$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/g4sonl39UKodR8n_V9zTdkIQ5ik.roa File: g4sonl39UKodR8n_V9zTdkIQ5ik.roa (raw, json) Hash identifier: x4vtN9KL5fTNT5U4HmEv3l8Gk4SVKwJuz12OtUbkX0E= Subject key identifier: 83:8B:28:9E:5D:FD:50:AA:1D:47:C9:FF:57:DC:D3:76:42:10:E6:29 Certificate issuer: /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Certificate serial: 03 Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/g4sonl39UKodR8n_V9zTdkIQ5ik.roa Signing time: Thu 12 Jun 2025 06:11:30 +0000 ROA not before: Thu 12 Jun 2025 06:11:30 +0000 ROA not after: Tue 26 May 2026 07:57:30 +0000 asID: 131958 IP address blocks: 133.226.176.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 13:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Validity Not Before: Jun 12 06:11:30 2025 GMT Not After : May 26 07:57:30 2026 GMT Subject: CN=838B289E5DFD50AA1D47C9FF57DCD3764210E629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:3e:df:ac:ce:02:7f:01:33:7e:4a:7b:0c: 92:4a:99:26:c5:f3:97:d0:c9:fb:ff:44:5e:8b:2c: 86:87:ea:1f:1e:08:7a:2f:f2:36:da:d1:f8:73:34: c8:c8:7f:77:b5:d9:89:36:95:ff:a4:b1:15:8b:8b: 50:81:f2:9f:ac:25:02:2f:62:58:26:ce:a8:e0:87: 89:45:4f:c9:e4:84:e8:a9:e0:af:e5:e1:8d:f2:42: 46:90:77:54:fd:81:bb:47:4d:37:03:77:67:82:94: 50:e8:0d:7c:82:68:00:fa:78:f3:2c:e9:24:9e:39: fa:65:d9:9b:1d:34:3d:b0:20:2c:d8:a2:31:30:3a: 7c:70:00:81:e1:65:54:74:4e:ad:7c:2c:8c:dd:d1: fb:1e:d3:f7:38:52:c1:e9:90:f8:22:c4:1b:6d:65: 45:20:12:3d:74:96:98:ca:a3:ea:b9:60:a1:e9:26: 20:8c:94:7a:ea:c2:21:3e:50:a9:9c:55:e5:25:ad: 3f:ff:17:69:7f:d8:ee:e9:8a:f6:c4:4c:43:67:cb: e9:ea:cf:30:e7:be:72:c0:18:5f:95:88:d4:0c:a9: 72:61:24:80:51:45:37:30:b1:a7:ce:a7:45:84:f8: 00:82:2a:5e:90:8f:7d:63:96:80:ec:91:a3:20:c2: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8B:28:9E:5D:FD:50:AA:1D:47:C9:FF:57:DC:D3:76:42:10:E6:29 X509v3 Authority Key Identifier: keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/g4sonl39UKodR8n_V9zTdkIQ5ik.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.176.0/21 Signature Algorithm: sha256WithRSAEncryption 5b:5c:b8:ea:17:1d:99:58:c4:a9:26:92:12:b8:0f:f8:5a:4c: 2e:3e:2d:96:dc:11:3b:c7:0a:48:fb:75:5b:d3:5a:c9:c6:c7: c3:f0:23:14:c1:79:02:22:6a:be:b6:75:81:16:84:d7:db:a7: fb:6e:4c:0c:94:71:c5:30:6c:5b:94:57:ad:38:ef:e5:16:c4: f9:78:ab:d3:5c:b0:98:b2:9c:18:e9:ee:8c:e5:3d:ad:c7:ce: 75:46:7f:85:f0:4f:d4:3b:5b:fe:a9:83:20:68:ae:7f:bd:77: 87:3e:e6:8b:a9:12:b6:f2:68:63:c7:a2:82:cf:0e:4a:06:a1: 6d:28:18:87:f1:91:f4:34:35:72:dc:1b:63:8c:40:dc:dc:f9: 33:c4:29:ad:85:8c:88:e1:24:40:24:e0:16:f7:da:cb:c4:4a: 74:d1:96:e7:1f:82:e5:a9:44:0d:10:94:e3:23:17:dc:b1:75: ea:3a:b4:d9:aa:96:b1:e6:8c:b8:fa:e9:84:ac:57:8c:22:00: 27:96:94:38:f7:0e:cc:db:1f:bd:5c:61:51:b6:e8:df:2a:2f: d9:8a:e5:94:43:3d:85:40:d4:f9:b9:0f:d9:58:a8:61:cd:c7: 59:c9:8b:dd:f1:3a:4a:dd:28:40:a3:72:43:fe:91:3a:c1:47: 85:46:16:97 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkQ4 MjQ3N0EwOTFCMTdDREE2MUM1NTYzQkMyOTIwQ0RDRDdBQUE1MB4XDTI1MDYxMjA2 MTEzMFoXDTI2MDUyNjA3NTczMFowMzExMC8GA1UEAxMoODM4QjI4OUU1REZENTBB QTFENDdDOUZGNTdEQ0QzNzY0MjEwRTYyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANN6Pt+szgJ/ATN+SnsMkkqZJsXzl9DJ+/9EXosshofqHx4Iei/y NtrR+HM0yMh/d7XZiTaV/6SxFYuLUIHyn6wlAi9iWCbOqOCHiUVPyeSE6Kngr+Xh jfJCRpB3VP2Bu0dNNwN3Z4KUUOgNfIJoAPp48yzpJJ45+mXZmx00PbAgLNiiMTA6 fHAAgeFlVHROrXwsjN3R+x7T9zhSwemQ+CLEG21lRSASPXSWmMqj6rlgoekmIIyU eurCIT5QqZxV5SWtP/8XaX/Y7umK9sRMQ2fL6erPMOe+csAYX5WI1AypcmEkgFFF NzCxp86nRYT4AIIqXpCPfWOWgOyRoyDCF3kCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSDiyieXf1Qqh1Hyf9X3NN2QhDmKTAfBgNVHSMEGDAWgBSv2CR3oJGxfNphxVY7 wpIM3NeqpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMDYvcjlna2Q2Q1JzWHphWWNWV084S1NETnpYcXFVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcjlna2Q2Q1JzWHphWWNWV084S1NE TnpYcXFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTA2L2c0c29ubDM5VUtvZFI4bl9WOXpUZGtJUTVpay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAOF4rAwDQYJKoZIhvcNAQELBQADggEBAFtcuOoXHZlYxKkmkhK4D/ha TC4+LZbcETvHCkj7dVvTWsnGx8PwIxTBeQIiar62dYEWhNfbp/tuTAyUccUwbFuU V6047+UWxPl4q9NcsJiynBjp7ozlPa3HznVGf4XwT9Q7W/6pgyBorn+9d4c+5oup ErbyaGPHooLPDkoGoW0oGIfxkfQ0NXLcG2OMQNzc+TPEKa2FjIjhJEAk4Bb32svE SnTRlucfguWpRA0QlOMjF9yxdeo6tNmqlrHmjLj66YSsV4wiACeWlDj3DszbH71c YVG26N8qL9mK5ZRDPYVA1Pm5D9lYqGHNx1nJi93xOkrdKECjckP+kTrBR4VGFpc= -----END CERTIFICATE-----Generated at Sun Jun 22 16:14:56 2025 by rpki-client