$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39012/onT7q7PHl22S---AZkFrrbMlOU8.roa File: onT7q7PHl22S---AZkFrrbMlOU8.roa (raw, json) Hash identifier: C78RcZPCcOHIw7fwfBhKJWnOTv/lvNJt6Tf5AV2TmGo= Subject key identifier: A2:74:FB:AB:B3:C7:97:6D:92:FB:EF:80:66:41:6B:AD:B3:25:39:4F Certificate issuer: /CN=8E954D7D059FD4A3FCF7DC79BCB4E762A24D666A Certificate serial: 02 Authority key identifier: 8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/onT7q7PHl22S---AZkFrrbMlOU8.roa Signing time: Tue 02 Sep 2025 01:10:32 +0000 ROA not before: Tue 02 Sep 2025 01:10:32 +0000 ROA not after: Wed 02 Sep 2026 00:57:22 +0000 asID: 131159 IP address blocks: 2001:df0:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E954D7D059FD4A3FCF7DC79BCB4E762A24D666A Validity Not Before: Sep 2 01:10:32 2025 GMT Not After : Sep 2 00:57:22 2026 GMT Subject: CN=A274FBABB3C7976D92FBEF8066416BADB325394F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:63:c0:2d:2c:45:e8:4a:b4:f1:3d:6d:20: 4a:14:2a:c7:31:a3:eb:c5:3e:bf:ee:9b:be:f3:b6: 63:21:88:ea:fb:c3:78:7a:69:cb:c3:ac:f0:b4:42: d7:db:64:4c:49:11:48:8b:0d:82:54:a3:8b:68:5e: 3d:f2:38:98:77:65:16:0a:88:ae:74:7b:da:bb:65: a8:19:99:47:6c:16:13:3c:63:00:4f:61:ed:45:d4: a2:d8:78:f9:e2:c9:d2:e2:f6:10:15:4c:29:09:d8: c0:2e:0d:8c:b8:af:60:2c:6a:89:5a:59:1b:fd:7e: a6:23:63:33:e5:01:99:3a:ab:04:2f:15:28:d9:55: 64:6c:8d:82:ba:f4:24:eb:47:c9:26:46:34:ab:0b: d3:58:03:5a:f6:77:35:7a:bd:84:82:50:b0:de:9e: 58:55:d4:1a:49:08:b3:89:be:9c:91:6c:78:41:67: ca:d5:10:68:08:36:76:e2:90:4a:04:96:e2:be:41: e3:21:66:f9:b5:ec:f2:58:0a:15:00:72:74:bf:ce: ca:cc:af:98:35:ae:a9:42:f7:b4:83:20:6d:48:b6: fb:f7:9b:68:0a:3f:3a:a8:cb:10:28:3e:48:8e:23: 53:83:b4:86:26:6e:09:bf:96:bd:6d:fa:bf:41:a9: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:74:FB:AB:B3:C7:97:6D:92:FB:EF:80:66:41:6B:AD:B3:25:39:4F X509v3 Authority Key Identifier: keyid:8E:95:4D:7D:05:9F:D4:A3:FC:F7:DC:79:BC:B4:E7:62:A2:4D:66:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/jpVNfQWf1KP899x5vLTnYqJNZmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jpVNfQWf1KP899x5vLTnYqJNZmo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39012/onT7q7PHl22S---AZkFrrbMlOU8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:25e::/48 Signature Algorithm: sha256WithRSAEncryption 23:16:33:fb:d5:3c:c9:59:d5:54:8e:1a:92:db:d4:24:77:25: ec:b6:8e:b2:db:70:b6:11:b4:e1:0b:75:44:91:95:2f:e0:b2: 8a:98:ad:1a:92:5c:2e:92:6e:c6:01:47:79:f1:8d:22:6f:55: d7:d1:34:35:f8:b7:1d:18:d2:27:0c:28:99:0a:65:b4:7f:2e: 16:dc:f0:a3:d1:b3:e5:1a:85:42:45:04:da:af:c6:be:bf:c0: 2a:3f:9c:5f:46:0e:2e:2c:4e:40:50:cb:73:56:42:54:f3:29: 7f:13:c6:24:e5:8f:46:7a:bb:0f:82:f4:7c:12:08:88:b7:b5: 68:35:1b:1d:e0:1f:4c:d8:9c:95:67:10:d0:4b:46:6a:59:40: cd:f3:82:56:a0:b9:99:00:9d:91:23:53:fc:57:29:02:a8:e1: 23:05:ca:e7:be:f3:33:a9:c2:c6:58:03:1e:19:05:b5:55:5c: 62:18:66:98:aa:93:cd:52:d9:a8:7b:6c:9f:ca:f3:18:af:d4: b3:c8:a0:18:f0:1f:e9:c1:0c:60:6f:cc:e6:b0:04:5c:51:19: bc:30:94:bb:75:c5:83:22:3f:91:8c:2e:b5:70:6f:7e:1f:57: bd:f8:b6:a4:4b:f4:eb:45:d4:1b:c6:71:96:ac:7b:d2:f4:c1: 46:a2:c2:78 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTk1 NEQ3RDA1OUZENEEzRkNGN0RDNzlCQ0I0RTc2MkEyNEQ2NjZBMB4XDTI1MDkwMjAx MTAzMloXDTI2MDkwMjAwNTcyMlowMzExMC8GA1UEAxMoQTI3NEZCQUJCM0M3OTc2 RDkyRkJFRjgwNjY0MTZCQURCMzI1Mzk0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALxPY8AtLEXoSrTxPW0gShQqxzGj68U+v+6bvvO2YyGI6vvDeHpp y8Os8LRC19tkTEkRSIsNglSji2hePfI4mHdlFgqIrnR72rtlqBmZR2wWEzxjAE9h 7UXUoth4+eLJ0uL2EBVMKQnYwC4NjLivYCxqiVpZG/1+piNjM+UBmTqrBC8VKNlV ZGyNgrr0JOtHySZGNKsL01gDWvZ3NXq9hIJQsN6eWFXUGkkIs4m+nJFseEFnytUQ aAg2duKQSgSW4r5B4yFm+bXs8lgKFQBydL/OysyvmDWuqUL3tIMgbUi2+/ebaAo/ OqjLECg+SI4jU4O0hiZuCb+WvW36v0GpOmECAwEAAaOCAiswggInMB0GA1UdDgQW BBSidPurs8eXbZL774BmQWutsyU5TzAfBgNVHSMEGDAWgBSOlU19BZ/Uo/z33Hm8 tOdiok1majAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzkwMTIvanBWTmZRV2YxS1A4OTl4NXZMVG5ZcUpOWm1vLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvanBWTmZRV2YxS1A4OTl4NXZMVG5Z cUpOWm1vLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzM5MDEyL29uVDdxN1BIbDIyUy0tLUFaa0ZycmJNbE9VOC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAgAQ3wAl4wDQYJKoZIhvcNAQELBQADggEBACMWM/vVPMlZ1VSOGpLb 1CR3Jey2jrLbcLYRtOELdUSRlS/gsoqYrRqSXC6SbsYBR3nxjSJvVdfRNDX4tx0Y 0icMKJkKZbR/Lhbc8KPRs+UahUJFBNqvxr6/wCo/nF9GDi4sTkBQy3NWQlTzKX8T xiTlj0Z6uw+C9HwSCIi3tWg1Gx3gH0zYnJVnENBLRmpZQM3zglaguZkAnZEjU/xX KQKo4SMFyue+8zOpwsZYAx4ZBbVVXGIYZpiqk81S2ah7bJ/K8xiv1LPIoBjwH+nB DGBvzOawBFxRGbwwlLt1xYMiP5GMLrVwb34fV734tqRL9OtF1BvGcZase9L0wUai wng= -----END CERTIFICATE-----Generated at Wed Nov 5 11:28:56 2025 by rpki-client