$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/r0revnslzPAmyIPtispemO-L0q4.roa File: r0revnslzPAmyIPtispemO-L0q4.roa (raw, json) Hash identifier: s02BqfoIGNmoi8lJaAVgV/Ls7HgMreByc+g1KjePH3Q= Subject key identifier: AF:4A:DE:BE:7B:25:CC:F0:26:C8:83:ED:8A:CA:5E:98:EF:8B:D2:AE Certificate issuer: /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6 Certificate serial: 32 Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/r0revnslzPAmyIPtispemO-L0q4.roa Signing time: Tue 01 Jul 2025 01:31:40 +0000 ROA not before: Tue 01 Jul 2025 01:31:40 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 23791 IP address blocks: 202.170.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6 Validity Not Before: Jul 1 01:31:40 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=AF4ADEBE7B25CCF026C883ED8ACA5E98EF8BD2AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:6d:0f:34:21:b3:8c:48:11:6d:d6:6a:6e: 1b:1c:3e:27:f6:bf:1c:ed:2f:d8:2c:2e:62:35:3c: 2a:db:02:a1:69:0b:f8:98:d2:a4:01:92:9c:ca:1f: cb:ff:27:79:99:de:28:65:7c:6f:aa:2b:f7:38:85: 26:13:2f:9b:8f:93:8e:e7:46:13:20:63:ce:05:4d: d6:3b:a7:ab:36:64:2d:91:b2:69:51:3a:53:14:8d: de:ac:94:26:5b:3f:d8:40:34:79:15:41:22:76:6a: a3:b1:b9:f4:30:bc:f9:a9:ba:08:b0:f2:cf:b3:97: 7c:69:d0:e1:15:97:8d:e4:ff:62:a2:aa:d1:d7:f9: eb:ab:ff:fb:f3:ec:68:4e:ba:1a:83:db:90:69:9d: da:dd:85:d7:55:fc:32:59:45:89:ea:30:40:62:f7: de:c2:8f:6b:3e:b4:5c:84:a3:ee:bf:1f:95:ed:f6: 0a:b9:b5:86:38:19:54:87:43:fc:24:c2:5e:58:16: 96:17:e8:b7:14:35:4e:e6:4e:7d:b6:62:8c:97:af: 3f:58:24:1a:e3:37:eb:43:ad:3e:a4:02:3d:59:c5: e4:f9:fe:ae:af:e1:c0:32:96:70:47:06:6f:b8:6c: 6f:e8:52:ef:58:90:2b:1e:d2:0c:47:df:6b:f4:d2: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4A:DE:BE:7B:25:CC:F0:26:C8:83:ED:8A:CA:5E:98:EF:8B:D2:AE X509v3 Authority Key Identifier: keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/r0revnslzPAmyIPtispemO-L0q4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.208.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:f4:f5:f3:5d:3d:55:c0:54:cb:6e:4f:cb:86:1e:dd:ab:f7: a3:d6:4b:0a:b2:6f:fb:7f:44:f7:33:61:e7:e0:21:41:7c:33: cf:fa:e3:4c:73:48:cb:cd:ea:8d:07:13:ef:b4:31:eb:c1:d0: 48:e3:76:da:71:13:2f:84:46:f9:52:17:c0:9b:a0:99:91:3b: f5:f7:cd:5e:32:e6:6f:af:4e:a0:fb:86:c2:19:43:56:08:d0: b5:db:4b:9a:1f:46:8d:c8:2c:23:e9:ad:94:eb:07:62:22:6f: 9a:58:6a:b0:8c:6e:07:e8:13:c7:7c:dc:2e:e0:2c:e7:be:7c: 9b:70:d9:64:4a:cc:ab:b1:05:f4:0f:85:85:ac:99:d2:74:9f: a3:bc:3b:09:4a:b9:be:14:1a:f8:f2:9d:7c:51:1e:17:d8:5f: f7:e8:4d:41:78:58:67:bc:9a:9d:04:78:1a:8e:e5:a2:9d:80: 47:8e:41:de:c8:dc:a2:38:36:1a:7e:e0:e1:f9:cf:8d:d2:02: 7c:17:cd:9e:81:52:58:1b:38:84:f2:48:6a:36:2b:0e:25:b0: 26:30:ae:39:e5:27:2c:37:d9:53:b1:09:02:4e:ec:1a:e7:b3: 97:48:f5:14:55:7b:40:04:5b:1c:16:50:12:1f:2c:48:d8:53: 3a:59:0c:ef -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzYy QjJFM0U0NzhEQ0JBRDZGNDJBNDUxMTI5MENGQzM3M0MyNEM2MB4XDTI1MDcwMTAx MzE0MFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQUY0QURFQkU3QjI1Q0NG MDI2Qzg4M0VEOEFDQTVFOThFRjhCRDJBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALJ/bQ80IbOMSBFt1mpuGxw+J/a/HO0v2CwuYjU8KtsCoWkL+JjS pAGSnMofy/8neZneKGV8b6or9ziFJhMvm4+TjudGEyBjzgVN1junqzZkLZGyaVE6 UxSN3qyUJls/2EA0eRVBInZqo7G59DC8+am6CLDyz7OXfGnQ4RWXjeT/YqKq0df5 66v/+/PsaE66GoPbkGmd2t2F11X8MllFieowQGL33sKPaz60XISj7r8fle32Crm1 hjgZVIdD/CTCXlgWlhfotxQ1TuZOfbZijJevP1gkGuM360OtPqQCPVnF5Pn+rq/h wDKWcEcGb7hsb+hS71iQKx7SDEffa/TSrf8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSvSt6+eyXM8CbIg+2Kyl6Y74vSrjAfBgNVHSMEGDAWgBQjYrLj5Hjcutb0KkUR KQz8NzwkxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODAyL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0RjOEpNWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0Rj OEpNWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84MDIvcjByZXZuc2x6UEFteUlQdGlzcGVtTy1MMHE0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8qq0DANBgkqhkiG9w0BAQsFAAOCAQEADfT18109VcBUy25Py4Ye3av3o9ZL CrJv+39E9zNh5+AhQXwzz/rjTHNIy83qjQcT77Qx68HQSON22nETL4RG+VIXwJug mZE79ffNXjLmb69OoPuGwhlDVgjQtdtLmh9GjcgsI+mtlOsHYiJvmlhqsIxuB+gT x3zcLuAs5758m3DZZErMq7EF9A+FhayZ0nSfo7w7CUq5vhQa+PKdfFEeF9hf9+hN QXhYZ7yanQR4Go7lop2AR45B3sjcojg2Gn7g4fnPjdICfBfNnoFSWBs4hPJIajYr DiWwJjCuOeUnLDfZU7EJAk7sGuezl0j1FFV7QARbHBZQEh8sSNhTOlkM7w== -----END CERTIFICATE-----Generated at Sat Jul 5 09:41:14 2025 by rpki-client