$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/AGQU4qNUYxfHNuyGcKhW7FNldNY.roa File: AGQU4qNUYxfHNuyGcKhW7FNldNY.roa (raw, json) Hash identifier: htTw0c+1DFvolJty6p+cTcNAcuCUwPBjn39xHQvsG6s= Subject key identifier: 00:64:14:E2:A3:54:63:17:C7:36:EC:86:70:A8:56:EC:53:65:74:D6 Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892 Certificate serial: A1 Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/AGQU4qNUYxfHNuyGcKhW7FNldNY.roa Signing time: Tue 01 Apr 2025 01:29:37 +0000 ROA not before: Tue 01 Apr 2025 01:29:37 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 7521 IP address blocks: 210.173.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892 Validity Not Before: Apr 1 01:29:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=006414E2A3546317C736EC8670A856EC536574D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:69:1a:31:27:f1:72:e8:b3:f1:6d:15:46: 78:f2:1a:6d:3f:5b:c8:b2:28:fb:21:f5:02:0e:c5: b5:c5:4b:c0:e2:b2:4f:19:93:11:47:39:9d:7d:07: 6b:dd:a8:f8:14:bd:1e:7d:70:45:d5:f9:97:7e:e8: dd:f1:1c:66:a2:0e:35:87:50:ff:d4:4f:88:b6:c0: eb:5e:23:3e:2c:5f:7c:04:23:7e:e7:5e:1f:30:81: 54:eb:9b:ee:df:24:fd:aa:cf:e7:8f:66:53:9e:46: 8d:98:04:54:1b:73:8f:b8:d0:5c:88:5e:b8:99:9f: d5:c9:e7:d6:f7:44:e1:51:44:d4:6f:c9:b9:15:75: 34:5e:ed:0e:5b:6f:c3:49:3e:6b:43:67:e9:ec:92: e8:0d:34:f2:63:97:98:f3:cf:11:e5:e0:d1:e4:48: 75:42:5f:08:35:98:3f:55:98:40:54:54:1a:73:08: 79:12:ff:b2:6a:d8:33:08:f3:16:10:86:b2:a2:f3: 59:ef:35:75:0f:b9:82:a0:13:55:70:22:c6:ac:fb: 0e:8b:19:a0:b9:35:b7:84:3b:56:ce:20:73:75:56: c9:65:2f:f0:4c:54:c4:82:e9:85:4e:23:64:17:d4: 82:cf:31:f0:5e:48:cd:2f:22:6c:ae:b3:13:97:00: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:14:E2:A3:54:63:17:C7:36:EC:86:70:A8:56:EC:53:65:74:D6 X509v3 Authority Key Identifier: keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/AGQU4qNUYxfHNuyGcKhW7FNldNY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.173.170.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:fd:71:41:82:cf:c3:4d:f0:82:1b:7e:0e:cf:e0:8a:fb:6d: d6:59:39:47:a3:c4:d6:43:e1:65:df:4b:a6:52:e7:24:4d:89: 12:7e:89:85:85:f1:df:a8:63:d4:48:cd:9d:e8:53:20:02:32: 64:dd:fd:5f:71:af:20:d9:6c:71:56:05:92:84:3d:4f:67:c1: 4e:9f:e5:b8:87:79:f5:c7:11:37:3a:11:94:e3:41:0c:0d:8e: 04:97:80:71:b6:ca:cd:78:98:92:db:4b:40:3f:16:9c:0a:1a: 28:ef:83:67:c0:70:0b:8f:df:1a:34:f0:09:6f:a0:d3:04:a7: a2:41:14:8e:8c:b9:6a:7b:8a:9c:d5:77:37:05:ff:a1:f2:bb: d2:93:67:4e:93:7b:da:44:9e:b3:f9:8f:58:cc:c7:51:d1:56: 4f:cf:48:cb:59:7f:bc:c4:9d:29:4d:f8:d1:f4:41:e3:bc:58: 48:9c:3b:56:a1:c4:b1:0e:74:ce:21:f9:29:07:a1:23:67:1e: 0e:7a:fc:68:a8:de:9f:b5:80:46:9f:7b:36:31:65:ee:75:ad: e7:77:11:76:2f:0e:b3:6d:d1:cf:a8:e2:00:d4:08:ed:ff:3a: 8e:73:fa:39:f0:35:d8:85:7a:01:63:76:bc:e8:e5:d3:b7:a5: a1:16:6a:26 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNTA0MDEw MTI5MzdaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAwNjQxNEUyQTM1NDYz MTdDNzM2RUM4NjcwQTg1NkVDNTM2NTc0RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNaWkaMSfxcuiz8W0VRnjyGm0/W8iyKPsh9QIOxbXFS8Disk8Z kxFHOZ19B2vdqPgUvR59cEXV+Zd+6N3xHGaiDjWHUP/UT4i2wOteIz4sX3wEI37n Xh8wgVTrm+7fJP2qz+ePZlOeRo2YBFQbc4+40FyIXriZn9XJ59b3ROFRRNRvybkV dTRe7Q5bb8NJPmtDZ+nskugNNPJjl5jzzxHl4NHkSHVCXwg1mD9VmEBUVBpzCHkS /7Jq2DMI8xYQhrKi81nvNXUPuYKgE1VwIsas+w6LGaC5NbeEO1bOIHN1VsllL/BM VMSC6YVOI2QX1ILPMfBeSM0vImyusxOXALvlAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUAGQU4qNUYxfHNuyGcKhW7FNldNYwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjA3L0FHUVU0cU5VWXhmSE51eUdjS2hXN0ZObGROWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADSraowDQYJKoZIhvcNAQELBQADggEBADr9cUGCz8NN8IIbfg7P4Ir7bdZZ OUejxNZD4WXfS6ZS5yRNiRJ+iYWF8d+oY9RIzZ3oUyACMmTd/V9xryDZbHFWBZKE PU9nwU6f5biHefXHETc6EZTjQQwNjgSXgHG2ys14mJLbS0A/FpwKGijvg2fAcAuP 3xo08AlvoNMEp6JBFI6MuWp7ipzVdzcF/6Hyu9KTZ06Te9pEnrP5j1jMx1HRVk/P SMtZf7zEnSlN+NH0QeO8WEicO1ahxLEOdM4h+SkHoSNnHg56/Gio3p+1gEafezYx Ze51red3EXYvDrNt0c+o4gDUCO3/Oo5z+jnwNdiFegFjdrzo5dO3paEWaiY= -----END CERTIFICATE-----Generated at Wed Nov 5 23:07:39 2025 by rpki-client