$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CzYOu2_VrC0hSTndsPd2AEv-qvU.roa File: CzYOu2_VrC0hSTndsPd2AEv-qvU.roa (raw, json) Hash identifier: isBLFVJJ9hkvHx4MDfOqJ6Kuo45twGuyme5OUfBqEZw= Subject key identifier: 0B:36:0E:BB:6F:D5:AC:2D:21:49:39:DD:B0:F7:76:00:4B:FE:AA:F5 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 03F1 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CzYOu2_VrC0hSTndsPd2AEv-qvU.roa Signing time: Thu 01 May 2025 01:45:17 +0000 ROA not before: Thu 01 May 2025 01:45:17 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 59.157.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:45:17 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=0B360EBB6FD5AC2D214939DDB0F776004BFEAAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:aa:4e:89:7e:a4:1f:6b:1d:e7:47:ce:1f: 78:6e:3c:8d:b2:84:34:56:86:a1:07:a1:09:f0:f1: b1:8d:3d:27:87:be:f4:52:2a:5a:ce:eb:64:9e:5d: ab:2e:ac:46:c1:46:f5:a3:12:7b:93:40:89:48:90: 45:71:70:36:04:9f:60:06:21:6f:a4:97:14:16:d0: ab:16:8d:2c:f8:1d:a0:0e:69:84:88:ae:de:b0:09: 17:03:06:46:d5:98:0b:df:2e:fc:70:77:83:8e:f9: 3f:dd:e5:97:8d:1e:8e:0d:f5:fe:29:e8:e3:52:89: cd:d3:a8:22:82:e1:d1:47:3a:e7:c0:be:68:80:8b: 11:24:9d:90:c1:88:76:f0:c1:6d:98:12:77:08:bb: 41:99:f9:ad:88:bd:37:60:d9:54:83:22:7d:3c:63: 25:a4:04:46:f6:6b:6b:05:ac:4f:2f:66:7b:e7:f7: 57:71:d1:1c:b6:93:c3:20:da:a4:4a:1f:1d:d9:3c: e8:50:50:35:3b:79:15:3d:06:ac:f5:24:7a:53:74: f1:d1:7f:37:81:69:60:77:ff:d4:0f:85:ca:73:2f: 2d:be:59:97:9b:b8:aa:a7:40:dc:62:ef:36:cb:46: ec:d0:81:f4:47:1c:24:16:f6:6b:c5:63:e5:3c:d0: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:36:0E:BB:6F:D5:AC:2D:21:49:39:DD:B0:F7:76:00:4B:FE:AA:F5 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CzYOu2_VrC0hSTndsPd2AEv-qvU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.157.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8f:bb:26:a7:19:20:6a:32:85:16:d1:46:1d:e3:9b:d3:a7:eb: 48:bb:98:83:c0:e5:60:72:4b:81:71:e5:24:23:b6:d6:43:38: 66:d5:3e:0a:79:b7:60:70:e6:24:44:18:b1:3a:cf:dd:08:9b: 1f:96:7c:3e:18:f4:cf:97:36:f9:52:b1:0b:41:73:b5:e4:5a: c2:08:6f:ab:38:6b:e9:df:9b:61:84:8a:86:4d:cc:50:a5:25: 24:13:5b:f4:9d:a9:df:1c:6e:1a:85:02:c5:9c:d2:80:df:de: 02:74:5f:75:62:03:9b:a7:60:d1:a9:19:85:b0:78:0a:c4:44: 32:cf:58:89:90:4c:27:63:38:d6:70:cd:d1:45:0e:fd:59:6b: 5b:1e:4d:97:5c:70:6a:bf:68:f0:7e:6e:91:16:b8:c2:34:af: 2a:60:ae:21:42:81:a9:68:8d:10:43:1c:0e:0d:f8:57:d2:a8: 22:7b:9e:e0:df:7e:b5:19:87:a6:1b:9a:a9:98:0c:84:d1:26: fc:72:19:23:bf:9c:25:59:a9:f8:b2:2b:9d:02:d6:5f:25:be: af:34:60:d4:8b:b4:a0:6f:48:f0:bc:c3:e4:36:b9:6a:6c:2d: 7c:2b:ea:02:25:da:f4:ad:94:a9:72:33:8f:3f:69:cc:5d:e9: ea:5f:3f:b0 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ1MTdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBCMzYwRUJCNkZENUFD MkQyMTQ5MzlEREIwRjc3NjAwNEJGRUFBRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMtapOiX6kH2sd50fOH3huPI2yhDRWhqEHoQnw8bGNPSeHvvRS KlrO62SeXasurEbBRvWjEnuTQIlIkEVxcDYEn2AGIW+klxQW0KsWjSz4HaAOaYSI rt6wCRcDBkbVmAvfLvxwd4OO+T/d5ZeNHo4N9f4p6ONSic3TqCKC4dFHOufAvmiA ixEknZDBiHbwwW2YEncIu0GZ+a2IvTdg2VSDIn08YyWkBEb2a2sFrE8vZnvn91dx 0Ry2k8Mg2qRKHx3ZPOhQUDU7eRU9Bqz1JHpTdPHRfzeBaWB3/9QPhcpzLy2+WZeb uKqnQNxi7zbLRuzQgfRHHCQW9mvFY+U80CsHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCzYOu2/VrC0hSTndsPd2AEv+qvUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L0N6WU91Ml9WckMwaFNUbmRzUGQyQUV2LXF2VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc7nQAwDQYJKoZIhvcNAQELBQADggEBAI+7JqcZIGoyhRbRRh3jm9On60i7 mIPA5WByS4Fx5SQjttZDOGbVPgp5t2Bw5iREGLE6z90Imx+WfD4Y9M+XNvlSsQtB c7XkWsIIb6s4a+nfm2GEioZNzFClJSQTW/Sdqd8cbhqFAsWc0oDf3gJ0X3ViA5un YNGpGYWweArERDLPWImQTCdjONZwzdFFDv1Za1seTZdccGq/aPB+bpEWuMI0rypg riFCgalojRBDHA4N+FfSqCJ7nuDffrUZh6YbmqmYDITRJvxyGSO/nCVZqfiyK50C 1l8lvq80YNSLtKBvSPC8w+Q2uWpsLXwr6gIl2vStlKlyM48/acxd6epfP7A= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:53 2025 by rpki-client