$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/EfssrWkX0ryxMtK7Ta4FBsOf8bc.roa File: EfssrWkX0ryxMtK7Ta4FBsOf8bc.roa (raw, json) Hash identifier: eovGbezE85V0Vhfb3NwJeYDalcAMCllVtihzYmW6OLg= Subject key identifier: 11:FB:2C:AD:69:17:D2:BC:B1:32:D2:BB:4D:AE:05:06:C3:9F:F1:B7 Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Certificate serial: 64 Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/EfssrWkX0ryxMtK7Ta4FBsOf8bc.roa Signing time: Wed 01 Oct 2025 01:29:40 +0000 ROA not before: Wed 01 Oct 2025 01:29:40 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 131925 IP address blocks: 160.237.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0 Validity Not Before: Oct 1 01:29:40 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=11FB2CAD6917D2BCB132D2BB4DAE0506C39FF1B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:2c:05:c3:8d:25:27:b4:46:40:a7:98:33: 7b:58:f3:a5:f3:c0:99:d9:47:32:08:ad:d0:df:c1: 11:15:43:53:6a:43:d8:ca:d0:01:52:c1:8f:96:d3: ef:78:cb:4b:05:e0:46:41:1b:e7:6d:a7:53:6d:54: 00:8a:82:c1:55:1d:00:7f:15:3f:d8:23:ef:1f:2b: b1:87:8e:5f:dd:80:5a:09:b6:e2:e4:32:29:4e:f2: f1:25:fe:ec:cd:99:74:09:cb:36:3c:cc:b7:da:e4: 24:e8:96:4f:c4:b2:21:be:c2:9a:e2:ff:b4:37:b9: 84:fe:15:50:5f:50:6e:ea:db:6b:2b:2b:1f:c5:5a: 4a:a9:6d:22:86:69:18:ed:98:f9:a7:2d:f6:dc:63: 5b:cd:34:b3:41:ff:f3:bf:b0:38:9c:65:b1:0d:0e: 02:77:d3:fd:70:53:4f:b7:ee:34:bb:ce:6b:2b:ae: e8:a6:25:99:33:a0:73:85:23:cb:3a:31:51:81:ee: 1f:61:f1:d6:08:19:d5:78:74:ca:ca:79:2c:4a:78: 7e:ee:cf:34:d7:3c:48:d9:3e:0d:0f:0a:6d:83:40: 80:9f:d7:41:ad:22:af:7d:b9:56:5e:e9:c8:0a:6a: a8:f8:0e:7f:43:9d:4d:1d:b8:f8:93:e2:74:06:db: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:2C:AD:69:17:D2:BC:B1:32:D2:BB:4D:AE:05:06:C3:9F:F1:B7 X509v3 Authority Key Identifier: keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/EfssrWkX0ryxMtK7Ta4FBsOf8bc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.237.96.0/19 Signature Algorithm: sha256WithRSAEncryption 83:d9:70:3d:49:9a:f3:08:ff:27:63:e1:5f:53:78:90:2b:eb: 65:2c:95:0d:cc:ac:b0:99:49:e0:92:5c:8d:62:26:c3:bc:99: 62:3d:92:52:62:8d:e7:d0:5f:27:3d:45:4a:5d:71:6e:e6:d1: 30:a3:d2:7b:28:9d:f3:39:37:c1:96:f5:b5:bd:5c:98:91:b2: 8b:b9:ee:7d:ff:ff:5e:c4:0f:cf:65:24:e8:f8:55:f8:4c:51: ce:62:f9:d2:bb:06:64:5a:37:36:a6:37:cd:61:58:e2:f9:ca: f9:33:c1:d3:a2:b6:86:87:3f:a3:fd:35:40:99:88:18:c1:ac: 52:93:14:49:45:01:63:ba:12:70:76:43:a5:28:02:2e:20:3b: 5e:e7:bf:30:6a:d4:32:d2:9b:3c:f9:d5:e4:ab:4f:fe:6d:fb: 61:eb:45:68:77:da:25:3b:c4:6c:de:0d:fc:81:17:d0:df:c1: 4b:f1:78:03:7e:a1:2a:0c:42:11:67:92:b9:64:0c:61:57:27: 77:74:42:74:37:ca:c5:df:28:fa:f1:5f:d3:73:44:59:62:e6: 72:0f:5a:63:fa:52:4e:0d:84:1f:f3:fa:88:b8:08:b6:50:56: d8:c1:65:a5:95:ba:b6:72:04:95:f7:92:93:c8:1b:8f:92:6e: f1:79:e8:0e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBZDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MEQy MjBCOUU0QTYzNThFMDNDRDQ3ODY0NTE3RDlEMzAwQjA2RkYwMB4XDTI1MTAwMTAx Mjk0MFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMTFGQjJDQUQ2OTE3RDJC Q0IxMzJEMkJCNERBRTA1MDZDMzlGRjFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMkqLAXDjSUntEZAp5gze1jzpfPAmdlHMgit0N/BERVDU2pD2MrQ AVLBj5bT73jLSwXgRkEb522nU21UAIqCwVUdAH8VP9gj7x8rsYeOX92AWgm24uQy KU7y8SX+7M2ZdAnLNjzMt9rkJOiWT8SyIb7CmuL/tDe5hP4VUF9QburbaysrH8Va SqltIoZpGO2Y+act9txjW800s0H/87+wOJxlsQ0OAnfT/XBTT7fuNLvOayuu6KYl mTOgc4UjyzoxUYHuH2Hx1ggZ1Xh0ysp5LEp4fu7PNNc8SNk+DQ8KbYNAgJ/XQa0i r325Vl7pyApqqPgOf0OdTR24+JPidAbb8EUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQR+yytaRfSvLEy0rtNrgUGw5/xtzAfBgNVHSMEGDAWgBRA0iC55KY1jgPNR4ZF F9nTALBv8DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTMwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdDd2JfQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1FOSWd1ZVNtTlk0RHpVZUdSUmZaMHdD d2JfQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MzAvRWZzc3JXa1gwcnl4TXRLN1RhNEZCc09mOGJjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBaDtYDANBgkqhkiG9w0BAQsFAAOCAQEAg9lwPUma8wj/J2PhX1N4kCvrZSyV DcyssJlJ4JJcjWImw7yZYj2SUmKN59BfJz1FSl1xbubRMKPSeyid8zk3wZb1tb1c mJGyi7nuff//XsQPz2Uk6PhV+ExRzmL50rsGZFo3NqY3zWFY4vnK+TPB06K2hoc/ o/01QJmIGMGsUpMUSUUBY7oScHZDpSgCLiA7Xue/MGrUMtKbPPnV5KtP/m37YetF aHfaJTvEbN4N/IEX0N/BS/F4A36hKgxCEWeSuWQMYVcnd3RCdDfKxd8o+vFf03NE WWLmcg9aY/pSTg2EH/P6iLgItlBW2MFlpZW6tnIElfeSk8gbj5Ju8XnoDg== -----END CERTIFICATE-----Generated at Tue Oct 21 08:04:32 2025 by rpki-client