$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1085/yq9woHc_QybUnRERYK6p3VxzyXg.roa File: yq9woHc_QybUnRERYK6p3VxzyXg.roa (raw, json) Hash identifier: IltfYlKz2d2zF5Dh5q8MRK1tkyK7AvfuwX/ToFFHfhs= Subject key identifier: CA:AF:70:A0:77:3F:43:26:D4:9D:11:11:60:AE:A9:DD:5C:73:C9:78 Certificate issuer: /CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320 Certificate serial: 2E Authority key identifier: 0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/yq9woHc_QybUnRERYK6p3VxzyXg.roa Signing time: Fri 01 Aug 2025 01:31:29 +0000 ROA not before: Fri 01 Aug 2025 01:31:29 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 0 IP address blocks: 202.255.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A86E6C0DD4733C142F01DD532FB3EAEE423B320 Validity Not Before: Aug 1 01:31:29 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=CAAF70A0773F4326D49D111160AEA9DD5C73C978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:4e:a0:37:54:3f:19:50:c4:58:49:b9:05: 90:b3:3c:97:b1:3c:d1:c6:e4:ef:7d:75:ba:c4:cd: f8:82:e3:5b:b5:47:c3:53:25:de:70:2e:88:77:a2: c7:4a:23:36:3d:2d:f6:6e:56:86:09:ce:9a:4c:b7: 9a:9b:b7:39:c9:52:a2:cc:9f:5e:5d:aa:9b:6b:cf: 8f:83:42:34:98:51:eb:c7:6a:36:62:6b:cc:0d:73: 42:d4:b7:30:dd:5f:87:09:51:d4:80:7e:73:7d:1e: de:4c:a0:25:7d:de:b3:52:68:f5:d6:72:84:46:25: ba:58:63:88:da:0a:d7:21:6a:14:a8:d6:9d:4b:d4: 05:ea:a7:8d:98:e1:c7:38:e9:01:9a:1f:fc:76:70: 82:32:21:0b:67:ae:02:69:c3:ab:55:6d:d1:b7:7e: b1:a5:8e:b5:dd:bf:de:b2:32:bd:0a:d7:4d:87:b7: 5f:4a:a1:6f:de:97:44:62:d4:fc:64:88:f7:0e:76: 22:c9:56:c1:06:49:d0:d2:35:38:e1:99:34:fb:5d: c8:ec:02:89:b1:1d:91:3d:d5:c2:66:17:00:81:d4: 8b:78:7f:f9:c6:8c:1e:71:8d:e6:18:53:94:20:6a: 8d:00:02:f7:cb:c9:47:4e:57:2b:8d:e6:ed:33:e0: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AF:70:A0:77:3F:43:26:D4:9D:11:11:60:AE:A9:DD:5C:73:C9:78 X509v3 Authority Key Identifier: keyid:0A:86:E6:C0:DD:47:33:C1:42:F0:1D:D5:32:FB:3E:AE:E4:23:B3:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/CobmwN1HM8FC8B3VMvs-ruQjsyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CobmwN1HM8FC8B3VMvs-ruQjsyA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1085/yq9woHc_QybUnRERYK6p3VxzyXg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.255.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:d5:d8:c8:15:d5:54:b8:16:b9:30:15:a7:b8:3b:ca:5a:66: 4f:34:9a:da:9d:12:8f:00:d9:c7:9c:3f:a1:fd:46:57:32:ca: 15:e1:c7:28:97:3d:0b:00:5b:df:d9:05:6f:1e:4b:22:3c:40: 45:3d:f5:1b:40:3b:f7:6b:e8:d2:7b:78:63:d6:9e:2a:d7:6f: 9e:94:19:5f:ff:5a:a2:5e:80:62:5e:01:43:43:75:d8:73:1e: ba:20:1c:3d:9f:76:16:1f:37:8d:47:e8:12:5b:37:c7:ca:a4: 58:ab:a4:1b:f3:f7:9c:2b:c7:6d:63:b0:6b:87:e8:41:bf:73: bd:4f:74:c2:10:d7:7e:59:c6:d5:f9:af:4c:58:96:b5:77:48: f4:ee:c1:4c:25:5b:27:c0:ce:e9:5f:bf:61:65:5b:4c:bf:e3: 45:2e:34:eb:91:44:5d:d2:0c:78:a3:70:c6:76:bb:e9:57:7d: ee:01:50:8a:6a:6c:8b:78:44:bf:95:cc:65:1f:16:2c:12:14: a5:fd:65:55:41:d0:60:cf:4f:e5:95:14:e0:b8:13:c7:44:28: 87:e5:96:ce:60:fd:bf:c9:e2:23:67:59:bd:b7:6d:83:01:70: 24:61:65:fd:be:86:e1:40:6f:e6:cd:81:08:e4:b7:98:e3:db: ac:e3:d2:ba -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTg2 RTZDMERENDczM0MxNDJGMDFERDUzMkZCM0VBRUU0MjNCMzIwMB4XDTI1MDgwMTAx MzEyOVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQ0FBRjcwQTA3NzNGNDMy NkQ0OUQxMTExNjBBRUE5REQ1QzczQzk3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANPXTqA3VD8ZUMRYSbkFkLM8l7E80cbk7311usTN+ILjW7VHw1Ml 3nAuiHeix0ojNj0t9m5WhgnOmky3mpu3OclSosyfXl2qm2vPj4NCNJhR68dqNmJr zA1zQtS3MN1fhwlR1IB+c30e3kygJX3es1Jo9dZyhEYlulhjiNoK1yFqFKjWnUvU BeqnjZjhxzjpAZof/HZwgjIhC2euAmnDq1Vt0bd+saWOtd2/3rIyvQrXTYe3X0qh b96XRGLU/GSI9w52IslWwQZJ0NI1OOGZNPtdyOwCibEdkT3VwmYXAIHUi3h/+caM HnGN5hhTlCBqjQAC98vJR05XK43m7TPgQRECAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTKr3Cgdz9DJtSdERFgrqndXHPJeDAfBgNVHSMEGDAWgBQKhubA3UczwULwHdUy +z6u5COzIDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA4NS9Db2Jtd04xSE04RkM4QjNWTXZzLXJ1UWpzeUEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9Db2Jtd04xSE04RkM4QjNWTXZzLXJ1 UWpzeUEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA4NS95cTl3b0hjX1F5YlVuUkVSWUs2cDNWeHp5WGcucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCyv/MMA0GCSqGSIb3DQEBCwUAA4IBAQBe1djIFdVUuBa5MBWnuDvKWmZP NJranRKPANnHnD+h/UZXMsoV4ccolz0LAFvf2QVvHksiPEBFPfUbQDv3a+jSe3hj 1p4q12+elBlf/1qiXoBiXgFDQ3XYcx66IBw9n3YWHzeNR+gSWzfHyqRYq6Qb8/ec K8dtY7Brh+hBv3O9T3TCENd+WcbV+a9MWJa1d0j07sFMJVsnwM7pX79hZVtMv+NF LjTrkURd0gx4o3DGdrvpV33uAVCKamyLeES/lcxlHxYsEhSl/WVVQdBgz0/llRTg uBPHRCiH5ZbOYP2/yeIjZ1m9t22DAXAkYWX9vobhQG/mzYEI5LeY49us49K6 -----END CERTIFICATE-----Generated at Mon Aug 11 02:03:48 2025 by rpki-client