$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/9cxs3_fCYaR4N5UO7C918ys1RJc.roa File: 9cxs3_fCYaR4N5UO7C918ys1RJc.roa (raw, json) Hash identifier: f50xqyvcM7GEhjN1MsuQnQ/mmFUiMGo8jB/muo5OIzk= Subject key identifier: F5:CC:6C:DF:F7:C2:61:A4:78:37:95:0E:EC:2F:75:F3:2B:35:44:97 Certificate issuer: /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Certificate serial: 2C Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/9cxs3_fCYaR4N5UO7C918ys1RJc.roa Signing time: Tue 01 Jul 2025 01:32:24 +0000 ROA not before: Tue 01 Jul 2025 01:32:24 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 23784 IP address blocks: 202.67.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D Validity Not Before: Jul 1 01:32:24 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=F5CC6CDFF7C261A47837950EEC2F75F32B354497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:6f:fa:4c:a2:cc:3f:30:66:73:a3:34:12: 96:e3:c2:f0:57:fb:76:3f:fa:ba:75:37:65:d2:a7: 4e:e9:f5:17:c0:ba:1f:b0:e0:4f:50:c3:99:39:97: 93:d0:e0:c6:49:26:76:91:59:74:e5:95:5a:dd:a0: cc:4c:79:cb:ad:92:a2:e1:73:84:5a:f5:29:b6:14: 80:ad:b1:5f:2d:ee:a2:3e:8e:96:08:e4:d3:c8:91: 2c:b6:a8:44:23:63:07:b2:34:86:69:70:40:c5:47: 71:f9:81:86:68:b1:78:57:17:7c:3c:5d:5f:3b:27: 0a:30:d0:4f:d6:df:24:a8:bf:3f:44:71:18:82:06: 6c:00:b7:0e:10:3c:c3:1f:4c:40:f6:77:88:a2:56: 8f:a7:e5:20:f1:f3:cb:8d:de:0f:eb:b4:fa:be:5d: 97:ff:49:6a:4a:69:24:b9:55:3c:72:46:d5:e2:fb: 9f:b5:24:c0:4a:de:d1:32:a5:72:4d:dc:c0:ca:c0: 59:23:dc:70:d8:d5:d3:37:19:c0:2f:10:a1:bb:0b: 48:1f:e9:9c:e0:74:ab:69:f4:a1:2c:0a:0d:c7:e8: 9e:97:42:c1:21:42:f9:2c:2e:73:a0:59:82:de:20: f7:71:4d:94:1d:fe:a8:81:47:0e:c9:1b:1a:bb:47: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CC:6C:DF:F7:C2:61:A4:78:37:95:0E:EC:2F:75:F3:2B:35:44:97 X509v3 Authority Key Identifier: keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/9cxs3_fCYaR4N5UO7C918ys1RJc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.67.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:e7:84:ab:cc:68:02:5d:5c:c5:fa:f4:42:75:f4:0e:16:96: 63:b0:49:fa:c6:3e:d7:f9:92:8a:db:2a:1c:42:28:07:3f:3e: e0:30:16:be:f6:1c:2e:98:5c:c9:58:2c:5e:31:3e:d0:04:8d: 50:a6:48:41:d3:a1:32:c1:ce:a4:25:8d:32:fc:0c:0a:52:27: 11:c8:a7:89:03:55:db:5c:2a:c4:75:73:99:e0:f0:54:cf:2d: d6:a1:1d:e0:13:30:d0:ff:84:49:7b:5b:d5:bb:b7:57:5d:0f: 25:cb:6f:67:61:d3:fd:08:a4:45:f0:dd:a2:55:bf:4c:77:cb: 8d:d3:a1:f3:57:2a:0b:13:66:04:9e:92:81:62:79:f6:21:e7: 8d:d1:56:cb:63:14:72:4d:37:9d:fb:04:e8:b0:db:f0:df:c6: 31:31:a0:51:ae:02:97:43:c8:4f:77:dd:71:29:21:f9:d9:3a: 39:12:db:f7:e5:a8:9e:a9:fc:1a:42:ce:06:f4:20:69:ef:2d: 8d:21:c1:63:95:53:86:b7:d5:63:8e:5b:cf:e0:7d:29:82:2b: 2c:f8:81:39:e3:cb:c9:0d:87:aa:0a:e8:eb:b7:b8:fa:a3:e9: 23:37:b2:93:fa:36:56:5d:5e:e7:eb:73:b9:5e:9e:95:29:37: c6:14:0a:6d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRDY5 MDAyRDBFOEI3RUQyQzNEMUQ1RDA3QUU2OTIyQzc0OTdGMDJEMB4XDTI1MDcwMTAx MzIyNFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRjVDQzZDREZGN0MyNjFB NDc4Mzc5NTBFRUMyRjc1RjMyQjM1NDQ5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKRhb/pMosw/MGZzozQSluPC8Ff7dj/6unU3ZdKnTun1F8C6H7Dg T1DDmTmXk9DgxkkmdpFZdOWVWt2gzEx5y62SouFzhFr1KbYUgK2xXy3uoj6Olgjk 08iRLLaoRCNjB7I0hmlwQMVHcfmBhmixeFcXfDxdXzsnCjDQT9bfJKi/P0RxGIIG bAC3DhA8wx9MQPZ3iKJWj6flIPHzy43eD+u0+r5dl/9JakppJLlVPHJG1eL7n7Uk wEre0TKlck3cwMrAWSPccNjV0zcZwC8QobsLSB/pnOB0q2n0oSwKDcfonpdCwSFC +Swuc6BZgt4g93FNlB3+qIFHDskbGrtHGP8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT1zGzf98JhpHg3lQ7sL3XzKzVElzAfBgNVHSMEGDAWgBS9aQAtDot+0sPR1dB6 5pIsdJfwLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTc3L3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhTWDhDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhT WDhDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NzcvOWN4czNfZkNZYVI0TjVVTzdDOTE4eXMxUkpjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMpDMDANBgkqhkiG9w0BAQsFAAOCAQEAKueEq8xoAl1cxfr0QnX0DhaWY7BJ +sY+1/mSitsqHEIoBz8+4DAWvvYcLphcyVgsXjE+0ASNUKZIQdOhMsHOpCWNMvwM ClInEciniQNV21wqxHVzmeDwVM8t1qEd4BMw0P+ESXtb1bu3V10PJctvZ2HT/Qik RfDdolW/THfLjdOh81cqCxNmBJ6SgWJ59iHnjdFWy2MUck03nfsE6LDb8N/GMTGg Ua4Cl0PIT3fdcSkh+dk6ORLb9+Wonqn8GkLOBvQgae8tjSHBY5VThrfVY45bz+B9 KYIrLPiBOePLyQ2Hqgro67e4+qPpIzeyk/o2Vl1e5+tzuV6elSk3xhQKbQ== -----END CERTIFICATE-----Generated at Fri Jul 4 19:17:24 2025 by rpki-client