$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bFnSl_LLJ-qn4ly2saLm5fulWyc.roa File: bFnSl_LLJ-qn4ly2saLm5fulWyc.roa (raw, json) Hash identifier: SyFMquBCi/HTenwV2Gk4wVl5lknBeGPsZorTQV++pmk= Subject key identifier: 6C:59:D2:97:F2:CB:27:EA:A7:E2:5C:B6:B1:A2:E6:E5:FB:A5:5B:27 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 039A Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bFnSl_LLJ-qn4ly2saLm5fulWyc.roa Signing time: Thu 01 May 2025 01:37:34 +0000 ROA not before: Thu 01 May 2025 01:37:34 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 220.150.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:37:34 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=6C59D297F2CB27EAA7E25CB6B1A2E6E5FBA55B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:d8:23:da:45:a5:2f:64:a7:5a:b1:d9:ff: 1a:49:45:e0:a0:19:79:56:72:e5:0e:b8:2a:a6:4d: 63:af:e8:7f:6e:5b:83:87:99:45:be:bf:59:8c:aa: 84:98:64:d3:e1:48:69:2c:44:93:43:ed:41:b2:70: 10:98:2a:20:6f:41:46:a2:df:d5:df:9a:f5:07:c7: fd:55:a2:e1:3b:b7:29:e3:30:93:04:61:f1:b2:ba: 0a:a2:68:ac:ef:23:4b:0c:5e:f7:72:d4:2a:70:5c: 53:9a:44:c9:4b:d8:72:d0:e1:43:af:da:4e:0e:0a: 04:43:29:01:53:0a:3d:dd:19:77:56:6d:3e:4e:e6: b0:9d:f0:46:82:43:8a:53:e6:df:3d:6e:12:16:ca: 29:f6:08:2b:f9:dd:14:84:01:07:7b:7c:a8:df:fb: f0:15:81:c4:32:9c:25:49:64:94:ba:9e:10:b2:82: c2:b1:ac:04:ed:51:d7:0d:ba:e8:84:78:4a:8a:f2: cd:08:52:8e:b6:91:9e:e8:74:3f:69:fe:db:8d:ad: 39:2d:6e:f4:aa:13:1e:73:c5:fa:00:5e:96:87:e9: bb:d9:e7:60:c1:0d:b2:f7:a7:8a:89:20:39:3e:9b: 46:b5:9d:fa:02:14:98:68:89:8d:52:f0:89:ad:86: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:D2:97:F2:CB:27:EA:A7:E2:5C:B6:B1:A2:E6:E5:FB:A5:5B:27 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bFnSl_LLJ-qn4ly2saLm5fulWyc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.150.83.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:89:dc:51:d4:3e:46:fc:0b:cd:54:0b:7d:89:28:51:bb:e7: 74:7b:ad:9a:5c:6c:d8:01:ce:e5:ba:d3:90:57:c1:12:30:40: 70:72:b3:49:72:80:32:db:4b:6d:41:9e:67:8a:be:78:38:d9: 17:e2:fe:58:9a:3f:02:76:d6:c0:50:22:c4:bb:f6:d3:d5:1f: 1f:3a:5e:fb:26:78:0a:91:24:17:ab:18:47:c3:96:25:ab:00: a5:05:32:65:ba:59:7f:c5:94:86:dd:fa:8f:4d:2d:50:61:4d: eb:ca:5f:6c:ea:09:b5:93:8f:7e:94:b7:73:e0:8c:ba:5f:82: 9a:1f:94:ec:0c:3b:ee:28:c0:e8:e6:d6:92:57:9e:ec:66:f4: 03:95:01:46:4f:50:6e:24:49:81:cd:de:16:72:06:e0:1c:a4: 90:bb:be:a8:f8:f1:4c:01:f1:a8:01:19:6f:27:89:e8:9e:32: 87:2e:c1:2b:91:d9:20:2f:b9:95:aa:9a:66:5c:03:d8:de:98: 88:c3:f9:6f:e8:cf:bb:86:23:72:65:c9:2b:08:2f:c1:00:95: da:24:64:38:b3:19:92:fa:45:fd:aa:33:c8:43:dc:b3:75:e9: ea:9b:31:39:15:1a:4c:25:1f:2a:97:58:59:30:8a:e1:45:31: 2a:47:f0:83 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTM3MzRaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDNTlEMjk3RjJDQjI3 RUFBN0UyNUNCNkIxQTJFNkU1RkJBNTVCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEtNgj2kWlL2SnWrHZ/xpJReCgGXlWcuUOuCqmTWOv6H9uW4OH mUW+v1mMqoSYZNPhSGksRJND7UGycBCYKiBvQUai39XfmvUHx/1VouE7tynjMJME YfGyugqiaKzvI0sMXvdy1CpwXFOaRMlL2HLQ4UOv2k4OCgRDKQFTCj3dGXdWbT5O 5rCd8EaCQ4pT5t89bhIWyin2CCv53RSEAQd7fKjf+/AVgcQynCVJZJS6nhCygsKx rATtUdcNuuiEeEqK8s0IUo62kZ7odD9p/tuNrTktbvSqEx5zxfoAXpaH6bvZ52DB DbL3p4qJIDk+m0a1nfoCFJhoiY1S8ImthvYDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUbFnSl/LLJ+qn4ly2saLm5fulWycwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2JGblNsX0xMSi1xbjRseTJzYUxtNWZ1bFd5Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADcllMwDQYJKoZIhvcNAQELBQADggEBAI6J3FHUPkb8C81UC32JKFG753R7 rZpcbNgBzuW605BXwRIwQHBys0lygDLbS21BnmeKvng42Rfi/liaPwJ21sBQIsS7 9tPVHx86XvsmeAqRJBerGEfDliWrAKUFMmW6WX/FlIbd+o9NLVBhTevKX2zqCbWT j36Ut3PgjLpfgpoflOwMO+4owOjm1pJXnuxm9AOVAUZPUG4kSYHN3hZyBuAcpJC7 vqj48UwB8agBGW8nieieMocuwSuR2SAvuZWqmmZcA9jemIjD+W/oz7uGI3JlySsI L8EAldokZDizGZL6Rf2qM8hD3LN16eqbMTkVGkwlHyqXWFkwiuFFMSpH8IM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:13 2025 by rpki-client