$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa File: D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa (raw, json) Hash identifier: f8TrPnLG7EXmY9Rle3lGtXWOT6g8W6WuSFTe0Pgan+g= Subject key identifier: 0F:91:D0:F9:82:1F:62:C4:CC:90:20:87:96:95:DD:AF:93:26:3A:01 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0444 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa Signing time: Wed 25 Jun 2025 01:25:55 +0000 ROA not before: Wed 25 Jun 2025 01:25:55 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 10013 IP address blocks: 36.55.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 25 01:25:55 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=0F91D0F9821F62C4CC9020879695DDAF93263A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:12:ac:aa:0c:ed:e4:1c:ee:a3:c1:6b:f7:e5: 00:fe:2c:8b:e0:11:92:2b:3b:9e:eb:58:24:36:4e: 14:01:86:4a:90:e9:3d:f6:4f:ae:c2:c5:af:df:1e: 06:ec:3c:ce:e2:c2:ba:93:74:24:af:75:4a:50:b6: 37:19:fb:10:1e:eb:00:7d:24:ea:c2:42:d8:51:04: f2:2a:03:c7:b6:a1:aa:2c:f7:ec:ce:b6:81:9e:03: 9c:1c:69:9e:f0:31:4b:d8:c6:1d:11:80:06:7a:91: eb:af:cf:b9:49:fc:1e:d8:df:f1:42:80:83:61:c1: 83:c1:90:95:0b:41:dd:e1:b2:65:5f:b9:aa:fa:54: b3:c6:e1:b3:f1:c0:0f:27:5f:17:f7:f5:5e:51:3a: 41:25:0d:fe:2c:33:c8:18:02:1e:84:c9:af:58:43: 17:d0:80:77:c1:96:35:f7:80:ec:41:c5:2d:77:f2: 77:d9:00:53:5a:64:bc:d4:58:7e:23:90:b1:be:97: 22:54:31:11:c9:26:da:9b:35:e4:f9:12:41:4f:4d: c8:01:5a:46:38:6c:32:e0:bb:85:9e:14:49:43:bb: a3:76:bc:d0:44:c1:25:b9:24:17:bc:17:b2:ec:dc: f5:19:90:6e:6c:ab:64:9e:ce:3f:4d:f1:98:fa:8a: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:D0:F9:82:1F:62:C4:CC:90:20:87:96:95:DD:AF:93:26:3A:01 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D5HQ-YIfYsTMkCCHlpXdr5MmOgE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.55.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:63:67:06:a0:b2:20:65:fe:b8:0e:62:ac:5a:4e:80:df:ed: e8:00:86:c9:24:d3:b5:a1:d1:9a:fa:78:88:76:44:02:2f:2f: ac:a0:8e:f3:a4:ed:91:39:c7:b2:06:ff:34:c0:fc:3f:ca:de: 50:94:d6:7d:de:0b:57:41:5a:74:2e:8a:ad:82:31:6f:25:f9: bb:b0:b1:77:5a:40:26:22:32:fc:60:98:5f:84:77:88:dd:ee: 88:79:d4:48:40:a3:fa:a3:17:96:fd:13:6c:39:3f:62:c3:d1: eb:03:23:06:c2:9c:8e:3c:d2:21:29:88:f3:2e:63:07:80:f6: 7c:50:06:a2:50:e8:11:d8:be:60:98:a4:2f:7c:d8:3d:0b:63: 15:59:6e:8b:72:c4:99:01:e6:80:f3:2d:53:47:11:0a:02:43: 17:7d:e7:5b:f1:e8:85:1f:45:5d:d8:0f:18:61:65:fa:63:89: 12:35:d2:a6:25:9d:75:9d:61:45:6a:5e:e3:72:6f:51:46:99: c0:08:13:84:2d:7e:13:61:2b:f3:36:1b:b8:70:2b:1c:0a:84: 06:14:e7:56:94:f9:43:27:2a:07:1b:7e:e3:50:99:50:fc:ee: cb:6b:cd:f8:d2:b1:5b:1f:10:8e:e0:15:31:72:4e:b6:69:2f: 50:bc:94:70 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MjUw MTI1NTVaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGOTFEMEY5ODIxRjYy QzRDQzkwMjA4Nzk2OTVEREFGOTMyNjNBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrEqyqDO3kHO6jwWv35QD+LIvgEZIrO57rWCQ2ThQBhkqQ6T32 T67Cxa/fHgbsPM7iwrqTdCSvdUpQtjcZ+xAe6wB9JOrCQthRBPIqA8e2oaos9+zO toGeA5wcaZ7wMUvYxh0RgAZ6keuvz7lJ/B7Y3/FCgINhwYPBkJULQd3hsmVfuar6 VLPG4bPxwA8nXxf39V5ROkElDf4sM8gYAh6Eya9YQxfQgHfBljX3gOxBxS138nfZ AFNaZLzUWH4jkLG+lyJUMRHJJtqbNeT5EkFPTcgBWkY4bDLgu4WeFElDu6N2vNBE wSW5JBe8F7Ls3PUZkG5sq2Sezj9N8Zj6ijwdAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUD5HQ+YIfYsTMkCCHlpXdr5MmOgEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0Q1SFEtWUlmWXNUTWtDQ0hscFhkcjVNbU9nRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAkNzANBgkqhkiG9w0BAQsFAAOCAQEACmNnBqCyIGX+uA5irFpOgN/t6ACG ySTTtaHRmvp4iHZEAi8vrKCO86TtkTnHsgb/NMD8P8reUJTWfd4LV0FadC6KrYIx byX5u7Cxd1pAJiIy/GCYX4R3iN3uiHnUSECj+qMXlv0TbDk/YsPR6wMjBsKcjjzS ISmI8y5jB4D2fFAGolDoEdi+YJikL3zYPQtjFVlui3LEmQHmgPMtU0cRCgJDF33n W/HohR9FXdgPGGFl+mOJEjXSpiWddZ1hRWpe43JvUUaZwAgThC1+E2Er8zYbuHAr HAqEBhTnVpT5QycqBxt+41CZUPzuy2vN+NKxWx8QjuAVMXJOtmkvULyUcA== -----END CERTIFICATE-----Generated at Fri Jul 4 20:04:16 2025 by rpki-client