$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/yMppmJ0ePcCwV7jdLeFoJtTzti0.roa File: yMppmJ0ePcCwV7jdLeFoJtTzti0.roa (raw, json) Hash identifier: uVYzqGJSAvIxYWg/IYHGMRlpBWDvYdbvrkejQ/7v4A0= Subject key identifier: C8:CA:69:98:9D:1E:3D:C0:B0:57:B8:DD:2D:E1:68:26:D4:F3:B6:2D Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Certificate serial: DC Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/yMppmJ0ePcCwV7jdLeFoJtTzti0.roa Signing time: Tue 10 Jun 2025 10:46:35 +0000 ROA not before: Tue 10 Jun 2025 10:46:35 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 19905 IP address blocks: 14.192.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5 Validity Not Before: Jun 10 10:46:35 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=C8CA69989D1E3DC0B057B8DD2DE16826D4F3B62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:48:fc:b7:d9:5b:3f:d7:29:47:cd:e1:cb: 56:73:d7:72:cf:bb:0b:ce:54:f9:8c:45:c7:4f:7b: ef:83:68:a7:8e:cb:59:1c:c6:5d:ce:45:fc:2b:24: ff:ab:be:9d:96:86:a6:2c:a0:84:0d:cf:d7:2a:f3: 89:64:27:ef:60:08:a6:b3:d3:90:fb:06:83:2a:b1: 2a:b4:24:ee:96:0b:24:7a:12:1b:48:5c:4e:ff:e6: 57:02:89:d3:83:8c:11:de:84:18:54:6b:5f:2d:15: 9d:ff:1b:28:73:7b:cd:0c:9b:44:31:82:03:bb:f1: 9c:5a:ef:e9:53:3f:e2:da:e3:c6:14:78:04:a1:19: e7:f0:39:68:f2:fd:90:ac:87:32:0a:f8:d2:11:a1: 56:20:a5:c8:21:f9:62:e6:d2:26:52:ec:02:51:65: bd:9c:36:01:b2:5a:48:87:2c:06:ea:52:c4:76:1a: 35:34:b8:a1:c5:99:39:35:2b:7f:8d:5e:2e:3b:6e: cd:c6:3d:ce:0f:17:c9:be:05:35:a7:23:9c:4c:7f: 7b:93:87:f0:4d:ab:8b:5b:3f:ae:ad:13:30:98:ca: a5:57:b2:44:6b:d4:8c:ea:2d:fa:29:2f:fc:35:60: 08:ca:f5:35:be:20:34:27:86:c6:4a:c2:93:b1:d1: 44:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:69:98:9D:1E:3D:C0:B0:57:B8:DD:2D:E1:68:26:D4:F3:B6:2D X509v3 Authority Key Identifier: keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/yMppmJ0ePcCwV7jdLeFoJtTzti0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:6a:e7:cb:a5:d6:7d:23:9f:ea:bd:d4:46:4b:f2:5b:4d:a4: 6c:38:c4:9f:ed:25:11:da:ee:43:fe:57:03:9f:ce:e5:ef:42: 68:84:d8:74:91:1e:00:8f:d5:0d:a7:cd:e8:3a:8b:4c:67:fa: d0:84:22:2c:85:3d:d3:00:87:89:80:02:65:a7:fe:74:27:15: 08:3f:ef:bd:80:f1:43:8d:4d:11:32:e3:62:c9:2f:c6:ce:08: 9e:cc:67:ad:07:93:74:ce:84:39:a9:32:b1:1c:82:12:8e:7f: 86:52:34:4f:38:11:af:1d:36:69:5c:a5:62:85:62:c1:ec:b0: 89:aa:d1:08:7b:e1:42:b1:ae:1e:ef:17:9c:23:9d:3d:c4:4a: bf:ee:fc:76:a2:dc:a8:5f:4e:a2:f3:cc:a2:ca:5b:da:e6:fe: fd:14:44:6d:ae:3c:a9:e1:79:dc:1a:57:94:66:c1:57:48:17: c6:39:32:0a:ba:15:b7:c3:22:cd:5f:62:33:9c:c4:5a:9c:55: 3f:85:b5:8b:c8:c7:ea:6e:89:f2:61:57:56:cd:10:69:94:be: 40:cf:af:6e:b5:53:36:50:b7:83:08:45:f0:10:f2:74:bc:6a: 85:d3:c5:7c:44:f7:e0:c7:48:10:3e:4f:68:5a:f6:24:62:80: 57:d9:e4:d0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNTA2MTAx MDQ2MzVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEM4Q0E2OTk4OUQxRTNE QzBCMDU3QjhERDJERTE2ODI2RDRGM0I2MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwfkj8t9lbP9cpR83hy1Zz13LPuwvOVPmMRcdPe++DaKeOy1kc xl3ORfwrJP+rvp2WhqYsoIQNz9cq84lkJ+9gCKaz05D7BoMqsSq0JO6WCyR6EhtI XE7/5lcCidODjBHehBhUa18tFZ3/Gyhze80Mm0QxggO78Zxa7+lTP+La48YUeASh GefwOWjy/ZCshzIK+NIRoVYgpcgh+WLm0iZS7AJRZb2cNgGyWkiHLAbqUsR2GjU0 uKHFmTk1K3+NXi47bs3GPc4PF8m+BTWnI5xMf3uTh/BNq4tbP66tEzCYyqVXskRr 1IzqLfopL/w1YAjK9TW+IDQnhsZKwpOx0UStAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyMppmJ0ePcCwV7jdLeFoJtTzti0wHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTczL3lNcHBtSjBlUGNDd1Y3amRMZUZvSnRUenRpMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQOwCAwDQYJKoZIhvcNAQELBQADggEBADpq58ul1n0jn+q91EZL8ltNpGw4 xJ/tJRHa7kP+VwOfzuXvQmiE2HSRHgCP1Q2nzeg6i0xn+tCEIiyFPdMAh4mAAmWn /nQnFQg/772A8UONTREy42LJL8bOCJ7MZ60Hk3TOhDmpMrEcghKOf4ZSNE84Ea8d NmlcpWKFYsHssImq0Qh74UKxrh7vF5wjnT3ESr/u/Hai3KhfTqLzzKLKW9rm/v0U RG2uPKnhedwaV5RmwVdIF8Y5Mgq6FbfDIs1fYjOcxFqcVT+FtYvIx+puifJhV1bN EGmUvkDPr261UzZQt4MIRfAQ8nS8aoXTxXxE9+DHSBA+T2ha9iRigFfZ5NA= -----END CERTIFICATE-----Generated at Sun Jun 22 06:26:05 2025 by rpki-client