$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/oln9WJGNVVeDSjGTl5_58VJyn0I.roa File: oln9WJGNVVeDSjGTl5_58VJyn0I.roa (raw, json) Hash identifier: eyvEf7IyKc6ofIb/ZMjhpnUNsz5FxCHSv/kueJE3fRo= Subject key identifier: A2:59:FD:58:91:8D:55:57:83:4A:31:93:97:9F:F9:F1:52:72:9F:42 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01CB Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/oln9WJGNVVeDSjGTl5_58VJyn0I.roa Signing time: Tue 01 Jul 2025 01:42:24 +0000 ROA not before: Tue 01 Jul 2025 01:42:24 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 121.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 1 01:42:24 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A259FD58918D5557834A3193979FF9F152729F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:b4:85:80:8b:ad:7f:d3:de:ab:86:97:5b: 55:08:de:05:bc:aa:02:51:e3:dd:d1:29:96:4e:0d: bd:10:da:8d:39:90:53:00:d2:27:58:cc:1d:b4:eb: 6b:ab:8f:2f:13:ce:70:4b:e5:0c:de:f1:f5:cc:3b: af:fa:09:03:d6:30:2f:70:74:7c:1c:ba:a2:8e:41: b0:07:9b:49:6f:dc:8a:1c:bc:41:e7:56:41:aa:d8: 24:fd:b4:6f:db:e7:88:9b:55:90:03:fe:3b:fb:cb: 33:d0:d1:43:13:e5:f4:39:35:5c:1a:8e:6a:87:ed: df:d3:0d:8f:f4:30:e6:4a:9e:30:ab:d1:a8:08:41: a6:fa:bf:17:bb:81:fa:da:09:fb:ca:57:8f:af:f7: 89:57:d6:74:ad:fb:e1:53:10:d3:f2:c4:24:12:49: ca:16:9f:79:6d:d4:c3:16:6c:b2:08:17:3c:43:41: 22:09:09:ae:94:6f:2d:67:08:13:9c:74:46:8e:84: fe:51:ad:a4:44:e6:a5:f7:5c:56:13:05:0d:5a:19: 90:b1:7d:52:3e:6b:1c:21:8e:c9:7a:f8:cf:f4:40: f6:30:f1:2e:9b:7c:95:44:ca:18:86:91:66:3b:c5: d8:b6:89:03:f2:f0:52:7e:ab:c9:a4:20:37:eb:fd: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:59:FD:58:91:8D:55:57:83:4A:31:93:97:9F:F9:F1:52:72:9F:42 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/oln9WJGNVVeDSjGTl5_58VJyn0I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:d5:e1:e2:40:09:c2:84:89:b9:9a:d4:87:74:bb:89:ea:81: 5e:16:cd:0f:c3:d1:3d:68:e7:00:2f:ea:18:fd:2e:87:e1:dd: 3d:6c:29:d4:42:27:ce:de:41:9b:65:62:4b:3c:79:6b:7c:df: 00:f9:28:01:36:97:d9:c5:4f:3d:99:1a:01:75:5c:71:71:db: 8a:0d:ef:c0:8a:2c:13:a6:66:c2:11:c4:a3:98:22:81:78:9a: 7b:37:b3:ea:50:e5:1f:34:b3:3c:ce:b5:5d:2e:3e:dc:23:34: 4d:52:7e:49:37:52:7a:3b:42:d4:6f:7e:e1:a8:b6:79:1a:27: b5:14:1c:72:ae:28:ca:34:99:6a:5d:cf:fa:1b:09:2b:f1:ee: 50:77:84:47:f3:66:86:71:a0:ac:aa:b2:ee:13:9f:a6:e9:ea: 25:29:25:eb:5a:c9:bc:7c:9a:12:3b:5e:e6:a7:4b:de:10:5b: d6:b7:f9:a6:61:3e:9d:22:ee:c9:3b:2a:6d:30:af:e4:09:b8: f0:c9:a8:bb:10:53:f1:80:74:cb:41:3a:0d:b3:46:b1:5b:24: 77:0a:50:7a:3a:e4:54:ee:c7:29:2e:17:95:3d:23:49:6e:c8: 59:f3:32:8f:f5:2a:89:58:48:69:e5:b8:10:a4:30:a8:dc:0c: 2b:12:55:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgICAcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw MTQyMjRaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyNTlGRDU4OTE4RDU1 NTc4MzRBMzE5Mzk3OUZGOUYxNTI3MjlGNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8I7SFgIutf9Peq4aXW1UI3gW8qgJR493RKZZODb0Q2o05kFMA 0idYzB2062urjy8TznBL5Qze8fXMO6/6CQPWMC9wdHwcuqKOQbAHm0lv3IocvEHn VkGq2CT9tG/b54ibVZAD/jv7yzPQ0UMT5fQ5NVwajmqH7d/TDY/0MOZKnjCr0agI Qab6vxe7gfraCfvKV4+v94lX1nSt++FTENPyxCQSScoWn3lt1MMWbLIIFzxDQSIJ Ca6Uby1nCBOcdEaOhP5RraRE5qX3XFYTBQ1aGZCxfVI+axwhjsl6+M/0QPYw8S6b fJVEyhiGkWY7xdi2iQPy8FJ+q8mkIDfr/U2NAgMBAAGjggIfMIICGzAdBgNVHQ4E FgQUoln9WJGNVVeDSjGTl5/58VJyn0IwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvb2xuOVdKR05WVmVEU2pHVGw1XzU4Vkp5bjBJLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AHlmMA0GCSqGSIb3DQEBCwUAA4IBAQA11eHiQAnChIm5mtSHdLuJ6oFeFs0Pw9E9 aOcAL+oY/S6H4d09bCnUQifO3kGbZWJLPHlrfN8A+SgBNpfZxU89mRoBdVxxcduK De/AiiwTpmbCEcSjmCKBeJp7N7PqUOUfNLM8zrVdLj7cIzRNUn5JN1J6O0LUb37h qLZ5Gie1FBxyrijKNJlqXc/6Gwkr8e5Qd4RH82aGcaCsqrLuE5+m6eolKSXrWsm8 fJoSO17mp0veEFvWt/mmYT6dIu7JOyptMK/kCbjwyai7EFPxgHTLQToNs0axWyR3 ClB6OuRU7scpLheVPSNJbshZ8zKP9SqJWEhp5bgQpDCo3AwrElWu -----END CERTIFICATE-----Generated at Thu Jul 3 12:25:43 2025 by rpki-client