$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/SpAx2WKlfPA_QgjmvMHPBR-NsOg.roa File: SpAx2WKlfPA_QgjmvMHPBR-NsOg.roa (raw, json) Hash identifier: aOIXG0ifDORA3DJUPdsmRx995gQ//0zgpeurP4XOfgY= Subject key identifier: 4A:90:31:D9:62:A5:7C:F0:3F:42:08:E6:BC:C1:CF:05:1F:8D:B0:E8 Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 74 Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SpAx2WKlfPA_QgjmvMHPBR-NsOg.roa Signing time: Fri 01 Aug 2025 01:31:12 +0000 ROA not before: Fri 01 Aug 2025 01:31:12 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9374 IP address blocks: 219.121.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Aug 1 01:31:12 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=4A9031D962A57CF03F4208E6BCC1CF051F8DB0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:d4:f3:47:51:32:84:b4:a2:25:08:f9:ff: 41:0e:9c:b3:66:34:76:76:2b:ab:bf:00:d8:46:73: 89:f1:d8:3c:68:67:a8:c1:ce:bc:59:b1:a9:82:c9: 1a:f0:6d:66:3e:83:f9:f0:4a:a7:fc:4a:b8:2d:db: a8:27:5b:97:6b:b7:b6:73:41:92:05:86:1b:d8:ed: 34:66:74:fd:06:15:a0:d3:79:74:1d:79:07:6e:50: 24:b2:66:ea:83:8a:22:fb:e7:6f:e3:4a:5f:8e:e6: d6:73:16:6a:4e:0e:26:59:e3:27:39:d1:44:1a:0e: 3f:65:20:f1:71:2f:25:f1:d8:1a:1c:6e:0b:c8:e8: 0c:41:04:51:22:a9:61:14:db:e6:26:5e:ea:b2:bc: dc:c2:c9:be:6a:c8:87:d7:44:94:b8:bf:fd:62:b3: 94:4a:a6:9a:f8:e9:8a:be:28:11:87:4c:94:a4:48: 6a:9d:d4:88:5b:fd:c8:d5:88:c2:fc:a2:99:da:d5: 97:1d:28:f0:06:85:a0:31:90:ba:29:4b:d9:d4:5c: 95:56:e6:ef:59:65:b7:2b:c3:72:de:e0:63:1c:4c: 0c:50:3c:ec:46:57:0f:c1:bc:c7:f0:81:36:a8:dd: f6:6d:85:d8:65:1b:5a:1d:fb:0c:af:95:d5:93:90: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:31:D9:62:A5:7C:F0:3F:42:08:E6:BC:C1:CF:05:1F:8D:B0:E8 X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SpAx2WKlfPA_QgjmvMHPBR-NsOg.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.121.192.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:db:a7:e6:9b:a9:60:83:39:e1:01:08:5f:3b:ec:13:39:25: 38:8d:7a:27:78:47:2e:0a:6b:13:4b:bb:4b:d2:f9:20:60:d0: bb:20:3f:74:90:ec:45:bd:46:81:05:0d:4e:a7:1f:cb:a8:f6: ac:a2:71:21:d6:3a:d9:d5:63:5b:4d:cc:2c:a2:4a:5c:f7:df: c2:11:5e:3e:9c:ba:5f:9b:8d:90:1c:73:fa:cf:5a:1d:3b:b5: dd:06:4e:41:57:d2:66:24:f3:e6:5c:84:7e:9f:a4:c9:fb:3f: 2f:8a:40:d6:0b:bd:04:d0:81:07:33:04:3b:d6:55:4e:f2:84: 1e:1a:e8:2f:60:f8:bf:fc:45:0e:a2:7c:e5:b2:f3:84:e3:e7: 3c:37:36:dd:9b:69:b8:98:0c:74:18:59:8a:c1:01:8b:c6:5f: ff:5f:b3:7e:56:fa:7c:d8:a5:45:b8:11:6a:25:10:0d:f1:7f: 2b:08:47:98:65:a9:80:a5:e0:64:61:32:2c:e9:0d:46:34:19: 32:c7:87:09:96:63:83:57:aa:86:94:46:79:09:b2:7c:91:5e: 30:ba:df:c4:02:fc:c6:3e:ad:33:bf:29:e4:90:c2:3f:d5:52: 35:4c:e7:dc:eb:70:a4:f1:28:db:9e:54:22:6c:c4:54:08:a6: 79:0e:35:0a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI1MDgwMTAx MzExMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNEE5MDMxRDk2MkE1N0NG MDNGNDIwOEU2QkNDMUNGMDUxRjhEQjBFODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMts1PNHUTKEtKIlCPn/QQ6cs2Y0dnYrq78A2EZzifHYPGhnqMHO vFmxqYLJGvBtZj6D+fBKp/xKuC3bqCdbl2u3tnNBkgWGG9jtNGZ0/QYVoNN5dB15 B25QJLJm6oOKIvvnb+NKX47m1nMWak4OJlnjJznRRBoOP2Ug8XEvJfHYGhxuC8jo DEEEUSKpYRTb5iZe6rK83MLJvmrIh9dElLi//WKzlEqmmvjpir4oEYdMlKRIap3U iFv9yNWIwvyimdrVlx0o8AaFoDGQuilL2dRclVbm71lltyvDct7gYxxMDFA87EZX D8G8x/CBNqjd9m2F2GUbWh37DK+V1ZOQqlsCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBRKkDHZYqV88D9CCOa8wc8FH42w6DAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy 00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzY4L1NwQXgyV0tsZlBBX1Fnam12TUhQQlItTnNPZy5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATbecAwDQYJKoZIhvcNAQELBQADggEBAHrbp+abqWCDOeEBCF877BM5JTiNeid4 Ry4KaxNLu0vS+SBg0LsgP3SQ7EW9RoEFDU6nH8uo9qyicSHWOtnVY1tNzCyiSlz3 38IRXj6cul+bjZAcc/rPWh07td0GTkFX0mYk8+ZchH6fpMn7Py+KQNYLvQTQgQcz BDvWVU7yhB4a6C9g+L/8RQ6ifOWy84Tj5zw3Nt2babiYDHQYWYrBAYvGX/9fs35W +nzYpUW4EWolEA3xfysIR5hlqYCl4GRhMizpDUY0GTLHhwmWY4NXqoaURnkJsnyR XjC638QC/MY+rTO/KeSQwj/VUjVM59zrcKTxKNueVCJsxFQIpnkONQo= -----END CERTIFICATE-----Generated at Mon Aug 11 15:16:36 2025 by rpki-client