$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mjQCS7MBcoKHCjpaRz-LyL_ahKQ.roa File: mjQCS7MBcoKHCjpaRz-LyL_ahKQ.roa (raw, json) Hash identifier: i/f6SNJMzTQqudgz0i5ARX0n/k8DgSHXOH0tJyCKEIY= Subject key identifier: 9A:34:02:4B:B3:01:72:82:87:0A:3A:5A:47:3F:8B:C8:BF:DA:84:A4 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 024B Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mjQCS7MBcoKHCjpaRz-LyL_ahKQ.roa Signing time: Tue 10 Jun 2025 10:46:59 +0000 ROA not before: Tue 10 Jun 2025 10:46:59 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 7684 IP address blocks: 112.78.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 13:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Jun 10 10:46:59 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=9A34024BB3017282870A3A5A473F8BC8BFDA84A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:50:31:e5:d8:fd:85:29:fd:7b:19:e7:ad: e3:bb:4e:9f:70:c7:2c:66:c4:9c:ac:4a:22:5e:2f: d2:29:40:3b:07:60:91:13:d7:68:f8:04:9d:a6:ac: 74:8a:d2:d4:0f:34:a6:b8:b7:d4:4e:37:89:18:6b: 25:c8:92:08:94:c6:a9:57:ab:de:cd:c1:e5:ec:be: 92:db:02:13:d7:36:4d:a5:bd:8d:c6:7c:fd:02:ce: cd:a1:8b:f0:0d:ec:92:03:af:f2:22:86:76:46:31: 71:a6:56:7a:46:a1:48:21:1c:e0:6c:09:7a:d6:72: 0b:fd:01:e5:4b:5a:a2:a8:33:95:f9:b2:bf:07:ba: 42:d6:27:c9:d9:cd:e8:18:07:a4:86:8f:e3:25:ae: fb:53:90:99:b4:2d:f5:a7:c8:c7:c6:c9:ad:72:92: 7b:f7:3e:f3:d1:75:57:6e:8e:e1:ba:e5:75:26:54: 00:41:c8:a3:54:ab:94:fc:ed:f8:74:63:c4:29:6b: 09:86:c5:b5:b7:37:4e:58:d9:19:4d:ca:d8:28:e3: c4:04:ba:f4:71:0d:fe:7c:aa:97:eb:1b:a7:2c:a4: ae:60:a6:c8:67:eb:80:94:20:de:04:a1:7d:eb:18: 42:3a:b1:4d:ea:33:c2:e7:c0:af:f4:69:ca:9f:f3: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:34:02:4B:B3:01:72:82:87:0A:3A:5A:47:3F:8B:C8:BF:DA:84:A4 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mjQCS7MBcoKHCjpaRz-LyL_ahKQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.78.203.0/24 Signature Algorithm: sha256WithRSAEncryption 66:9a:7c:db:c2:0d:1a:19:28:dd:91:7e:89:95:ab:8b:f8:5e: 4e:32:cc:8f:7f:39:07:70:e2:e9:dc:94:d6:87:08:ff:5a:90: 90:a2:f5:c0:38:8a:d1:fd:b7:38:a4:35:14:1d:4f:b9:16:04: 78:ee:8b:d6:5a:a3:15:22:a2:04:26:f5:1e:bf:77:e2:95:b2: c8:ca:97:02:35:a7:0f:4c:7b:ef:24:19:39:c2:39:c3:0c:95: a2:7a:1d:40:0a:26:7a:89:b0:28:be:0c:07:11:9d:7e:28:bb: b9:31:05:22:77:9e:bd:18:f4:b8:ca:63:7f:7a:c1:b0:b5:a3: 1e:26:85:d5:da:88:f5:0b:34:db:e4:8b:ad:c9:14:2e:df:77: f5:0b:21:e8:82:5f:08:5e:17:1f:c1:8c:c3:46:83:c9:6a:1f: 10:cf:20:10:dd:b7:3c:33:c0:bd:0f:4a:65:d5:e4:32:6a:b5: 60:f0:df:65:6b:92:1a:db:c0:cc:66:4a:32:3d:ab:6e:22:18: 5c:77:6c:de:1b:23:af:21:07:2e:fe:93:a1:74:8c:66:93:67: 9d:45:7d:c6:61:93:a7:ed:02:da:ab:6a:9d:16:0b:eb:e3:18: 61:fa:4a:1f:05:ad:83:cd:58:cf:90:3c:b2:b6:5c:2c:de:76: 61:eb:b2:b5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA2MTAx MDQ2NTlaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDlBMzQwMjRCQjMwMTcy ODI4NzBBM0E1QTQ3M0Y4QkM4QkZEQTg0QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG5lAx5dj9hSn9exnnreO7Tp9wxyxmxJysSiJeL9IpQDsHYJET 12j4BJ2mrHSK0tQPNKa4t9RON4kYayXIkgiUxqlXq97NweXsvpLbAhPXNk2lvY3G fP0Czs2hi/AN7JIDr/IihnZGMXGmVnpGoUghHOBsCXrWcgv9AeVLWqKoM5X5sr8H ukLWJ8nZzegYB6SGj+MlrvtTkJm0LfWnyMfGya1yknv3PvPRdVdujuG65XUmVABB yKNUq5T87fh0Y8QpawmGxbW3N05Y2RlNytgo48QEuvRxDf58qpfrG6cspK5gpshn 64CUIN4EoX3rGEI6sU3qM8LnwK/0acqf87lHAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUmjQCS7MBcoKHCjpaRz+LyL/ahKQwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9talFDUzdNQmNvS0hDanBhUnotTHlMX2FoS1Eu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAcE7LMA0GCSqGSIb3DQEBCwUAA4IBAQBmmnzbwg0aGSjdkX6JlauL +F5OMsyPfzkHcOLp3JTWhwj/WpCQovXAOIrR/bc4pDUUHU+5FgR47ovWWqMVIqIE JvUev3filbLIypcCNacPTHvvJBk5wjnDDJWieh1ACiZ6ibAovgwHEZ1+KLu5MQUi d569GPS4ymN/esGwtaMeJoXV2oj1CzTb5IutyRQu33f1CyHogl8IXhcfwYzDRoPJ ah8QzyAQ3bc8M8C9D0pl1eQyarVg8N9la5Ia28DMZkoyPatuIhhcd2zeGyOvIQcu /pOhdIxmk2edRX3GYZOn7QLaq2qdFgvr4xhh+kofBa2DzVjPkDyytlws3nZh67K1 -----END CERTIFICATE-----Generated at Sun Jun 22 16:20:31 2025 by rpki-client