$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/cn0JesJkEV0tZtj4NLTz5ILK9Bw.roa File: cn0JesJkEV0tZtj4NLTz5ILK9Bw.roa (raw, json) Hash identifier: KQOTRB4+/rdBmRjssgagAJ6+4wizW83cw9fhaKmX7gg= Subject key identifier: 72:7D:09:7A:C2:64:11:5D:2D:66:D8:F8:34:B4:F3:E4:82:CA:F4:1C Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B Certificate serial: 5B Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/cn0JesJkEV0tZtj4NLTz5ILK9Bw.roa Signing time: Tue 01 Jul 2025 01:35:58 +0000 ROA not before: Tue 01 Jul 2025 01:35:58 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 17707 IP address blocks: 61.121.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B Validity Not Before: Jul 1 01:35:58 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=727D097AC264115D2D66D8F834B4F3E482CAF41C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:66:a9:36:e8:06:7e:9a:d9:93:c5:88:1e: 9c:aa:75:a2:05:cd:90:e4:92:82:61:f1:41:38:43: 09:78:b3:ac:f9:85:df:eb:40:fa:86:5d:09:69:76: c0:ed:d7:e9:39:a3:55:5b:b9:a0:9d:a5:5f:c8:81: 7b:7c:bc:a9:a0:9f:4b:15:be:f6:a0:20:af:59:27: 3b:78:0f:db:a4:7b:97:32:f4:6f:9c:58:46:59:90: 61:7b:23:b0:c4:ef:54:52:ad:1b:d9:55:a4:36:63: b4:9a:55:b5:d4:59:e4:e7:d7:94:9d:6f:06:fb:22: d1:1f:96:10:ff:0a:31:a3:a5:4b:98:95:fe:ba:b6: a8:46:1c:ca:2c:48:78:44:f6:4e:5c:36:2b:81:0d: ce:ac:75:b2:23:3d:0d:db:34:19:cd:d9:36:a1:d6: e7:42:76:23:25:e0:4a:29:c5:43:d9:b9:f1:dd:ac: ca:83:77:5d:67:57:e6:1f:12:92:7e:36:58:5f:97: d5:fb:49:44:99:35:9a:e6:89:22:0c:aa:9a:9a:e0: 0a:3f:56:0b:db:16:3c:0d:bf:c5:e0:8c:74:1c:d5: 2c:2b:08:5a:6d:91:5b:c0:88:4f:bd:72:13:bd:1a: 01:9e:24:d0:6f:11:6a:e4:37:6c:36:ad:49:46:88: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7D:09:7A:C2:64:11:5D:2D:66:D8:F8:34:B4:F3:E4:82:CA:F4:1C X509v3 Authority Key Identifier: keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/cn0JesJkEV0tZtj4NLTz5ILK9Bw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.121.208.0/20 Signature Algorithm: sha256WithRSAEncryption b3:84:92:91:59:d4:68:fe:f5:e2:1b:74:e0:ef:58:e6:e4:19: da:1d:e5:6b:11:8a:a8:08:75:ff:7e:9d:fa:cc:50:f6:08:aa: e9:50:17:07:55:07:36:8f:98:61:61:5d:63:c2:8d:ed:0e:f6: aa:21:7c:1f:bb:9d:15:91:4b:33:ed:a2:fe:06:07:43:af:8a: af:5e:09:65:33:fb:f4:67:c6:9f:89:07:bb:42:55:38:e3:1b: 36:48:7d:cc:70:a3:43:75:1f:ff:db:f6:b0:4e:5c:d8:28:59: b7:bb:33:cf:e6:10:32:8d:99:6f:48:c5:64:23:2e:36:80:83: af:15:3d:77:8d:df:f0:00:60:78:d8:2a:ad:f6:15:4f:f1:ac: c9:6b:e6:87:1b:13:5e:a2:78:7f:26:de:a5:29:89:8e:5f:2a: b8:fa:0f:3b:46:bc:90:ea:60:3c:c7:c3:6b:0b:5b:bc:6b:34: e8:5e:27:f5:ce:e5:49:c8:6c:d0:0d:1d:1d:63:b9:d4:dd:39: 29:de:f1:54:1b:b9:41:c5:35:e4:52:be:d1:a5:a1:f9:7e:96: 43:e8:e3:90:ea:95:b9:70:2c:62:5c:64:e1:4f:22:66:c8:7e: 62:b5:11:e7:6b:61:7c:2f:23:68:6c:63:7b:ad:48:c2:10:ed: dd:b3:a8:93 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzE4 N0M0RDRCRERENDM1NzI4QjQxMjg4OEUwNjU1MzM0MjA4RTBCMB4XDTI1MDcwMTAx MzU1OFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNzI3RDA5N0FDMjY0MTE1 RDJENjZEOEY4MzRCNEYzRTQ4MkNBRjQxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL9BZqk26AZ+mtmTxYgenKp1ogXNkOSSgmHxQThDCXizrPmF3+tA +oZdCWl2wO3X6TmjVVu5oJ2lX8iBe3y8qaCfSxW+9qAgr1knO3gP26R7lzL0b5xY RlmQYXsjsMTvVFKtG9lVpDZjtJpVtdRZ5OfXlJ1vBvsi0R+WEP8KMaOlS5iV/rq2 qEYcyixIeET2Tlw2K4ENzqx1siM9Dds0Gc3ZNqHW50J2IyXgSinFQ9m58d2syoN3 XWdX5h8Skn42WF+X1ftJRJk1muaJIgyqmprgCj9WC9sWPA2/xeCMdBzVLCsIWm2R W8CIT71yE70aAZ4k0G8RauQ3bDatSUaITZECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRyfQl6wmQRXS1m2Pg0tPPkgsr0HDAfBgNVHSMEGDAWgBS3GHxNS93UNXKLQSiI 4GVTNCCOCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk3L3R4aDhUVXZkMURWeWkwRW9pT0JsVXpRZ2pncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3R4aDhUVXZkMURWeWkwRW9pT0JsVXpR Z2pncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85OTcvY24wSmVzSmtFVjB0WnRqNE5MVHo1SUxLOUJ3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD150DANBgkqhkiG9w0BAQsFAAOCAQEAs4SSkVnUaP714ht04O9Y5uQZ2h3l axGKqAh1/36d+sxQ9giq6VAXB1UHNo+YYWFdY8KN7Q72qiF8H7udFZFLM+2i/gYH Q6+Kr14JZTP79GfGn4kHu0JVOOMbNkh9zHCjQ3Uf/9v2sE5c2ChZt7szz+YQMo2Z b0jFZCMuNoCDrxU9d43f8ABgeNgqrfYVT/GsyWvmhxsTXqJ4fybepSmJjl8quPoP O0a8kOpgPMfDawtbvGs06F4n9c7lSchs0A0dHWO51N05Kd7xVBu5QcU15FK+0aWh +X6WQ+jjkOqVuXAsYlxk4U8iZsh+YrUR52thfC8jaGxje61IwhDt3bOokw== -----END CERTIFICATE-----Generated at Sat Jul 5 20:11:13 2025 by rpki-client