$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/e8UMpEh6IOfE7mTjRCPsVn-HhgA.roa File: e8UMpEh6IOfE7mTjRCPsVn-HhgA.roa (raw, json) Hash identifier: GW4CgNV+jgsZ3Nnjiob4ks2v8o8R+oLPfKx6+hCzffg= Subject key identifier: 7B:C5:0C:A4:48:7A:20:E7:C4:EE:64:E3:44:23:EC:56:7F:87:86:00 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F31 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e8UMpEh6IOfE7mTjRCPsVn-HhgA.roa Signing time: Tue 10 Jun 2025 11:24:32 +0000 ROA not before: Tue 10 Jun 2025 11:24:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 220.210.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3889 (0xf31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:24:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=7BC50CA4487A20E7C4EE64E34423EC567F878600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:c9:9f:71:9d:16:2f:84:59:eb:1c:48:47: 5e:4d:b7:9d:41:08:99:50:06:ce:ce:d6:b0:a1:b3: a8:17:e8:fc:42:15:83:0c:91:30:08:bc:ad:b8:d7: 7d:9d:ff:fb:f3:ba:fd:5c:79:25:b2:b2:a4:30:69: 42:9b:6a:17:2b:bd:dc:68:1b:a6:ad:20:8c:f1:24: 48:79:60:1a:62:ae:6c:d8:b8:6e:43:5b:b7:02:1c: 7d:0d:e4:e7:cc:bb:05:fa:c9:73:9e:fe:07:8f:d1: 1b:d0:74:c8:32:8b:d3:02:60:76:e6:bc:5f:67:28: b3:cd:2c:37:49:54:c7:1f:78:d7:23:d1:8c:bb:75: bd:bc:ab:25:c8:6a:48:07:13:79:a7:5b:4d:0e:48: 9e:d7:71:e3:59:04:68:b5:4c:90:94:84:0d:48:68: 64:66:72:bb:54:38:50:a3:d0:f6:72:50:85:fa:65: 4a:0d:8e:17:b6:81:61:cc:00:4a:6d:3f:e8:fe:fd: d6:69:a7:3e:20:82:d0:87:a7:24:ef:4e:3f:56:ec: 08:25:53:4d:1e:38:8d:0a:d6:b6:cc:8d:4e:62:a6: 46:92:07:d2:1e:b4:57:71:96:e8:b5:ba:46:6a:73: 44:2e:b2:91:8d:f7:00:87:ee:e3:df:c2:d4:88:20: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:0C:A4:48:7A:20:E7:C4:EE:64:E3:44:23:EC:56:7F:87:86:00 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/e8UMpEh6IOfE7mTjRCPsVn-HhgA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.210.0.0/21 Signature Algorithm: sha256WithRSAEncryption 49:ac:6e:67:b4:9c:79:67:1f:f8:68:8e:cc:28:23:d1:8d:2d: 06:9f:1f:a4:3c:7d:bf:8d:2b:e1:a6:4d:fd:4c:86:95:9c:81: 03:73:99:1c:3a:c9:de:a7:ac:23:23:52:b7:c1:71:5f:9a:25: c2:31:ab:9c:fa:6f:de:cd:b8:00:ba:33:cd:47:d1:88:c5:6f: 03:12:b9:6b:1b:00:4e:4e:03:44:b2:0b:2a:c9:69:72:0a:0e: 71:75:2c:9a:d6:b9:d1:e6:54:10:34:1b:1a:b9:44:5f:12:07: d4:ab:43:37:e6:39:50:0e:4b:2c:b1:91:df:4b:f2:98:78:59: f3:d4:a7:df:df:0c:53:48:d8:b4:8d:4a:d1:a1:d1:33:91:20: c4:b0:2b:5f:a2:ad:a0:ee:b4:fe:db:82:22:ac:1f:b5:48:d7: fe:5e:b3:57:54:9e:6e:7c:6d:ed:66:29:f7:e8:92:a1:01:3a: cb:c4:38:71:83:dd:16:31:02:53:50:bd:2e:bb:d9:7e:bb:f3: bf:05:b7:24:34:a9:a0:ca:e4:ae:09:01:b9:cb:4e:9f:20:61: 2d:22:54:7a:56:4b:5b:80:aa:7a:79:8f:51:7e:dd:66:28:f7: ae:94:88:da:ef:f0:ca:e0:2a:8d:5d:98:a8:cb:60:36:71:12: 6b:e6:65:e5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICDzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI0MzJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDdCQzUwQ0E0NDg3QTIw RTdDNEVFNjRFMzQ0MjNFQzU2N0Y4Nzg2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBS8mfcZ0WL4RZ6xxIR15Nt51BCJlQBs7O1rChs6gX6PxCFYMM kTAIvK24132d//vzuv1ceSWysqQwaUKbahcrvdxoG6atIIzxJEh5YBpirmzYuG5D W7cCHH0N5OfMuwX6yXOe/geP0RvQdMgyi9MCYHbmvF9nKLPNLDdJVMcfeNcj0Yy7 db28qyXIakgHE3mnW00OSJ7XceNZBGi1TJCUhA1IaGRmcrtUOFCj0PZyUIX6ZUoN jhe2gWHMAEptP+j+/dZppz4ggtCHpyTvTj9W7AglU00eOI0K1rbMjU5ipkaSB9Ie tFdxlui1ukZqc0QuspGN9wCH7uPfwtSIIFYfAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUe8UMpEh6IOfE7mTjRCPsVn+HhgAwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2U4VU1wRWg2SU9mRTdtVGpSQ1BzVm4tSGhnQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPc0gAwDQYJKoZIhvcNAQELBQADggEBAEmsbme0nHlnH/hojswoI9GNLQaf H6Q8fb+NK+GmTf1MhpWcgQNzmRw6yd6nrCMjUrfBcV+aJcIxq5z6b97NuAC6M81H 0YjFbwMSuWsbAE5OA0SyCyrJaXIKDnF1LJrWudHmVBA0Gxq5RF8SB9SrQzfmOVAO Syyxkd9L8ph4WfPUp9/fDFNI2LSNStGh0TORIMSwK1+iraDutP7bgiKsH7VI1/5e s1dUnm58be1mKffokqEBOsvEOHGD3RYxAlNQvS672X67878FtyQ0qaDK5K4JAbnL Tp8gYS0iVHpWS1uAqnp5j1F+3WYo966UiNrv8MrgKo1dmKjLYDZxEmvmZeU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:11:25 2025 by rpki-client