$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8urS85TeCwjincD9ReOBmAvNWAE.roa File: 8urS85TeCwjincD9ReOBmAvNWAE.roa (raw, json) Hash identifier: fpZHZSHdtjrHKORX7L632TiZTQFYf34BEBqq2v/kRL8= Subject key identifier: F2:EA:D2:F3:94:DE:0B:08:E2:9D:C0:FD:45:E3:81:98:0B:CD:58:01 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0CA0 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8urS85TeCwjincD9ReOBmAvNWAE.roa Signing time: Tue 01 Apr 2025 02:03:28 +0000 ROA not before: Tue 01 Apr 2025 02:03:28 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 9605 IP address blocks: 27.230.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 1 02:03:28 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=F2EAD2F394DE0B08E29DC0FD45E381980BCD5801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:aa:f8:68:dd:4f:4e:06:e7:68:91:9f:c3: ef:b3:b5:cd:9f:e6:08:0a:1b:90:dc:ef:db:c1:c0: c1:2e:6c:60:9b:75:ea:f6:1c:76:79:77:a0:40:ab: 2c:ca:d1:61:8c:b2:57:ef:62:26:99:b2:fe:e6:f3: 19:67:5e:0c:9a:6b:31:5d:ab:aa:19:e7:b4:32:f1: 4e:81:7f:4a:6e:c8:74:3a:e2:c2:a0:b0:66:22:9b: f4:3d:9e:44:25:61:17:ec:d2:1b:4a:24:53:dc:fd: bc:13:a9:fe:5b:42:26:46:ad:fa:18:a0:da:66:cb: e1:eb:43:b1:f8:00:c8:c9:a9:8f:f8:71:6d:35:cb: 11:e0:bb:6c:2b:dd:6f:44:64:64:58:94:a6:3a:40: 09:1b:31:d3:88:da:bc:d8:34:49:26:5b:d1:54:40: 73:7b:ba:1b:02:b1:b3:2e:23:c2:48:86:7b:83:8f: 95:09:8f:18:62:34:cf:96:78:9e:e0:f9:05:09:c5: 2f:4f:e4:00:88:6f:3b:fd:ec:b2:8c:3c:0b:44:dd: 2e:b3:3f:9c:1a:e7:9b:b1:7c:fe:97:4d:f5:14:6d: fe:b7:76:fa:cd:41:09:4a:e0:a2:8b:a4:75:79:7a: d1:33:db:ce:9a:eb:62:c7:0c:69:8f:23:72:ba:39: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EA:D2:F3:94:DE:0B:08:E2:9D:C0:FD:45:E3:81:98:0B:CD:58:01 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8urS85TeCwjincD9ReOBmAvNWAE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.48.0/22 Signature Algorithm: sha256WithRSAEncryption ae:08:c2:23:61:e1:70:82:89:ae:b3:ea:86:0f:91:d8:ad:47: 4c:fd:e0:23:d4:60:ab:e2:96:7b:9e:cc:75:b5:c0:ed:05:11: 54:ee:07:ca:68:51:6c:5e:16:92:10:2b:ea:b9:a3:37:9e:8a: d2:da:81:4a:05:a7:dd:c0:90:7b:c1:d5:2a:23:07:07:35:3c: 5e:8f:ce:f7:ea:d2:2d:e0:47:8c:b0:c2:e4:68:67:4e:9d:2c: ac:a6:96:bd:44:d6:e8:4f:85:08:75:f3:84:be:d9:dc:17:dc: fa:67:ab:a1:6e:b7:b8:4c:c4:7f:2c:fd:6c:bc:54:f0:5a:5e: fe:c8:05:91:34:50:47:31:b2:94:e8:e6:f0:f0:78:d2:d0:ad: ec:c3:09:9d:ce:d2:c2:e9:c0:ff:93:08:18:06:a6:2c:d7:35: cf:35:05:43:1f:92:76:3d:56:49:e1:55:4b:65:83:d0:4c:94: 98:b5:e9:10:a1:69:23:df:d1:cd:6b:33:d8:cf:16:3e:d6:bb: 16:06:52:9e:47:40:91:e0:12:8b:8a:c2:34:db:39:34:9b:40: 9a:c1:a2:35:7c:01:e3:fa:74:93:38:81:97:00:30:c2:4d:30: 59:93:b1:0a:b7:98:a9:ef:02:b4:7b:52:3b:93:09:94:29:f9: 88:b4:ce:80 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw MjAzMjhaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYyRUFEMkYzOTRERTBC MDhFMjlEQzBGRDQ1RTM4MTk4MEJDRDU4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8Fqr4aN1PTgbnaJGfw++ztc2f5ggKG5Dc79vBwMEubGCbder2 HHZ5d6BAqyzK0WGMslfvYiaZsv7m8xlnXgyaazFdq6oZ57Qy8U6Bf0puyHQ64sKg sGYim/Q9nkQlYRfs0htKJFPc/bwTqf5bQiZGrfoYoNpmy+HrQ7H4AMjJqY/4cW01 yxHgu2wr3W9EZGRYlKY6QAkbMdOI2rzYNEkmW9FUQHN7uhsCsbMuI8JIhnuDj5UJ jxhiNM+WeJ7g+QUJxS9P5ACIbzv97LKMPAtE3S6zP5wa55uxfP6XTfUUbf63dvrN QQlK4KKLpHV5etEz286a62LHDGmPI3K6OTbZAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8urS85TeCwjincD9ReOBmAvNWAEwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5Lzh1clM4NVRlQ3dqaW5jRDlSZU9CbUF2TldBRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIb5jAwDQYJKoZIhvcNAQELBQADggEBAK4IwiNh4XCCia6z6oYPkditR0z9 4CPUYKvilnuezHW1wO0FEVTuB8poUWxeFpIQK+q5ozeeitLagUoFp93AkHvB1Soj Bwc1PF6Pzvfq0i3gR4ywwuRoZ06dLKymlr1E1uhPhQh184S+2dwX3Ppnq6Fut7hM xH8s/Wy8VPBaXv7IBZE0UEcxspTo5vDweNLQrezDCZ3O0sLpwP+TCBgGpizXNc81 BUMfknY9VknhVUtlg9BMlJi16RChaSPf0c1rM9jPFj7WuxYGUp5HQJHgEouKwjTb OTSbQJrBojV8AeP6dJM4gZcAMMJNMFmTsQq3mKnvArR7UjuTCZQp+Yi0zoA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:22 2025 by rpki-client