$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/tRORnVtjnu4HeRNdtQxZQtSovdQ.roa File: tRORnVtjnu4HeRNdtQxZQtSovdQ.roa (raw, json) Hash identifier: BJuu6L7MIBtIuN1mt/ihiXiB8jN2kmoeczleuH+PeEY= Subject key identifier: B5:13:91:9D:5B:63:9E:EE:07:79:13:5D:B5:0C:59:42:D4:A8:BD:D4 Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Certificate serial: 17 Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/tRORnVtjnu4HeRNdtQxZQtSovdQ.roa Signing time: Thu 24 Jul 2025 02:35:06 +0000 ROA not before: Thu 24 Jul 2025 02:35:06 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 154.34.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Validity Not Before: Jul 24 02:35:06 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=B513919D5B639EEE0779135DB50C5942D4A8BDD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:d7:c5:e2:5f:87:60:a3:14:56:b6:18:8a: c2:e0:c4:e2:af:9a:e2:c0:de:88:d2:6d:63:36:31: 81:58:fa:d2:0d:65:b6:93:35:0c:aa:f3:86:ef:91: d2:c0:65:ef:c9:0e:01:1d:7c:d6:ac:c7:bb:3c:4e: 4d:60:89:a9:e9:4a:e2:98:ca:7f:c9:12:bc:64:a7: cf:d8:cd:5d:2e:bb:5a:34:62:e2:0b:4b:6b:99:25: 5e:f1:b5:75:1f:22:44:1a:dc:83:c7:18:f7:3d:6c: 5e:6b:2d:db:67:7d:b6:12:ad:27:19:44:30:a7:eb: 06:e1:6f:93:46:91:be:b3:9e:8e:c6:90:69:43:94: 50:d7:90:e4:de:96:3f:10:19:03:16:5c:97:5c:be: ce:51:55:8a:7c:0c:60:3c:8d:dc:a5:3e:4a:b1:4d: 4a:c4:1f:01:c1:71:18:19:1a:c0:b5:e4:02:84:9e: d3:5f:80:bd:f9:66:fe:ec:8f:ce:37:a7:ad:11:e3: f3:c5:43:e6:7c:15:55:18:28:75:61:b3:6e:b2:b4: 57:e3:de:fa:94:aa:7e:bb:a0:e4:5b:60:d7:ea:6f: ef:fe:c7:87:79:c7:fc:67:fb:ed:2c:e6:24:e1:ee: 1e:03:04:9a:ad:72:64:21:fa:80:56:f3:cf:0c:27: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:91:9D:5B:63:9E:EE:07:79:13:5D:B5:0C:59:42:D4:A8:BD:D4 X509v3 Authority Key Identifier: keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/tRORnVtjnu4HeRNdtQxZQtSovdQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.34.64.0/18 Signature Algorithm: sha256WithRSAEncryption 06:bd:ca:ee:37:8f:87:7d:d8:cd:6d:a9:1e:57:b1:a6:40:9d: 89:57:f5:81:7f:aa:0b:2a:d0:b1:c1:33:f7:b2:7e:1c:7c:07: d2:1e:2e:06:58:ec:3c:c6:02:b4:d3:02:49:9e:c5:03:55:94: bb:7a:c2:4c:f9:53:8a:a5:9c:93:b2:11:71:c7:07:7e:b0:ba: e2:b0:dc:2d:be:45:c0:2e:ef:15:1e:db:1f:3f:d2:8f:8c:ee: 84:1d:a2:79:e3:67:22:73:23:e9:2d:59:8c:5c:49:ad:54:ac: b7:8e:8b:d3:f3:9f:c1:bc:b4:ae:05:f2:56:92:ce:5d:4a:56: ff:bf:9f:ab:26:b0:e2:58:d8:48:ae:02:58:3c:5b:1f:1a:87: b8:31:a3:3c:5b:c1:75:42:6d:43:85:03:b0:d5:3e:35:84:7f: 0c:47:97:2f:3d:52:b4:97:a9:2c:1a:13:0f:4e:5e:af:b2:1d: 31:e0:94:14:10:db:1d:df:90:0a:85:0e:17:5e:89:b9:0b:c3: 32:9e:ef:0b:64:45:27:b4:83:91:db:f7:c8:d5:10:e2:70:58: 9b:3d:04:0e:0f:bd:e1:35:6f:1e:86:2e:74:f9:d8:ee:7d:96: 8a:d2:cd:3c:b1:ff:65:86:b5:48:b6:a9:63:4e:21:f3:37:6a: e5:9f:e1:b5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUE2 QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzczMB4XDTI1MDcyNDAy MzUwNloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoQjUxMzkxOUQ1QjYzOUVF RTA3NzkxMzVEQjUwQzU5NDJENEE4QkRENDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPC218XiX4dgoxRWthiKwuDE4q+a4sDeiNJtYzYxgVj60g1ltpM1 DKrzhu+R0sBl78kOAR181qzHuzxOTWCJqelK4pjKf8kSvGSnz9jNXS67WjRi4gtL a5klXvG1dR8iRBrcg8cY9z1sXmst22d9thKtJxlEMKfrBuFvk0aRvrOejsaQaUOU UNeQ5N6WPxAZAxZcl1y+zlFVinwMYDyN3KU+SrFNSsQfAcFxGBkawLXkAoSe01+A vflm/uyPzjenrRHj88VD5nwVVRgodWGzbrK0V+Pe+pSqfrug5Ftg1+pv7/7Hh3nH /Gf77SzmJOHuHgMEmq1yZCH6gFbzzwwnpTUCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBS1E5GdW2Oe7gd5E121DFlC1Ki91DAfBgNVHSMEGDAWgBSFpsNpwanHpSw+OAVy el/TEYWnczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9oYWJEYWNHcHg2VXNQamdGY25wZjB4R0ZwM00uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oYWJEYWNHcHg2VXNQamdGY25wZjB4 R0ZwM00uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy90Uk9SblZ0am51NEhlUk5kdFF4WlF0U292ZFEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQGmiJAMA0GCSqGSIb3DQEBCwUAA4IBAQAGvcruN4+HfdjNbakeV7GmQJ2J V/WBf6oLKtCxwTP3sn4cfAfSHi4GWOw8xgK00wJJnsUDVZS7esJM+VOKpZyTshFx xwd+sLrisNwtvkXALu8VHtsfP9KPjO6EHaJ542cicyPpLVmMXEmtVKy3jovT85/B vLSuBfJWks5dSlb/v5+rJrDiWNhIrgJYPFsfGoe4MaM8W8F1Qm1DhQOw1T41hH8M R5cvPVK0l6ksGhMPTl6vsh0x4JQUENsd35AKhQ4XXom5C8Mynu8LZEUntIOR2/fI 1RDicFibPQQOD73hNW8ehi50+djufZaK0s08sf9lhrVItqljTiHzN2rln+G1 -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:38 2025 by rpki-client