$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/Tu_Hqteh4nwvt8DKgdVb5ZjXQwI.roa File: Tu_Hqteh4nwvt8DKgdVb5ZjXQwI.roa (raw, json) Hash identifier: izVux2N4mn1soZRgCjgSzZpTNdvO3QTRm7xxweQlTNs= Subject key identifier: 4E:EF:C7:AA:D7:A1:E2:7C:2F:B7:C0:CA:81:D5:5B:E5:98:D7:43:02 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 65 Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/Tu_Hqteh4nwvt8DKgdVb5ZjXQwI.roa Signing time: Fri 01 Aug 2025 01:28:53 +0000 ROA not before: Fri 01 Aug 2025 01:28:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 16509 IP address blocks: 2001:300:fffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Aug 1 01:28:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=4EEFC7AAD7A1E27C2FB7C0CA81D55BE598D74302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:6e:05:de:39:e2:02:99:3d:50:c8:b7:94: d5:a7:f6:84:7d:c1:9c:0b:8d:79:9b:40:b0:7d:ef: 90:5e:77:a5:38:ea:68:5f:3b:35:62:62:78:72:d7: 91:0d:3f:59:dc:f5:77:75:23:4d:98:d2:91:17:b0: 80:91:b2:bb:ba:6f:f5:3d:97:fc:62:7f:46:84:31: c7:e9:e2:8e:9c:c2:44:bd:a4:05:aa:a1:86:74:36: 32:10:15:62:e4:c9:5c:f4:16:12:9e:27:a2:95:36: 63:6e:bd:49:10:26:d5:37:55:12:b6:8f:d8:36:9f: 8c:4b:ca:18:54:8b:bb:2b:6c:71:35:6c:cf:8a:96: 9a:da:3a:53:ba:80:9c:23:45:96:f2:ee:33:68:f1: 9d:9d:ca:63:2b:2c:80:8c:9a:bd:1a:40:2e:ae:86: ad:5e:fd:9c:58:19:4d:e4:25:62:00:fd:2c:40:65: 82:d1:ba:1e:78:a1:d7:fa:6d:64:3f:01:fa:c3:1d: 5a:30:21:ec:ce:42:cc:f6:a8:5a:34:37:f1:c9:cf: 07:84:f7:2b:5c:9e:29:a7:a4:41:64:f7:65:b9:3e: 72:dc:ae:72:1d:b4:19:9b:26:4a:bc:94:66:75:ed: 22:65:e2:2d:41:61:dc:d9:d7:94:c9:2b:cd:10:18: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:C7:AA:D7:A1:E2:7C:2F:B7:C0:CA:81:D5:5B:E5:98:D7:43:02 X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/Tu_Hqteh4nwvt8DKgdVb5ZjXQwI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:300:fffd::/48 Signature Algorithm: sha256WithRSAEncryption 1e:5a:6a:2a:ca:f7:37:f0:78:4d:ba:53:85:93:66:bf:56:98: 88:8a:96:1a:46:92:a7:a1:b1:bd:45:14:89:33:cc:c7:13:f4: 08:01:2c:48:f0:a4:1d:51:06:0c:68:89:9c:32:f9:c0:2a:ec: ec:92:74:2b:08:06:52:fb:b1:63:11:28:6d:e1:3b:4a:92:b3: f8:8d:01:fe:10:8d:6f:73:33:97:35:2a:32:15:40:60:65:a0: 4a:41:e8:af:cc:9f:dc:f2:94:46:3f:18:22:c2:8a:8e:1b:59: d7:32:a4:95:2f:05:e2:a9:cd:52:35:bf:18:7e:55:00:51:12: 92:8e:99:88:9f:2c:52:c9:1b:d5:96:ac:e4:17:18:b7:2f:b1: 3f:a0:f8:9c:be:f6:13:ef:f7:e6:33:36:8f:f4:9d:0b:e0:00: 3c:c6:f7:fe:05:3c:3c:99:e4:19:d0:e2:9c:57:da:db:ee:92: b4:98:ce:3b:d5:22:3b:37:8d:da:ae:44:79:4f:50:12:3a:d9: c6:74:23:07:89:4a:5e:ca:fd:0f:67:29:70:d0:55:fe:34:40: 5a:0e:3b:67:5f:ca:83:4a:bf:1e:65:12:87:84:a9:7d:6d:c3: f9:1a:aa:33:fd:8f:97:2c:fb:0b:96:b6:f1:14:36:50:37:6e: d1:a8:23:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MDgwMTAx Mjg1M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNEVFRkM3QUFEN0ExRTI3 QzJGQjdDMENBODFENTVCRTU5OEQ3NDMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMNGbgXeOeICmT1QyLeU1af2hH3BnAuNeZtAsH3vkF53pTjqaF87 NWJieHLXkQ0/Wdz1d3UjTZjSkRewgJGyu7pv9T2X/GJ/RoQxx+nijpzCRL2kBaqh hnQ2MhAVYuTJXPQWEp4nopU2Y269SRAm1TdVEraP2DafjEvKGFSLuytscTVsz4qW mto6U7qAnCNFlvLuM2jxnZ3KYyssgIyavRpALq6GrV79nFgZTeQlYgD9LEBlgtG6 Hnih1/ptZD8B+sMdWjAh7M5CzPaoWjQ38cnPB4T3K1yeKaekQWT3Zbk+ctyuch20 GZsmSryUZnXtImXiLUFh3NnXlMkrzRAYC0kCAwEAAaOCAiswggInMB0GA1UdDgQW BBRO78eq16HifC+3wMqB1VvlmNdDAjAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDE2L1R1X0hxdGVoNG53dnQ4REtnZFZiNVpqWFF3SS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQMA//0wDQYJKoZIhvcNAQELBQADggEBAB5aairK9zfweE26U4WT Zr9WmIiKlhpGkqehsb1FFIkzzMcT9AgBLEjwpB1RBgxoiZwy+cAq7OySdCsIBlL7 sWMRKG3hO0qSs/iNAf4QjW9zM5c1KjIVQGBloEpB6K/Mn9zylEY/GCLCio4bWdcy pJUvBeKpzVI1vxh+VQBREpKOmYifLFLJG9WWrOQXGLcvsT+g+Jy+9hPv9+YzNo/0 nQvgADzG9/4FPDyZ5BnQ4pxX2tvukrSYzjvVIjs3jdquRHlPUBI62cZ0IweJSl7K /Q9nKXDQVf40QFoOO2dfyoNKvx5lEoeEqX1tw/kaqjP9j5cs+wuWtvEUNlA3btGo I78= -----END CERTIFICATE-----Generated at Mon Aug 11 02:24:25 2025 by rpki-client