$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ndCrodPo585s7_rc3tWk_RvwUq0.roa File: ndCrodPo585s7_rc3tWk_RvwUq0.roa (raw, json) Hash identifier: tlldEz/53GoB7176FcAt/Mg3mhxP9n7QV4+GU0iARLc= Subject key identifier: 9D:D0:AB:A1:D3:E8:E7:CE:6C:EF:FA:DC:DE:D5:A4:FD:1B:F0:52:AD Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 012A Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ndCrodPo585s7_rc3tWk_RvwUq0.roa Signing time: Tue 10 Jun 2025 10:46:26 +0000 ROA not before: Tue 10 Jun 2025 10:46:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 7530 IP address blocks: 210.231.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Jun 10 10:46:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9DD0ABA1D3E8E7CE6CEFFADCDED5A4FD1BF052AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:07:77:aa:06:87:fe:af:c4:70:31:bc:c2: ec:79:73:e2:05:8a:8f:84:2c:7b:62:b7:a1:e4:bd: 88:54:05:3e:3d:74:de:66:bd:01:1c:4c:57:2e:45: 8f:3b:46:5d:40:e8:0e:3c:9e:eb:03:cb:a6:b1:56: 4f:0a:4e:1e:4c:c0:bc:11:9e:b8:90:e1:3d:ba:38: 52:f3:1e:b6:03:1e:9d:3a:42:ac:1a:49:14:15:e6: 3d:5f:aa:e5:00:ea:72:e2:9e:f3:0e:a6:04:25:6b: ea:93:bb:da:23:02:7e:ca:d1:58:b4:ba:ea:8d:f3: d0:be:7c:a5:08:6e:77:f7:39:5f:93:d2:e1:3c:ae: f6:fc:b2:be:d0:4b:1d:0a:17:e4:e5:b4:f6:e1:08: 18:9e:34:fd:4a:86:ff:b2:9b:82:85:0b:03:f8:71: 41:5f:cf:df:2d:f1:3d:7f:3f:6c:2a:86:d8:23:8f: 75:3a:3c:cd:89:fb:31:22:bc:ab:2b:87:85:c9:45: 47:1a:63:ef:1a:00:74:bf:e4:d1:77:b9:28:43:45: 19:a0:fd:81:99:0f:25:35:3b:c6:03:ad:73:04:b2: 68:c1:2e:7d:f2:1d:c0:99:d3:5f:86:ea:d2:05:bd: c4:d8:40:24:a9:15:1b:0a:77:15:5d:ed:70:d7:c3: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D0:AB:A1:D3:E8:E7:CE:6C:EF:FA:DC:DE:D5:A4:FD:1B:F0:52:AD X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ndCrodPo585s7_rc3tWk_RvwUq0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.231.212.0/22 Signature Algorithm: sha256WithRSAEncryption 79:e5:b5:9e:a1:f1:f2:74:ca:21:9b:43:0a:5b:57:a6:aa:39: d2:8d:ba:ec:f0:69:00:df:72:f7:21:3f:bf:1d:99:53:20:5f: 99:56:a0:dc:37:3c:bc:8d:9f:4f:5f:18:43:0b:ae:fb:59:05: 2a:97:7f:3f:5b:a8:3d:70:24:45:fc:dd:9e:7c:3e:b8:37:38: 98:1b:7a:fd:59:98:61:bd:e5:f4:a9:51:b5:14:e5:dd:ff:d5: 7d:07:d8:45:94:c7:e4:88:1a:63:b7:e4:c2:09:60:11:3b:7b: 63:d0:09:26:6b:1f:4e:68:8c:09:d7:1e:24:ee:78:4a:10:03: 99:85:95:f0:b3:61:d1:37:2b:ee:31:cc:dd:33:60:aa:3e:19: bd:e0:29:40:24:ae:0d:f4:14:4e:73:46:7b:2e:9f:e6:43:ef: 69:bb:1f:0e:47:a5:87:0c:b8:2d:f1:00:80:da:d0:4c:6a:67: e9:f2:c0:37:cb:52:31:16:c4:e7:8a:7e:29:9f:84:af:99:4d: 0b:f2:65:a4:0f:3b:c9:88:33:27:04:5f:48:00:81:4f:bb:5c: 07:09:ff:0b:95:54:07:c7:9c:f2:09:42:d0:b7:30:e1:d4:ae: 96:3b:d1:23:20:0c:67:39:23:56:3d:51:5c:35:8c:30:bd:16: e7:28:91:92 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTA2MTAx MDQ2MjZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlERDBBQkExRDNFOEU3 Q0U2Q0VGRkFEQ0RFRDVBNEZEMUJGMDUyQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRcwd3qgaH/q/EcDG8wux5c+IFio+ELHtit6HkvYhUBT49dN5m vQEcTFcuRY87Rl1A6A48nusDy6axVk8KTh5MwLwRnriQ4T26OFLzHrYDHp06Qqwa SRQV5j1fquUA6nLinvMOpgQla+qTu9ojAn7K0Vi0uuqN89C+fKUIbnf3OV+T0uE8 rvb8sr7QSx0KF+TltPbhCBieNP1Khv+ym4KFCwP4cUFfz98t8T1/P2wqhtgjj3U6 PM2J+zEivKsrh4XJRUcaY+8aAHS/5NF3uShDRRmg/YGZDyU1O8YDrXMEsmjBLn3y HcCZ01+G6tIFvcTYQCSpFRsKdxVd7XDXw1SnAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUndCrodPo585s7/rc3tWk/RvwUq0wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzU0L25kQ3JvZFBvNTg1czdfcmMzdFdrX1J2d1VxMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALS59QwDQYJKoZIhvcNAQELBQADggEBAHnltZ6h8fJ0yiGbQwpbV6aqOdKN uuzwaQDfcvchP78dmVMgX5lWoNw3PLyNn09fGEMLrvtZBSqXfz9bqD1wJEX83Z58 Prg3OJgbev1ZmGG95fSpUbUU5d3/1X0H2EWUx+SIGmO35MIJYBE7e2PQCSZrH05o jAnXHiTueEoQA5mFlfCzYdE3K+4xzN0zYKo+Gb3gKUAkrg30FE5zRnsun+ZD72m7 Hw5HpYcMuC3xAIDa0ExqZ+nywDfLUjEWxOeKfimfhK+ZTQvyZaQPO8mIMycEX0gA gU+7XAcJ/wuVVAfHnPIJQtC3MOHUrpY70SMgDGc5I1Y9UVw1jDC9FucokZI= -----END CERTIFICATE-----Generated at Sat Jul 5 03:48:59 2025 by rpki-client