$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/gEeszmr5S6I-Fnex6hyn_SgZTjk.roa File: gEeszmr5S6I-Fnex6hyn_SgZTjk.roa (raw, json) Hash identifier: B4Wwc9arb5XV1J4YkC5dvzgz6GU1h+tX3qCLzPKRYO8= Subject key identifier: 80:47:AC:CE:6A:F9:4B:A2:3E:16:77:B1:EA:1C:A7:FD:28:19:4E:39 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0416 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gEeszmr5S6I-Fnex6hyn_SgZTjk.roa Signing time: Thu 01 May 2025 01:48:42 +0000 ROA not before: Thu 01 May 2025 01:48:42 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 10013 IP address blocks: 180.131.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: May 1 01:48:42 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=8047ACCE6AF94BA23E1677B1EA1CA7FD28194E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:4c:8d:be:eb:fb:27:65:23:1e:7d:f0:12: c5:f2:29:6c:84:6c:05:7c:d2:81:4e:c8:a6:74:0d: 6e:ea:1b:2e:34:ec:7c:6d:53:02:4f:11:b4:9b:b7: 70:aa:00:7b:40:d7:4a:69:b5:e2:85:28:7c:3a:94: 33:50:3e:34:5c:dd:99:e0:ad:d5:81:b3:f3:f4:5e: 41:82:03:8d:ac:14:59:d9:42:b7:3a:d5:4a:f8:5a: 3b:f3:1b:43:ee:69:68:89:e8:51:01:7d:21:72:62: 42:ab:12:bc:1d:82:8c:5f:ed:fc:16:67:c6:4f:f5: cf:21:4a:0d:2e:fe:b9:5c:91:c1:3b:65:9d:da:48: f1:e8:6f:a5:73:73:0d:9e:91:b0:10:a9:77:f1:a0: 33:22:61:39:cc:84:d9:62:fd:23:46:0d:e5:6b:7c: f9:e8:9c:0c:26:a0:88:6f:48:a5:0b:e8:06:a2:8d: f4:f0:d1:a9:81:2e:3b:9e:c7:ad:5f:b6:d6:c6:4d: 68:31:38:2c:99:f1:82:4e:94:98:99:24:55:18:ae: ad:e7:94:92:a5:58:6b:6c:f0:43:1e:90:a0:05:95: 9e:61:65:c6:eb:0c:37:a5:9a:66:8c:a6:bc:e0:ba: e3:c5:90:e8:c1:ea:3d:a5:ae:50:03:a1:32:7c:01: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:47:AC:CE:6A:F9:4B:A2:3E:16:77:B1:EA:1C:A7:FD:28:19:4E:39 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/gEeszmr5S6I-Fnex6hyn_SgZTjk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.124.0/24 Signature Algorithm: sha256WithRSAEncryption 12:db:57:93:76:dd:2d:82:af:10:43:7c:81:82:0a:39:86:5c: 40:51:01:26:3e:38:20:b6:1d:bc:bd:1d:f7:87:da:7e:91:a7: 4c:d5:5c:03:78:5f:70:1c:0a:2e:ca:43:d2:04:29:0f:67:df: 61:50:f1:da:31:d2:71:cf:e9:fd:50:8c:3d:64:1a:f7:77:b4: 01:d0:df:67:6d:19:ba:bd:fa:74:db:2a:80:85:19:92:11:7b: 91:9f:02:fe:c2:1e:d9:e1:fc:69:b4:9a:01:3b:32:37:d6:f2: b5:3d:d2:09:b0:7f:ed:69:16:98:1e:93:64:fe:01:ac:a0:a3: 8b:2d:ae:22:25:14:ec:43:da:4d:b8:62:01:40:9d:cf:15:10: 3b:09:bb:94:07:b2:3a:78:90:05:96:70:be:0b:19:cb:94:25: ae:1e:dd:b1:87:aa:4b:c0:1d:be:d0:96:cb:ae:6d:c2:a3:5a: 66:f9:93:a9:b6:8c:ca:94:55:25:eb:f4:73:db:3b:d2:ff:b3: 3d:b9:9f:2c:63:57:36:cd:48:d9:42:06:e8:29:7d:14:00:06: 3d:42:38:a0:dc:9f:e9:db:06:a3:15:c3:38:33:90:51:87:f7: 35:75:d6:00:03:6b:58:89:69:c3:f2:e1:6f:8e:37:8a:09:db: a3:f2:99:d4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA1MDEw MTQ4NDJaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgwNDdBQ0NFNkFGOTRC QTIzRTE2NzdCMUVBMUNBN0ZEMjgxOTRFMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIskyNvuv7J2UjHn3wEsXyKWyEbAV80oFOyKZ0DW7qGy407Hxt UwJPEbSbt3CqAHtA10ppteKFKHw6lDNQPjRc3ZngrdWBs/P0XkGCA42sFFnZQrc6 1Ur4WjvzG0PuaWiJ6FEBfSFyYkKrErwdgoxf7fwWZ8ZP9c8hSg0u/rlckcE7ZZ3a SPHob6Vzcw2ekbAQqXfxoDMiYTnMhNli/SNGDeVrfPnonAwmoIhvSKUL6AaijfTw 0amBLjuex61fttbGTWgxOCyZ8YJOlJiZJFUYrq3nlJKlWGts8EMekKAFlZ5hZcbr DDelmmaMprzguuPFkOjB6j2lrlADoTJ8AbzTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgEeszmr5S6I+Fnex6hyn/SgZTjkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2dFZXN6bXI1UzZJLUZuZXg2aHluX1NnWlRqay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3wwDQYJKoZIhvcNAQELBQADggEBABLbV5N23S2CrxBDfIGCCjmGXEBR ASY+OCC2Hby9HfeH2n6Rp0zVXAN4X3AcCi7KQ9IEKQ9n32FQ8dox0nHP6f1QjD1k Gvd3tAHQ32dtGbq9+nTbKoCFGZIRe5GfAv7CHtnh/Gm0mgE7MjfW8rU90gmwf+1p Fpgek2T+Aaygo4striIlFOxD2k24YgFAnc8VEDsJu5QHsjp4kAWWcL4LGcuUJa4e 3bGHqkvAHb7QlsuubcKjWmb5k6m2jMqUVSXr9HPbO9L/sz25nyxjVzbNSNlCBugp fRQABj1COKDcn+nbBqMVwzgzkFGH9zV11gADa1iJacPy4W+ON4oJ26PymdQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:18 2025 by rpki-client