$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/r1Uckw2_-Y5pzR96mSBykbjTKAM.roa File: r1Uckw2_-Y5pzR96mSBykbjTKAM.roa (raw, json) Hash identifier: Ep2oh2TzgMAXX8ltTyFg2Y4c1WqefhuvsK03leM0fPQ= Subject key identifier: AF:55:1C:93:0D:BF:F9:8E:69:CD:1F:7A:99:20:72:91:B8:D3:28:03 Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0164 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/r1Uckw2_-Y5pzR96mSBykbjTKAM.roa Signing time: Wed 01 Oct 2025 01:30:00 +0000 ROA not before: Wed 01 Oct 2025 01:30:00 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 10021 IP address blocks: 61.120.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Oct 1 01:30:00 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=AF551C930DBFF98E69CD1F7A99207291B8D32803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:a4:8e:19:16:b1:c1:57:f0:99:9a:1a:c0: 21:e8:f6:25:b9:73:f5:b3:b5:0b:76:ea:35:7c:d3: 2d:be:13:08:8a:20:79:9a:fa:2d:7c:a8:32:ec:ff: 49:6f:c6:09:bf:b0:35:bd:82:4a:7d:62:d2:b0:0a: 1f:2b:7f:68:b0:3e:d5:5c:c0:06:4d:39:73:ad:16: 62:d0:22:08:a0:38:30:2f:07:68:96:24:63:64:7e: f6:72:ed:50:6d:1f:ed:9e:b0:10:ab:79:23:9b:9b: 58:9c:83:94:b5:c2:7d:64:fd:34:ef:67:d7:a9:69: d8:74:24:2f:c8:2a:97:46:23:45:15:4c:34:c0:4c: 8c:d8:35:69:a1:73:be:5e:5e:e8:6d:f7:c8:2c:6b: 81:59:67:24:94:2c:cd:f0:28:4b:18:d3:82:bb:38: 21:5a:5f:2c:5f:1f:1a:ba:0c:19:5e:99:e6:96:67: f9:8f:10:c1:e6:c3:f7:6d:7b:15:92:6d:c0:96:33: 30:b1:5d:46:23:09:8d:2f:2b:8a:cd:4c:e2:d4:9d: c6:e7:73:bc:d0:92:c2:5f:f6:0f:c6:b0:e6:35:7c: c4:6a:37:4c:a8:5f:55:12:f7:5b:bf:4a:5c:b7:07: c3:b0:90:89:b4:55:be:31:0f:21:e4:c0:f6:00:9d: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:55:1C:93:0D:BF:F9:8E:69:CD:1F:7A:99:20:72:91:B8:D3:28:03 X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/r1Uckw2_-Y5pzR96mSBykbjTKAM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.120.200.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:d3:0e:c4:3c:97:8f:82:96:75:eb:66:ad:52:7d:52:4d:07: e0:84:67:fa:04:fc:95:cc:5e:81:f7:7a:77:bd:2d:7c:d3:ba: cd:a8:9c:79:3e:c6:92:e5:80:c7:a9:64:3b:ad:c4:97:79:ad: 8f:8e:20:f0:65:0d:dd:72:77:27:20:99:c9:d0:c3:0a:fd:c0: e1:0a:50:29:c1:db:a8:b8:78:9a:cc:8e:e2:07:ad:11:5b:35: 8f:c9:e7:d5:28:9e:09:37:9c:84:1c:6f:cc:f0:40:1c:b0:31: d4:6a:1f:65:d0:fa:37:66:4d:2c:90:46:5b:c0:f3:ed:f0:f6: fb:11:d0:e8:bb:9e:04:9d:4d:f4:8c:c5:14:5c:2e:e5:de:2d: 15:b6:74:90:7a:92:69:75:e9:e8:04:9e:4e:de:05:0f:29:e3: 6b:71:4d:7b:01:ac:8b:c3:66:bb:58:26:09:65:a7:46:55:d5: 3a:f7:03:31:6f:9a:d6:05:e9:23:cf:3e:55:80:a9:b6:a6:b0: f6:ee:53:41:86:04:51:0b:3f:b5:01:31:8a:f8:27:ad:0f:c4: 6b:e2:58:1a:91:38:2c:37:c5:6f:44:f7:80:b9:5f:bc:fb:4e: 2d:35:2f:ec:0f:13:b6:03:19:86:bb:77:71:14:90:f8:2b:d0: 05:28:e7:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTEwMDEw MTMwMDBaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGNTUxQzkzMERCRkY5 OEU2OUNEMUY3QTk5MjA3MjkxQjhEMzI4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWSaSOGRaxwVfwmZoawCHo9iW5c/WztQt26jV80y2+EwiKIHma +i18qDLs/0lvxgm/sDW9gkp9YtKwCh8rf2iwPtVcwAZNOXOtFmLQIgigODAvB2iW JGNkfvZy7VBtH+2esBCreSObm1icg5S1wn1k/TTvZ9epadh0JC/IKpdGI0UVTDTA TIzYNWmhc75eXuht98gsa4FZZySULM3wKEsY04K7OCFaXyxfHxq6DBlemeaWZ/mP EMHmw/dtexWSbcCWMzCxXUYjCY0vK4rNTOLUncbnc7zQksJf9g/GsOY1fMRqN0yo X1US91u/Sly3B8OwkIm0Vb4xDyHkwPYAnVVtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUr1Uckw2/+Y5pzR96mSBykbjTKAMwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5L3IxVWNrdzJfLVk1cHpSOTZtU0J5a2JqVEtBTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM9eMgwDQYJKoZIhvcNAQELBQADggEBAAzTDsQ8l4+ClnXrZq1SfVJNB+CE Z/oE/JXMXoH3ene9LXzTus2onHk+xpLlgMepZDutxJd5rY+OIPBlDd1ydycgmcnQ wwr9wOEKUCnB26i4eJrMjuIHrRFbNY/J59Uongk3nIQcb8zwQBywMdRqH2XQ+jdm TSyQRlvA8+3w9vsR0Oi7ngSdTfSMxRRcLuXeLRW2dJB6kml16egEnk7eBQ8p42tx TXsBrIvDZrtYJgllp0ZV1Tr3AzFvmtYF6SPPPlWAqbamsPbuU0GGBFELP7UBMYr4 J60PxGviWBqROCw3xW9E94C5X7z7Ti01L+wPE7YDGYa7d3EUkPgr0AUo57w= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:27 2025 by rpki-client