$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Jfh9VOfbD6tRP4IpMQxPshe4aFc.roa File: Jfh9VOfbD6tRP4IpMQxPshe4aFc.roa (raw, json) Hash identifier: Qgi73Ypx/DcSgQMtmdDv8hHWrN7HeC7dwzTEzV8CLVc= Subject key identifier: 25:F8:7D:54:E7:DB:0F:AB:51:3F:82:29:31:0C:4F:B2:17:B8:68:57 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: B6 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Jfh9VOfbD6tRP4IpMQxPshe4aFc.roa Signing time: Thu 24 Jul 2025 01:04:28 +0000 ROA not before: Thu 24 Jul 2025 01:04:28 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.140.40.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:04:28 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=25F87D54E7DB0FAB513F8229310C4FB217B86857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:33:73:4c:ec:bd:9b:88:7d:be:af:75:f1:04: 26:22:8c:e1:9a:ae:a0:e2:d2:b9:75:1d:b5:21:7b: f6:8e:76:e9:30:90:e1:29:81:d6:23:53:99:46:f5: 87:d4:3a:ef:07:e3:11:09:89:e0:5c:78:84:1b:6f: 59:c8:70:b1:49:75:bc:c8:3a:cd:a2:0c:cd:e6:f2: 0a:c4:3b:f8:47:ae:ec:ed:79:04:49:66:83:97:cb: 19:a9:23:82:03:64:1d:93:40:f8:34:b9:e8:61:7f: c0:a5:3a:41:43:3f:c0:ac:66:9d:8c:97:52:18:3e: cd:4b:4f:89:d2:d4:3f:9a:36:b0:8e:85:8f:1a:b2: 9c:da:62:c8:f4:49:03:bb:06:6e:ba:cc:a2:77:a9: c3:d1:e9:78:86:64:17:9c:93:9c:73:89:e9:ec:fd: aa:2e:eb:80:3f:4a:4d:bf:5b:fe:eb:74:82:ad:4f: 9f:96:76:c4:b3:66:c2:70:e2:9d:21:2b:32:c6:be: a2:c9:18:3e:26:76:b6:cb:8c:a3:bb:84:36:9a:6d: a5:34:df:1e:38:fd:8f:d3:a5:f7:b4:60:0b:e6:17: a4:6c:3b:f8:c8:ff:08:db:95:02:3a:3c:93:76:91: 6c:4b:c5:24:d3:21:2b:8e:90:41:ab:01:2c:21:da: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:7D:54:E7:DB:0F:AB:51:3F:82:29:31:0C:4F:B2:17:B8:68:57 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Jfh9VOfbD6tRP4IpMQxPshe4aFc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.140.40.0/21 Signature Algorithm: sha256WithRSAEncryption 56:35:9e:cf:6c:56:2a:fe:49:b6:ef:9d:4a:7b:d8:23:4c:43: 9b:14:17:e4:fb:41:d2:f4:ad:7c:2a:55:ae:c4:50:16:b1:32: d6:df:bf:69:7e:28:17:81:45:97:7f:31:4a:c9:a4:15:4f:65: 6d:9c:82:c7:b2:11:e7:e6:a4:2a:6f:e6:38:3f:86:a2:dc:79: 26:f8:46:eb:fc:32:8d:7c:bf:70:cf:49:51:29:25:a3:a2:fb: 2d:7f:c5:91:25:97:f9:6b:83:25:76:5e:09:bf:44:6f:55:d9: 4a:a3:3c:db:50:f2:a4:74:ad:88:5b:de:0f:f4:0a:00:6e:04: 7b:69:63:a7:b9:99:f0:8f:22:fe:2d:be:88:af:ba:cb:cc:2b: 83:87:53:1d:38:af:23:d5:ab:3d:25:95:6d:8b:b6:2f:ac:6b: 79:48:b1:2c:fd:4c:62:bc:ff:31:7b:26:3c:7d:d5:67:03:4c: 2f:43:eb:d2:c0:ff:3e:6e:75:55:c1:46:c9:8b:ea:5e:db:66: 85:5b:ca:7d:f0:6f:7f:41:4d:cf:0b:49:6a:70:91:63:18:69: f4:34:6f:44:1c:be:3d:b5:38:05:ea:3e:8b:42:8c:a6:3c:13: 87:8e:c7:c0:0b:f0:18:b9:7a:98:f5:12:c0:b6:a3:6b:28:ff: 2b:9c:4d:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICALYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTA0MjhaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDI1Rjg3RDU0RTdEQjBG QUI1MTNGODIyOTMxMEM0RkIyMTdCODY4NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDyM3NM7L2biH2+r3XxBCYijOGarqDi0rl1HbUhe/aOdukwkOEp gdYjU5lG9YfUOu8H4xEJieBceIQbb1nIcLFJdbzIOs2iDM3m8grEO/hHruzteQRJ ZoOXyxmpI4IDZB2TQPg0uehhf8ClOkFDP8CsZp2Ml1IYPs1LT4nS1D+aNrCOhY8a spzaYsj0SQO7Bm66zKJ3qcPR6XiGZBeck5xziens/aou64A/Sk2/W/7rdIKtT5+W dsSzZsJw4p0hKzLGvqLJGD4mdrbLjKO7hDaabaU03x44/Y/Tpfe0YAvmF6RsO/jI /wjblQI6PJN2kWxLxSTTISuOkEGrASwh2ijTAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUJfh9VOfbD6tRP4IpMQxPshe4aFcwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9KZmg5Vk9mYkQ2dFJQNElwTVF4UHNoZTRhRmMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0owoMA0GCSqGSIb3DQEBCwUAA4IBAQBWNZ7PbFYq/km2751Ke9gj TEObFBfk+0HS9K18KlWuxFAWsTLW379pfigXgUWXfzFKyaQVT2VtnILHshHn5qQq b+Y4P4ai3Hkm+Ebr/DKNfL9wz0lRKSWjovstf8WRJZf5a4Mldl4Jv0RvVdlKozzb UPKkdK2IW94P9AoAbgR7aWOnuZnwjyL+Lb6Ir7rLzCuDh1MdOK8j1as9JZVti7Yv rGt5SLEs/UxivP8xeyY8fdVnA0wvQ+vSwP8+bnVVwUbJi+pe22aFW8p98G9/QU3P C0lqcJFjGGn0NG9EHL49tTgF6j6LQoymPBOHjsfAC/AYuXqY9RLAtqNrKP8rnE3t -----END CERTIFICATE-----Generated at Wed Nov 5 21:14:21 2025 by rpki-client