEXX9MLMgF4mWEvS0Utnqu6MpSkn1He9tzo/CGu8cEn+sTkd/ SJKtr/Ekmb7KNoe84aJyCixm6tv1RZRsV+cTXzK2n2xFRPqLC6OckcgFtveIC1BJ yg== -----END CERTIFICATE-----Generated at Fri Jul 4 19:40:29 2025 by rpki-client