$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/csY5cNEBJtQRyU-Lo8UoYLgxjzk.roa File: csY5cNEBJtQRyU-Lo8UoYLgxjzk.roa (raw, json) Hash identifier: VFmKuGJTJTGGMbsum/EqDWz6RxCWDE2Zr8nj+R7esfY= Subject key identifier: 72:C6:39:70:D1:01:26:D4:11:C9:4F:8B:A3:C5:28:60:B8:31:8F:39 Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 9B Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/csY5cNEBJtQRyU-Lo8UoYLgxjzk.roa Signing time: Wed 01 Oct 2025 01:30:16 +0000 ROA not before: Wed 01 Oct 2025 01:30:16 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9621 IP address blocks: 123.108.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Oct 1 01:30:16 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=72C63970D10126D411C94F8BA3C52860B8318F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:b8:aa:46:1e:5d:ee:41:04:bb:1c:95:ed: 67:99:22:3a:84:db:44:fa:21:e1:c8:24:4c:bf:61: bf:1e:4d:98:d1:d6:2c:bb:db:6b:49:7d:eb:1d:d8: 53:1c:e8:b3:74:2a:b7:72:c2:a9:3c:9a:c1:d8:49: f1:58:d5:26:c7:7e:47:c5:7b:59:2e:95:b1:e4:ab: bf:f4:4f:9c:76:a5:ec:33:47:26:42:67:25:22:c2: b6:88:92:71:7b:e0:28:73:d6:87:9d:de:16:65:89: 25:74:0b:0c:b9:43:c9:ac:15:f0:40:69:a5:3c:23: 51:b2:b4:a9:20:5b:84:c3:8d:46:68:f9:76:d1:07: 95:29:74:f7:10:94:78:eb:fe:62:46:1a:0f:c7:18: 4b:bb:a4:75:67:71:f1:65:71:87:b0:ec:34:51:ee: 90:cb:d4:ed:2b:50:e7:63:a3:9f:e1:b6:53:85:da: 73:19:86:cf:bb:f6:a9:56:d7:92:39:c2:03:29:a2: 67:a9:ec:4d:d3:5d:4a:f4:62:24:94:4f:a3:0f:c2: 93:1e:2b:b3:8d:2a:fd:92:71:c5:24:14:37:56:cb: 14:5d:43:f3:61:1e:a9:57:7b:06:89:3d:ce:bf:e0: 76:8d:78:8d:10:19:e3:15:a5:d0:a1:3c:f9:03:ed: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:39:70:D1:01:26:D4:11:C9:4F:8B:A3:C5:28:60:B8:31:8F:39 X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/csY5cNEBJtQRyU-Lo8UoYLgxjzk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.192.0/21 Signature Algorithm: sha256WithRSAEncryption 97:8e:b9:8b:3c:c1:ab:01:3d:17:e7:60:54:32:1f:82:2c:8c: bb:41:25:b9:96:42:cd:04:a3:c8:c2:d3:3d:8e:62:8c:e0:8f: 2b:02:d7:dd:24:7e:aa:c0:9f:ab:dd:4e:a3:a5:03:7e:7f:45: 0c:fd:20:b6:00:b6:99:2b:67:d6:e9:b3:80:44:c0:fd:43:2d: 0a:9e:f3:b9:07:f6:c3:7a:7e:03:36:bf:30:02:12:d0:37:16: a3:97:a1:9a:7a:e7:0c:1e:fe:31:53:94:49:7f:b3:68:a4:a6: 14:05:eb:57:94:98:a8:63:d7:87:d0:01:ea:c7:b9:03:ee:b2: 37:8e:8f:36:6b:62:7f:4f:03:d1:b5:08:93:24:d9:7a:04:96: b8:b6:49:26:98:ef:3a:e8:ee:3f:29:57:14:2b:78:49:a3:20: e6:ec:07:0f:a5:ce:60:82:a4:fe:de:0b:3c:30:de:bd:36:eb: 24:1d:38:85:09:d4:2f:34:38:47:c2:c3:8e:c9:43:aa:81:5e: 76:a4:c5:cb:d9:da:a4:44:49:da:dd:9c:e3:a5:6f:2f:16:8f: 80:e1:1e:3c:0a:a6:f2:16:60:fa:c8:aa:ae:3a:02:81:08:c9: e9:32:b4:47:2b:7a:01:2e:3b:c1:d4:3e:1f:3e:d4:9d:ce:cb: 4a:4e:eb:5e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNTEwMDEw MTMwMTZaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyQzYzOTcwRDEwMTI2 RDQxMUM5NEY4QkEzQzUyODYwQjgzMThGMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGpriqRh5d7kEEuxyV7WeZIjqE20T6IeHIJEy/Yb8eTZjR1iy7 22tJfesd2FMc6LN0Krdywqk8msHYSfFY1SbHfkfFe1kulbHkq7/0T5x2pewzRyZC ZyUiwraIknF74Chz1oed3hZliSV0Cwy5Q8msFfBAaaU8I1GytKkgW4TDjUZo+XbR B5UpdPcQlHjr/mJGGg/HGEu7pHVncfFlcYew7DRR7pDL1O0rUOdjo5/htlOF2nMZ hs+79qlW15I5wgMpomep7E3TXUr0YiSUT6MPwpMeK7ONKv2SccUkFDdWyxRdQ/Nh HqlXewaJPc6/4HaNeI0QGeMVpdChPPkD7ZqJAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcsY5cNEBJtQRyU+Lo8UoYLgxjzkwHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk 5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4 UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvODk3L2NzWTVjTkVCSnRRUnlVLUxvOFVvWUxneGp6ay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN7bMAwDQYJKoZIhvcNAQELBQADggEBAJeOuYs8wasBPRfnYFQyH4IsjLtB JbmWQs0Eo8jC0z2OYozgjysC190kfqrAn6vdTqOlA35/RQz9ILYAtpkrZ9bps4BE wP1DLQqe87kH9sN6fgM2vzACEtA3FqOXoZp65wwe/jFTlEl/s2ikphQF61eUmKhj 14fQAerHuQPusjeOjzZrYn9PA9G1CJMk2XoElri2SSaY7zro7j8pVxQreEmjIObs Bw+lzmCCpP7eCzww3r026yQdOIUJ1C80OEfCw47JQ6qBXnakxcvZ2qRESdrdnOOl by8Wj4DhHjwKpvIWYPrIqq46AoEIyekytEcregEuO8HUPh8+1J3Oy0pO614= -----END CERTIFICATE-----Generated at Tue Oct 21 01:16:48 2025 by rpki-client