$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/itP-hgmdJQId7AgbNBgrpgfEQrI.roa File: itP-hgmdJQId7AgbNBgrpgfEQrI.roa (raw, json) Hash identifier: 2ETIXadGcGr5fmm+8PibIL02ERD7eavHlF2yVcIScUA= Subject key identifier: 8A:D3:FE:86:09:9D:25:02:1D:EC:08:1B:34:18:2B:A6:07:C4:42:B2 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 018C Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/itP-hgmdJQId7AgbNBgrpgfEQrI.roa Signing time: Tue 01 Jul 2025 01:35:17 +0000 ROA not before: Tue 01 Jul 2025 01:35:17 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2527 IP address blocks: 103.241.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Jul 1 01:35:17 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=8AD3FE86099D25021DEC081B34182BA607C442B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:79:47:48:2f:60:59:e5:da:63:1f:4a:3d: 81:49:b7:62:5b:78:01:c4:26:dd:b1:38:0c:e1:26: e4:67:31:b5:82:bf:41:f8:c8:f8:6a:da:ec:ad:db: b0:a9:ce:c6:16:1b:a3:5e:9a:f6:58:4c:ff:35:7e: 81:c1:31:9a:e2:d7:d3:35:fc:fe:0a:34:c2:bb:2a: 62:52:cd:4d:3a:13:ab:da:7f:43:b3:ac:a8:73:fa: 84:b1:02:6d:1b:53:ac:93:22:76:d8:dd:4b:f1:f5: cb:b8:a1:3f:5e:26:5a:12:91:d2:3c:78:19:c2:17: eb:96:db:8a:ca:2b:35:e7:5e:18:0e:7e:d9:d8:2a: c2:a9:9a:6d:17:a5:3d:30:f2:ca:f6:da:51:25:eb: ac:7c:6c:b6:29:18:91:41:5e:3c:f5:20:a4:10:dc: 5f:da:33:24:af:6f:fa:91:37:0e:7f:0e:f1:a9:10: 18:99:13:1d:e6:f9:58:9c:66:4b:0c:61:bf:2c:fa: 19:c4:10:d9:cd:e2:7f:2c:e6:db:83:e7:0f:d9:f4: 23:a0:23:69:6a:6b:48:d8:c1:61:a4:e8:87:15:b8: ca:9d:8c:40:58:dd:3c:0b:26:6f:a9:20:e8:57:b4: 17:78:dc:7f:13:56:12:13:94:84:b3:68:31:1e:9d: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D3:FE:86:09:9D:25:02:1D:EC:08:1B:34:18:2B:A6:07:C4:42:B2 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/itP-hgmdJQId7AgbNBgrpgfEQrI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.124.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:fe:00:79:68:3a:75:93:e6:13:a9:84:9c:d1:c7:82:08:fa: 1f:b8:53:d5:4b:bc:23:37:0c:e8:e8:90:82:de:09:66:f9:0f: 04:b8:5d:bf:f0:43:16:49:9a:bc:61:a4:b2:1e:18:5e:c6:07: 48:f9:81:1a:d8:e3:69:8d:ef:f5:85:a2:77:16:5f:a9:d3:fc: bf:51:8d:23:8e:11:ad:6d:51:bb:8a:87:2c:d8:2e:d4:95:91: c8:29:7a:7d:36:06:17:de:ed:8c:d4:a5:93:9d:d4:b9:6f:d2: ad:0c:3d:bf:3b:b3:ce:e3:fc:26:9f:78:3d:9d:ac:a6:af:6c: 69:e3:24:3d:8f:bb:55:79:da:ef:da:80:6f:8f:2f:59:3c:9d: bd:08:a6:5c:da:d9:b6:7d:7e:5d:ca:c7:6f:ca:25:7b:44:83: c0:01:aa:34:6a:31:d6:39:fe:a7:96:42:4d:1a:b3:2b:f7:2c: 16:d2:5d:74:19:d3:04:ed:55:00:4c:cf:78:87:39:0a:50:db: ec:eb:42:53:a4:6a:0f:42:9a:a9:5a:a5:32:d7:70:70:9f:14: 5d:ef:b8:0e:23:f3:06:15:63:63:8f:fb:30:c4:1e:20:09:37: e3:28:c7:06:a4:eb:e7:e6:73:4f:34:4b:3d:92:a5:92:ad:13: fa:2a:0b:26 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTA3MDEw MTM1MTdaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhBRDNGRTg2MDk5RDI1 MDIxREVDMDgxQjM0MTgyQkE2MDdDNDQyQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDO3lHSC9gWeXaYx9KPYFJt2JbeAHEJt2xOAzhJuRnMbWCv0H4 yPhq2uyt27CpzsYWG6NemvZYTP81foHBMZri19M1/P4KNMK7KmJSzU06E6vaf0Oz rKhz+oSxAm0bU6yTInbY3Uvx9cu4oT9eJloSkdI8eBnCF+uW24rKKzXnXhgOftnY KsKpmm0XpT0w8sr22lEl66x8bLYpGJFBXjz1IKQQ3F/aMySvb/qRNw5/DvGpEBiZ Ex3m+VicZksMYb8s+hnEENnN4n8s5tuD5w/Z9COgI2lqa0jYwWGk6IcVuMqdjEBY 3TwLJm+pIOhXtBd43H8TVhITlISzaDEenaaRAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUitP+hgmdJQId7AgbNBgrpgfEQrIwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9pdFAtaGdtZEpRSWQ3QWdiTkJncnBnZkVRckkucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ/F8MA0GCSqGSIb3DQEBCwUAA4IBAQAf/gB5aDp1k+YTqYSc0ceCCPofuFPV S7wjNwzo6JCC3glm+Q8EuF2/8EMWSZq8YaSyHhhexgdI+YEa2ONpje/1haJ3Fl+p 0/y/UY0jjhGtbVG7iocs2C7UlZHIKXp9NgYX3u2M1KWTndS5b9KtDD2/O7PO4/wm n3g9naymr2xp4yQ9j7tVedrv2oBvjy9ZPJ29CKZc2tm2fX5dysdvyiV7RIPAAao0 ajHWOf6nlkJNGrMr9ywW0l10GdME7VUATM94hzkKUNvs60JTpGoPQpqpWqUy13Bw nxRd77gOI/MGFWNjj/swxB4gCTfjKMcGpOvn5nNPNEs9kqWSrRP6Kgsm -----END CERTIFICATE-----Generated at Sat Jul 5 05:40:08 2025 by rpki-client