$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/oH8mZ-pvLGHBtmYU6K0wY8J6_ZI.roa File: oH8mZ-pvLGHBtmYU6K0wY8J6_ZI.roa (raw, json) Hash identifier: jcxFqyRo3TE9Bthgq7uZ1LeIGZWtA9fc4fWEFpqMmTo= Subject key identifier: A0:7F:26:67:EA:6F:2C:61:C1:B6:66:14:E8:AD:30:63:C2:7A:FD:92 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0161 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/oH8mZ-pvLGHBtmYU6K0wY8J6_ZI.roa Signing time: Wed 01 Oct 2025 01:29:58 +0000 ROA not before: Wed 01 Oct 2025 01:29:58 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10021 IP address blocks: 27.110.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 1 01:29:58 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=A07F2667EA6F2C61C1B66614E8AD3063C27AFD92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:96:66:25:5d:57:e2:89:f5:70:cf:21:84: d0:6a:be:2c:fd:bd:57:46:02:bc:5e:51:5a:17:ca: 28:89:97:f2:ca:1f:70:da:69:6d:2e:26:07:78:dd: 8e:9d:68:8c:bb:1a:11:89:72:b9:ae:7b:32:77:b3: 3b:a7:ef:7d:af:79:09:72:ba:5c:ea:cc:55:bd:94: 97:3f:81:e8:d4:49:47:c3:bc:99:fc:4b:6f:1a:04: e6:c7:91:5c:dc:da:5e:09:d3:18:6c:dd:8f:ef:a5: 22:0b:6e:ee:5e:34:13:81:62:0a:d6:69:df:ea:e7: cc:f2:34:56:20:ab:83:df:0a:d2:0f:21:bc:f8:1f: 45:0d:0d:6f:f5:36:05:66:49:38:56:5e:cd:21:13: ad:7e:d7:62:28:63:70:b7:33:65:3d:9a:21:2d:09: e2:21:7e:89:15:96:83:e5:60:51:46:7c:cb:c2:61: a7:80:32:c3:fb:ab:ac:69:c8:76:92:3d:18:e4:e1: 77:66:b5:af:a0:d0:69:73:37:9c:04:42:b3:b7:7d: 5f:dc:3b:82:98:e5:d5:47:1d:9b:c9:7f:f7:36:cb: 40:b0:ba:10:18:28:de:31:a2:bb:9a:78:7c:b3:53: a5:3b:a9:26:37:83:59:79:15:b8:71:13:01:22:0d: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:26:67:EA:6F:2C:61:C1:B6:66:14:E8:AD:30:63:C2:7A:FD:92 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/oH8mZ-pvLGHBtmYU6K0wY8J6_ZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.28.0/22 Signature Algorithm: sha256WithRSAEncryption b2:31:f5:57:f4:36:cd:be:b5:57:d4:57:9d:4f:c0:32:a5:70: a0:0f:df:3c:97:9b:29:a1:93:2c:97:d6:cd:1a:88:9d:10:8c: 39:70:8c:70:26:21:16:17:4e:4c:6f:57:26:c4:f1:84:83:c0: 31:5d:a7:6b:db:aa:7c:d1:89:4c:e0:68:f9:e7:90:27:37:9e: 86:96:07:69:78:8c:00:e1:26:09:3c:5c:29:ed:8b:da:56:88: 8e:08:25:d5:36:cf:d8:2b:d7:9c:48:4e:79:22:98:c4:b0:73: 80:8e:96:ff:c7:4d:dc:04:dd:98:81:cd:21:ee:44:8f:62:48: a3:4f:eb:b4:76:6e:fd:a4:68:f4:bf:5d:87:6b:9f:1d:01:b0: e5:b2:56:ef:36:fd:9c:05:e4:9b:70:62:1c:d5:46:ff:c7:65: 09:f4:b7:ae:71:fb:c5:10:25:a8:3c:5c:3f:66:03:43:70:e7: 6b:00:5e:9d:b5:c4:28:f8:dd:6d:34:ff:18:0e:59:de:46:87: 04:ac:e1:85:40:34:5f:8a:03:71:31:0b:a3:3b:19:dc:7d:20: c9:68:3f:c9:71:de:13:ab:d4:95:71:d3:a9:fb:a5:cf:f9:42: 29:c6:6f:d6:ab:cb:e4:2c:85:7f:37:d9:dd:6e:2b:3b:1e:3a: 8f:55:a2:f8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTEwMDEw MTI5NThaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwN0YyNjY3RUE2RjJD NjFDMUI2NjYxNEU4QUQzMDYzQzI3QUZEOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIGpZmJV1X4on1cM8hhNBqviz9vVdGArxeUVoXyiiJl/LKH3Da aW0uJgd43Y6daIy7GhGJcrmuezJ3szun732veQlyulzqzFW9lJc/gejUSUfDvJn8 S28aBObHkVzc2l4J0xhs3Y/vpSILbu5eNBOBYgrWad/q58zyNFYgq4PfCtIPIbz4 H0UNDW/1NgVmSThWXs0hE61+12IoY3C3M2U9miEtCeIhfokVloPlYFFGfMvCYaeA MsP7q6xpyHaSPRjk4Xdmta+g0GlzN5wEQrO3fV/cO4KY5dVHHZvJf/c2y0CwuhAY KN4xoruaeHyzU6U7qSY3g1l5FbhxEwEiDSPdAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoH8mZ+pvLGHBtmYU6K0wY8J6/ZIwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L29IOG1aLXB2TEdIQnRtWVU2SzB3WThKNl9aSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIbbhwwDQYJKoZIhvcNAQELBQADggEBALIx9Vf0Ns2+tVfUV51PwDKlcKAP 3zyXmymhkyyX1s0aiJ0QjDlwjHAmIRYXTkxvVybE8YSDwDFdp2vbqnzRiUzgaPnn kCc3noaWB2l4jADhJgk8XCnti9pWiI4IJdU2z9gr15xITnkimMSwc4COlv/HTdwE 3ZiBzSHuRI9iSKNP67R2bv2kaPS/XYdrnx0BsOWyVu82/ZwF5JtwYhzVRv/HZQn0 t65x+8UQJag8XD9mA0Nw52sAXp21xCj43W00/xgOWd5GhwSs4YVANF+KA3ExC6M7 Gdx9IMloP8lx3hOr1JVx06n7pc/5QinGb9ary+QshX832d1uKzseOo9Vovg= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:24 2025 by rpki-client