$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/A2HbR0tifjK7EU0pCY-NJriQPHE.roa File: A2HbR0tifjK7EU0pCY-NJriQPHE.roa (raw, json) Hash identifier: +OH53Uwh6adch0mud2QP58gAk+D1/9afXq0r9C5mPe0= Subject key identifier: 03:61:DB:47:4B:62:7E:32:BB:11:4D:29:09:8F:8D:26:B8:90:3C:71 Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 91 Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/A2HbR0tifjK7EU0pCY-NJriQPHE.roa Signing time: Tue 01 Jul 2025 01:35:12 +0000 ROA not before: Tue 01 Jul 2025 01:35:11 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9621 IP address blocks: 211.120.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Jul 1 01:35:11 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=0361DB474B627E32BB114D29098F8D26B8903C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:b0:37:55:6e:1a:2b:69:d0:cf:77:dc:51: aa:a2:d5:73:d6:cb:80:37:d9:68:a1:ff:f3:4b:a5: f9:68:07:7b:20:e3:20:0f:33:c9:e6:04:35:66:4f: e1:9f:5e:10:51:26:bd:50:14:74:78:64:a1:7d:a3: 77:24:14:50:64:74:c2:77:71:1e:ba:ac:e8:fb:12: c4:d7:c6:0f:f7:cb:db:2f:e3:25:97:75:85:44:ff: b4:84:22:5b:21:cc:74:b6:ea:50:31:51:b1:d7:c3: d9:10:07:ae:97:35:9a:46:57:b6:c1:ed:18:c9:4b: 8d:88:8e:49:3f:45:02:54:e5:66:bc:90:fc:bb:cb: 44:10:78:96:bd:a2:bc:63:29:1f:50:2e:ef:7b:f2: f4:75:18:8a:5d:62:7b:51:8f:cb:d5:49:be:27:6e: eb:d7:a7:e9:42:d5:7c:52:26:df:13:8d:90:d1:f5: 84:fe:3c:47:80:6e:4e:6c:2c:92:aa:34:fb:ab:55: eb:2f:7b:04:da:79:3b:f9:28:15:cc:da:37:66:a1: 03:54:15:7d:7c:fe:58:a9:7c:17:0b:75:6f:e0:f0: 95:71:00:85:7f:f6:e2:a8:54:d4:d3:b2:fe:13:09: 36:86:80:a0:e7:e9:3d:b2:28:51:cd:c3:43:98:9d: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:DB:47:4B:62:7E:32:BB:11:4D:29:09:8F:8D:26:B8:90:3C:71 X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/A2HbR0tifjK7EU0pCY-NJriQPHE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.224.0/20 Signature Algorithm: sha256WithRSAEncryption 36:9a:a5:0b:00:91:68:d3:b7:b2:c1:2d:f4:06:bc:84:53:4a: 1f:c0:b6:18:05:96:8a:f8:82:20:62:6b:ed:09:10:45:45:e7: 2e:3f:db:41:c6:9c:2c:0e:2f:43:1c:af:13:87:3b:08:84:65: 62:ce:3d:d9:8b:e9:cb:e2:ef:e0:ad:e6:42:04:b4:d0:8d:38: 6f:ae:e7:a8:ec:09:25:11:e3:dd:78:90:89:c3:99:ce:d9:14: b3:16:dc:cf:8b:c8:88:56:0c:1e:03:8b:e1:8a:da:ef:4b:28: e7:95:49:3f:45:2e:52:d6:62:62:de:60:2c:02:d3:e9:91:32: 7a:37:cb:c6:d3:7a:0f:3f:b1:27:14:e7:6f:c6:85:bd:29:a4: e2:94:9d:1a:51:33:cd:97:d7:95:a8:04:16:a5:41:2c:52:24: 82:0e:f6:13:f5:63:6f:c3:92:cd:20:5e:80:c7:bc:71:7d:82: bd:e2:d8:89:e0:73:8b:25:94:56:4e:49:03:a4:5d:9c:11:2d: 18:cc:45:91:81:29:6d:20:c9:49:59:63:49:09:45:fe:11:9a: 4b:6f:78:0a:ed:53:27:80:73:6d:f1:0f:95:4d:23:02:a4:3a: 71:2a:f3:70:17:7b:b1:a6:10:78:f1:44:92:60:e4:86:90:49: e5:00:fd:e3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNTA3MDEw MTM1MTFaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAzNjFEQjQ3NEI2MjdF MzJCQjExNEQyOTA5OEY4RDI2Qjg5MDNDNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW67A3VW4aK2nQz3fcUaqi1XPWy4A32Wih//NLpfloB3sg4yAP M8nmBDVmT+GfXhBRJr1QFHR4ZKF9o3ckFFBkdMJ3cR66rOj7EsTXxg/3y9sv4yWX dYVE/7SEIlshzHS26lAxUbHXw9kQB66XNZpGV7bB7RjJS42Ijkk/RQJU5Wa8kPy7 y0QQeJa9orxjKR9QLu978vR1GIpdYntRj8vVSb4nbuvXp+lC1XxSJt8TjZDR9YT+ PEeAbk5sLJKqNPurVesvewTaeTv5KBXM2jdmoQNUFX18/lipfBcLdW/g8JVxAIV/ 9uKoVNTTsv4TCTaGgKDn6T2yKFHNw0OYnTeNAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUA2HbR0tifjK7EU0pCY+NJriQPHEwHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk 5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4 UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvODk3L0EySGJSMHRpZmpLN0VVMHBDWS1OSnJpUVBIRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATTeOAwDQYJKoZIhvcNAQELBQADggEBADaapQsAkWjTt7LBLfQGvIRTSh/A thgFlor4giBia+0JEEVF5y4/20HGnCwOL0McrxOHOwiEZWLOPdmL6cvi7+Ct5kIE tNCNOG+u56jsCSUR4914kInDmc7ZFLMW3M+LyIhWDB4Di+GK2u9LKOeVST9FLlLW YmLeYCwC0+mRMno3y8bTeg8/sScU52/Ghb0ppOKUnRpRM82X15WoBBalQSxSJIIO 9hP1Y2/Dks0gXoDHvHF9gr3i2Ingc4sllFZOSQOkXZwRLRjMRZGBKW0gyUlZY0kJ Rf4RmktveArtUyeAc23xD5VNIwKkOnEq83AXe7GmEHjxRJJg5IaQSeUA/eM= -----END CERTIFICATE-----Generated at Sat Jul 5 16:16:01 2025 by rpki-client