$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kSvwC-6Z-LKfOlbZkCAe769ByTc.roa File: kSvwC-6Z-LKfOlbZkCAe769ByTc.roa (raw, json) Hash identifier: znB4q9itslUW5GU082+ayJj6BG6+Zo082Svcf+za1GY= Subject key identifier: 91:2B:F0:0B:EE:99:F8:B2:9F:3A:56:D9:90:20:1E:EF:AF:41:C9:37 Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0437 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kSvwC-6Z-LKfOlbZkCAe769ByTc.roa Signing time: Tue 10 Jun 2025 10:45:08 +0000 ROA not before: Tue 10 Jun 2025 10:45:08 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 10013 IP address blocks: 180.131.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Jun 10 10:45:08 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=912BF00BEE99F8B29F3A56D990201EEFAF41C937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:1c:63:16:4e:34:4d:14:6b:ff:3c:0a:61: c2:ae:48:fe:b2:55:29:db:7f:7f:64:b2:26:47:c3: d0:3d:12:39:3f:b0:70:c3:e0:f0:0d:61:86:b4:1b: ce:c6:09:a1:bc:d1:e7:52:d2:b3:11:29:e3:74:da: 2f:58:41:f2:c3:79:97:fa:ca:c9:a2:a5:86:01:42: 65:e1:9e:57:33:dc:27:dc:4b:86:23:be:5c:e2:ed: 53:a4:a1:77:43:f5:38:02:f2:aa:15:dc:07:2a:9a: 4f:49:5f:ff:8f:b8:e3:fb:a4:9e:fd:ee:19:09:82: f5:57:09:24:d9:df:8c:11:92:85:0b:62:36:21:0b: 99:95:a5:da:1a:b9:ba:b0:a0:53:e2:70:73:35:26: 29:61:0b:08:c1:07:53:1f:1b:5d:af:d6:82:7d:ec: 40:56:30:6d:3d:d7:9e:40:0d:02:bc:95:a5:46:bd: 3c:fc:61:30:4d:91:9d:97:f4:0a:ca:6a:22:4c:af: 5a:2c:4f:4d:bb:20:91:b9:7c:53:f0:3e:48:d5:c1: 21:0b:5c:db:94:f3:2e:6e:a0:42:09:26:18:8f:74: 0c:d9:ff:e3:69:f4:dc:c3:f9:26:b0:0f:17:4d:b2: cc:43:24:01:c4:01:2b:b1:82:c4:f7:d5:9d:18:2d: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:F0:0B:EE:99:F8:B2:9F:3A:56:D9:90:20:1E:EF:AF:41:C9:37 X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kSvwC-6Z-LKfOlbZkCAe769ByTc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.121.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ea:d3:72:33:d3:87:64:58:4e:e5:10:2f:a9:85:29:1b:ca: 7c:b6:f5:aa:0b:56:4a:69:4d:a2:2f:13:50:f7:6f:42:0e:f8: bb:ce:76:77:06:3d:40:ac:9c:3e:a8:08:f5:fe:59:3d:c3:78: 61:5c:33:ac:5f:1b:32:b7:8b:6e:9c:3e:82:44:89:d4:b6:96: f3:68:44:f3:17:4f:71:e7:c2:0e:a2:2f:cc:82:29:bf:61:e8: 67:94:50:24:6f:b5:18:72:a0:86:4b:cf:44:6c:df:ff:fc:6d: b6:16:59:03:c5:84:8b:59:ae:e5:95:f6:db:f8:b1:29:7e:a4: bc:87:f2:dd:ea:3c:aa:ed:8a:ee:06:d9:c1:80:19:d7:10:96: 89:20:cb:2c:4d:0e:df:c5:7b:a8:3d:fd:81:c6:c6:e4:a3:d5: 79:bb:e8:99:40:c6:9d:56:00:40:47:28:ec:60:9e:7c:fb:23: e2:11:0a:e5:49:77:57:00:f4:66:e1:72:fd:66:55:57:99:f7: de:eb:ff:69:f7:47:8b:b8:b1:34:8d:46:bd:33:be:ee:f9:f5: 6f:ea:71:91:ca:b3:ee:ae:6e:db:ee:a1:be:f8:d3:e9:e2:d9: f1:36:09:11:69:4c:66:60:d5:fd:e8:27:50:23:17:21:4f:4f: d9:e5:81:c8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA2MTAx MDQ1MDhaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDkxMkJGMDBCRUU5OUY4 QjI5RjNBNTZEOTkwMjAxRUVGQUY0MUM5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXxhxjFk40TRRr/zwKYcKuSP6yVSnbf39ksiZHw9A9Ejk/sHDD 4PANYYa0G87GCaG80edS0rMRKeN02i9YQfLDeZf6ysmipYYBQmXhnlcz3CfcS4Yj vlzi7VOkoXdD9TgC8qoV3Acqmk9JX/+PuOP7pJ797hkJgvVXCSTZ34wRkoULYjYh C5mVpdoaubqwoFPicHM1JilhCwjBB1MfG12v1oJ97EBWMG09155ADQK8laVGvTz8 YTBNkZ2X9ArKaiJMr1osT027IJG5fFPwPkjVwSELXNuU8y5uoEIJJhiPdAzZ/+Np 9NzD+SawDxdNssxDJAHEASuxgsT31Z0YLRnpAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUkSvwC+6Z+LKfOlbZkCAe769ByTcwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L2tTdndDLTZaLUxLZk9sYlprQ0FlNzY5QnlUYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAC0g3kwDQYJKoZIhvcNAQELBQADggEBAFzq03Iz04dkWE7lEC+phSkbyny2 9aoLVkppTaIvE1D3b0IO+LvOdncGPUCsnD6oCPX+WT3DeGFcM6xfGzK3i26cPoJE idS2lvNoRPMXT3Hnwg6iL8yCKb9h6GeUUCRvtRhyoIZLz0Rs3//8bbYWWQPFhItZ ruWV9tv4sSl+pLyH8t3qPKrtiu4G2cGAGdcQlokgyyxNDt/Fe6g9/YHGxuSj1Xm7 6JlAxp1WAEBHKOxgnnz7I+IRCuVJd1cA9Gbhcv1mVVeZ997r/2n3R4u4sTSNRr0z vu759W/qcZHKs+6ubtvuob740+ni2fE2CRFpTGZg1f3oJ1AjFyFPT9nlgcg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:48 2025 by rpki-client