$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/cdhy8SI82x1F6_IpqUlIAtZ0CcQ.roa File: cdhy8SI82x1F6_IpqUlIAtZ0CcQ.roa (raw, json) Hash identifier: fOXOa1r8VyLH5gSRKX0GRRd9jVqiNNVX2i9EXC03rT4= Subject key identifier: 71:D8:72:F1:22:3C:DB:1D:45:EB:F2:29:A9:49:48:02:D6:74:09:C4 Certificate issuer: /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Certificate serial: 18 Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/cdhy8SI82x1F6_IpqUlIAtZ0CcQ.roa Signing time: Tue 01 Apr 2025 01:31:10 +0000 ROA not before: Tue 01 Apr 2025 01:31:10 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 131928 IP address blocks: 133.226.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D Validity Not Before: Apr 1 01:31:10 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=71D872F1223CDB1D45EBF229A9494802D67409C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:d6:d9:2f:79:22:25:5a:82:e9:29:31:83: 08:f3:02:02:d9:a5:93:a3:ce:82:1f:3e:cf:fb:a3: 44:8f:7b:ec:5e:be:bd:96:b9:14:8a:ed:c6:0c:bf: 91:de:2d:ec:ba:7f:c2:c5:7a:76:37:27:47:92:36: ea:7f:b9:58:be:35:68:58:a6:a4:27:dc:e5:8f:92: 86:b2:8f:7d:02:56:1a:54:01:f5:15:93:f9:6a:78: 14:03:f6:d5:de:e6:a9:b5:70:d5:ff:e6:00:f8:ee: 9e:93:87:b5:c6:a7:df:80:60:5d:4c:be:5f:6c:ad: 67:2a:10:da:fe:10:bd:32:71:fe:43:42:d2:a4:9b: ed:93:1f:03:7a:8f:78:cb:3b:aa:77:96:1c:a6:45: 03:9c:5b:f5:66:a9:1b:6e:4a:f5:66:b3:21:7d:b0: 6b:9e:f1:17:74:00:9a:9f:17:51:03:54:16:8f:5c: 31:ed:de:87:8d:4f:c3:f0:03:6e:e6:a1:7f:80:24: a7:fb:ff:bd:f9:0f:75:24:8e:61:d7:3b:b9:d9:30: 43:d4:2e:0b:f5:8e:97:7a:31:59:19:1e:39:3d:55: dc:03:7b:d7:50:5e:06:35:17:3c:4a:e0:95:28:ec: a6:37:b9:7a:9b:5d:0d:fa:b5:e9:2a:b3:45:f6:59: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:72:F1:22:3C:DB:1D:45:EB:F2:29:A9:49:48:02:D6:74:09:C4 X509v3 Authority Key Identifier: keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/cdhy8SI82x1F6_IpqUlIAtZ0CcQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.50.0/23 Signature Algorithm: sha256WithRSAEncryption 60:ed:7e:76:4f:52:1e:ae:30:7f:57:f9:52:e8:e2:22:37:d5: 37:31:e1:7f:fa:0e:6e:20:38:2a:79:3b:37:aa:04:ad:35:62: ff:70:d8:b6:89:bb:57:16:a8:f9:0b:8c:00:86:d7:c8:9a:9f: ec:2b:e1:0b:4c:a7:a2:17:f1:c1:79:18:ad:c1:7b:83:19:cd: 33:19:04:18:c2:40:ed:17:11:d3:ed:23:87:ca:4c:a5:e9:22: 6e:49:77:5d:df:09:b6:6f:18:2f:45:60:0e:b2:2c:6a:39:77: 37:f1:55:ac:9e:1b:b5:1a:1e:8a:67:21:2f:4a:19:19:93:2b: 57:57:61:0a:e0:b4:f9:07:08:1d:7e:9e:33:73:2c:62:dd:8a: 1c:9b:c8:bb:3d:5e:98:2b:8f:09:fd:1b:df:94:ff:7f:87:55: 9c:37:f0:f0:6a:d5:44:26:bd:7f:08:8d:ad:97:13:be:dd:2d: 5e:86:3c:bc:f2:fc:dc:23:09:26:20:2c:f9:13:00:e9:3f:84: a2:24:79:21:9e:6f:10:18:2b:53:fc:38:30:f4:04:cd:b5:8e: ec:fc:e0:9e:bc:6c:ef:d0:51:53:88:44:79:b7:60:36:86:79: 88:05:e4:ce:3a:6f:d5:48:33:0f:c6:6e:94:11:d3:eb:71:af: 5b:86:64:d2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMTYz QTMzODc1OTJGOTZCMUJDQzc3RjhBQ0ZDRjRGMUYxMUZBOTlEMB4XDTI1MDQwMTAx MzExMFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNzFEODcyRjEyMjNDREIx RDQ1RUJGMjI5QTk0OTQ4MDJENjc0MDlDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANU61tkveSIlWoLpKTGDCPMCAtmlk6POgh8+z/ujRI977F6+vZa5 FIrtxgy/kd4t7Lp/wsV6djcnR5I26n+5WL41aFimpCfc5Y+ShrKPfQJWGlQB9RWT +Wp4FAP21d7mqbVw1f/mAPjunpOHtcan34BgXUy+X2ytZyoQ2v4QvTJx/kNC0qSb 7ZMfA3qPeMs7qneWHKZFA5xb9WapG25K9WazIX2wa57xF3QAmp8XUQNUFo9cMe3e h41Pw/ADbuahf4Akp/v/vfkPdSSOYdc7udkwQ9QuC/WOl3oxWRkeOT1V3AN711Be BjUXPErglSjspje5eptdDfq16SqzRfZZqccCAwEAAaOCAigwggIkMB0GA1UdDgQW BBRx2HLxIjzbHUXr8impSUgC1nQJxDAfBgNVHSMEGDAWgBTBY6M4dZL5axvMd/is /PTx8R+pnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNjAvd1dPak9IV1MtV3NiekhmNHJQejA4ZkVmcVowLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvd1dPak9IV1MtV3NiekhmNHJQejA4 ZkVmcVowLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDYwL2NkaHk4U0k4MngxRjZfSXBxVWxJQXRaMENjUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGF4jIwDQYJKoZIhvcNAQELBQADggEBAGDtfnZPUh6uMH9X+VLo4iI3 1Tcx4X/6Dm4gOCp5OzeqBK01Yv9w2LaJu1cWqPkLjACG18ian+wr4QtMp6IX8cF5 GK3Be4MZzTMZBBjCQO0XEdPtI4fKTKXpIm5Jd13fCbZvGC9FYA6yLGo5dzfxVaye G7UaHopnIS9KGRmTK1dXYQrgtPkHCB1+njNzLGLdihybyLs9Xpgrjwn9G9+U/3+H VZw38PBq1UQmvX8Ija2XE77dLV6GPLzy/NwjCSYgLPkTAOk/hKIkeSGebxAYK1P8 ODD0BM21juz84J68bO/QUVOIRHm3YDaGeYgF5M46b9VIMw/GbpQR0+txr1uGZNI= -----END CERTIFICATE-----Generated at Wed Nov 5 22:06:21 2025 by rpki-client