$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/apOFNH78vG0gTf900P5kAmHoNsk.roa File: apOFNH78vG0gTf900P5kAmHoNsk.roa (raw, json) Hash identifier: dBqz9Fcc/gKitPEJCAcIIwof0yyBuO9DZ0/RSe/IhKY= Subject key identifier: 6A:93:85:34:7E:FC:BC:6D:20:4D:FF:74:D0:FE:64:02:61:E8:36:C9 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 3A Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/apOFNH78vG0gTf900P5kAmHoNsk.roa Signing time: Tue 01 Jul 2025 01:31:46 +0000 ROA not before: Tue 01 Jul 2025 01:31:46 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 24259 IP address blocks: 133.88.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Jul 1 01:31:46 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=6A9385347EFCBC6D204DFF74D0FE640261E836C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:27:2c:93:69:46:7e:91:fc:7e:cc:9e:83: b7:f3:11:d0:96:c1:5f:1a:5d:f5:08:4f:cd:d3:75: cc:bf:79:8e:0f:e0:3f:a1:d2:a0:14:34:37:46:5a: a1:62:50:85:2a:b4:85:f4:b7:eb:fe:72:fc:50:8c: be:04:1c:54:e4:73:4b:3c:c3:bc:ad:c2:5e:66:13: 26:f0:17:e6:fa:a3:26:b5:3c:4a:d3:3e:d8:de:ac: 97:1f:e3:de:c6:4f:a0:9b:35:7d:e4:08:a5:df:57: 0f:0d:80:a5:c5:51:69:80:01:a6:36:12:13:71:fe: 8c:64:4d:ab:60:d5:72:59:46:29:84:88:f0:f2:70: 79:a8:e1:2f:85:ee:3d:88:37:0e:a7:d4:38:1e:9a: 59:01:db:e2:20:77:14:ba:fb:9e:5c:ac:3e:c8:98: af:a5:b0:0f:b6:9f:96:33:39:d3:4b:9e:ac:51:8c: 47:6d:42:6a:6c:cf:2e:96:4b:23:28:ae:80:5e:b9: 19:a5:86:5a:a3:06:b4:62:89:c1:51:27:ff:f4:f1: c0:4f:1b:cb:78:34:74:f1:c4:24:83:4b:24:08:96: a1:c9:3b:5b:74:92:2c:d4:0b:dc:62:a2:8b:fc:75: 62:d1:3f:74:c1:32:a5:b9:89:06:59:e3:21:1c:ee: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:93:85:34:7E:FC:BC:6D:20:4D:FF:74:D0:FE:64:02:61:E8:36:C9 X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/apOFNH78vG0gTf900P5kAmHoNsk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.88.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:36:24:48:83:85:3b:38:28:d6:5a:87:f8:d6:b7:1d:fc:17: 3c:3f:b0:57:9f:97:92:0b:00:20:51:2b:fa:89:b6:e0:3e:e4: 3e:51:94:fd:76:e1:45:84:77:ab:41:b1:a2:14:e1:53:4e:c4: 1e:c5:c9:f4:54:88:05:4e:68:d9:41:89:c2:67:51:88:8a:42: 7b:20:54:47:c9:50:96:91:2f:3d:e1:0c:86:70:15:da:23:e6: e5:1b:9b:57:63:d3:8f:2f:8b:98:16:fa:40:22:f0:d2:04:ef: 4d:68:48:b8:b6:01:1e:48:f7:5a:2a:78:0a:fd:03:d0:86:a8: 80:54:2b:a9:b4:c2:d3:c1:60:71:f5:20:9a:62:69:af:75:70: 51:88:2d:37:39:df:08:37:9f:d7:56:3b:03:f2:c2:ec:ad:4a: a1:c7:9c:45:66:ce:7e:33:09:0b:3e:8f:05:eb:4e:c3:64:d3: c3:b5:de:35:18:1c:c0:c4:36:b0:74:50:c6:0f:82:56:0f:1f: d9:a4:a6:97:cb:aa:c5:8a:5b:ab:ba:89:99:5b:b8:76:75:8b: 5f:81:1b:96:83:8f:cb:05:1f:bc:9d:ed:d2:2b:6e:00:c5:fd: 36:8e:b8:7a:fa:e0:aa:ee:3f:01:26:71:36:11:5d:01:8b:fc: 9e:6b:6d:c7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MDcwMTAx MzE0NloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNkE5Mzg1MzQ3RUZDQkM2 RDIwNERGRjc0RDBGRTY0MDI2MUU4MzZDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJlVJyyTaUZ+kfx+zJ6Dt/MR0JbBXxpd9QhPzdN1zL95jg/gP6HS oBQ0N0ZaoWJQhSq0hfS36/5y/FCMvgQcVORzSzzDvK3CXmYTJvAX5vqjJrU8StM+ 2N6slx/j3sZPoJs1feQIpd9XDw2ApcVRaYABpjYSE3H+jGRNq2DVcllGKYSI8PJw eajhL4XuPYg3DqfUOB6aWQHb4iB3FLr7nlysPsiYr6WwD7afljM500uerFGMR21C amzPLpZLIyiugF65GaWGWqMGtGKJwVEn//TxwE8by3g0dPHEJINLJAiWock7W3SS LNQL3GKii/x1YtE/dMEypbmJBlnjIRzucHMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRqk4U0fvy8bSBN/3TQ/mQCYeg2yTAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvYXBPRk5INzh2RzBnVGY5MDBQNWtBbUhvTnNrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAoVYUDANBgkqhkiG9w0BAQsFAAOCAQEAfzYkSIOFOzgo1lqH+Na3HfwXPD+w V5+XkgsAIFEr+om24D7kPlGU/XbhRYR3q0GxohThU07EHsXJ9FSIBU5o2UGJwmdR iIpCeyBUR8lQlpEvPeEMhnAV2iPm5RubV2PTjy+LmBb6QCLw0gTvTWhIuLYBHkj3 Wip4Cv0D0IaogFQrqbTC08FgcfUgmmJpr3VwUYgtNznfCDef11Y7A/LC7K1Kocec RWbOfjMJCz6PBetOw2TTw7XeNRgcwMQ2sHRQxg+CVg8f2aSml8uqxYpbq7qJmVu4 dnWLX4EbloOPywUfvJ3t0ituAMX9No64evrgqu4/ASZxNhFdAYv8nmttxw== -----END CERTIFICATE-----Generated at Sat Jul 5 02:31:25 2025 by rpki-client