$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hUbv0XF1KpVHjTvh1OYepNL3gHM.roa File: hUbv0XF1KpVHjTvh1OYepNL3gHM.roa (raw, json) Hash identifier: 2sk3ShTiFeV9HOXdMa/sX6CdRVD33AaGFwCess1tllM= Subject key identifier: 85:46:EF:D1:71:75:2A:95:47:8D:3B:E1:D4:E6:1E:A4:D2:F7:80:73 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0346 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hUbv0XF1KpVHjTvh1OYepNL3gHM.roa Signing time: Fri 01 Aug 2025 01:40:05 +0000 ROA not before: Fri 01 Aug 2025 01:40:05 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 27.126.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:40:05 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=8546EFD171752A95478D3BE1D4E61EA4D2F78073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:6d:6b:42:e8:d0:d3:3d:57:9b:d8:e6:f5: d7:81:50:0b:8b:62:81:76:44:33:c3:47:5c:5b:e2: e1:a8:75:8d:e3:80:29:1e:30:a8:73:5d:5c:e7:9e: 24:8c:26:c5:ad:c2:68:25:75:33:1d:0e:f3:80:88: 07:ad:fa:33:4a:7c:a9:13:af:2a:d4:41:c2:1f:e1: 79:db:b9:99:ff:a2:bd:ab:fc:84:f8:df:2a:60:ca: 6a:6b:9f:7e:78:28:de:45:64:cf:80:8c:87:7e:ae: 27:eb:9b:85:13:b1:18:85:cc:4a:c7:de:9e:de:4d: b8:af:b1:d3:39:07:e4:54:78:2d:a3:93:2c:9a:27: ba:90:18:b7:19:aa:77:ab:8a:29:67:55:1a:fc:29: fa:6b:e2:4d:6c:be:9c:4a:6a:65:f5:9d:d8:89:2f: d6:09:b2:35:c0:42:b6:a2:b4:49:84:40:3e:f4:21: 74:94:f9:46:2e:29:f7:5c:34:93:68:0d:e0:ec:41: eb:c8:74:04:b0:e9:68:2b:76:42:21:14:6d:a6:c0: 27:36:91:09:a7:c5:11:27:6d:9f:46:ce:94:ff:e4: d0:68:98:59:91:16:35:13:5c:bf:a7:41:5a:3c:f7: 16:22:72:be:cb:1e:c6:20:7e:d9:06:1d:96:04:7f: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:46:EF:D1:71:75:2A:95:47:8D:3B:E1:D4:E6:1E:A4:D2:F7:80:73 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hUbv0XF1KpVHjTvh1OYepNL3gHM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.126.128.0/20 Signature Algorithm: sha256WithRSAEncryption 85:89:80:ea:eb:4e:16:64:b8:32:36:52:6f:62:b7:cd:b9:35: 6b:7e:07:de:c6:25:cc:94:0c:da:b6:26:0a:1d:b5:8b:0f:07: 23:c5:28:e1:bb:b8:a3:bd:60:0c:5b:5b:18:85:53:eb:61:13: 81:3e:ff:9b:28:65:a6:5b:58:ff:3f:29:70:ad:0e:fb:b5:0b: 3f:5e:e8:75:de:ef:e1:7f:40:3d:ad:2d:69:b9:e5:8c:22:67: 8c:2e:70:cc:91:d9:14:de:df:29:e8:f2:85:cd:95:6b:3d:ff: c2:af:d6:f1:6f:fc:f3:fa:45:28:62:1f:13:96:f5:72:b8:36: 98:50:41:01:ff:95:c4:19:18:12:71:8e:25:ca:06:a1:c6:08: 0a:31:cd:0f:d8:c9:00:8e:84:96:fc:25:57:e2:36:b6:e3:08: 24:65:8d:a1:4a:99:b1:53:09:9b:a7:1f:a9:ca:8e:8e:2d:be: 6f:78:f0:7a:80:5a:23:ff:4d:ff:ce:39:01:8e:a4:06:65:e8: c4:63:eb:25:1a:b3:da:1d:d9:fb:60:41:22:cf:05:57:a2:b3: 38:0f:d9:8e:ff:22:4c:9d:ec:e5:63:40:a7:2d:49:fb:d9:ff: 36:05:27:cf:e1:0d:30:ec:7e:fe:de:03:3d:c2:42:4f:bd:67: c6:77:d7:51 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQwMDVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDg1NDZFRkQxNzE3NTJB OTU0NzhEM0JFMUQ0RTYxRUE0RDJGNzgwNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3km1rQujQ0z1Xm9jm9deBUAuLYoF2RDPDR1xb4uGodY3jgCke MKhzXVznniSMJsWtwmgldTMdDvOAiAet+jNKfKkTryrUQcIf4XnbuZn/or2r/IT4 3ypgymprn354KN5FZM+AjId+rifrm4UTsRiFzErH3p7eTbivsdM5B+RUeC2jkyya J7qQGLcZqneriilnVRr8Kfpr4k1svpxKamX1ndiJL9YJsjXAQraitEmEQD70IXSU +UYuKfdcNJNoDeDsQevIdASw6WgrdkIhFG2mwCc2kQmnxREnbZ9GzpT/5NBomFmR FjUTXL+nQVo89xYicr7LHsYgftkGHZYEf4pLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUhUbv0XF1KpVHjTvh1OYepNL3gHMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2hVYnYwWEYxS3BWSGpUdmgxT1llcE5MM2dITS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQbfoAwDQYJKoZIhvcNAQELBQADggEBAIWJgOrrThZkuDI2Um9it825NWt+ B97GJcyUDNq2JgodtYsPByPFKOG7uKO9YAxbWxiFU+thE4E+/5soZaZbWP8/KXCt Dvu1Cz9e6HXe7+F/QD2tLWm55YwiZ4wucMyR2RTe3yno8oXNlWs9/8Kv1vFv/PP6 RShiHxOW9XK4NphQQQH/lcQZGBJxjiXKBqHGCAoxzQ/YyQCOhJb8JVfiNrbjCCRl jaFKmbFTCZunH6nKjo4tvm948HqAWiP/Tf/OOQGOpAZl6MRj6yUas9od2ftgQSLP BVeiszgP2Y7/Ikyd7OVjQKctSfvZ/zYFJ8/hDTDsfv7eAz3CQk+9Z8Z311E= -----END CERTIFICATE-----Generated at Mon Aug 11 13:31:54 2025 by rpki-client