$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Shg8fV2gyp44z8rN9i8KCKJcp4I.roa File: Shg8fV2gyp44z8rN9i8KCKJcp4I.roa (raw, json) Hash identifier: rbu/ZAl5ACrnyBL9uC7KLThyh7QuSplVi5yOUnCdDjg= Subject key identifier: 4A:18:3C:7D:5D:A0:CA:9E:38:CF:CA:CD:F6:2F:0A:08:A2:5C:A7:82 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 024A Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Shg8fV2gyp44z8rN9i8KCKJcp4I.roa Signing time: Tue 10 Jun 2025 10:46:58 +0000 ROA not before: Tue 10 Jun 2025 10:46:58 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9371 IP address blocks: 202.255.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Jun 10 10:46:58 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=4A183C7D5DA0CA9E38CFCACDF62F0A08A25CA782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7e:fa:21:d0:fa:c3:78:1e:99:b6:49:36:2f: a3:98:8b:30:9b:6c:90:19:92:9b:dd:d8:48:40:05: 75:75:49:90:20:9e:06:ac:8f:1f:dd:fa:15:ff:91: 9b:12:98:72:7d:0a:08:4a:cb:fb:00:8e:65:1f:e7: 36:63:08:56:0b:af:64:d6:a7:48:14:43:f9:81:3a: 8f:c4:65:c3:87:64:b9:98:98:75:e5:ec:47:a8:0c: 83:b7:28:4f:d3:20:83:0d:76:7b:10:85:b7:ef:d4: a7:a7:f8:97:01:9a:6b:f2:4b:68:c5:0d:df:f0:70: ed:53:bb:75:b3:1e:45:a5:46:64:0c:1f:18:b9:ed: e3:e1:c3:10:9c:5d:3a:41:72:36:01:89:f1:69:e6: 6c:87:97:b9:42:68:25:b0:33:d7:95:01:7f:e3:35: 66:34:23:f3:f9:e1:8d:2d:88:52:42:9f:5a:6e:63: ec:61:e9:c0:f0:3f:0d:ec:53:d6:9f:31:62:c3:1d: 9d:d5:10:c9:ba:34:e4:19:c6:a1:88:38:35:16:43: 3f:0d:2c:62:da:39:87:17:9b:d4:30:f3:90:38:81: fb:ba:d7:f8:fd:d9:97:c1:ce:91:4a:76:64:25:ca: a3:1e:43:9b:f7:8e:20:cc:ae:e8:65:ae:28:6c:a7: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:3C:7D:5D:A0:CA:9E:38:CF:CA:CD:F6:2F:0A:08:A2:5C:A7:82 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Shg8fV2gyp44z8rN9i8KCKJcp4I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.255.237.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:bf:7a:12:e0:4d:88:85:7a:78:15:ca:53:5e:3a:05:2e:70: 8a:dc:fb:16:be:be:e7:cf:12:0d:03:e7:7e:e0:2a:93:c3:62: 3e:b0:fa:9a:89:1d:df:8a:9e:f8:eb:b5:c8:fa:f5:9b:22:94: ad:0b:dd:d7:eb:b3:47:b7:b8:1b:78:a0:e1:ee:63:c9:28:b1: 18:a0:68:83:93:33:8c:58:03:92:0c:ab:da:3e:33:15:aa:3e: df:77:d3:5b:61:30:40:be:6b:8d:4e:a4:43:97:52:29:0d:01: 31:73:d6:ee:07:7d:60:1f:8e:5a:66:c2:a9:63:7f:72:90:1d: aa:a6:ef:43:70:c8:5b:34:49:8f:e8:c7:80:82:68:ac:3f:16: 8b:48:5e:b7:cd:bd:6d:bc:08:48:68:eb:9d:e2:8c:a9:cc:db: 58:b6:52:28:bc:a7:d7:42:6e:12:44:3d:86:78:7c:7f:db:fc: 51:5b:f1:b7:17:0c:5c:83:16:c4:6f:85:7b:7a:f8:e1:8f:5e: 8f:42:0c:34:55:3a:7f:16:d4:68:09:22:a5:56:74:ff:c9:6d: 1e:d3:f4:c2:86:38:7c:ce:ac:3c:37:36:66:0f:db:44:e2:1f: c2:13:4b:85:0e:0c:f8:51:12:87:6a:18:5b:55:94:96:69:39: a6:a5:5a:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA2MTAx MDQ2NThaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDRBMTgzQzdENURBMENB OUUzOENGQ0FDREY2MkYwQTA4QTI1Q0E3ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpfvoh0PrDeB6Ztkk2L6OYizCbbJAZkpvd2EhABXV1SZAgngas jx/d+hX/kZsSmHJ9CghKy/sAjmUf5zZjCFYLr2TWp0gUQ/mBOo/EZcOHZLmYmHXl 7EeoDIO3KE/TIIMNdnsQhbfv1Ken+JcBmmvyS2jFDd/wcO1Tu3WzHkWlRmQMHxi5 7ePhwxCcXTpBcjYBifFp5myHl7lCaCWwM9eVAX/jNWY0I/P54Y0tiFJCn1puY+xh 6cDwPw3sU9afMWLDHZ3VEMm6NOQZxqGIODUWQz8NLGLaOYcXm9Qw85A4gfu61/j9 2ZfBzpFKdmQlyqMeQ5v3jiDMruhlrihsp3AlAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUShg8fV2gyp44z8rN9i8KCKJcp4IwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9TaGc4ZlYyZ3lwNDR6OHJOOWk4S0NLSmNwNEku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyv/tMA0GCSqGSIb3DQEBCwUAA4IBAQBLv3oS4E2IhXp4FcpTXjoF LnCK3PsWvr7nzxINA+d+4CqTw2I+sPqaiR3fip7467XI+vWbIpStC93X67NHt7gb eKDh7mPJKLEYoGiDkzOMWAOSDKvaPjMVqj7fd9NbYTBAvmuNTqRDl1IpDQExc9bu B31gH45aZsKpY39ykB2qpu9DcMhbNEmP6MeAgmisPxaLSF63zb1tvAhIaOud4oyp zNtYtlIovKfXQm4SRD2GeHx/2/xRW/G3FwxcgxbEb4V7evjhj16PQgw0VTp/FtRo CSKlVnT/yW0e0/TChjh8zqw8NzZmD9tE4h/CE0uFDgz4URKHahhbVZSWaTmmpVpZ -----END CERTIFICATE-----Generated at Wed Nov 5 20:23:34 2025 by rpki-client