$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/0GMY3fu6_EPF7K8v066ekiO9M34.roa File: 0GMY3fu6_EPF7K8v066ekiO9M34.roa (raw, json) Hash identifier: 6SJ7ifR486G8Ilw+cLxthcCMvpUlXb0oY2vHcS1Bb6M= Subject key identifier: D0:63:18:DD:FB:BA:FC:43:C5:EC:AF:2F:D3:AE:9E:92:23:BD:33:7E Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Certificate serial: 0153 Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0GMY3fu6_EPF7K8v066ekiO9M34.roa Signing time: Fri 01 Aug 2025 01:34:08 +0000 ROA not before: Fri 01 Aug 2025 01:34:08 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 8220 IP address blocks: 27.110.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6 Validity Not Before: Aug 1 01:34:08 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D06318DDFBBAFC43C5ECAF2FD3AE9E9223BD337E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:e6:17:22:fd:ff:d1:df:af:75:12:b3:b6: dc:b1:4f:f9:5e:53:70:36:30:cb:29:e4:53:b0:2a: d4:fb:b3:77:81:e9:83:bb:e5:93:5f:a3:5f:a9:f6: ca:44:e8:15:5f:6d:c5:31:e5:e8:22:72:39:d0:d8: d5:17:69:4c:03:0c:cf:5a:d5:06:64:87:cd:a6:1c: 76:5b:40:e2:55:77:a7:3c:6c:aa:b9:2b:37:80:f3: 29:03:aa:19:4a:08:c9:3a:c4:c6:f2:15:d0:83:27: 94:7f:19:b9:be:ee:44:5a:a4:aa:3e:85:8d:96:08: 5e:61:c9:59:b0:24:6d:58:3f:d3:05:bb:08:30:ff: 4f:a6:cc:ef:73:0b:d0:4f:43:cb:65:c5:ed:b1:4e: 83:dc:12:95:03:6d:d5:88:7c:c2:54:fe:43:fd:a8: 7c:a9:56:85:f0:3c:11:0c:94:96:cb:f8:7e:77:61: 3f:c2:2a:c5:c0:8d:be:a7:87:1e:a0:de:32:57:c7: c3:a6:04:71:e6:d5:41:3a:46:ba:73:2c:51:e8:19: 32:a6:9b:90:1e:b4:62:53:67:72:32:b6:0b:e0:c1: 54:d9:b8:8c:30:f7:e8:6b:56:81:b5:e6:2b:9d:05: b2:88:e0:ce:ea:15:d3:c4:97:80:9c:b4:1a:40:ec: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:63:18:DD:FB:BA:FC:43:C5:EC:AF:2F:D3:AE:9E:92:23:BD:33:7E X509v3 Authority Key Identifier: keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/0GMY3fu6_EPF7K8v066ekiO9M34.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.20.0/23 Signature Algorithm: sha256WithRSAEncryption 13:d3:61:1b:7f:6d:94:cf:1c:c1:31:bd:0b:2d:d3:04:f7:84: e7:ff:5a:16:f8:9c:dd:d7:a6:37:8d:e0:c7:7a:3f:c2:94:7c: ee:85:3f:89:0d:12:81:65:f3:c9:24:a0:d8:78:9a:dd:88:dc: 0a:95:ad:12:57:9e:f4:a2:4f:61:94:0b:64:72:86:73:a9:8e: e3:e1:ca:6d:c6:78:53:c4:ac:49:91:28:9e:52:e5:14:f1:6f: 8c:13:b1:b1:d0:86:32:53:41:1c:dc:7c:fb:49:c7:25:dd:20: 65:3a:0f:ad:8e:d4:dd:9a:cd:c1:ef:ed:a5:b6:bb:06:62:0d: aa:d0:f6:a0:16:bb:c6:43:40:8d:1c:b2:bc:81:47:84:3a:48: 33:3b:7d:f9:3f:ea:90:95:04:47:f0:e0:21:ea:40:e4:9f:20: 66:ae:fd:a8:3c:c7:15:8f:bf:ab:b7:02:72:41:e5:9c:a6:62: 08:86:fe:6a:2e:6b:fd:9a:b8:f1:4a:a0:8e:0b:7a:bc:8e:8b: d4:79:52:a9:70:31:2b:df:e6:43:33:d6:57:86:0d:70:e6:31: d0:00:a2:a9:08:29:1c:70:e2:45:0f:d0:54:f1:7f:f3:a9:0d: a6:eb:f8:1b:ed:6c:d5:11:10:7e:fd:94:2c:9e:96:d8:43:68: b2:4c:15:11 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2 MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTA4MDEw MTM0MDhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEQwNjMxOERERkJCQUZD NDNDNUVDQUYyRkQzQUU5RTkyMjNCRDMzN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+feYXIv3/0d+vdRKzttyxT/leU3A2MMsp5FOwKtT7s3eB6YO7 5ZNfo1+p9spE6BVfbcUx5egicjnQ2NUXaUwDDM9a1QZkh82mHHZbQOJVd6c8bKq5 KzeA8ykDqhlKCMk6xMbyFdCDJ5R/Gbm+7kRapKo+hY2WCF5hyVmwJG1YP9MFuwgw /0+mzO9zC9BPQ8tlxe2xToPcEpUDbdWIfMJU/kP9qHypVoXwPBEMlJbL+H53YT/C KsXAjb6nhx6g3jJXx8OmBHHm1UE6RrpzLFHoGTKmm5AetGJTZ3IytgvgwVTZuIww 9+hrVoG15iudBbKI4M7qFdPEl4CctBpA7HiVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0GMY3fu6/EPF7K8v066ekiO9M34wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0 Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDY5LzBHTVkzZnU2X0VQRjdLOHYwNjZla2lPOU0zNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEbbhQwDQYJKoZIhvcNAQELBQADggEBABPTYRt/bZTPHMExvQst0wT3hOf/ Whb4nN3XpjeN4Md6P8KUfO6FP4kNEoFl88kkoNh4mt2I3AqVrRJXnvSiT2GUC2Ry hnOpjuPhym3GeFPErEmRKJ5S5RTxb4wTsbHQhjJTQRzcfPtJxyXdIGU6D62O1N2a zcHv7aW2uwZiDarQ9qAWu8ZDQI0csryBR4Q6SDM7ffk/6pCVBEfw4CHqQOSfIGau /ag8xxWPv6u3AnJB5ZymYgiG/moua/2auPFKoI4LeryOi9R5UqlwMSvf5kMz1leG DXDmMdAAoqkIKRxw4kUP0FTxf/OpDabr+BvtbNUREH79lCyelthDaLJMFRE= -----END CERTIFICATE-----Generated at Mon Aug 11 04:33:21 2025 by rpki-client