$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0C3kwOLi_PDwYaf87r8U_reyjl8.roa File: 0C3kwOLi_PDwYaf87r8U_reyjl8.roa (raw, json) Hash identifier: 5BpyPRNwuiH0dRb74Iok8oNqyEaERIBDH1rl86U2m/I= Subject key identifier: D0:2D:E4:C0:E2:E2:FC:F0:F0:61:A7:FC:EE:BF:14:FE:B7:B2:8E:5F Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 80 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0C3kwOLi_PDwYaf87r8U_reyjl8.roa Signing time: Fri 01 Aug 2025 01:29:48 +0000 ROA not before: Fri 01 Aug 2025 01:29:48 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 17941 IP address blocks: 27.34.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:48 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D02DE4C0E2E2FCF0F061A7FCEEBF14FEB7B28E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:41:4c:f5:8d:4c:db:4d:bd:3d:fb:65:5c: 3e:79:ec:7d:e5:63:5b:30:5e:d6:81:a2:1e:76:2c: 2b:c5:cc:79:fa:54:7f:54:1d:c9:9c:40:0a:81:65: 53:38:b9:b3:23:3d:a5:c8:66:6a:29:5c:3e:e8:4a: d1:f9:db:43:e4:4f:48:3f:8f:1b:60:ca:83:a2:d3: 39:99:ca:f0:0f:c2:fb:18:ad:f2:c5:06:33:17:b9: a9:cb:87:d9:cf:1a:c0:2d:d2:73:5e:41:85:f4:f5: 2f:86:a8:28:4e:60:fe:06:86:93:f8:53:ff:3c:37: 43:c1:f5:09:75:65:74:a5:39:6e:8e:0a:e2:39:51: dc:56:bb:d4:a6:21:ec:c3:28:e1:6d:95:00:28:be: 40:d2:3b:ee:f7:0e:38:43:09:af:9c:c6:54:42:fd: 95:42:3c:16:e0:6f:eb:6a:73:42:fd:e1:dd:08:d8: 7d:89:e5:ba:21:d9:ca:f4:a7:5c:17:4f:98:9f:9c: 25:81:6c:85:c2:f8:dd:4c:66:91:7d:c7:6b:3d:4c: 62:cd:32:c7:10:f9:6d:20:5a:c7:1b:04:4e:43:cd: 31:19:02:0b:d3:a9:74:3b:83:50:df:06:99:53:cd: 60:5e:0e:78:92:bb:48:ef:53:f2:26:d0:30:f6:ca: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2D:E4:C0:E2:E2:FC:F0:F0:61:A7:FC:EE:BF:14:FE:B7:B2:8E:5F X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0C3kwOLi_PDwYaf87r8U_reyjl8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.34.192.0/19 Signature Algorithm: sha256WithRSAEncryption 2d:d2:74:a4:e6:6e:f6:6c:b2:dc:20:7b:9c:53:30:10:9f:9f: bc:7a:69:9d:52:8a:fa:7b:46:eb:5d:01:a9:01:2b:56:5a:cb: 54:d2:91:43:d3:05:8e:72:9f:a5:d3:83:94:c7:9a:73:94:ed: 03:ba:04:b5:dc:cf:85:ac:37:18:34:e1:f3:c1:8c:37:e4:0c: 79:2e:0b:27:99:14:e2:67:ea:20:18:73:b2:ca:7f:ef:42:73: 39:9a:61:d1:45:f2:78:27:2c:dc:c2:8a:4c:3c:47:cd:67:5b: 45:18:dd:d7:ab:92:32:fd:f4:80:02:f2:29:94:11:78:c8:c4: cc:ec:cb:82:9d:d0:2c:ee:7d:ae:7d:b4:47:bd:03:75:c6:e7: 5e:76:3d:c9:c8:25:e3:70:05:3b:e0:aa:db:95:15:05:67:18: 16:81:62:03:79:18:ba:99:a9:08:ec:af:3d:d4:7e:aa:78:70: 86:8b:50:ae:a1:95:f2:ea:97:53:75:b8:55:9d:74:51:a6:e7: 9b:81:e7:c2:99:1d:fa:78:f4:18:63:59:48:ed:53:a5:5e:6e: cd:45:bf:f6:9d:91:ea:cf:bb:52:1a:66:ea:e9:9a:4c:3f:0b: 36:02:90:b9:d3:13:6d:00:8d:14:96:f3:3b:f2:62:f8:dd:75: 21:21:1a:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NDhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEQwMkRFNEMwRTJFMkZD RjBGMDYxQTdGQ0VFQkYxNEZFQjdCMjhFNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfw0FM9Y1M2029PftlXD557H3lY1swXtaBoh52LCvFzHn6VH9U HcmcQAqBZVM4ubMjPaXIZmopXD7oStH520PkT0g/jxtgyoOi0zmZyvAPwvsYrfLF BjMXuanLh9nPGsAt0nNeQYX09S+GqChOYP4GhpP4U/88N0PB9Ql1ZXSlOW6OCuI5 UdxWu9SmIezDKOFtlQAovkDSO+73DjhDCa+cxlRC/ZVCPBbgb+tqc0L94d0I2H2J 5boh2cr0p1wXT5ifnCWBbIXC+N1MZpF9x2s9TGLNMscQ+W0gWscbBE5DzTEZAgvT qXQ7g1DfBplTzWBeDniSu0jvU/Im0DD2yiLtAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU0C3kwOLi/PDwYaf87r8U/reyjl8wHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi8wQzNrd09MaV9QRHdZYWY4N3I4VV9yZXlqbDgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFGyLAMA0GCSqGSIb3DQEBCwUAA4IBAQAt0nSk5m72bLLcIHucUzAQ n5+8emmdUor6e0brXQGpAStWWstU0pFD0wWOcp+l04OUx5pzlO0DugS13M+FrDcY NOHzwYw35Ax5LgsnmRTiZ+ogGHOyyn/vQnM5mmHRRfJ4JyzcwopMPEfNZ1tFGN3X q5Iy/fSAAvIplBF4yMTM7MuCndAs7n2ufbRHvQN1xudedj3JyCXjcAU74KrblRUF ZxgWgWIDeRi6makI7K891H6qeHCGi1CuoZXy6pdTdbhVnXRRpuebgefCmR36ePQY Y1lI7VOlXm7NRb/2nZHqz7tSGmbq6ZpMPws2ApC50xNtAI0UlvM78mL43XUhIRpp -----END CERTIFICATE-----Generated at Mon Aug 11 08:02:18 2025 by rpki-client