$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/32ol8OMZfOdwUZD70lVQggye7oM.roa File: 32ol8OMZfOdwUZD70lVQggye7oM.roa (raw, json) Hash identifier: AHYXijj+iGaH6W73TuPwergvU3Sds/CY6H3C1Ia+8Xc= Subject key identifier: DF:6A:25:F0:E3:19:7C:E7:70:51:90:FB:D2:55:50:82:0C:9E:EE:83 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0246 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/32ol8OMZfOdwUZD70lVQggye7oM.roa Signing time: Tue 10 Jun 2025 10:46:56 +0000 ROA not before: Tue 10 Jun 2025 10:46:56 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 7684 IP address blocks: 49.212.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 17:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Jun 10 10:46:56 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=DF6A25F0E3197CE7705190FBD25550820C9EEE83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:88:02:6c:ba:ae:50:9f:f5:bb:48:ca:5d: 5d:3c:6f:e1:07:2f:ec:5b:78:1d:66:05:9f:05:17: e7:33:55:46:93:0e:f2:96:39:8c:37:fe:25:7e:1c: d9:ab:eb:cf:c1:a9:0e:ca:e0:8a:dc:f2:ff:06:90: 95:23:49:d0:c1:33:ec:e1:b4:3c:c8:d6:f9:5d:d8: e1:e8:3b:cf:b2:c0:a6:e6:4e:76:49:da:d6:39:db: 5a:08:a4:b2:b3:e0:e2:3b:89:aa:5d:29:f0:19:8e: 0f:57:f2:82:58:e7:91:30:67:a7:33:5c:11:49:3f: 73:d1:a5:d9:05:7b:10:98:aa:c6:43:9a:f5:52:71: ea:ff:3f:7d:65:88:05:69:37:0f:ce:42:1a:39:03: 7a:fd:2e:94:dd:2f:3a:56:17:a0:74:83:c5:6b:26: 19:b1:3a:39:81:86:06:5f:54:ca:90:59:89:a2:c2: 8d:1f:a8:3e:92:de:1d:e9:88:7f:01:f1:45:25:aa: 65:c3:88:bd:50:ab:7f:fb:54:4a:5d:5c:74:28:a0: 72:4b:f2:db:71:a8:9f:8c:4e:10:e8:75:23:d5:5f: 20:b8:f3:cf:00:89:6e:17:0d:c0:49:8d:23:a0:3d: 77:0c:74:8c:dc:ae:39:18:32:9d:58:a1:22:17:66: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:25:F0:E3:19:7C:E7:70:51:90:FB:D2:55:50:82:0C:9E:EE:83 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/32ol8OMZfOdwUZD70lVQggye7oM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.233.0/24 Signature Algorithm: sha256WithRSAEncryption b0:15:67:15:3e:1e:34:41:d2:c5:52:8e:1c:6d:3b:f3:b0:59: ec:f4:28:a1:e0:83:9d:82:00:ae:48:c4:f6:3d:1b:84:44:d8: 2e:5c:72:9e:16:65:8b:8a:ba:b7:f2:54:bf:6d:d2:c0:6b:5e: f5:38:ea:ed:cb:fd:09:7c:8b:b8:0f:74:50:bd:86:8c:48:f4: 83:51:8e:d9:80:75:32:2d:93:df:c3:86:05:81:08:be:4a:e3: 51:48:b5:f9:38:83:7d:a2:a7:12:40:24:46:e8:7b:b6:c0:36: fc:61:1f:35:2d:d1:57:f3:49:81:d0:7d:68:8b:f2:b1:a7:38: e0:d5:d9:16:e1:0e:9f:55:72:a7:ac:da:0c:e3:c3:0d:5c:08: b2:40:b4:50:27:24:61:c2:4c:6c:a3:c6:7e:57:95:62:cc:4e: f8:e0:2d:e6:91:b2:e3:1f:e4:07:6e:66:eb:bb:66:d9:15:8f: 11:33:cc:e8:ef:d7:e8:ec:a0:55:18:29:e2:f1:11:05:79:e7: 47:aa:3c:b2:6d:3c:14:b0:bc:1a:8f:e0:c3:1b:5b:3e:3e:42: 14:5a:89:2c:d6:1d:61:1e:fa:2b:3c:14:17:c5:70:f7:8f:42: 07:af:93:cf:b5:79:7e:f7:9a:9e:59:b6:1b:d3:c8:1b:7b:b0: 3f:22:40:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA2MTAx MDQ2NTZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKERGNkEyNUYwRTMxOTdD RTc3MDUxOTBGQkQyNTU1MDgyMEM5RUVFODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx+ogCbLquUJ/1u0jKXV08b+EHL+xbeB1mBZ8FF+czVUaTDvKW OYw3/iV+HNmr68/BqQ7K4Irc8v8GkJUjSdDBM+zhtDzI1vld2OHoO8+ywKbmTnZJ 2tY521oIpLKz4OI7iapdKfAZjg9X8oJY55EwZ6czXBFJP3PRpdkFexCYqsZDmvVS cer/P31liAVpNw/OQho5A3r9LpTdLzpWF6B0g8VrJhmxOjmBhgZfVMqQWYmiwo0f qD6S3h3piH8B8UUlqmXDiL1Qq3/7VEpdXHQooHJL8ttxqJ+MThDodSPVXyC4888A iW4XDcBJjSOgPXcMdIzcrjkYMp1YoSIXZiNNAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU32ol8OMZfOdwUZD70lVQggye7oMwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny8zMm9sOE9NWmZPZHdVWkQ3MGxWUWdneWU3b00u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdTpMA0GCSqGSIb3DQEBCwUAA4IBAQCwFWcVPh40QdLFUo4cbTvz sFns9Cih4IOdggCuSMT2PRuERNguXHKeFmWLirq38lS/bdLAa171OOrty/0JfIu4 D3RQvYaMSPSDUY7ZgHUyLZPfw4YFgQi+SuNRSLX5OIN9oqcSQCRG6Hu2wDb8YR81 LdFX80mB0H1oi/Kxpzjg1dkW4Q6fVXKnrNoM48MNXAiyQLRQJyRhwkxso8Z+V5Vi zE744C3mkbLjH+QHbmbru2bZFY8RM8zo79fo7KBVGCni8REFeedHqjyybTwUsLwa j+DDG1s+PkIUWoks1h1hHvorPBQXxXD3j0IHr5PPtXl+95qeWbYb08gbe7A/IkBe -----END CERTIFICATE-----Generated at Sun Jun 22 19:57:12 2025 by rpki-client