$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/7FGCuXvYfBELZlfjbeu8AHpGoRk.roa File: 7FGCuXvYfBELZlfjbeu8AHpGoRk.roa (raw, json) Hash identifier: YHL3fi/hztXuA1Z4nlN7GyLPPr/Yjt+0bnWhmPm3Aoo= Subject key identifier: EC:51:82:B9:7B:D8:7C:11:0B:66:57:E3:6D:EB:BC:00:7A:46:A1:19 Certificate issuer: /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Certificate serial: 31 Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/7FGCuXvYfBELZlfjbeu8AHpGoRk.roa Signing time: Fri 01 Aug 2025 01:29:35 +0000 ROA not before: Fri 01 Aug 2025 01:29:35 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 19905 IP address blocks: 133.250.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Validity Not Before: Aug 1 01:29:35 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=EC5182B97BD87C110B6657E36DEBBC007A46A119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:7f:48:2b:f7:11:15:b0:de:66:ea:6b:36: 59:52:f0:47:7b:44:3e:a5:40:b3:48:a0:56:9e:33: 00:21:d1:26:2c:98:6c:78:4d:24:c3:7d:32:3f:36: ec:e6:1d:6f:b2:4c:b2:51:14:c8:c7:bb:c8:d6:85: 19:10:cc:dc:ea:d3:a6:51:b1:aa:63:26:7b:64:d0: de:57:c7:3f:f9:a4:ce:6f:aa:99:72:69:e6:2d:69: c8:b7:c2:f3:cc:b0:62:32:59:c4:2d:64:13:15:50: 59:76:69:57:01:dd:f2:0d:dd:8e:ac:ce:a0:ab:be: 39:cf:d8:92:c7:03:3c:96:d3:a5:18:80:4d:e2:2c: 36:08:22:74:d3:61:36:5c:9e:ea:7c:54:4c:a0:a6: 6d:57:8c:e9:86:db:69:f8:0d:6a:27:80:78:35:53: 9d:b9:d2:c7:2e:d1:8b:06:e6:31:f2:ee:be:c1:c7: a3:e1:11:48:bc:7a:a9:4a:a4:5e:62:96:96:25:f0: 1a:f9:1c:e0:c5:dc:1d:ca:fc:98:bf:80:31:e3:9a: dd:9b:da:d2:c5:16:71:b4:9b:d9:da:53:a1:3d:5a: d7:0e:f5:f1:7c:50:86:22:f8:6e:5e:5c:18:dc:2f: 75:ec:2e:d0:2f:94:7d:ec:c1:d1:0c:8d:4a:df:e6: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:82:B9:7B:D8:7C:11:0B:66:57:E3:6D:EB:BC:00:7A:46:A1:19 X509v3 Authority Key Identifier: keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/7FGCuXvYfBELZlfjbeu8AHpGoRk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.250.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2d:a1:99:58:65:f6:bc:9b:2e:41:30:53:bd:ef:d6:a3:85:d8: 1c:8b:9e:4b:e4:7b:26:c3:02:0f:88:05:4d:48:9c:e7:37:12: 69:e2:52:71:dc:01:09:55:96:ed:86:6a:c8:92:00:af:8a:ee: 9c:f4:46:23:7a:86:29:c0:f9:2a:14:b6:70:31:c6:5b:8f:75: 05:f4:c3:48:bb:a6:46:85:01:cb:61:d9:39:1b:7b:4e:ac:27: 94:ee:55:f1:fd:bb:63:77:5a:9e:06:ad:f1:85:30:41:1c:12: 97:b4:42:d0:42:b0:a5:f4:fb:60:53:c1:82:14:d2:f5:1e:4d: 32:36:e2:7d:a7:d1:6c:3e:2a:8a:5f:10:48:1d:65:a7:93:4d: 3f:6b:06:89:62:ae:6c:b9:06:e9:1a:64:19:54:8e:cb:77:b0: 1c:f6:55:b7:70:c6:40:aa:8c:db:73:59:a8:f4:79:6f:f5:ec: c8:1a:67:c8:6c:8c:c7:96:77:49:a2:bd:0b:43:bf:d2:6d:a4: 03:4d:a6:d7:6b:56:d2:b0:f9:52:2a:d4:dd:ee:4c:b1:2c:af: 62:14:c4:4f:ea:1a:0b:50:f9:6f:e5:30:df:e7:0a:84:7e:44: 92:89:20:e9:59:aa:8f:5a:14:10:c3:f6:52:89:77:a9:01:14: 25:07:91:4c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OUQ3 QUFBNDcwNTdCQzUwQUJERDQxMEE4RkEzOUFCREExMDAzRTEwMB4XDTI1MDgwMTAx MjkzNVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRUM1MTgyQjk3QkQ4N0Mx MTBCNjY1N0UzNkRFQkJDMDA3QTQ2QTExOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKGYf0gr9xEVsN5m6ms2WVLwR3tEPqVAs0igVp4zACHRJiyYbHhN JMN9Mj827OYdb7JMslEUyMe7yNaFGRDM3OrTplGxqmMme2TQ3lfHP/mkzm+qmXJp 5i1pyLfC88ywYjJZxC1kExVQWXZpVwHd8g3djqzOoKu+Oc/YkscDPJbTpRiATeIs NggidNNhNlye6nxUTKCmbVeM6YbbafgNaieAeDVTnbnSxy7RiwbmMfLuvsHHo+ER SLx6qUqkXmKWliXwGvkc4MXcHcr8mL+AMeOa3Zva0sUWcbSb2dpToT1a1w718XxQ hiL4bl5cGNwvdewu0C+UfezB0QyNSt/m68sCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBTsUYK5e9h8EQtmV+Nt67wAekahGTAfBgNVHSMEGDAWgBRJ16qkcFe8UKvdQQqP o5q9oQA+EDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZhRUFQaEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZh RUFQaEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC83RkdDdVh2WWZCRUxabGZqYmV1OEFIcEdvUmsucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHhfqAMA0GCSqGSIb3DQEBCwUAA4IBAQAtoZlYZfa8my5BMFO979ajhdgc i55L5HsmwwIPiAVNSJznNxJp4lJx3AEJVZbthmrIkgCviu6c9EYjeoYpwPkqFLZw McZbj3UF9MNIu6ZGhQHLYdk5G3tOrCeU7lXx/btjd1qeBq3xhTBBHBKXtELQQrCl 9PtgU8GCFNL1Hk0yNuJ9p9FsPiqKXxBIHWWnk00/awaJYq5suQbpGmQZVI7Ld7Ac 9lW3cMZAqozbc1mo9Hlv9ezIGmfIbIzHlndJor0LQ7/SbaQDTabXa1bSsPlSKtTd 7kyxLK9iFMRP6hoLUPlv5TDf5wqEfkSSiSDpWaqPWhQQw/ZSiXepARQlB5FM -----END CERTIFICATE-----Generated at Mon Aug 11 07:41:42 2025 by rpki-client