$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-EYPjc-1OtupKk3IkPs4aiUXmnE.roa File: -EYPjc-1OtupKk3IkPs4aiUXmnE.roa (raw, json) Hash identifier: 0DvnjSEvmbqBL+F09fNsBqbo/kjPZ18x5d0xcsQUCRA= Subject key identifier: F8:46:0F:8D:CF:B5:3A:DB:A9:2A:4D:C8:90:FB:38:6A:25:17:9A:71 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 86 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-EYPjc-1OtupKk3IkPs4aiUXmnE.roa Signing time: Fri 01 Aug 2025 01:29:53 +0000 ROA not before: Fri 01 Aug 2025 01:29:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 118.67.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=F8460F8DCFB53ADBA92A4DC890FB386A25179A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:b1:01:52:e4:99:39:0e:b2:18:7e:59:5f: 4b:83:0b:78:e8:d6:ae:cd:a2:94:82:9d:1d:a4:c7: a1:a6:c4:5e:8e:0d:07:ce:64:da:50:a3:1d:ac:0c: 07:91:d2:1b:c1:e9:27:e2:ae:d0:ae:84:6b:e6:3f: ca:d4:8c:14:c1:4c:7e:c8:34:41:96:47:21:9e:cb: cd:25:8e:de:e2:d6:ab:c6:c5:b3:9a:9f:52:c8:f6: 85:8a:94:44:6f:6a:82:80:9e:81:50:9c:89:d9:09: f8:6f:a6:7d:e0:5a:1c:30:14:43:d4:1d:24:a9:6e: d6:b0:ab:41:8a:5b:b5:a5:d8:5f:c3:7a:2d:c8:3c: 7e:d8:63:53:d7:d4:d4:d8:38:c6:6d:31:48:f6:a6: 8f:65:cb:f4:45:f0:28:24:fc:39:e4:f6:0d:e8:16: 26:c6:37:66:ed:20:8c:fc:55:66:ec:e6:73:5f:02: 8b:10:97:35:40:54:b1:e3:ee:66:1c:31:9d:77:7a: 1c:ad:03:b0:1c:10:97:83:ad:82:6d:44:2a:85:dd: d1:c4:1c:6d:e2:7c:05:f2:6c:8e:11:f7:fa:e4:56: 01:aa:80:fe:70:7f:49:51:47:d6:c1:c1:aa:63:01: 3e:cb:8e:d7:a6:fd:a8:40:0b:d8:df:c0:d1:4a:6d: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:46:0F:8D:CF:B5:3A:DB:A9:2A:4D:C8:90:FB:38:6A:25:17:9A:71 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-EYPjc-1OtupKk3IkPs4aiUXmnE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.67.64.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:52:9d:57:c4:47:9c:15:85:b6:4b:80:93:d6:d1:68:85:e0: 42:3e:6a:2c:d0:87:53:7c:2d:5c:06:07:8b:c3:72:e4:7b:ae: 1e:b5:95:63:3c:ec:da:41:31:1b:6c:4a:45:46:47:ed:0c:9a: 40:3d:85:ab:ae:00:35:23:89:d9:6c:0b:82:99:d1:54:2e:00: f5:c8:7c:66:e0:2c:2c:c8:0a:ce:b6:f8:cb:a6:f3:11:be:8a: 34:de:54:66:eb:72:34:93:58:ac:6b:75:1b:fe:3e:2e:6e:dc: 9a:a7:97:04:53:4d:ba:82:ce:cf:7d:ac:c0:55:f6:43:84:0c: 80:0f:30:75:56:97:25:f0:31:fb:8e:4c:e8:7b:6e:05:e1:02: f8:89:22:e1:7f:50:da:5e:cc:98:4c:41:f5:a2:6e:05:cc:3f: 09:69:dc:1b:ff:b6:0b:60:67:33:96:b5:5f:7d:27:2b:95:22: 2b:dc:c0:d0:f4:b3:60:78:2e:6b:45:22:01:21:7d:2f:b6:33: 49:68:7a:90:ec:95:97:4a:b9:72:2f:bd:e0:68:e7:bd:c8:60: b0:1d:5f:33:e2:12:de:d3:e7:e0:41:0b:5c:56:f4:17:21:ce: 30:71:08:b9:85:0d:81:70:7e:41:e2:03:78:2e:0a:8a:9f:40: 59:f7:76:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEY4NDYwRjhEQ0ZCNTNB REJBOTJBNERDODkwRkIzODZBMjUxNzlBNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpH7EBUuSZOQ6yGH5ZX0uDC3jo1q7NopSCnR2kx6GmxF6ODQfO ZNpQox2sDAeR0hvB6SfirtCuhGvmP8rUjBTBTH7INEGWRyGey80ljt7i1qvGxbOa n1LI9oWKlERvaoKAnoFQnInZCfhvpn3gWhwwFEPUHSSpbtawq0GKW7Wl2F/Dei3I PH7YY1PX1NTYOMZtMUj2po9ly/RF8Cgk/Dnk9g3oFibGN2btIIz8VWbs5nNfAosQ lzVAVLHj7mYcMZ13ehytA7AcEJeDrYJtRCqF3dHEHG3ifAXybI4R9/rkVgGqgP5w f0lRR9bBwapjAT7Ljtem/ahAC9jfwNFKbeyLAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU+EYPjc+1OtupKk3IkPs4aiUXmnEwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi8tRVlQamMtMU90dXBLazNJa1BzNGFpVVhtbkUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFdkNAMA0GCSqGSIb3DQEBCwUAA4IBAQAcUp1XxEecFYW2S4CT1tFo heBCPmos0IdTfC1cBgeLw3Lke64etZVjPOzaQTEbbEpFRkftDJpAPYWrrgA1I4nZ bAuCmdFULgD1yHxm4CwsyArOtvjLpvMRvoo03lRm63I0k1isa3Ub/j4ubtyap5cE U026gs7PfazAVfZDhAyADzB1Vpcl8DH7jkzoe24F4QL4iSLhf1DaXsyYTEH1om4F zD8Jadwb/7YLYGczlrVffScrlSIr3MDQ9LNgeC5rRSIBIX0vtjNJaHqQ7JWXSrly L73gaOe9yGCwHV8z4hLe0+fgQQtcVvQXIc4wcQi5hQ2BcH5B4gN4LgqKn0BZ93Zv -----END CERTIFICATE-----Generated at Mon Aug 11 04:44:24 2025 by rpki-client