$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/CbCW_S_l1eppEyGBFLiMDUJpHvo.roa File: CbCW_S_l1eppEyGBFLiMDUJpHvo.roa (raw, json) Hash identifier: TcJGyJ0hGJH62WHWcQb/g/IFI0d87RLlRH1V1l03A6Y= Subject key identifier: 09:B0:96:FD:2F:E5:D5:EA:69:13:21:81:14:B8:8C:0D:42:69:1E:FA Certificate issuer: /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Certificate serial: 60 Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/CbCW_S_l1eppEyGBFLiMDUJpHvo.roa Signing time: Fri 01 Aug 2025 01:34:32 +0000 ROA not before: Fri 01 Aug 2025 01:34:32 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 23637 IP address blocks: 101.203.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837 Validity Not Before: Aug 1 01:34:32 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=09B096FD2FE5D5EA6913218114B88C0D42691EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:12:40:61:4f:58:0b:96:f7:af:58:9b:5e: a5:d5:0e:b0:3e:95:ab:01:cb:66:59:52:f4:bb:39: 0a:76:b5:8e:bb:3d:8b:04:f0:4a:db:5a:d2:7b:0e: 3c:30:65:54:4a:90:82:05:93:bd:31:88:7f:5b:3a: f1:d5:e8:f2:54:14:3f:94:4b:01:85:bd:7b:b3:28: a3:3e:f0:9c:2b:6e:be:4c:00:cc:c7:cb:34:21:6b: fa:d2:f7:28:14:ea:20:8a:a6:ad:0e:68:ff:19:af: e2:02:55:ec:52:4f:b1:e7:c2:b3:c2:77:a9:6f:03: e8:f4:bc:da:aa:cc:bf:a2:74:94:c5:45:c4:e2:85: 55:b0:35:9c:7b:20:d2:10:c8:40:d7:3b:fa:e2:83: a5:f9:07:31:87:28:8c:1a:c3:19:38:69:93:37:1e: ef:19:b0:97:6e:84:ed:52:68:ac:76:48:d6:f7:57: 0e:a7:7c:bc:32:b0:c0:4d:50:46:4e:1c:6e:70:ef: e2:16:47:9b:61:14:a9:51:ec:77:34:97:1b:cf:1e: b8:29:ba:52:7f:dd:0f:2b:db:00:0c:e7:4c:97:5c: 6f:68:55:e7:c7:fc:e9:b5:fe:00:a2:2c:c6:df:09: ef:4e:6a:c9:8d:a2:ec:7d:66:07:ea:b1:39:fd:93: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:96:FD:2F:E5:D5:EA:69:13:21:81:14:B8:8C:0D:42:69:1E:FA X509v3 Authority Key Identifier: keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/CbCW_S_l1eppEyGBFLiMDUJpHvo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.203.192.0/18 Signature Algorithm: sha256WithRSAEncryption 61:6b:aa:71:33:ae:02:3f:70:f4:9a:8f:99:fd:ac:b3:b5:d9: a0:d3:a0:e2:04:64:8d:3e:a6:4a:41:6f:dc:f9:c1:16:d6:cf: 0a:3c:39:9d:41:f3:80:8a:1a:7d:f3:f8:26:1c:5e:a1:1f:96: 76:a9:84:1f:2b:f3:c0:f3:2a:b4:54:12:5e:8f:6a:09:58:c7: 29:87:3c:54:23:40:c5:fd:63:23:70:ea:92:53:90:fe:ec:4a: 81:88:35:76:36:bc:b2:03:d9:f6:11:9f:a0:1f:c0:9c:0b:8a: 4b:6a:50:b3:33:8e:2c:5e:09:e7:5e:e4:86:14:4b:0f:74:56: 5d:2a:03:5f:fc:3f:a1:20:a5:d7:b4:14:70:14:2f:8b:f2:67: a8:9f:ec:9c:de:61:75:c2:02:4f:05:8c:01:9a:86:d4:c4:19: 52:6f:82:59:5a:b1:e7:c5:59:6b:d7:25:88:bf:5b:41:36:43: c5:41:4a:2e:e2:4e:3c:e2:16:4e:13:f6:20:e6:d7:22:0e:66: 8e:5b:73:70:0b:19:a4:26:59:48:6e:0d:f2:3c:fb:10:40:48: ea:d2:a3:c5:2c:2c:1c:c6:b8:5f:31:1c:8d:fd:bf:d1:4c:bd: 21:00:d9:dd:4c:3e:78:ad:5a:30:4b:62:93:41:52:e2:9d:13: 95:39:62:18 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTI1MDgwMTAx MzQzMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMDlCMDk2RkQyRkU1RDVF QTY5MTMyMTgxMTRCODhDMEQ0MjY5MUVGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKtFEkBhT1gLlvevWJtepdUOsD6VqwHLZllS9Ls5Cna1jrs9iwTw Stta0nsOPDBlVEqQggWTvTGIf1s68dXo8lQUP5RLAYW9e7Mooz7wnCtuvkwAzMfL NCFr+tL3KBTqIIqmrQ5o/xmv4gJV7FJPsefCs8J3qW8D6PS82qrMv6J0lMVFxOKF VbA1nHsg0hDIQNc7+uKDpfkHMYcojBrDGThpkzce7xmwl26E7VJorHZI1vdXDqd8 vDKwwE1QRk4cbnDv4hZHm2EUqVHsdzSXG88euCm6Un/dDyvbAAznTJdcb2hV58f8 6bX+AKIsxt8J705qyY2i7H1mB+qxOf2TnIMCAwEAAaOCAigwggIkMB0GA1UdDgQW BBQJsJb9L+XV6mkTIYEUuIwNQmke+jAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIxMDQyL0NiQ1dfU19sMWVwcEV5R0JGTGlNRFVKcEh2by5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAZly8AwDQYJKoZIhvcNAQELBQADggEBAGFrqnEzrgI/cPSaj5n9rLO1 2aDToOIEZI0+pkpBb9z5wRbWzwo8OZ1B84CKGn3z+CYcXqEflnaphB8r88DzKrRU El6PaglYxymHPFQjQMX9YyNw6pJTkP7sSoGINXY2vLID2fYRn6AfwJwLiktqULMz jixeCede5IYUSw90Vl0qA1/8P6Egpde0FHAUL4vyZ6if7JzeYXXCAk8FjAGahtTE GVJvgllasefFWWvXJYi/W0E2Q8VBSi7iTjziFk4T9iDm1yIOZo5bc3ALGaQmWUhu DfI8+xBASOrSo8UsLBzGuF8xHI39v9FMvSEA2d1MPnitWjBLYpNBUuKdE5U5Yhg= -----END CERTIFICATE-----Generated at Mon Aug 11 07:45:24 2025 by rpki-client