$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KBOMGMEFPHid7M2l3aCasoHQTJE.roa File: KBOMGMEFPHid7M2l3aCasoHQTJE.roa (raw, json) Hash identifier: JiATYK0VfOkNwgz7/I6vyKj5Vz/1e+jXCWDf2Sj9DLI= Subject key identifier: 28:13:8C:18:C1:05:3C:78:9D:EC:CD:A5:DD:A0:9A:B2:81:D0:4C:91 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01C1 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KBOMGMEFPHid7M2l3aCasoHQTJE.roa Signing time: Tue 01 Jul 2025 01:34:41 +0000 ROA not before: Tue 01 Jul 2025 01:34:41 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 163.49.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 1 01:34:41 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=28138C18C1053C789DECCDA5DDA09AB281D04C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:41:ec:0d:3e:27:ac:54:25:53:a3:04:9c: 49:73:9d:ea:61:d5:ba:68:25:35:9a:2f:7b:28:e7: 89:05:96:0a:73:25:7a:83:c5:00:f0:d9:4b:b9:5c: e7:a6:9e:93:76:cf:93:dd:f0:81:78:76:76:7c:1b: f8:2a:ac:ec:8e:fa:2f:6f:51:96:42:72:f6:cd:95: 04:47:6e:cd:e6:7c:5a:c3:fd:c4:35:a4:06:04:74: 2e:54:97:99:25:12:44:40:b0:10:d5:22:a9:18:d5: 3d:e9:79:d1:b1:11:eb:22:09:35:43:48:26:64:c6: 71:d8:cf:05:d8:66:a7:4c:fe:6d:e1:4a:46:b4:d9: 72:eb:57:f1:18:2c:f4:f9:b0:d0:57:0b:3b:ce:f8: 90:ac:77:73:01:41:80:1b:33:ce:a5:22:03:14:d0: fe:be:57:d9:00:25:8a:eb:69:1b:13:b1:f8:d3:ce: 0c:b3:1d:fa:34:e7:40:e2:8a:5e:e9:8c:f6:e7:8b: 79:ef:14:ed:cc:b5:e6:63:92:96:c1:13:1e:31:b4: 9f:b4:4c:c6:8d:d5:bd:6c:31:b5:3c:17:b5:8f:b2: 22:8a:a9:84:4d:0f:42:cd:43:0c:20:d1:fc:3a:84: 0e:81:e1:80:c4:9c:bf:42:13:63:48:ec:5b:4a:c5: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:13:8C:18:C1:05:3C:78:9D:EC:CD:A5:DD:A0:9A:B2:81:D0:4C:91 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KBOMGMEFPHid7M2l3aCasoHQTJE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.49.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:6c:f4:6d:9a:0a:4b:83:5a:02:bf:e0:88:9d:39:2f:88:02: e7:d1:3e:73:2c:3d:e9:18:03:16:9d:dc:e0:83:2e:cb:9d:1e: 95:7e:04:e0:e1:23:49:2c:58:d1:6e:92:bd:75:06:1f:d3:0e: e9:12:35:8f:93:8b:6b:22:67:03:f4:af:04:ed:aa:0f:36:6c: ab:6d:4c:b2:25:91:34:66:09:13:3a:89:f5:4f:3c:18:de:f4: 02:c3:5d:81:11:c5:f9:2a:3d:18:43:ff:c2:fb:06:51:8d:b0: f6:fa:d7:39:6a:28:d1:c8:a4:00:0e:22:12:9b:ea:9f:e9:ea: 82:33:1c:30:8f:1e:98:d5:e4:a6:1a:78:35:3e:2e:2e:18:7c: 0e:99:23:95:a2:8f:77:e2:cd:93:e6:53:92:3a:76:8e:e5:5a: ad:91:9a:1d:d5:f6:ba:87:e5:25:70:43:20:75:cf:ab:df:be: b6:07:27:40:0a:33:7e:d0:91:b7:f1:a7:36:00:14:21:7e:b2: 67:1e:9b:f5:c7:1d:df:36:58:4e:a7:d4:48:5a:dc:23:8e:42: ea:19:e8:2f:0c:27:f2:9a:20:55:3f:0e:71:8e:5f:79:c1:2b: 4b:36:b9:7c:ee:08:fa:78:fd:0a:e7:c5:cf:a3:ee:e0:ad:fc: c3:e4:0a:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw MTM0NDFaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDI4MTM4QzE4QzEwNTND Nzg5REVDQ0RBNUREQTA5QUIyODFEMDRDOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0V0HsDT4nrFQlU6MEnElzneph1bpoJTWaL3so54kFlgpzJXqD xQDw2Uu5XOemnpN2z5Pd8IF4dnZ8G/gqrOyO+i9vUZZCcvbNlQRHbs3mfFrD/cQ1 pAYEdC5Ul5klEkRAsBDVIqkY1T3pedGxEesiCTVDSCZkxnHYzwXYZqdM/m3hSka0 2XLrV/EYLPT5sNBXCzvO+JCsd3MBQYAbM86lIgMU0P6+V9kAJYrraRsTsfjTzgyz Hfo050Diil7pjPbni3nvFO3MteZjkpbBEx4xtJ+0TMaN1b1sMbU8F7WPsiKKqYRN D0LNQwwg0fw6hA6B4YDEnL9CE2NI7FtKxR+DAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUKBOMGMEFPHid7M2l3aCasoHQTJEwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvS0JPTUdNRUZQSGlkN00ybDNhQ2Fzb0hRVEpFLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AKMxMA0GCSqGSIb3DQEBCwUAA4IBAQA5bPRtmgpLg1oCv+CInTkviALn0T5zLD3p GAMWndzggy7LnR6VfgTg4SNJLFjRbpK9dQYf0w7pEjWPk4trImcD9K8E7aoPNmyr bUyyJZE0ZgkTOon1TzwY3vQCw12BEcX5Kj0YQ//C+wZRjbD2+tc5aijRyKQADiIS m+qf6eqCMxwwjx6Y1eSmGng1Pi4uGHwOmSOVoo934s2T5lOSOnaO5VqtkZod1fa6 h+UlcEMgdc+r3762BydACjN+0JG38ac2ABQhfrJnHpv1xx3fNlhOp9RIWtwjjkLq GegvDCfymiBVPw5xjl95wStLNrl87gj6eP0K58XPo+7grfzD5ArE -----END CERTIFICATE-----Generated at Fri Jul 4 08:09:40 2025 by rpki-client