$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y-ftuJ5Zdfp-gZif508wnJNJZZI.roa File: Y-ftuJ5Zdfp-gZif508wnJNJZZI.roa (raw, json) Hash identifier: pw30+DjONwG0DYPVMAN42YALobO9PexLc6cCXGRpzo4= Subject key identifier: 63:E7:ED:B8:9E:59:75:FA:7E:81:98:9F:E7:4F:30:9C:93:49:65:92 Certificate issuer: /CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149 Certificate serial: 2E Authority key identifier: 79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y-ftuJ5Zdfp-gZif508wnJNJZZI.roa Signing time: Fri 01 Aug 2025 01:31:05 +0000 ROA not before: Fri 01 Aug 2025 01:31:05 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 131988 IP address blocks: 2407:b0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149 Validity Not Before: Aug 1 01:31:05 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=63E7EDB89E5975FA7E81989FE74F309C93496592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:83:45:da:f2:ef:2c:f7:7c:8b:fe:4b:03: c1:f9:7d:4a:b4:9a:20:ee:5f:79:58:93:1f:df:fd: d5:2b:97:8d:fd:53:3d:54:d7:2c:f2:f4:04:40:cf: 31:10:ce:67:fb:f1:83:6b:dc:ef:63:a3:41:ba:b9: 3a:7d:de:8b:27:9b:cc:b1:ef:7d:9d:da:38:69:d3: 92:ee:db:15:9e:1c:17:ed:2f:6d:26:ce:06:87:6a: 66:5b:2d:0a:a5:d6:0a:78:f7:83:fa:32:0d:13:3b: 59:f4:de:46:bb:4d:e7:41:f4:55:ea:01:87:1a:ae: c5:ee:7d:b8:a5:cb:f7:bd:36:5f:2b:dd:ca:a3:75: f0:65:6b:96:71:38:62:10:c1:db:1e:71:ac:2a:5c: 03:16:00:d5:46:2d:bf:94:76:75:2c:7b:99:40:48: 76:a3:f9:8b:35:f1:c9:0e:81:15:c0:5a:35:00:d0: ca:6d:78:f3:57:5b:5d:e8:03:0d:fb:ac:37:f6:b4: 41:29:1d:2e:a7:76:a4:19:81:77:6b:24:30:6c:8a: 00:9d:96:94:b2:0e:91:8b:2c:18:3d:e4:fc:96:44: e9:7d:d7:2c:cb:dc:6a:8b:02:f9:45:99:d9:5b:32: e2:7b:13:fc:29:85:08:29:2c:34:8f:72:12:61:07: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:ED:B8:9E:59:75:FA:7E:81:98:9F:E7:4F:30:9C:93:49:65:92 X509v3 Authority Key Identifier: keyid:79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y-ftuJ5Zdfp-gZif508wnJNJZZI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:b0c0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:bf:0f:1c:9c:d6:68:27:78:5c:9c:ee:9c:50:77:95:0e:f2: b7:89:3d:ef:6a:1e:a6:20:f5:4b:43:b5:32:53:67:38:05:3b: eb:06:92:da:15:42:fb:3a:b9:cd:f1:98:a9:8f:c4:65:fd:a8: d2:0a:14:8f:9c:76:6b:c4:db:ea:83:df:78:53:73:76:0f:da: 78:8c:86:a4:4c:c5:d2:05:3c:2f:a5:f7:04:f9:9f:25:79:1c: 8a:be:2c:e3:67:c3:85:3f:80:c4:4f:9c:13:26:19:4a:8f:24: 6e:06:f1:e4:b1:7c:d3:43:80:07:01:fc:b8:58:0f:41:da:3f: dc:fd:1b:28:72:96:69:b1:2a:b1:a7:ae:af:04:1f:38:a9:1d: 91:ae:cc:98:0b:69:f6:d5:6f:08:81:28:95:45:c9:2a:2f:6a: 82:81:d1:08:0b:c3:f8:0c:bc:d2:77:27:dd:af:c2:b8:4e:28: 7c:06:6b:d2:24:76:4a:07:b8:4b:58:9c:f7:bd:ce:fc:73:3f: 0a:66:70:75:7f:d1:cf:51:08:91:b0:20:67:01:ea:3c:48:02: b7:49:5b:71:9c:b4:09:89:05:e3:38:bc:58:3c:50:1a:18:b9: 2c:ff:e3:7c:23:bc:e4:57:49:0a:a0:01:96:b9:5e:21:67:1f: fe:35:73:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3OTE0 RUVEODExMzFEQjVDRUUxRDIxNkY1QUFCQ0EwNEYxQjAxMTQ5MB4XDTI1MDgwMTAx MzEwNVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNjNFN0VEQjg5RTU5NzVG QTdFODE5ODlGRTc0RjMwOUM5MzQ5NjU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANspg0Xa8u8s93yL/ksDwfl9SrSaIO5feViTH9/91SuXjf1TPVTX LPL0BEDPMRDOZ/vxg2vc72OjQbq5On3eiyebzLHvfZ3aOGnTku7bFZ4cF+0vbSbO BodqZlstCqXWCnj3g/oyDRM7WfTeRrtN50H0VeoBhxquxe59uKXL9702XyvdyqN1 8GVrlnE4YhDB2x5xrCpcAxYA1UYtv5R2dSx7mUBIdqP5izXxyQ6BFcBaNQDQym14 81dbXegDDfusN/a0QSkdLqd2pBmBd2skMGyKAJ2WlLIOkYssGD3k/JZE6X3XLMvc aosC+UWZ2Vsy4nsT/CmFCCksNI9yEmEH8+kCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRj5+24nll1+n6BmJ/nTzCck0llkjAfBgNVHSMEGDAWgBR5FO7YETHbXO4dIW9a q8oE8bARSTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzODEvZVJUdTJCRXgyMXp1SFNGdldxdktCUEd3RVVrLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZVJUdTJCRXgyMXp1SFNGdldxdktC UEd3RVVrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzgxL1ktZnR1SjVaZGZwLWdaaWY1MDh3bkpOSlpaSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB7DAMA0GCSqGSIb3DQEBCwUAA4IBAQA8vw8cnNZoJ3hcnO6cUHeV DvK3iT3vah6mIPVLQ7UyU2c4BTvrBpLaFUL7OrnN8Zipj8Rl/ajSChSPnHZrxNvq g994U3N2D9p4jIakTMXSBTwvpfcE+Z8leRyKvizjZ8OFP4DET5wTJhlKjyRuBvHk sXzTQ4AHAfy4WA9B2j/c/RsocpZpsSqxp66vBB84qR2RrsyYC2n21W8IgSiVRckq L2qCgdEIC8P4DLzSdyfdr8K4Tih8BmvSJHZKB7hLWJz3vc78cz8KZnB1f9HPUQiR sCBnAeo8SAK3SVtxnLQJiQXjOLxYPFAaGLks/+N8I7zkV0kKoAGWuV4hZx/+NXNZ -----END CERTIFICATE-----Generated at Mon Aug 11 13:26:24 2025 by rpki-client