$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zEsFdXSzuo0RIWkSg-Pbgf2BHn0.roa File: zEsFdXSzuo0RIWkSg-Pbgf2BHn0.roa (raw, json) Hash identifier: 3EEoPz6cbcruokQcEQypdW7WWMSmiiGWuxJRepIaKro= Subject key identifier: CC:4B:05:75:74:B3:BA:8D:11:21:69:12:83:E3:DB:81:FD:81:1E:7D Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01A3 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zEsFdXSzuo0RIWkSg-Pbgf2BHn0.roa Signing time: Wed 01 Oct 2025 01:34:01 +0000 ROA not before: Wed 01 Oct 2025 01:34:01 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 2527 IP address blocks: 118.238.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Oct 1 01:34:01 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=CC4B057574B3BA8D1121691283E3DB81FD811E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:86:64:dc:ce:e3:6e:7a:1f:df:41:a4:29: 93:5a:ab:80:53:b9:cd:19:6a:98:4a:d9:90:5e:52: cc:1a:2d:09:9a:a1:73:f9:00:09:bd:ae:74:df:20: 0b:9b:fc:39:a2:a6:de:05:c4:4b:76:66:b8:0e:33: 31:60:e9:56:fe:d3:d2:35:4d:95:52:d4:b8:22:67: e6:98:b9:7a:1c:f9:e5:c5:86:bd:09:5a:ba:fd:aa: 7e:7c:9f:91:ce:88:b2:05:8d:0f:c6:3b:86:e4:1c: 8e:21:73:b2:1b:89:31:1b:69:74:6b:57:df:9f:2e: f4:50:08:e2:6e:a0:0c:d3:55:b0:6c:5f:e9:b8:db: c1:97:36:ce:2b:e8:d6:10:3d:86:b6:6f:7d:42:e5: 03:d7:f6:69:a7:7f:34:a4:6d:7e:25:b2:27:6f:54: 4b:c6:c9:2c:17:21:96:e9:91:69:a0:5f:85:de:4a: 7a:6e:77:1f:b3:40:66:f4:0a:6b:be:fa:6e:8d:d0: 31:dd:e8:34:46:51:49:99:7b:88:14:7d:2d:0f:2e: 47:62:f2:cb:a1:99:79:18:36:9f:4b:f6:b2:43:1a: 83:7a:00:f3:04:57:a4:c1:54:4a:7a:f9:b5:4a:5a: 40:34:35:95:6f:23:2d:27:3c:53:a7:0a:89:9e:dd: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:05:75:74:B3:BA:8D:11:21:69:12:83:E3:DB:81:FD:81:1E:7D X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zEsFdXSzuo0RIWkSg-Pbgf2BHn0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.238.0.0/17 Signature Algorithm: sha256WithRSAEncryption 55:8e:45:f4:3b:51:7f:f3:65:1e:ce:c8:6b:41:d3:77:0c:5f: a5:49:d5:d9:20:4b:59:d6:a5:dd:12:4c:cd:a4:25:b7:fd:42: 0e:d7:e9:8f:0d:72:8b:2e:7a:42:0f:f4:27:d1:05:ba:88:3c: 52:b7:af:91:89:e2:a5:d8:da:ef:9f:af:db:ac:f3:7c:53:f1: 03:31:70:09:e8:9b:a3:d7:f4:29:0b:ea:b6:88:3c:c4:fd:28: 70:29:c8:28:5f:68:8f:e4:07:3e:4e:da:75:e2:5c:a7:90:5e: bd:ea:11:a9:07:dd:df:6d:1c:79:41:8b:7b:fb:6b:ad:61:df: 49:3e:77:58:02:db:74:39:65:de:e7:b5:6c:21:92:8e:4b:98: 8c:94:d5:33:a2:70:2f:a7:b2:31:eb:b2:68:06:ee:06:04:86: da:e1:89:b9:e2:44:3a:3c:f6:2a:4a:a9:a8:7b:9b:24:b8:f5: 98:3d:94:a2:94:56:ff:17:db:29:ef:1c:44:44:13:63:13:b3: 49:de:7e:ce:0a:09:65:60:f9:a2:6f:7f:2f:2b:6a:ce:01:78: 67:22:7d:a3:dc:16:ff:fc:7e:88:e8:25:64:61:76:4b:40:06: 20:df:56:43:cf:18:7c:91:b1:b8:be:fe:4d:0f:33:88:bf:03: 9a:e5:55:c0 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTEwMDEw MTM0MDFaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENDNEIwNTc1NzRCM0JB OEQxMTIxNjkxMjgzRTNEQjgxRkQ4MTFFN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRuoZk3M7jbnof30GkKZNaq4BTuc0ZaphK2ZBeUswaLQmaoXP5 AAm9rnTfIAub/Dmipt4FxEt2ZrgOMzFg6Vb+09I1TZVS1LgiZ+aYuXoc+eXFhr0J Wrr9qn58n5HOiLIFjQ/GO4bkHI4hc7IbiTEbaXRrV9+fLvRQCOJuoAzTVbBsX+m4 28GXNs4r6NYQPYa2b31C5QPX9mmnfzSkbX4lsidvVEvGySwXIZbpkWmgX4XeSnpu dx+zQGb0Cmu++m6N0DHd6DRGUUmZe4gUfS0PLkdi8suhmXkYNp9L9rJDGoN6APME V6TBVEp6+bVKWkA0NZVvIy0nPFOnCome3Ul3AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUzEsFdXSzuo0RIWkSg+Pbgf2BHn0wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My96RXNGZFhTenVvMFJJV2tTZy1QYmdmMkJIbjAucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHdu4AMA0GCSqGSIb3DQEBCwUAA4IBAQBVjkX0O1F/82UezshrQdN3DF+lSdXZ IEtZ1qXdEkzNpCW3/UIO1+mPDXKLLnpCD/Qn0QW6iDxSt6+RieKl2Nrvn6/brPN8 U/EDMXAJ6Juj1/QpC+q2iDzE/ShwKcgoX2iP5Ac+Ttp14lynkF696hGpB93fbRx5 QYt7+2utYd9JPndYAtt0OWXe57VsIZKOS5iMlNUzonAvp7Ix67JoBu4GBIba4Ym5 4kQ6PPYqSqmoe5skuPWYPZSilFb/F9sp7xxERBNjE7NJ3n7OCgllYPmib38vK2rO AXhnIn2j3Bb//H6I6CVkYXZLQAYg31ZDzxh8kbG4vv5NDzOIvwOa5VXA -----END CERTIFICATE-----Generated at Mon Oct 20 19:56:02 2025 by rpki-client