$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa File: TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa (raw, json) Hash identifier: L1pqklHPHso3MG1ZJjEtLbApzqIKmAJH/VgTZkq+6Nc= Subject key identifier: 4F:02:44:7B:77:6D:A0:9F:1D:73:18:0F:1E:23:40:82:D2:A0:21:97 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 5E Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa Signing time: Mon 23 Jun 2025 08:07:40 +0000 ROA not before: Mon 23 Jun 2025 08:07:40 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2515 IP address blocks: 211.120.240.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Jun 23 08:07:40 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=4F02447B776DA09F1D73180F1E234082D2A02197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:a7:c7:78:d8:d3:10:82:2a:51:37:bb:1f: 14:4b:47:7c:9f:64:c0:4d:9a:be:b1:5a:a5:87:cf: e2:64:2b:26:ed:d7:d3:cc:58:25:ce:0e:f8:49:76: cc:72:bc:58:95:45:b8:65:8f:8b:c3:5e:1e:58:f6: f9:fb:65:3b:a4:e6:88:cb:69:d7:93:76:bc:8f:56: 20:f2:f1:da:a5:0a:ee:23:43:1e:be:68:d7:bf:86: 77:30:f8:96:8f:21:86:c8:e5:bb:37:74:d8:2f:0c: ce:1b:ae:d0:ce:c6:6a:b7:bd:16:23:d4:7b:eb:fa: 1d:9e:5e:be:7a:41:b3:b8:e7:3c:11:78:4f:2c:d9: e7:76:2f:fb:9d:e5:e2:60:24:33:5b:f2:5f:b3:5e: 5c:f4:65:f3:cf:c1:7d:44:e3:af:31:fe:1f:6c:fb: 63:cc:be:fb:41:29:b1:71:3f:63:be:d8:7a:5b:41: 79:2e:e7:cc:bd:bf:b1:e0:c4:ce:68:eb:78:6d:36: c5:4e:51:89:b1:5b:0f:c2:d0:79:60:8f:1e:58:8f: 47:fe:77:01:e5:39:a5:a3:d0:a6:14:ed:06:73:b1: f8:b8:b3:ea:e2:a0:95:44:46:0d:91:74:7c:2e:e8: 63:89:1f:93:d5:27:ed:65:f6:7b:e7:9c:db:02:8b: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:02:44:7B:77:6D:A0:9F:1D:73:18:0F:1E:23:40:82:D2:A0:21:97 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.240.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:e8:30:98:6b:e9:0e:17:75:ed:85:5e:9c:8e:49:58:e1:79: c5:18:03:d7:f7:00:7f:8c:03:79:a5:e5:bf:dd:a5:93:6a:73: 30:6c:a7:4b:1c:f1:98:fd:47:bc:3d:7a:78:ce:d1:cf:7c:7c: 5c:f6:6c:b8:37:82:74:40:89:ac:fb:93:e7:b9:65:24:75:83: ff:a7:07:60:68:c8:82:f6:e4:ce:5c:fc:8b:28:b5:ca:c5:c0: 32:df:50:25:29:bb:7f:f9:80:36:4b:0e:61:d8:35:75:41:f2: 04:da:13:42:da:bf:ca:c1:9b:32:87:cc:68:10:9d:85:b4:7a: 61:d8:ac:09:e5:11:5a:39:70:6f:18:06:35:64:ee:d1:c4:f9: d5:ea:e7:0e:4c:c5:b5:1a:82:b7:f4:da:3f:54:69:d6:d7:04: 0d:11:75:24:77:6c:c2:ba:47:6e:28:14:0c:9a:ac:cf:c0:49: 62:90:7d:2c:d7:f1:b4:7a:fe:93:9b:6b:ba:17:f8:7a:dc:5e: 87:b1:bc:f1:28:4b:47:fc:c2:55:18:e0:76:f2:1f:25:af:f9: f9:df:24:fd:43:e3:98:8e:a2:b2:51:97:0f:49:59:37:18:05: 10:b4:18:e8:06:b8:b5:30:fd:de:55:f8:48:a5:64:e6:40:68: 51:00:46:8a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI1MDYyMzA4 MDc0MFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNEYwMjQ0N0I3NzZEQTA5 RjFENzMxODBGMUUyMzQwODJEMkEwMjE5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMCcp8d42NMQgipRN7sfFEtHfJ9kwE2avrFapYfP4mQrJu3X08xY Jc4O+El2zHK8WJVFuGWPi8NeHlj2+ftlO6TmiMtp15N2vI9WIPLx2qUK7iNDHr5o 17+GdzD4lo8hhsjluzd02C8Mzhuu0M7Gare9FiPUe+v6HZ5evnpBs7jnPBF4TyzZ 53Yv+53l4mAkM1vyX7NeXPRl88/BfUTjrzH+H2z7Y8y++0EpsXE/Y77YeltBeS7n zL2/seDEzmjreG02xU5RibFbD8LQeWCPHliPR/53AeU5paPQphTtBnOx+Liz6uKg lURGDZF0fC7oY4kfk9Un7WX2e+ec2wKLsvcCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBRPAkR7d22gnx1zGA8eI0CC0qAhlzAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny9Ud0pFZTNkdG9KOGRjeGdQSGlOQWd0S2dJWmMucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQD03jwMA0GCSqGSIb3DQEBCwUAA4IBAQAv6DCYa+kOF3XthV6cjklY4XnF GAPX9wB/jAN5peW/3aWTanMwbKdLHPGY/Ue8PXp4ztHPfHxc9my4N4J0QIms+5Pn uWUkdYP/pwdgaMiC9uTOXPyLKLXKxcAy31AlKbt/+YA2Sw5h2DV1QfIE2hNC2r/K wZsyh8xoEJ2FtHph2KwJ5RFaOXBvGAY1ZO7RxPnV6ucOTMW1GoK39No/VGnW1wQN EXUkd2zCukduKBQMmqzPwElikH0s1/G0ev6Tm2u6F/h63F6HsbzxKEtH/MJVGOB2 8h8lr/n53yT9Q+OYjqKyUZcPSVk3GAUQtBjoBri1MP3eVfhIpWTmQGhRAEaK -----END CERTIFICATE-----Generated at Fri Jul 4 14:58:02 2025 by rpki-client