$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NUx-kjMTmuN-pXDbGRCh6zihdf8.roa File: NUx-kjMTmuN-pXDbGRCh6zihdf8.roa (raw, json) Hash identifier: E6csuBE6KYXDya16UUppmd24Nj3y25HbBkxI/uR+7kw= Subject key identifier: 35:4C:7E:92:33:13:9A:E3:7E:A5:70:DB:19:10:A1:EB:38:A1:75:FF Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 035F Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NUx-kjMTmuN-pXDbGRCh6zihdf8.roa Signing time: Fri 01 Aug 2025 01:43:48 +0000 ROA not before: Fri 01 Aug 2025 01:43:48 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 24276 IP address blocks: 210.2.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:43:48 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=354C7E9233139AE37EA570DB1910A1EB38A175FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1a:f7:84:fd:76:4f:58:f2:91:7d:3e:10:ed: 71:87:a2:d9:92:23:e0:9f:26:f1:60:2d:53:ff:cb: 00:b0:48:73:7c:f3:d2:81:75:8f:dd:81:fb:8a:f2: 5a:df:68:4c:81:bd:db:8c:ae:32:ae:b4:3f:64:78: 77:00:86:a6:54:e1:f0:a6:4f:27:e7:56:16:ca:28: b5:45:38:83:14:ca:b1:6e:d1:d7:4e:2b:2f:9a:3e: 8e:c7:a4:5a:2f:f6:3e:ef:b7:65:96:2a:90:84:22: c3:2f:98:09:ce:26:b7:a7:94:78:74:2e:45:d6:8a: 27:c0:03:8b:c6:15:22:62:fe:47:63:b5:54:da:1f: a9:59:1f:60:31:3d:e0:9c:5f:77:df:a6:17:81:bb: af:f1:b7:94:75:f9:cf:79:35:6e:9f:5d:7b:85:ba: 77:77:a9:db:94:2e:54:e7:a9:3b:46:52:3d:62:19: 50:fb:6b:d7:10:67:1b:c5:d8:50:46:40:40:73:9b: 43:e5:dc:02:0e:60:69:69:cf:2c:0f:68:ff:2c:af: c8:e2:09:1b:8f:b7:a4:eb:07:b2:78:af:a6:ce:b1: 09:4b:ff:b5:f3:ef:89:41:87:9b:ff:ba:e7:67:ac: 5e:9f:78:0b:00:56:c6:de:13:db:87:4e:6a:7a:07: 97:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4C:7E:92:33:13:9A:E3:7E:A5:70:DB:19:10:A1:EB:38:A1:75:FF X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NUx-kjMTmuN-pXDbGRCh6zihdf8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.2.192.0/18 Signature Algorithm: sha256WithRSAEncryption 12:9c:66:29:a2:a1:65:9b:d5:8e:66:ab:08:65:7e:75:74:04: 1d:50:0e:c7:47:cc:8a:0b:3b:e4:7c:8d:8c:2c:27:10:b3:23: 8c:aa:c6:9c:ef:16:30:80:5d:0c:c5:b4:b4:bc:7f:bc:e5:39: d8:c7:72:bc:46:57:e3:8c:83:80:a5:1b:9e:b7:7d:bd:7e:0f: 68:5e:a1:3f:1f:f3:6c:e1:15:00:d1:c9:05:9b:8f:6a:fb:6c: 65:1a:da:1b:00:dc:82:3e:c4:d8:c5:67:e9:40:95:13:98:d0: a3:b3:cc:ef:3a:17:e8:29:57:fd:ac:2e:2c:b9:0d:e5:eb:91: c5:c6:64:61:83:46:5e:8d:c7:67:97:8d:b4:17:5a:05:02:c2: 2d:3d:81:25:a3:24:a7:de:f5:9f:57:05:00:a4:2a:eb:47:49: 52:dd:f4:eb:1e:9f:52:bd:ef:42:9e:48:e8:ea:c9:6c:bf:03: 18:2c:96:ae:dc:8d:fe:cd:0e:a9:31:a0:39:3c:9a:8a:63:f6: f5:d7:f8:1b:41:21:e8:40:d5:df:85:66:aa:60:42:b1:a4:a2: ac:ea:5a:17:ee:ea:00:36:21:e4:da:d4:d7:c9:d6:39:fe:65: 2d:54:09:02:9d:41:a3:2e:12:19:d5:81:f4:74:40:86:d6:77: 0d:2d:e8:4a -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQzNDhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDM1NEM3RTkyMzMxMzlB RTM3RUE1NzBEQjE5MTBBMUVCMzhBMTc1RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdGveE/XZPWPKRfT4Q7XGHotmSI+CfJvFgLVP/ywCwSHN889KB dY/dgfuK8lrfaEyBvduMrjKutD9keHcAhqZU4fCmTyfnVhbKKLVFOIMUyrFu0ddO Ky+aPo7HpFov9j7vt2WWKpCEIsMvmAnOJrenlHh0LkXWiifAA4vGFSJi/kdjtVTa H6lZH2AxPeCcX3ffpheBu6/xt5R1+c95NW6fXXuFund3qduULlTnqTtGUj1iGVD7 a9cQZxvF2FBGQEBzm0Pl3AIOYGlpzywPaP8sr8jiCRuPt6TrB7J4r6bOsQlL/7Xz 74lBh5v/uudnrF6feAsAVsbeE9uHTmp6B5cPAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNUx+kjMTmuN+pXDbGRCh6zihdf8wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL05VeC1rak1UbXVOLXBYRGJHUkNoNnppaGRmOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbSAsAwDQYJKoZIhvcNAQELBQADggEBABKcZimioWWb1Y5mqwhlfnV0BB1Q DsdHzIoLO+R8jYwsJxCzI4yqxpzvFjCAXQzFtLS8f7zlOdjHcrxGV+OMg4ClG563 fb1+D2heoT8f82zhFQDRyQWbj2r7bGUa2hsA3II+xNjFZ+lAlROY0KOzzO86F+gp V/2sLiy5DeXrkcXGZGGDRl6Nx2eXjbQXWgUCwi09gSWjJKfe9Z9XBQCkKutHSVLd 9Osen1K970KeSOjqyWy/Axgslq7cjf7NDqkxoDk8mopj9vXX+BtBIehA1d+FZqpg QrGkoqzqWhfu6gA2IeTa1NfJ1jn+ZS1UCQKdQaMuEhnVgfR0QIbWdw0t6Eo= -----END CERTIFICATE-----Generated at Mon Aug 11 13:26:31 2025 by rpki-client