$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/I0B8_9FfV9uxZdUo3hqwaYIlVaw.roa File: I0B8_9FfV9uxZdUo3hqwaYIlVaw.roa (raw, json) Hash identifier: iGHEkAc5iuOAtRxCZMX1U66BZiWLUJEbISYVkU6RYfs= Subject key identifier: 23:40:7C:FF:D1:5F:57:DB:B1:65:D5:28:DE:1A:B0:69:82:25:55:AC Certificate issuer: /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E Certificate serial: 1C Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/I0B8_9FfV9uxZdUo3hqwaYIlVaw.roa Signing time: Wed 02 Apr 2025 04:53:31 +0000 ROA not before: Wed 02 Apr 2025 04:53:31 +0000 ROA not after: Sun 15 Mar 2026 01:30:03 +0000 asID: 17931 IP address blocks: 211.19.48.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E Validity Not Before: Apr 2 04:53:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=23407CFFD15F57DBB165D528DE1AB069822555AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:2f:b4:9f:a7:c6:14:25:7f:2e:f1:5d:43: 5e:83:e1:b8:72:af:5d:8a:8b:39:f9:23:3e:05:f5: f2:79:7c:5b:24:b8:4a:4f:aa:94:7f:70:bf:fd:94: 8e:0d:31:4e:74:6a:e8:06:72:ba:a0:80:8d:65:e7: 0b:1c:2c:a8:92:92:76:c6:d7:7f:03:76:22:58:a3: 57:4f:a5:51:30:a2:ca:32:03:63:8a:53:f1:20:9e: 51:e1:9b:b1:d4:d3:e7:f2:80:2b:ab:c9:af:7e:45: 31:4d:e3:87:82:72:35:9a:55:7e:dd:3f:0c:d6:14: 05:53:40:3c:ad:75:0e:ed:d1:cd:8d:60:e5:95:98: 21:3c:e8:26:f7:39:49:39:b1:08:a9:7a:2e:39:8f: 2f:db:a7:29:38:9e:1c:a9:8a:af:d6:12:82:87:c2: 70:d2:3e:3d:59:2d:f9:67:d5:8c:bb:80:6c:20:aa: ea:81:02:dc:3b:87:00:36:de:34:5d:3b:17:20:1d: 21:b6:94:a5:a7:06:db:38:6d:f1:9a:c4:42:32:7f: 94:45:b2:5e:b3:b7:b9:45:19:a3:bf:b9:09:17:74: ad:bb:eb:25:68:14:94:ad:40:1b:69:87:16:e3:1a: 8a:ff:6a:40:95:59:d0:5d:12:cf:0e:0c:a8:74:25: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:7C:FF:D1:5F:57:DB:B1:65:D5:28:DE:1A:B0:69:82:25:55:AC X509v3 Authority Key Identifier: keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/I0B8_9FfV9uxZdUo3hqwaYIlVaw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.19.48.0/20 Signature Algorithm: sha256WithRSAEncryption ec:18:1e:db:1d:d7:12:ba:45:42:2c:22:b8:d3:f8:1e:af:43: eb:fb:ca:48:8a:68:4d:ad:6d:a3:d3:43:eb:32:b9:38:06:79: 91:cd:99:25:a3:c1:ae:34:b7:31:7d:d6:37:7a:68:0c:1a:40: f3:78:7b:df:a2:d7:ab:e1:2b:9b:df:cc:29:dd:e5:04:76:c2: bb:69:bf:25:20:93:0a:61:8e:8d:c9:67:07:b8:6d:61:78:b5: f7:64:24:7c:4b:1d:f0:dd:74:e4:0c:7f:f1:e9:ec:88:c2:da: 57:7d:ed:38:a3:0f:61:ea:ad:9f:27:21:18:2b:39:b2:0f:df: 9f:6a:ae:d5:10:a8:a3:ec:94:27:ee:47:21:79:12:11:97:bf: bb:aa:25:7e:dc:59:8f:84:ff:31:8e:6f:1b:ed:a3:0e:a5:51: d3:3f:b8:1d:3f:33:97:ee:90:95:bc:62:53:3d:9d:96:a6:d5: 9c:69:db:cd:32:a4:6a:f0:06:2b:95:04:cf:ec:b2:d5:f8:d7: 0e:2d:b7:eb:c5:fa:b1:2e:fe:e4:1c:c1:c7:e2:c6:f5:9f:2a: 61:0b:b5:03:46:6e:86:fa:08:74:41:f5:bb:81:8f:7b:e6:66: 8e:ee:71:06:ab:0b:c2:e1:6c:59:57:e3:6b:e0:eb:27:cd:f0: a2:b4:39:86 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTVD NEY3NzM3N0Q3RjUwNzVDNjRCQTRCNTc5OThCQzc5MzI2QzVFMB4XDTI1MDQwMjA0 NTMzMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjM0MDdDRkZEMTVGNTdE QkIxNjVENTI4REUxQUIwNjk4MjI1NTVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANFJL7Sfp8YUJX8u8V1DXoPhuHKvXYqLOfkjPgX18nl8WyS4Sk+q lH9wv/2Ujg0xTnRq6AZyuqCAjWXnCxwsqJKSdsbXfwN2IlijV0+lUTCiyjIDY4pT 8SCeUeGbsdTT5/KAK6vJr35FMU3jh4JyNZpVft0/DNYUBVNAPK11Du3RzY1g5ZWY ITzoJvc5STmxCKl6LjmPL9unKTieHKmKr9YSgofCcNI+PVkt+WfVjLuAbCCq6oEC 3DuHADbeNF07FyAdIbaUpacG2zht8ZrEQjJ/lEWyXrO3uUUZo7+5CRd0rbvrJWgU lK1AG2mHFuMaiv9qQJVZ0F0Szw4MqHQlsqcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQjQHz/0V9X27Fl1SjeGrBpgiVVrDAfBgNVHSMEGDAWgBTuXE93N31/UHXGS6S1 eZi8eTJsXjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjUzLzdseFBkemQ5ZjFCMXhrdWt0WG1ZdkhreWJGNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdseFBkemQ5ZjFCMXhrdWt0WG1Zdkhr eWJGNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NTMvSTBCOF85RmZWOXV4WmRVbzNocXdhWUlsVmF3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNMTMDANBgkqhkiG9w0BAQsFAAOCAQEA7Bge2x3XErpFQiwiuNP4Hq9D6/vK SIpoTa1to9ND6zK5OAZ5kc2ZJaPBrjS3MX3WN3poDBpA83h736LXq+Erm9/MKd3l BHbCu2m/JSCTCmGOjclnB7htYXi192QkfEsd8N105Ax/8ensiMLaV33tOKMPYeqt nychGCs5sg/fn2qu1RCoo+yUJ+5HIXkSEZe/u6olftxZj4T/MY5vG+2jDqVR0z+4 HT8zl+6QlbxiUz2dlqbVnGnbzTKkavAGK5UEz+yy1fjXDi2368X6sS7+5BzBx+LG 9Z8qYQu1A0ZuhvoIdEH1u4GPe+Zmju5xBqsLwuFsWVfja+DrJ83worQ5hg== -----END CERTIFICATE-----Generated at Wed Nov 5 22:19:20 2025 by rpki-client