$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/O9ilW85m98c7GBKGvfsd54C3KJU.roa File: O9ilW85m98c7GBKGvfsd54C3KJU.roa (raw, json) Hash identifier: uWJVjR8xcDSJTifBzmQ/E/abNmJ3S5JBewFATcszy8A= Subject key identifier: 3B:D8:A5:5B:CE:66:F7:C7:3B:18:12:86:BD:FB:1D:E7:80:B7:28:95 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 5F Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/O9ilW85m98c7GBKGvfsd54C3KJU.roa Signing time: Thu 03 Jul 2025 03:31:02 +0000 ROA not before: Thu 03 Jul 2025 03:31:02 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 146979 IP address blocks: 202.1.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Jul 3 03:31:02 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=3BD8A55BCE66F7C73B181286BDFB1DE780B72895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:f3:b3:6a:32:68:d6:38:52:f4:f0:b5:9f: c8:65:e0:94:fe:dd:ad:d3:94:5c:d4:bf:a1:cc:ab: 15:f1:05:14:a0:ff:5a:f4:40:ff:52:73:22:5b:bc: 6e:8e:4f:42:62:14:68:e0:44:93:71:a4:60:61:f7: 6d:35:bc:2d:e0:55:0f:27:70:72:29:5a:1b:63:25: 28:52:03:1b:ec:13:a1:55:4f:18:8e:95:47:8c:b7: 10:13:07:25:a4:4d:f6:97:02:d1:d6:f6:9f:7a:9a: 3f:a6:c9:da:21:75:de:09:27:d6:b6:7c:1b:ca:97: 18:ee:c1:83:cc:77:27:89:4c:3a:c0:d9:6a:10:8a: 5d:24:99:f3:f8:a7:f2:4e:8f:30:86:66:b1:89:c0: 3b:c5:00:5e:df:ab:4d:70:1c:bf:fa:55:02:64:7b: ad:f9:9b:50:38:fa:28:73:7c:73:60:8c:d3:34:5d: f3:20:67:8f:b8:ec:39:96:a1:31:66:8d:22:4e:0a: 2a:d5:9a:b3:06:2b:b4:85:4e:1d:6b:f9:d1:9d:3b: af:50:67:66:14:54:01:52:0d:93:64:5f:06:6f:4f: 80:17:3d:ed:e8:a5:39:a1:df:a5:1f:2b:30:f7:64: 69:80:fd:40:d7:b7:7e:01:af:86:8e:b4:59:27:83: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D8:A5:5B:CE:66:F7:C7:3B:18:12:86:BD:FB:1D:E7:80:B7:28:95 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/O9ilW85m98c7GBKGvfsd54C3KJU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.223.0/24 Signature Algorithm: sha256WithRSAEncryption 23:09:17:d4:e6:db:10:a6:7e:6e:e1:39:0a:06:2a:c7:d6:4a: 0d:ca:3c:d4:d1:20:a3:d1:05:4e:08:d7:23:f2:70:9a:d6:a6: 35:8a:1b:2f:bb:2c:09:ce:e5:5c:8e:43:2b:a6:13:9e:6d:76: de:98:ea:a9:37:93:a0:a1:0d:5c:f2:eb:ac:fa:88:f9:7a:bd: c2:b4:a1:ea:3f:44:71:30:a1:33:36:f7:66:51:c6:7f:79:b2: 87:7e:9d:8c:67:bb:88:cd:37:92:c0:ae:f3:a6:9e:1e:d6:b2: 37:17:78:8e:c0:0c:dc:75:aa:47:e2:22:37:da:32:74:ed:96: 3f:2f:5a:78:29:e6:79:7a:e4:38:d3:f3:66:ea:51:2d:9c:56: 2b:9b:98:0b:58:50:f4:21:16:72:4d:91:dc:78:89:47:cc:19: 4c:09:f2:44:2c:57:67:e3:f0:c3:0c:c7:57:11:e2:0a:3b:a6: 56:02:4b:9d:35:5a:e1:65:4e:69:3c:0d:f8:56:bc:70:20:ae: 1f:00:f1:a8:6b:03:fe:76:59:eb:b3:b4:da:01:41:0a:46:12: 65:c3:27:0a:6d:1e:d1:9b:66:f2:66:25:f0:aa:94:39:4d:65: 3b:90:66:42:e9:92:1b:09:61:dc:fb:20:fd:09:de:fa:b4:7b: 5b:b8:13:a3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI1MDcwMzAz MzEwMloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoM0JEOEE1NUJDRTY2RjdD NzNCMTgxMjg2QkRGQjFERTc4MEI3Mjg5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANNW87NqMmjWOFL08LWfyGXglP7drdOUXNS/ocyrFfEFFKD/WvRA /1JzIlu8bo5PQmIUaOBEk3GkYGH3bTW8LeBVDydwcilaG2MlKFIDG+wToVVPGI6V R4y3EBMHJaRN9pcC0db2n3qaP6bJ2iF13gkn1rZ8G8qXGO7Bg8x3J4lMOsDZahCK XSSZ8/in8k6PMIZmsYnAO8UAXt+rTXAcv/pVAmR7rfmbUDj6KHN8c2CM0zRd8yBn j7jsOZahMWaNIk4KKtWaswYrtIVOHWv50Z07r1BnZhRUAVINk2RfBm9PgBc97eil OaHfpR8rMPdkaYD9QNe3fgGvho60WSeDAfcCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQ72KVbzmb3xzsYEoa9+x3ngLcolTAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny9POWlsVzg1bTk4YzdHQktHdmZzZDU0QzNLSlUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAygHfMA0GCSqGSIb3DQEBCwUAA4IBAQAjCRfU5tsQpn5u4TkKBirH1koN yjzU0SCj0QVOCNcj8nCa1qY1ihsvuywJzuVcjkMrphOebXbemOqpN5OgoQ1c8uus +oj5er3CtKHqP0RxMKEzNvdmUcZ/ebKHfp2MZ7uIzTeSwK7zpp4e1rI3F3iOwAzc dapH4iI32jJ07ZY/L1p4KeZ5euQ40/Nm6lEtnFYrm5gLWFD0IRZyTZHceIlHzBlM CfJELFdn4/DDDMdXEeIKO6ZWAkudNVrhZU5pPA34VrxwIK4fAPGoawP+dlnrs7Ta AUEKRhJlwycKbR7Rm2byZiXwqpQ5TWU7kGZC6ZIbCWHc+yD9Cd76tHtbuBOj -----END CERTIFICATE-----Generated at Fri Jul 4 15:42:23 2025 by rpki-client