$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/ihRWBn8jEw21xSBdYjGu_nRcM08.roa File: ihRWBn8jEw21xSBdYjGu_nRcM08.roa (raw, json) Hash identifier: GBZFS3QqrQFm1cbFb84i7EMmamAuM0zoSQxt7ttZvws= Subject key identifier: 8A:14:56:06:7F:23:13:0D:B5:C5:20:5D:62:31:AE:FE:74:5C:33:4F Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 7B Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/ihRWBn8jEw21xSBdYjGu_nRcM08.roa Signing time: Fri 01 Aug 2025 01:31:16 +0000 ROA not before: Fri 01 Aug 2025 01:31:16 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9374 IP address blocks: 202.222.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Aug 1 01:31:16 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=8A1456067F23130DB5C5205D6231AEFE745C334F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:03:2c:cd:79:e2:b1:8d:31:cf:51:fb:63: 68:65:6f:43:ed:b9:6f:f4:36:88:9e:72:9a:41:3b: 53:b7:e3:6b:40:0f:65:ae:50:cd:81:94:0e:8a:7f: c2:f1:19:21:33:e9:1e:e3:b3:18:bf:e1:07:52:06: c5:12:b3:27:97:a6:d4:af:a5:a7:4f:4f:36:c7:2a: c3:da:0e:a8:ac:89:97:9d:c2:64:8e:62:69:ac:fc: 72:dd:37:78:70:ac:3e:19:79:1f:cf:ca:47:25:a2: 2a:b1:c5:44:7a:08:d9:95:62:8c:23:f4:9f:f7:5d: 07:9e:6b:37:8e:0b:ff:6c:8e:d0:cf:5f:ff:34:05: ab:08:82:a2:f5:a8:23:79:51:e2:90:83:0f:57:70: a9:ab:23:25:7e:ed:65:cd:8a:79:e7:22:b1:bf:52: 12:78:b9:a5:37:fd:3f:21:76:3b:42:61:5f:9d:a7: db:f0:69:c8:ed:34:19:f7:f8:b6:b1:51:f5:27:0d: 0c:94:2c:48:ac:fe:b3:87:2a:aa:86:a5:e8:a8:2f: fb:f7:65:97:fd:72:94:1c:4f:4e:b2:9f:e7:22:85: c5:da:d2:f0:7f:94:11:bc:30:b2:23:41:24:5c:9d: 58:46:38:a7:b1:8b:2d:cd:c1:60:38:ed:42:29:33: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:14:56:06:7F:23:13:0D:B5:C5:20:5D:62:31:AE:FE:74:5C:33:4F X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/ihRWBn8jEw21xSBdYjGu_nRcM08.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.222.112.0/20 Signature Algorithm: sha256WithRSAEncryption 22:52:47:1e:bb:c0:b6:2e:63:9b:3d:55:29:c7:ca:e8:1b:ce: 77:1d:5f:2b:93:32:f0:59:07:a6:e3:39:c8:7c:d5:af:5f:97: 32:a2:22:87:3f:a6:9c:5c:3b:b3:09:79:c1:75:65:61:6c:2f: d4:89:69:c1:75:74:c6:3e:f0:37:6f:5b:53:f5:b0:6f:7a:22: 81:07:78:3b:bb:42:42:4b:47:da:26:c9:f1:a1:d0:60:b9:ab: 59:82:e1:bd:02:02:61:47:7d:70:e8:33:61:dd:2f:c5:e2:3d: 4f:6f:0c:e2:be:11:52:4a:cd:28:c3:6e:31:06:75:78:85:ef: 8e:65:2b:51:05:c3:0e:5f:f6:aa:4f:57:94:e6:97:d6:f0:24: 37:62:9c:da:66:16:59:f1:43:83:ad:05:f1:65:7d:83:1c:d7: dd:d5:20:e7:d8:57:7f:9c:15:7d:b0:da:94:86:43:ca:82:a4: 44:d3:ef:9a:51:68:f0:04:60:da:fa:0e:a8:9a:08:9f:73:b8: e2:5d:7e:5c:84:ec:59:28:76:04:e5:58:c6:41:07:80:3c:c8: 18:8e:74:f5:1f:90:c5:9e:ca:b9:c5:6c:e8:4d:75:47:b0:d3: c3:24:bd:a7:43:a6:c9:bc:3d:11:c6:e0:52:8c:3f:a6:30:76: 6f:82:84:45 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI1MDgwMTAx MzExNloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOEExNDU2MDY3RjIzMTMw REI1QzUyMDVENjIzMUFFRkU3NDVDMzM0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALEXAyzNeeKxjTHPUftjaGVvQ+25b/Q2iJ5ymkE7U7fja0APZa5Q zYGUDop/wvEZITPpHuOzGL/hB1IGxRKzJ5em1K+lp09PNscqw9oOqKyJl53CZI5i aaz8ct03eHCsPhl5H8/KRyWiKrHFRHoI2ZVijCP0n/ddB55rN44L/2yO0M9f/zQF qwiCovWoI3lR4pCDD1dwqasjJX7tZc2Keecisb9SEni5pTf9PyF2O0JhX52n2/Bp yO00Gff4trFR9ScNDJQsSKz+s4cqqoal6Kgv+/dll/1ylBxPTrKf5yKFxdrS8H+U EbwwsiNBJFydWEY4p7GLLc3BYDjtQikz2IUCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSKFFYGfyMTDbXFIF1iMa7+dFwzTzAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy 00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzY4L2loUldCbjhqRXcyMXhTQmRZakd1X25SY00wOC5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATK3nAwDQYJKoZIhvcNAQELBQADggEBACJSRx67wLYuY5s9VSnHyugbzncdXyuT MvBZB6bjOch81a9flzKiIoc/ppxcO7MJecF1ZWFsL9SJacF1dMY+8DdvW1P1sG96 IoEHeDu7QkJLR9omyfGh0GC5q1mC4b0CAmFHfXDoM2HdL8XiPU9vDOK+EVJKzSjD bjEGdXiF745lK1EFww5f9qpPV5Tml9bwJDdinNpmFlnxQ4OtBfFlfYMc193VIOfY V3+cFX2w2pSGQ8qCpETT75pRaPAEYNr6DqiaCJ9zuOJdflyE7FkodgTlWMZBB4A8 yBiOdPUfkMWeyrnFbOhNdUew08MkvadDpsm8PRHG4FKMP6Ywdm+ChEU= -----END CERTIFICATE-----Generated at Mon Aug 11 15:26:32 2025 by rpki-client