$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/w2vNf1U_NrMBASOsB095BPKjMhs.roa File: w2vNf1U_NrMBASOsB095BPKjMhs.roa (raw, json) Hash identifier: 5tB47PCkdSbOR3PKw2fv22WYf8AJR0ZvPbL2j6PqSVk= Subject key identifier: C3:6B:CD:7F:55:3F:36:B3:01:01:23:AC:07:4F:79:04:F2:A3:32:1B Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Certificate serial: 0461 Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/w2vNf1U_NrMBASOsB095BPKjMhs.roa Signing time: Mon 01 Sep 2025 01:38:24 +0000 ROA not before: Mon 01 Sep 2025 01:38:24 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 10013 IP address blocks: 59.157.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C Validity Not Before: Sep 1 01:38:24 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C36BCD7F553F36B3010123AC074F7904F2A3321B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:8a:45:c2:b4:3f:ae:ed:96:a9:14:cc:e3: 50:d1:c5:a9:84:9b:b0:b2:23:aa:bd:69:00:b8:ff: 11:19:f6:ef:f4:56:a4:08:a7:54:e8:60:b6:e4:90: de:42:55:97:90:32:01:2d:8d:11:af:0d:72:4b:77: ce:e5:61:94:e4:29:4d:fe:6c:3e:1c:15:4b:f9:ea: 8e:b0:b6:eb:a8:fb:91:97:6e:58:61:7d:86:0d:ef: 5f:c5:ba:3a:ca:13:43:01:c0:a2:44:bd:d7:6e:8d: 2a:2a:d2:92:02:96:7e:9e:d1:31:d5:07:98:03:e8: da:be:03:e9:80:7f:51:9e:2e:ec:b2:cc:23:94:64: ef:62:9f:cb:49:6c:87:6a:74:4d:4f:0b:9c:cc:5e: ba:22:68:94:c6:8d:7c:3a:f7:df:5c:fb:d0:1f:9c: 92:fa:ac:bd:32:2e:bc:0b:2c:3a:ba:33:ef:26:82: b4:21:e3:2b:db:ab:5d:10:4c:a9:b5:d1:f6:5d:b0: 3b:d0:8f:54:9e:b1:aa:c7:66:ab:04:4a:06:0f:88: 78:f4:73:fe:a6:df:13:27:f7:19:6c:7b:e7:a2:33: 92:52:68:af:a6:7b:41:84:a5:27:12:6c:b7:52:a5: 0c:6d:6e:8f:2c:19:77:66:a1:35:73:b0:99:8e:b8: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6B:CD:7F:55:3F:36:B3:01:01:23:AC:07:4F:79:04:F2:A3:32:1B X509v3 Authority Key Identifier: keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/w2vNf1U_NrMBASOsB095BPKjMhs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.157.192.0/20 Signature Algorithm: sha256WithRSAEncryption 75:d0:57:28:2e:56:30:d6:0e:2a:44:62:14:bd:37:a3:c5:ee: dd:86:b5:c6:0b:3b:1d:81:0c:21:3f:d7:e9:14:c1:3c:6d:27: a6:1f:50:59:24:ad:60:e0:a3:a8:ad:01:2f:cc:32:a2:e0:f8: 09:71:83:1c:99:cc:4c:64:df:d6:95:22:94:b5:98:03:e0:47: e3:b2:de:21:4a:18:73:76:76:7c:ae:b2:06:e4:57:4f:44:0e: 73:16:ca:63:cf:09:97:b4:23:cf:f4:e9:8a:61:fa:1b:1a:50: 23:f5:b3:fd:93:b4:fe:28:0e:d1:f1:15:e9:51:f5:e1:02:60: 1f:4a:80:59:39:b5:1f:27:7b:fa:a2:e2:a3:09:7d:3f:9d:d8: 28:1c:8f:0b:83:19:b6:7e:3d:70:5d:7c:31:6e:27:56:3b:53: 67:95:76:3c:98:69:29:be:01:8b:9e:37:75:d2:84:28:f2:6e: c7:a6:26:96:f1:6c:4f:21:0d:ae:e1:7b:31:59:92:5e:4a:c7: cb:f4:1d:de:4f:30:f3:b8:e9:5a:fc:09:d8:68:86:5f:7c:d7: df:18:d3:f4:46:ed:11:6a:be:a3:20:cf:4e:3a:14:1f:72:cf: 0c:a5:15:2b:89:88:ce:f9:4b:94:52:04:7d:b9:2f:62:83:5f: cd:62:c1:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3 MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNTA5MDEw MTM4MjRaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMzNkJDRDdGNTUzRjM2 QjMwMTAxMjNBQzA3NEY3OTA0RjJBMzMyMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIoYpFwrQ/ru2WqRTM41DRxamEm7CyI6q9aQC4/xEZ9u/0VqQI p1ToYLbkkN5CVZeQMgEtjRGvDXJLd87lYZTkKU3+bD4cFUv56o6wtuuo+5GXblhh fYYN71/FujrKE0MBwKJEvddujSoq0pICln6e0THVB5gD6Nq+A+mAf1GeLuyyzCOU ZO9in8tJbIdqdE1PC5zMXroiaJTGjXw6999c+9AfnJL6rL0yLrwLLDq6M+8mgrQh 4yvbq10QTKm10fZdsDvQj1SesarHZqsESgYPiHj0c/6m3xMn9xlse+eiM5JSaK+m e0GEpScSbLdSpQxtbo8sGXdmoTVzsJmOuIY7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUw2vNf1U/NrMBASOsB095BPKjMhswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzk0L3cydk5mMVVfTnJNQkFTT3NCMDk1QlBLak1ocy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ7ncAwDQYJKoZIhvcNAQELBQADggEBAHXQVyguVjDWDipEYhS9N6PF7t2G tcYLOx2BDCE/1+kUwTxtJ6YfUFkkrWDgo6itAS/MMqLg+AlxgxyZzExk39aVIpS1 mAPgR+Oy3iFKGHN2dnyusgbkV09EDnMWymPPCZe0I8/06Yph+hsaUCP1s/2TtP4o DtHxFelR9eECYB9KgFk5tR8ne/qi4qMJfT+d2CgcjwuDGbZ+PXBdfDFuJ1Y7U2eV djyYaSm+AYueN3XShCjybsemJpbxbE8hDa7hezFZkl5Kx8v0Hd5PMPO46Vr8Cdho hl98198Y0/RG7RFqvqMgz046FB9yzwylFSuJiM75S5RSBH25L2KDX81iwZg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:09:17 2025 by rpki-client