$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/mhoLMc2Xrb5ELbyW2mXsYQPtmjk.roa File: mhoLMc2Xrb5ELbyW2mXsYQPtmjk.roa (raw, json) Hash identifier: TbHef7aE90gYMHw8WZmZDGZADoKCg1KAofXjSKfPlf8= Subject key identifier: 9A:1A:0B:31:CD:97:AD:BE:44:2D:BC:96:DA:65:EC:61:03:ED:9A:39 Certificate issuer: /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Certificate serial: 79 Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/mhoLMc2Xrb5ELbyW2mXsYQPtmjk.roa Signing time: Fri 31 Jan 2025 01:31:59 +0000 ROA not before: Fri 31 Jan 2025 01:31:59 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 18260 IP address blocks: 101.55.232.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1 Validity Not Before: Jan 31 01:31:59 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=9A1A0B31CD97ADBE442DBC96DA65EC6103ED9A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4a:e6:26:5c:6a:14:8d:74:46:e1:4f:5e:ec: 5a:44:b2:fd:fd:13:04:c8:29:ad:b2:e3:92:2e:0e: c5:d0:ed:b9:f4:34:69:36:9f:33:cc:4c:94:0a:79: 1b:df:d4:dc:98:c7:45:b2:98:d2:98:02:89:94:78: b0:e1:bb:0c:39:f9:86:b9:09:d8:0f:0e:b3:80:d1: 5f:84:61:da:f6:0f:1e:55:ef:40:ee:20:88:68:5b: 39:e8:89:7e:ca:49:5f:48:5e:9f:74:39:38:3c:1f: 26:8c:04:28:a0:9c:b2:a8:96:d8:18:72:3b:ed:d8: c3:f0:ea:93:b8:3b:06:d4:21:73:02:80:fe:d0:e8: 20:61:9c:a2:16:43:7f:55:75:cf:d7:1f:6d:09:3f: d0:31:b2:7f:c6:b4:07:71:9d:af:52:17:70:b0:48: e2:1a:c2:b6:70:85:ce:d7:e4:0e:50:c3:60:07:c9: e0:42:10:14:0b:49:34:ad:1c:d6:be:b2:fe:e7:50: 15:cf:fe:f3:b4:06:c3:bf:28:f9:92:46:98:da:48: ae:c8:b3:bd:fd:3f:6e:9e:cf:27:2c:71:d3:3f:fe: d4:8b:48:7a:51:75:2c:82:f6:57:68:43:4b:5f:70: 8d:48:d8:f6:70:ec:aa:52:a5:8b:5d:bc:0b:dd:76: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1A:0B:31:CD:97:AD:BE:44:2D:BC:96:DA:65:EC:61:03:ED:9A:39 X509v3 Authority Key Identifier: keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/mhoLMc2Xrb5ELbyW2mXsYQPtmjk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.55.232.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:69:5c:d9:23:74:5c:a5:fb:21:1f:36:6e:e8:1b:14:d0:39: 4c:91:08:81:2d:5e:e2:c8:03:5f:c7:a0:0e:ef:62:57:2d:b8: b4:77:eb:1a:a2:c2:d4:93:5d:bf:cd:36:5d:80:57:ce:af:45: 08:d0:b6:d7:f2:4c:17:58:de:68:32:56:1c:aa:ae:c1:a9:fc: 7c:1b:c4:b9:52:9b:ec:6d:37:01:28:f7:3f:d3:e6:80:75:73: e8:0d:a6:2a:72:1a:b0:1e:f7:5e:24:f4:03:84:4f:bb:78:74: 75:a0:2c:74:1c:b1:31:89:f1:a8:a0:be:ac:fa:6b:ba:86:b0: 54:2d:7b:86:99:30:f3:23:1a:4e:9f:a6:80:e4:16:67:3d:40: 4a:12:fb:5a:92:1a:07:cb:31:36:b5:1a:7a:a3:3e:d9:36:9a: 23:3b:cf:b9:f1:c5:b3:3c:e9:2a:31:f5:aa:3d:a8:b4:5f:1b: a3:c1:18:0d:88:9e:48:bd:59:01:a1:ef:0e:c9:11:72:ce:ed: ee:5d:f3:a8:64:71:3e:ec:f8:01:ea:c6:74:1a:ca:f7:33:29: 1f:30:0d:df:b7:ed:50:35:8c:24:c7:8f:35:ad:c2:66:b2:63: 7c:13:89:f5:f7:7f:62:40:a3:c2:87:fb:87:32:93:d6:4e:b3: 10:f1:e4:13 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI1MDEzMTAx MzE1OVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoOUExQTBCMzFDRDk3QURC RTQ0MkRCQzk2REE2NUVDNjEwM0VEOUEzOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOhK5iZcahSNdEbhT17sWkSy/f0TBMgprbLjki4OxdDtufQ0aTaf M8xMlAp5G9/U3JjHRbKY0pgCiZR4sOG7DDn5hrkJ2A8Os4DRX4Rh2vYPHlXvQO4g iGhbOeiJfspJX0hen3Q5ODwfJowEKKCcsqiW2BhyO+3Yw/Dqk7g7BtQhcwKA/tDo IGGcohZDf1V1z9cfbQk/0DGyf8a0B3Gdr1IXcLBI4hrCtnCFztfkDlDDYAfJ4EIQ FAtJNK0c1r6y/udQFc/+87QGw78o+ZJGmNpIrsizvf0/bp7PJyxx0z/+1ItIelF1 LIL2V2hDS19wjUjY9nDsqlKli128C912hi8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSaGgsxzZetvkQtvJbaZexhA+2aOTAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MzEvbWhvTE1jMlhyYjVFTGJ5VzJtWHNZUVB0bWprLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2U36DANBgkqhkiG9w0BAQsFAAOCAQEADWlc2SN0XKX7IR82bugbFNA5TJEI gS1e4sgDX8egDu9iVy24tHfrGqLC1JNdv802XYBXzq9FCNC21/JMF1jeaDJWHKqu wan8fBvEuVKb7G03ASj3P9PmgHVz6A2mKnIasB73XiT0A4RPu3h0daAsdByxMYnx qKC+rPpruoawVC17hpkw8yMaTp+mgOQWZz1AShL7WpIaB8sxNrUaeqM+2TaaIzvP ufHFszzpKjH1qj2otF8bo8EYDYieSL1ZAaHvDskRcs7t7l3zqGRxPuz4AerGdBrK 9zMpHzAN37ftUDWMJMePNa3CZrJjfBOJ9fd/YkCjwof7hzKT1k6zEPHkEw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:08 2025 by rpki-client