$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jyx1_PaZWVWb2BVsB-UqxQ6UUKY.roa File: jyx1_PaZWVWb2BVsB-UqxQ6UUKY.roa (raw, json) Hash identifier: 1p/1W6l0bvng6Cj8469c3tGY3xctzckbVDzQnDkworM= Subject key identifier: 8F:2C:75:FC:F6:99:59:55:9B:D8:15:6C:07:E5:2A:C5:0E:94:50:A6 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0FA5 Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jyx1_PaZWVWb2BVsB-UqxQ6UUKY.roa Signing time: Tue 10 Jun 2025 11:40:36 +0000 ROA not before: Tue 10 Jun 2025 11:40:36 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 110.158.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4005 (0xfa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:40:36 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=8F2C75FCF69959559BD8156C07E52AC50E9450A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:26:83:87:47:f4:e3:22:48:ac:89:fa:ed: c3:d9:1e:0b:4a:34:f6:be:d7:ed:dd:ab:95:86:7e: 30:d7:c1:27:6f:51:82:dc:2f:00:b1:d0:1a:11:1c: d4:29:c5:e5:fa:ec:04:0c:e3:36:71:db:57:0e:49: 18:13:aa:e0:0c:b8:05:d5:85:d2:ab:80:bc:4d:ff: a0:01:41:5c:15:07:12:d2:02:8f:12:6b:c6:87:cb: c5:f2:ce:f1:43:7a:4b:a3:6c:4b:bc:ae:d1:15:08: cb:2e:44:32:57:e8:50:24:40:95:df:5e:7e:fc:45: 8a:a5:27:37:94:fd:7c:3c:86:9f:b7:71:ec:b8:f9: 15:d3:b7:41:4e:f2:10:00:6a:ad:5e:d3:94:d2:7d: 7d:0f:2a:54:84:3a:58:52:7e:30:11:28:16:07:f0: 73:a5:36:c1:47:e7:d8:7c:28:1b:40:dc:05:d5:50: 11:26:b1:0b:6d:b8:1a:de:ce:b4:5f:ac:77:42:06: 98:01:eb:9a:ee:9f:50:79:b0:05:e0:43:34:17:bc: d3:92:03:4c:b1:d3:be:bb:09:86:36:8d:e5:68:c9: 88:91:90:a0:31:a2:3e:f2:8d:36:9e:74:37:21:f0: cf:5d:27:a8:62:32:cc:ca:41:88:5f:a4:bd:c0:b5: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2C:75:FC:F6:99:59:55:9B:D8:15:6C:07:E5:2A:C5:0E:94:50:A6 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jyx1_PaZWVWb2BVsB-UqxQ6UUKY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.158.168.0/21 Signature Algorithm: sha256WithRSAEncryption b4:6a:cc:67:e8:32:3f:62:23:e3:d4:e9:4d:aa:7c:6c:90:20: 2b:55:26:93:3b:6f:63:a5:0f:2a:5d:a0:c6:20:0b:c9:ef:bd: ef:f9:f6:5b:d5:6d:48:7d:45:16:6f:99:89:b1:36:51:5e:0d: 81:c0:0d:a8:30:4e:ca:4b:32:ee:39:38:20:f7:6d:68:1a:6b: d3:c3:b5:0c:2f:8f:fe:c8:0a:d2:b1:29:60:cf:64:9f:82:0f: 05:db:3e:c3:80:dc:14:9d:40:51:8e:3d:20:ae:52:a2:a2:22: c5:95:ba:e5:dc:43:a5:7a:eb:30:55:2f:ff:5a:e3:58:73:c5: 0f:2d:7c:4a:cb:45:16:f1:17:9b:ce:2f:64:f1:66:fc:f8:fd: 5f:5e:ce:1d:fa:34:f1:da:88:dc:48:30:a5:ec:b1:cf:1e:25: ea:03:12:99:49:b2:1a:5d:6b:f2:64:ab:18:08:e6:83:08:2a: e4:7b:fb:09:12:52:0d:3b:a6:97:41:aa:13:8d:93:35:f8:1f: b2:34:ab:45:66:9e:e8:6a:3e:27:a1:de:6f:81:2d:11:aa:26: 75:72:bb:3f:f4:c2:67:7d:41:73:3f:4c:d9:e1:c4:98:a4:ca: 9a:e4:dd:c6:3a:d0:60:0d:96:9a:52:11:76:84:56:0f:3c:22: 8a:bd:9d:e6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTQwMzZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDhGMkM3NUZDRjY5OTU5 NTU5QkQ4MTU2QzA3RTUyQUM1MEU5NDUwQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTiSaDh0f04yJIrIn67cPZHgtKNPa+1+3dq5WGfjDXwSdvUYLc LwCx0BoRHNQpxeX67AQM4zZx21cOSRgTquAMuAXVhdKrgLxN/6ABQVwVBxLSAo8S a8aHy8XyzvFDekujbEu8rtEVCMsuRDJX6FAkQJXfXn78RYqlJzeU/Xw8hp+3cey4 +RXTt0FO8hAAaq1e05TSfX0PKlSEOlhSfjARKBYH8HOlNsFH59h8KBtA3AXVUBEm sQttuBrezrRfrHdCBpgB65run1B5sAXgQzQXvNOSA0yx0767CYY2jeVoyYiRkKAx oj7yjTaedDch8M9dJ6hiMszKQYhfpL3AtdZtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUjyx1/PaZWVWb2BVsB+UqxQ6UUKYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L2p5eDFfUGFaV1ZXYjJCVnNCLVVxeFE2VVVLWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANunqgwDQYJKoZIhvcNAQELBQADggEBALRqzGfoMj9iI+PU6U2qfGyQICtV JpM7b2OlDypdoMYgC8nvve/59lvVbUh9RRZvmYmxNlFeDYHADagwTspLMu45OCD3 bWgaa9PDtQwvj/7ICtKxKWDPZJ+CDwXbPsOA3BSdQFGOPSCuUqKiIsWVuuXcQ6V6 6zBVL/9a41hzxQ8tfErLRRbxF5vOL2TxZvz4/V9ezh36NPHaiNxIMKXssc8eJeoD EplJshpda/JkqxgI5oMIKuR7+wkSUg07ppdBqhONkzX4H7I0q0VmnuhqPieh3m+B LRGqJnVyuz/0wmd9QXM/TNnhxJikyprk3cY60GANlppSEXaEVg88Ioq9neY= -----END CERTIFICATE-----Generated at Sun Jun 22 12:12:50 2025 by rpki-client