$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/quwh4zfe2ey-LN9xA2vIGpqjWOc.roa File: quwh4zfe2ey-LN9xA2vIGpqjWOc.roa (raw, json) Hash identifier: kGWk4wuKWpNzAA/xxj2XeJhqtQFjeNDerVCH5MFXH1s= Subject key identifier: AA:EC:21:E3:37:DE:D9:EC:BE:2C:DF:71:03:6B:C8:1A:9A:A3:58:E7 Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Certificate serial: 48 Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/quwh4zfe2ey-LN9xA2vIGpqjWOc.roa Signing time: Wed 01 Oct 2025 01:32:08 +0000 ROA not before: Wed 01 Oct 2025 01:32:08 +0000 ROA not after: Tue 15 Sep 2026 01:30:02 +0000 asID: 23783 IP address blocks: 61.11.192.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061 Validity Not Before: Oct 1 01:32:08 2025 GMT Not After : Sep 15 01:30:02 2026 GMT Subject: CN=AAEC21E337DED9ECBE2CDF71036BC81A9AA358E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:71:0f:93:9b:f6:98:c9:1c:9a:04:54:4b: fe:4a:14:c2:42:53:c3:86:b2:03:b5:54:38:2f:e3: 88:3b:4c:93:be:1a:39:66:10:66:51:03:27:8d:26: 4f:7b:bd:6b:9e:b8:e6:46:2b:49:49:f9:7a:3e:9a: d4:ad:96:7a:2a:8e:70:18:32:b7:ca:47:bd:01:52: 00:fa:9e:ab:4c:bd:30:1e:26:3d:6c:d5:a8:70:92: aa:1a:e2:64:0c:58:9d:8a:82:ec:0f:8c:42:c0:8c: b7:ed:5a:04:4c:07:58:8c:5a:cd:7b:2e:04:ed:41: 99:af:f5:72:f2:65:d9:fa:55:3f:6a:96:00:af:d6: 71:1d:83:3a:ad:f9:ba:2c:c4:0c:58:7f:f7:a2:a7: 50:b8:24:2f:80:1b:31:12:b2:ed:b1:0c:39:89:9f: 1f:79:b1:65:f5:e7:f2:81:6c:ed:69:0a:78:e3:67: 8a:40:5d:3a:0d:1c:bb:d3:cb:01:8a:cb:a6:02:7b: 2c:0f:43:24:41:e3:91:cf:91:4f:94:47:62:ba:69: ba:36:3a:e6:8f:f6:a0:8f:ba:70:51:e2:ad:c1:1d: 30:1f:1f:98:7a:01:9c:57:6a:c0:c7:b7:b8:7f:0c: a5:b4:ea:00:7f:7b:76:a5:4a:82:eb:e4:6b:2e:06: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EC:21:E3:37:DE:D9:EC:BE:2C:DF:71:03:6B:C8:1A:9A:A3:58:E7 X509v3 Authority Key Identifier: keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/quwh4zfe2ey-LN9xA2vIGpqjWOc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.11.192.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:c6:e1:29:db:59:da:06:7c:92:dc:28:03:94:00:e6:a1:c0: 8f:95:47:f3:a0:77:95:03:15:b7:33:06:1e:f1:d4:04:07:d7: c9:89:fd:0b:98:3f:4e:5c:30:2b:21:fe:9a:77:de:2d:86:04: d9:e3:10:31:3e:3a:ff:cd:67:13:25:a3:a4:ff:fa:24:52:a2: ca:72:97:ce:c3:d1:69:13:f9:a0:db:ce:07:b9:c5:8b:1f:94: 14:19:7a:ea:3c:70:ad:39:1c:0f:4c:b3:13:07:b5:a1:b6:be: 90:88:64:20:05:c9:df:24:9b:90:df:fb:43:df:7d:a5:e0:21: 59:53:0a:c5:f8:ce:f1:4d:f6:a4:d2:31:bf:b1:da:40:a7:22: 6c:e8:43:e0:20:3d:22:9c:2b:2f:1c:84:2c:1d:4f:fb:57:53: 87:e9:1f:42:5f:df:4d:74:97:0f:60:87:e0:97:8a:8f:2b:59: e0:01:33:a2:fd:36:39:46:ef:b4:60:cd:77:db:7f:e9:19:a3: ab:33:99:90:1c:dc:30:3f:f3:d0:9a:1b:01:59:4e:e7:94:97: cb:d0:21:da:fd:5f:97:2c:37:fd:dd:c1:c3:df:d0:fb:ed:23: 0f:08:2b:87:f1:f3:ea:20:2b:24:64:8c:30:9a:41:97:c1:29: 84:80:7b:e1 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDFF RDE2RDhDNkQzQkE0MEJGNDJDQjNBMjk2NTJBREFCNzZEMDYxMB4XDTI1MTAwMTAx MzIwOFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoQUFFQzIxRTMzN0RFRDlF Q0JFMkNERjcxMDM2QkM4MUE5QUEzNThFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALKmcQ+Tm/aYyRyaBFRL/koUwkJTw4ayA7VUOC/jiDtMk74aOWYQ ZlEDJ40mT3u9a5645kYrSUn5ej6a1K2WeiqOcBgyt8pHvQFSAPqeq0y9MB4mPWzV qHCSqhriZAxYnYqC7A+MQsCMt+1aBEwHWIxazXsuBO1Bma/1cvJl2fpVP2qWAK/W cR2DOq35uizEDFh/96KnULgkL4AbMRKy7bEMOYmfH3mxZfXn8oFs7WkKeONnikBd Og0cu9PLAYrLpgJ7LA9DJEHjkc+RT5RHYrppujY65o/2oI+6cFHircEdMB8fmHoB nFdqwMe3uH8MpbTqAH97dqVKguvkay4GysUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSq7CHjN97Z7L4s33EDa8gamqNY5zAfBgNVHSMEGDAWgBRtHtFtjG07pAv0LLOi llKtq3bQYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA3L2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0MjBHRS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2JSN1JiWXh0TzZRTDlDeXpvcFpTcmF0 MjBHRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMDcvcXV3aDR6ZmUyZXktTE45eEEydklHcHFqV09jLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD0LwDANBgkqhkiG9w0BAQsFAAOCAQEAG8bhKdtZ2gZ8ktwoA5QA5qHAj5VH 86B3lQMVtzMGHvHUBAfXyYn9C5g/TlwwKyH+mnfeLYYE2eMQMT46/81nEyWjpP/6 JFKiynKXzsPRaRP5oNvOB7nFix+UFBl66jxwrTkcD0yzEwe1oba+kIhkIAXJ3ySb kN/7Q999peAhWVMKxfjO8U32pNIxv7HaQKcibOhD4CA9IpwrLxyELB1P+1dTh+kf Ql/fTXSXD2CH4JeKjytZ4AEzov02OUbvtGDNd9t/6RmjqzOZkBzcMD/z0JobAVlO 55SXy9Ah2v1flyw3/d3Bw9/Q++0jDwgrh/Hz6iArJGSMMJpBl8EphIB74Q== -----END CERTIFICATE-----Generated at Thu Nov 6 00:48:36 2025 by rpki-client