$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/oIcXxcqR4Pd9L_40aXtMY4ygCcs.roa File: oIcXxcqR4Pd9L_40aXtMY4ygCcs.roa (raw, json) Hash identifier: Mf5dV9vCSo+Ayz00aEu6qXOIMKA8kGbvYMlNNym8gBs= Subject key identifier: A0:87:17:C5:CA:91:E0:F7:7D:2F:FE:34:69:7B:4C:63:8C:A0:09:CB Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Certificate serial: 9D Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/oIcXxcqR4Pd9L_40aXtMY4ygCcs.roa Signing time: Wed 01 Oct 2025 01:30:17 +0000 ROA not before: Wed 01 Oct 2025 01:30:17 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 9621 IP address blocks: 202.81.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2 Validity Not Before: Oct 1 01:30:17 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=A08717C5CA91E0F77D2FFE34697B4C638CA009CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:aa:03:e5:21:aa:95:1e:d9:b4:49:20:72: 2b:c3:56:75:66:a2:74:0b:80:d0:a1:f0:03:47:14: b0:57:80:bf:f2:d0:33:d3:0f:dd:4e:de:47:50:2b: e0:da:50:1f:72:26:2e:2c:c8:fe:f1:ab:84:47:f7: c1:97:eb:48:18:ce:08:68:1e:97:e2:91:eb:d9:82: 00:39:11:06:11:f5:4a:20:0b:f8:51:be:7d:83:88: 69:4b:d4:5f:60:da:bf:b2:a6:18:b8:66:79:68:be: c6:30:71:aa:79:95:61:dc:28:5a:34:13:eb:a6:f5: 64:5e:14:55:17:a6:fa:b7:ab:47:29:5c:d2:26:ad: b7:c9:69:60:69:65:33:7f:c6:79:e9:d9:e3:2c:ef: 0a:33:86:1e:01:75:c0:bc:3f:73:48:7d:4d:ef:1c: 8f:29:82:1d:6b:c9:fd:a1:d4:fd:8e:82:55:4c:d0: 89:a3:5e:b1:eb:7c:9e:92:2b:03:52:59:d9:07:cf: f8:52:9f:63:c1:f9:f0:fe:86:34:20:a6:b7:b3:9d: cb:ba:8a:7c:f0:ab:7f:13:8f:5f:66:36:38:b7:f2: 32:f2:e2:d9:db:bf:38:d2:78:23:a1:46:db:da:93: 77:a3:89:75:20:25:9c:f4:14:6c:62:91:e7:88:3d: d5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:87:17:C5:CA:91:E0:F7:7D:2F:FE:34:69:7B:4C:63:8C:A0:09:CB X509v3 Authority Key Identifier: keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/oIcXxcqR4Pd9L_40aXtMY4ygCcs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.81.8.0/21 Signature Algorithm: sha256WithRSAEncryption 25:12:1e:45:12:c7:7d:ff:55:00:ab:2b:44:25:8a:9c:fe:f5: ce:6e:2f:1e:92:d4:c4:b2:3f:bc:af:36:a7:51:08:3b:86:af: a0:da:19:62:c5:34:be:6a:c8:e8:cc:7e:78:56:1c:0b:fb:84: a0:ff:5d:10:f9:d6:85:d1:4d:a4:1c:6e:80:52:e8:1c:f1:64: 7a:e4:d9:e9:f2:a6:f3:4f:b9:a9:3d:1a:7b:cd:5b:e7:7e:df: cb:95:3b:cd:1e:ca:f7:92:f4:2f:5e:50:b3:a5:33:b7:a4:1d: a7:5a:8f:9e:05:fe:4f:0b:6b:66:2b:8f:e8:a9:ed:d3:4b:95: 7f:75:2b:f4:96:fc:75:ef:0c:a0:04:d7:25:95:2f:ac:05:c5: dc:ef:56:22:fb:0b:e1:b4:e8:bd:fd:f1:0d:46:a8:9b:5c:51: 89:73:db:04:a0:56:5a:d0:f8:07:6b:5d:96:d5:28:6c:37:4b: ab:63:75:e1:c2:02:f9:82:c6:27:0f:9c:35:f1:7a:bb:d6:5b: 90:82:62:33:6b:29:34:97:cd:0c:28:1a:f8:53:0e:25:b4:24: 4d:d5:fc:5a:67:12:af:99:7e:b5:7a:aa:b7:c5:45:94:6b:e8: 71:8c:41:07:fc:6e:3e:88:a3:a0:09:1f:c6:03:6b:91:28:67: d6:c5:c8:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNTEwMDEw MTMwMTdaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEwODcxN0M1Q0E5MUUw Rjc3RDJGRkUzNDY5N0I0QzYzOENBMDA5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu/KoD5SGqlR7ZtEkgcivDVnVmonQLgNCh8ANHFLBXgL/y0DPT D91O3kdQK+DaUB9yJi4syP7xq4RH98GX60gYzghoHpfikevZggA5EQYR9UogC/hR vn2DiGlL1F9g2r+yphi4ZnlovsYwcap5lWHcKFo0E+um9WReFFUXpvq3q0cpXNIm rbfJaWBpZTN/xnnp2eMs7wozhh4BdcC8P3NIfU3vHI8pgh1ryf2h1P2OglVM0Imj XrHrfJ6SKwNSWdkHz/hSn2PB+fD+hjQgprezncu6inzwq38Tj19mNji38jLy4tnb vzjSeCOhRtvak3ejiXUgJZz0FGxikeeIPdWjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUoIcXxcqR4Pd9L/40aXtMY4ygCcswHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk 5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4 UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvODk3L29JY1h4Y3FSNFBkOUxfNDBhWHRNWTR5Z0Njcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPKUQgwDQYJKoZIhvcNAQELBQADggEBACUSHkUSx33/VQCrK0Qlipz+9c5u Lx6S1MSyP7yvNqdRCDuGr6DaGWLFNL5qyOjMfnhWHAv7hKD/XRD51oXRTaQcboBS 6BzxZHrk2enypvNPuak9GnvNW+d+38uVO80eyveS9C9eULOlM7ekHadaj54F/k8L a2Yrj+ip7dNLlX91K/SW/HXvDKAE1yWVL6wFxdzvViL7C+G06L398Q1GqJtcUYlz 2wSgVlrQ+AdrXZbVKGw3S6tjdeHCAvmCxicPnDXxervWW5CCYjNrKTSXzQwoGvhT DiW0JE3V/FpnEq+ZfrV6qrfFRZRr6HGMQQf8bj6Io6AJH8YDa5EoZ9bFyMY= -----END CERTIFICATE-----Generated at Mon Oct 20 22:37:35 2025 by rpki-client