$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/dFRQAXs7qkuSFxKLpXEV2KXgcSI.roa File: dFRQAXs7qkuSFxKLpXEV2KXgcSI.roa (raw, json) Hash identifier: isxLAEkEI5yOHxHWCDWkFZ41Yuxh97aTKuKdktEMVE0= Subject key identifier: 74:54:50:01:7B:3B:AA:4B:92:17:12:8B:A5:71:15:D8:A5:E0:71:22 Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907 Certificate serial: 34 Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/dFRQAXs7qkuSFxKLpXEV2KXgcSI.roa Signing time: Tue 01 Jul 2025 01:32:16 +0000 ROA not before: Tue 01 Jul 2025 01:32:16 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 17682 IP address blocks: 218.40.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907 Validity Not Before: Jul 1 01:32:16 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=745450017B3BAA4B9217128BA57115D8A5E07122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:59:d2:2b:17:93:a5:20:bb:5f:61:f9:76: cc:17:3c:f5:6e:a9:b7:42:82:c8:a0:a2:b6:07:1b: 21:9f:d6:d3:85:ea:94:1e:8f:da:84:e4:47:0d:17: ab:e9:4a:2a:8c:fa:c4:57:ec:be:e8:f6:1e:d9:24: 3f:d6:3b:24:09:f7:24:37:6d:98:cc:d1:9a:3f:00: 35:4b:2b:59:22:53:e9:01:54:f7:55:dc:cc:68:53: fb:4b:b0:31:2d:f1:b8:c8:75:87:46:af:1d:81:e2: 00:1a:8f:f0:65:8c:9d:71:41:2c:c5:c5:77:2d:de: de:46:95:2b:c1:18:6f:a7:da:97:3a:a7:84:18:27: 66:3e:43:3d:e3:a4:06:2c:9c:c4:ec:16:6d:06:84: 03:26:fc:b5:8d:55:e2:85:fb:76:e1:60:f9:8d:f9: ce:f9:fd:0c:0e:06:ae:dd:ff:5a:83:fc:77:f0:e7: cd:6a:67:20:da:77:40:06:aa:78:dd:e6:ad:38:da: 7c:8c:f0:31:64:7e:e7:f6:69:32:66:6b:98:87:f4: 2a:90:5a:02:43:7b:8e:00:27:2e:68:61:c7:d8:dd: 0a:9e:f3:29:50:aa:bb:6c:a9:a3:c6:cd:f7:19:7e: 18:97:e1:7a:44:27:0d:71:e8:d6:a4:84:20:a8:3d: 51:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:50:01:7B:3B:AA:4B:92:17:12:8B:A5:71:15:D8:A5:E0:71:22 X509v3 Authority Key Identifier: keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/dFRQAXs7qkuSFxKLpXEV2KXgcSI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.40.80.0/21 Signature Algorithm: sha256WithRSAEncryption 18:66:ed:d5:97:d4:b8:ef:e1:f8:7e:a8:44:d3:56:25:c6:70: 54:c3:7b:75:79:d4:5e:10:64:a7:d9:28:ee:56:83:e5:c5:11: 09:98:61:35:87:3b:b4:58:ad:09:93:49:17:f0:f2:94:e6:21: a8:ff:2f:03:60:5d:df:0b:46:fb:e5:ed:a0:6d:2b:be:11:33: c8:75:67:83:8d:a6:2e:5c:ab:92:cb:34:48:14:bb:1d:de:29: 47:a4:12:e7:59:f7:69:73:8a:1e:8b:35:54:d6:c7:91:43:e2: 96:a0:7d:13:8a:ed:4f:02:94:63:30:01:97:9a:ee:a2:6b:e8: cc:07:a7:a9:4e:d0:9a:41:c6:dc:62:c0:69:10:b9:e3:7a:67: 41:d1:08:b3:26:c0:d9:c5:07:88:1d:5f:52:85:1a:75:9d:4b: a1:b5:39:c7:81:51:36:35:19:b0:53:08:2e:40:80:d6:aa:6b: fc:f0:ce:8a:79:f1:1c:58:85:a6:e4:03:4b:e9:71:d4:d9:8e: e1:e9:bd:a8:8a:5f:37:eb:f8:2e:7b:9f:77:8e:1e:c3:82:27: db:18:6d:3d:fa:d6:a0:f4:55:73:09:bb:ef:54:87:99:34:de: 27:3d:55:92:2a:4b:d4:06:69:71:78:a5:dd:ca:46:9c:35:c1: 46:7b:76:1c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5 NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTI1MDcwMTAx MzIxNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNzQ1NDUwMDE3QjNCQUE0 QjkyMTcxMjhCQTU3MTE1RDhBNUUwNzEyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMy3WdIrF5OlILtfYfl2zBc89W6pt0KCyKCitgcbIZ/W04XqlB6P 2oTkRw0Xq+lKKoz6xFfsvuj2HtkkP9Y7JAn3JDdtmMzRmj8ANUsrWSJT6QFU91Xc zGhT+0uwMS3xuMh1h0avHYHiABqP8GWMnXFBLMXFdy3e3kaVK8EYb6falzqnhBgn Zj5DPeOkBiycxOwWbQaEAyb8tY1V4oX7duFg+Y35zvn9DA4Grt3/WoP8d/DnzWpn INp3QAaqeN3mrTjafIzwMWR+5/ZpMmZrmIf0KpBaAkN7jgAnLmhhx9jdCp7zKVCq u2ypo8bN9xl+GJfhekQnDXHo1qSEIKg9UacCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBR0VFABezuqS5IXEoulcRXYpeBxIjAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82MDQvZEZSUUFYczdxa3VTRnhLTHBYRVYyS1hnY1NJLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA9ooUDANBgkqhkiG9w0BAQsFAAOCAQEAGGbt1ZfUuO/h+H6oRNNWJcZwVMN7 dXnUXhBkp9ko7laD5cURCZhhNYc7tFitCZNJF/DylOYhqP8vA2Bd3wtG++XtoG0r vhEzyHVng42mLlyrkss0SBS7Hd4pR6QS51n3aXOKHos1VNbHkUPilqB9E4rtTwKU YzABl5ruomvozAenqU7QmkHG3GLAaRC543pnQdEIsybA2cUHiB1fUoUadZ1LobU5 x4FRNjUZsFMILkCA1qpr/PDOinnxHFiFpuQDS+lx1NmO4em9qIpfN+v4Lnufd44e w4In2xhtPfrWoPRVcwm771SHmTTeJz1VkipL1AZpcXil3cpGnDXBRnt2HA== -----END CERTIFICATE-----Generated at Sat Jul 5 09:23:54 2025 by rpki-client