$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa File: hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa (raw, json) Hash identifier: Y9ECUrETmTg7gcgYSfQn7KuDPoVmdxNRsPZR5PqcwTE= Subject key identifier: 85:89:D2:19:CE:6E:6A:BA:18:BF:26:69:DC:3F:1E:19:E3:48:E5:58 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 40 Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa Signing time: Tue 01 Jul 2025 01:31:50 +0000 ROA not before: Tue 01 Jul 2025 01:31:50 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 24259 IP address blocks: 202.127.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Jul 1 01:31:50 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=8589D219CE6E6ABA18BF2669DC3F1E19E348E558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:a2:bd:16:4d:47:48:43:7a:a6:09:5b:10: a3:67:df:2d:6c:13:10:46:de:aa:52:de:38:88:fd: 7c:30:62:38:e0:8f:c9:27:24:da:46:27:ab:80:ca: 5b:94:1a:0f:1a:fd:2d:fe:12:07:1f:cf:0d:8b:e9: 57:83:c0:1f:9a:d6:3d:7a:0b:7e:cf:44:7c:6b:64: 81:86:d6:b3:11:24:b8:38:07:8a:3f:f1:c0:a0:98: 2d:26:a3:b2:54:10:12:af:da:5a:30:eb:7c:bb:7f: a4:5b:aa:38:49:91:ae:d4:0d:f9:9c:b7:1b:56:a1: 50:e7:3b:2b:65:a6:29:d9:3c:c4:9d:27:47:b5:41: 84:a1:ae:df:51:35:72:da:e3:91:74:5c:23:0f:fa: 69:be:bf:d6:26:6b:4b:ad:8c:55:15:af:34:30:ac: cb:88:03:4a:c4:5f:2f:69:88:b4:b6:a1:26:7f:4d: 2e:e1:c4:c3:30:06:bf:e5:ef:e1:30:95:3e:33:3e: 3e:bb:12:7d:85:cb:20:1b:1a:55:8f:e9:20:14:c2: 91:34:74:29:21:c6:05:5e:cc:51:95:c5:34:1f:fa: 16:fe:75:d6:f7:56:af:fa:d1:9a:2c:e6:d9:df:33: 80:32:cc:3a:ff:29:8a:03:b8:a3:1d:3e:bc:2c:93: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:D2:19:CE:6E:6A:BA:18:BF:26:69:DC:3F:1E:19:E3:48:E5:58 X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.127.176.0/20 Signature Algorithm: sha256WithRSAEncryption 66:e1:dd:46:1e:99:fa:51:0d:24:cf:c7:4e:ea:31:1d:4b:19: 2c:c2:a8:cc:c9:b0:87:9f:00:e0:fb:a8:29:87:73:09:d6:46: ac:83:36:eb:fd:33:f3:ed:4e:9c:1d:8f:37:60:9b:88:2a:88: 31:70:3e:30:7f:3d:fd:85:ed:84:ab:28:a0:3c:8a:1f:1a:3a: a8:b2:99:c4:ac:06:8e:aa:4f:0e:6f:06:98:a0:53:85:49:e3: f7:b1:52:e9:2f:cd:ee:3e:e1:c5:26:94:07:8e:c3:00:60:93: f9:e2:af:20:e8:7d:cd:2e:dc:38:27:e0:1a:8c:aa:56:4a:b6: a5:34:54:d4:1f:cb:c1:1a:4d:4b:36:a0:4c:12:5c:4f:31:ca: f5:d0:ce:de:6e:8f:68:51:36:2c:ae:a1:7c:72:37:df:3f:45: e3:a1:bb:ad:92:18:94:81:64:c8:df:b7:8c:28:63:27:f8:43: f9:8f:02:b7:c7:93:c4:b6:a6:47:a9:dd:9e:e6:a6:51:34:a3: b7:06:66:c7:cb:c1:39:b1:a9:7e:1f:20:3e:57:1c:41:db:6b: db:ef:d5:8f:ff:94:30:ba:7d:a9:fa:6b:7c:22:d4:b0:cb:96: 18:2b:f1:31:45:ba:ab:27:d7:36:6b:47:7e:ac:ef:0b:fb:01: a2:d7:79:1b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MDcwMTAx MzE1MFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoODU4OUQyMTlDRTZFNkFC QTE4QkYyNjY5REMzRjFFMTlFMzQ4RTU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKaMor0WTUdIQ3qmCVsQo2ffLWwTEEbeqlLeOIj9fDBiOOCPySck 2kYnq4DKW5QaDxr9Lf4SBx/PDYvpV4PAH5rWPXoLfs9EfGtkgYbWsxEkuDgHij/x wKCYLSajslQQEq/aWjDrfLt/pFuqOEmRrtQN+Zy3G1ahUOc7K2WmKdk8xJ0nR7VB hKGu31E1ctrjkXRcIw/6ab6/1iZrS62MVRWvNDCsy4gDSsRfL2mItLahJn9NLuHE wzAGv+Xv4TCVPjM+PrsSfYXLIBsaVY/pIBTCkTR0KSHGBV7MUZXFNB/6Fv511vdW r/rRmizm2d8zgDLMOv8pigO4ox0+vCyT7XUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSFidIZzm5quhi/JmncPx4Z40jlWDAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvaFluU0djNXVhcm9ZdnlacDNEOGVHZU5JNVZnLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMp/sDANBgkqhkiG9w0BAQsFAAOCAQEAZuHdRh6Z+lENJM/HTuoxHUsZLMKo zMmwh58A4PuoKYdzCdZGrIM26/0z8+1OnB2PN2CbiCqIMXA+MH89/YXthKsooDyK Hxo6qLKZxKwGjqpPDm8GmKBThUnj97FS6S/N7j7hxSaUB47DAGCT+eKvIOh9zS7c OCfgGoyqVkq2pTRU1B/LwRpNSzagTBJcTzHK9dDO3m6PaFE2LK6hfHI33z9F46G7 rZIYlIFkyN+3jChjJ/hD+Y8Ct8eTxLamR6ndnuamUTSjtwZmx8vBObGpfh8gPlcc Qdtr2+/Vj/+UMLp9qfprfCLUsMuWGCvxMUW6qyfXNmtHfqzvC/sBotd5Gw== -----END CERTIFICATE-----Generated at Sat Jul 5 05:59:32 2025 by rpki-client