$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/Y3rUQEevYw_edDBgVpD-bjNVHF4.roa File: Y3rUQEevYw_edDBgVpD-bjNVHF4.roa (raw, json) Hash identifier: zV7J/nP2DCikY9zTp0upJvJK9SIVxMCBvvS9CEPrg8U= Subject key identifier: 63:7A:D4:40:47:AF:63:0F:DE:74:30:60:56:90:FE:6E:33:55:1C:5E Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 39 Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/Y3rUQEevYw_edDBgVpD-bjNVHF4.roa Signing time: Tue 01 Jul 2025 01:31:45 +0000 ROA not before: Tue 01 Jul 2025 01:31:45 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 24259 IP address blocks: 133.88.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Jul 1 01:31:45 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=637AD44047AF630FDE7430605690FE6E33551C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:db:73:d8:e1:6a:c1:ab:f5:cb:8e:b5:37: 9e:54:50:c7:7e:01:f9:b0:45:6b:b1:02:0f:49:96: 89:d9:72:7e:8c:31:8c:d0:e3:5c:b8:c0:e9:eb:d9: f3:79:52:c2:ca:83:eb:73:b8:b8:b1:49:57:e6:ab: ee:44:89:e4:82:60:26:5c:58:5c:7e:db:ca:0a:cf: a9:f2:7d:83:6d:6d:ff:87:6b:e8:87:cd:d3:db:21: 54:8f:bf:20:5c:76:17:82:34:dd:8e:ba:b5:82:54: f1:f9:30:63:bb:51:00:df:2e:bb:dd:6e:2e:35:2f: e3:11:2a:46:c3:5f:b9:65:9c:5b:c1:6d:1f:f7:37: 58:f4:47:ce:81:4d:68:9b:a2:57:aa:ac:dc:bd:48: 44:11:2c:86:c3:71:e3:4c:0f:ff:bb:57:92:78:29: be:52:0e:83:0f:4e:b9:c6:d3:f4:6f:f0:da:15:a4: b4:b8:27:4e:55:95:fa:3c:ba:05:b9:70:8d:8a:27: 3b:8b:a4:46:06:9c:7b:7e:ec:3a:01:30:f9:63:be: 58:46:01:1b:37:e7:4c:98:0f:77:13:b1:76:df:cb: 9f:86:64:3d:05:eb:17:f3:76:0d:d7:96:0b:78:84: 14:3a:a6:f9:d4:10:94:d8:eb:52:b7:68:b6:9e:17: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:D4:40:47:AF:63:0F:DE:74:30:60:56:90:FE:6E:33:55:1C:5E X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/Y3rUQEevYw_edDBgVpD-bjNVHF4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.79.0/24 Signature Algorithm: sha256WithRSAEncryption 11:3e:0b:47:8d:c0:90:6f:16:20:5d:a9:78:dd:75:32:a7:7a: 63:e0:89:fb:6c:c4:2b:b5:26:6e:fd:16:f3:fd:e6:e1:05:67: 8d:1c:01:40:0c:a9:b5:76:81:6a:e8:d6:42:40:a2:31:f0:9a: f3:00:df:b4:32:c7:a5:6c:0b:2a:37:c9:21:64:3d:40:c2:3e: b5:59:49:aa:7c:71:96:4a:5d:5e:87:c4:ea:06:4a:a8:17:c3: 66:a6:64:c9:1a:c1:8e:16:bb:9b:d1:7a:c1:cb:0c:9e:c3:db: c1:92:27:be:54:0d:bf:24:19:e0:05:62:a7:97:ec:99:d1:21: 40:04:94:19:c1:b5:4b:71:2e:c0:79:16:4e:b7:af:01:61:ca: 28:ce:87:47:7a:4b:45:c4:a8:0e:bc:a6:c7:47:00:dd:4d:41: d8:b5:01:fc:12:fb:58:9a:a2:db:d6:aa:dc:36:d0:35:ec:c9: 05:79:ec:06:67:28:3f:a6:94:12:7a:1a:b1:06:82:b1:d1:a1: 77:6f:a8:c9:c2:74:82:de:b7:43:5f:bb:68:82:05:af:81:35: 49:0a:ed:8e:59:12:33:ae:d0:a8:fa:2e:51:57:07:5f:cf:32: f6:71:17:3a:8e:74:23:17:26:d9:41:f8:10:20:e4:e1:12:c5: 42:e8:80:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MDcwMTAx MzE0NVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNjM3QUQ0NDA0N0FGNjMw RkRFNzQzMDYwNTY5MEZFNkUzMzU1MUM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAN4i23PY4WrBq/XLjrU3nlRQx34B+bBFa7ECD0mWidlyfowxjNDj XLjA6evZ83lSwsqD63O4uLFJV+ar7kSJ5IJgJlxYXH7bygrPqfJ9g21t/4dr6IfN 09shVI+/IFx2F4I03Y66tYJU8fkwY7tRAN8uu91uLjUv4xEqRsNfuWWcW8FtH/c3 WPRHzoFNaJuiV6qs3L1IRBEshsNx40wP/7tXkngpvlIOgw9OucbT9G/w2hWktLgn TlWV+jy6BblwjYonO4ukRgace37sOgEw+WO+WEYBGzfnTJgPdxOxdt/Ln4ZkPQXr F/N2DdeWC3iEFDqm+dQQlNjrUrdotp4X+8ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRjetRAR69jD950MGBWkP5uM1UcXjAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvWTNyVVFFZXZZd19lZERCZ1ZwRC1iak5WSEY0LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAIVYTzANBgkqhkiG9w0BAQsFAAOCAQEAET4LR43AkG8WIF2peN11Mqd6Y+CJ +2zEK7Umbv0W8/3m4QVnjRwBQAyptXaBaujWQkCiMfCa8wDftDLHpWwLKjfJIWQ9 QMI+tVlJqnxxlkpdXofE6gZKqBfDZqZkyRrBjha7m9F6wcsMnsPbwZInvlQNvyQZ 4AVip5fsmdEhQASUGcG1S3EuwHkWTrevAWHKKM6HR3pLRcSoDrymx0cA3U1B2LUB /BL7WJqi29aq3DbQNezJBXnsBmcoP6aUEnoasQaCsdGhd2+oycJ0gt63Q1+7aIIF r4E1SQrtjlkSM67QqPouUVcHX88y9nEXOo50Ixcm2UH4ECDk4RLFQuiAxg== -----END CERTIFICATE-----Generated at Sat Jul 5 03:23:21 2025 by rpki-client