$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/tPJSOvI5cpQYRmn0VL2aJUkQCOc.roa File: tPJSOvI5cpQYRmn0VL2aJUkQCOc.roa (raw, json) Hash identifier: xKM5AU+RX/fWQsqAy+EH2/Jxobf0akpDBd6beNsUvqE= Subject key identifier: B4:F2:52:3A:F2:39:72:94:18:46:69:F4:54:BD:9A:25:49:10:08:E7 Certificate issuer: /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Certificate serial: 41 Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/tPJSOvI5cpQYRmn0VL2aJUkQCOc.roa Signing time: Fri 27 Jun 2025 02:39:36 +0000 ROA not before: Fri 27 Jun 2025 02:39:36 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 59127 IP address blocks: 101.203.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F Validity Not Before: Jun 27 02:39:36 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=B4F2523AF2397294184669F454BD9A25491008E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:51:4b:2c:c8:72:a8:ae:49:82:20:47:07: 0c:41:be:7f:1d:5d:80:ec:14:f4:59:00:1b:51:8b: d6:65:f3:1e:59:a3:7e:ce:ff:a3:4d:d9:1b:8f:77: 8d:9b:0b:ca:ad:9b:98:78:41:f9:fa:58:77:84:06: 8b:55:b4:bd:a7:95:77:3c:84:c4:c1:c5:4d:de:2d: 52:b6:73:6b:79:19:d9:51:48:f3:90:a8:ba:a7:44: 4e:11:a0:5b:55:37:f0:3e:ca:cc:8b:cb:4a:d7:07: c1:0d:a2:f6:56:c9:53:ac:8f:ac:89:8e:c2:9b:a1: 22:2d:07:68:51:7b:84:89:cc:ad:88:95:ca:0e:87: ff:0d:96:59:e8:b2:cc:ad:9c:4e:53:be:39:6f:6f: 74:27:10:09:7a:92:93:c3:e5:d7:2d:b7:4c:53:fe: 39:56:49:16:c5:b1:ed:00:40:60:6d:8f:a9:91:42: 3c:7c:cb:8e:a7:39:43:7c:b5:cc:ac:f2:79:51:ea: 56:32:14:ee:77:57:77:98:3a:f1:6d:aa:91:a9:0a: 40:71:38:f3:00:95:96:d5:6e:e6:5e:c8:d0:ad:f9: fa:7f:b2:12:65:5f:64:07:ef:f8:c1:40:de:8a:53: 2c:26:c5:e1:aa:1e:ec:f2:28:55:9c:18:73:0c:c3: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F2:52:3A:F2:39:72:94:18:46:69:F4:54:BD:9A:25:49:10:08:E7 X509v3 Authority Key Identifier: keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/tPJSOvI5cpQYRmn0VL2aJUkQCOc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.203.24.0/21 Signature Algorithm: sha256WithRSAEncryption 94:3a:82:ef:54:28:18:d3:db:8a:dd:b4:1a:6c:c3:ab:0d:3e: b5:38:7f:e4:7e:4b:2e:09:36:a9:0b:58:d9:35:dc:27:c7:b6: 91:6f:db:96:47:5d:02:13:47:71:b6:75:70:bb:51:f4:f8:85: dc:23:9b:80:53:8d:a7:5a:0c:3f:6e:51:76:ad:a5:e1:06:52: 79:09:62:db:df:25:e8:26:34:06:22:79:44:c5:db:fc:e6:b0: b7:3c:60:ba:53:d1:c2:dd:90:3d:4b:54:b7:e8:79:c6:e8:ce: e4:75:6d:4e:85:8a:df:47:e9:9b:a8:db:ad:70:b9:16:00:02: d8:c0:f2:07:05:cd:01:e7:af:d7:6c:89:04:66:8d:9d:d4:35: 46:07:5f:cd:a1:2f:26:65:54:27:f6:cb:cb:9f:51:cd:e4:c8: 48:e7:fc:8f:cf:60:8d:11:b3:76:d5:a1:0a:84:94:cd:e3:2d: 65:0e:e2:d6:bc:00:ad:61:59:83:56:f8:ce:a6:ee:cc:1b:66: 29:fa:aa:f0:9c:3d:fc:f3:39:6d:4e:5e:57:ec:4e:e9:3f:ea: 80:8b:fb:a6:20:7a:8a:bc:37:76:34:33:55:3e:b1:94:ec:a8: fc:dc:74:46:93:3e:58:33:79:13:ee:dd:2f:71:be:6a:f5:7f: de:78:04:5d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI1MDYyNzAy MzkzNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQjRGMjUyM0FGMjM5NzI5 NDE4NDY2OUY0NTRCRDlBMjU0OTEwMDhFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMuoUUssyHKorkmCIEcHDEG+fx1dgOwU9FkAG1GL1mXzHlmjfs7/ o03ZG493jZsLyq2bmHhB+fpYd4QGi1W0vaeVdzyExMHFTd4tUrZza3kZ2VFI85Co uqdEThGgW1U38D7KzIvLStcHwQ2i9lbJU6yPrImOwpuhIi0HaFF7hInMrYiVyg6H /w2WWeiyzK2cTlO+OW9vdCcQCXqSk8Pl1y23TFP+OVZJFsWx7QBAYG2PqZFCPHzL jqc5Q3y1zKzyeVHqVjIU7ndXd5g68W2qkakKQHE48wCVltVu5l7I0K35+n+yEmVf ZAfv+MFA3opTLCbF4aoe7PIoVZwYcwzDWO8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS08lI68jlylBhGafRUvZolSRAI5zAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40 am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODIvdFBKU092STVjcFFZUm1uMFZMMmFKVWtRQ09jLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA2XLGDANBgkqhkiG9w0BAQsFAAOCAQEAlDqC71QoGNPbit20GmzDqw0+tTh/ 5H5LLgk2qQtY2TXcJ8e2kW/blkddAhNHcbZ1cLtR9PiF3CObgFONp1oMP25Rdq2l 4QZSeQli298l6CY0BiJ5RMXb/OawtzxgulPRwt2QPUtUt+h5xujO5HVtToWK30fp m6jbrXC5FgAC2MDyBwXNAeev12yJBGaNndQ1RgdfzaEvJmVUJ/bLy59RzeTISOf8 j89gjRGzdtWhCoSUzeMtZQ7i1rwArWFZg1b4zqbuzBtmKfqq8Jw9/PM5bU5eV+xO 6T/qgIv7piB6irw3djQzVT6xlOyo/Nx0RpM+WDN5E+7dL3G+avV/3ngEXQ== -----END CERTIFICATE-----Generated at Sat Jul 5 02:59:58 2025 by rpki-client