$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/GSB61T4LaF8TEfuCu6rmOXGnoFw.roa File: GSB61T4LaF8TEfuCu6rmOXGnoFw.roa (raw, json) Hash identifier: 5zDTf/i90wT6aj2j+y41WqEjTLyc0bUyF1AtalDSof0= Subject key identifier: 19:20:7A:D5:3E:0B:68:5F:13:11:FB:82:BB:AA:E6:39:71:A7:A0:5C Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Certificate serial: 36 Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/GSB61T4LaF8TEfuCu6rmOXGnoFw.roa Signing time: Fri 01 Aug 2025 01:32:09 +0000 ROA not before: Fri 01 Aug 2025 01:32:09 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18121 IP address blocks: 219.121.224.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Validity Not Before: Aug 1 01:32:09 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=19207AD53E0B685F1311FB82BBAAE63971A7A05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:7a:d6:cb:e8:40:fe:27:81:4e:db:50:7c: 18:d2:ca:5a:71:9d:f1:b7:41:69:f9:cc:6f:f4:fe: 17:ef:a8:64:e8:21:92:ef:8c:75:e4:f8:36:2e:11: 5b:82:d4:b1:8e:82:8d:3f:c7:47:3b:01:bb:c9:52: b6:14:d0:42:32:c6:cb:30:ea:f5:ee:c0:33:1e:09: d9:7d:bd:40:6f:45:91:88:cb:3a:a3:ae:57:17:86: 3d:32:d5:8b:82:e3:ea:bf:29:98:e2:6d:8e:6e:65: 90:ba:18:8f:60:1c:6d:a2:fe:1c:d3:e3:aa:6c:d7: 18:56:7f:b4:b6:13:e8:4b:c0:45:bc:cf:55:26:63: 73:3e:ba:70:72:ba:30:2d:67:2d:fc:10:70:1e:09: 13:52:a2:a5:6e:e5:9e:94:58:5c:e8:92:87:3d:5d: 45:55:57:db:c8:49:08:0e:2f:b1:38:15:bb:fc:c7: b7:b2:9c:18:f1:a1:5a:2e:c0:bb:65:34:90:19:b8: 54:e7:64:91:2b:4c:dd:92:cf:b8:ec:1a:55:be:43: 66:d4:48:27:be:21:39:62:fc:09:40:c9:8c:4b:de: d4:05:37:2d:f3:a0:d6:e5:52:bd:a9:0b:9f:9e:0b: b7:9f:b9:17:99:99:ad:fc:49:10:54:c1:f6:0f:28: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:7A:D5:3E:0B:68:5F:13:11:FB:82:BB:AA:E6:39:71:A7:A0:5C X509v3 Authority Key Identifier: keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/GSB61T4LaF8TEfuCu6rmOXGnoFw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.121.224.0/19 Signature Algorithm: sha256WithRSAEncryption 02:51:67:51:3c:ed:1c:5c:05:91:4b:7c:ed:51:0b:bd:90:fc: de:74:dc:11:7d:e2:92:13:d1:86:39:cc:6f:76:1b:d4:0c:63: de:33:20:55:3e:dd:fc:6e:0b:67:cb:9b:51:3e:19:a8:d9:6c: e3:35:ac:c7:47:39:35:7b:60:52:f8:36:11:a8:ee:71:4e:55: f9:96:02:0f:49:88:9a:0c:53:aa:f2:a1:f3:fa:ec:ca:02:26: fb:af:a2:94:f8:b1:1f:08:60:2d:e3:5a:21:d3:29:dd:a7:8b: 12:db:4b:59:c3:3a:38:75:2e:23:74:39:08:bf:8f:49:8a:da: 94:6f:c6:29:9d:d6:56:65:f1:72:b5:1b:bf:22:4e:68:13:b8: dc:ca:d5:f1:af:99:ed:6f:20:e2:e2:fd:95:1e:36:9a:c6:6e: 93:1a:bc:ae:12:3b:46:83:51:d3:e5:6c:b1:25:a6:97:a0:53: 0f:21:3a:fd:51:3a:10:21:64:24:b4:76:49:84:e4:98:30:5a: 28:7d:f1:1d:25:ad:42:c1:12:01:c3:d0:8c:92:6d:5d:f9:33: 9a:45:d3:97:a2:cc:d7:46:f1:3a:e8:b1:54:cf:26:10:9a:d0: 0b:99:a6:b2:ed:8c:43:d8:c8:49:c5:0d:8f:ce:ee:c1:03:14: c5:e5:75:1f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4 OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI1MDgwMTAx MzIwOVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTkyMDdBRDUzRTBCNjg1 RjEzMTFGQjgyQkJBQUU2Mzk3MUE3QTA1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANZoetbL6ED+J4FO21B8GNLKWnGd8bdBafnMb/T+F++oZOghku+M deT4Ni4RW4LUsY6CjT/HRzsBu8lSthTQQjLGyzDq9e7AMx4J2X29QG9FkYjLOqOu VxeGPTLVi4Lj6r8pmOJtjm5lkLoYj2AcbaL+HNPjqmzXGFZ/tLYT6EvARbzPVSZj cz66cHK6MC1nLfwQcB4JE1KipW7lnpRYXOiShz1dRVVX28hJCA4vsTgVu/zHt7Kc GPGhWi7Au2U0kBm4VOdkkStM3ZLPuOwaVb5DZtRIJ74hOWL8CUDJjEve1AU3LfOg 1uVSvakLn54Lt5+5F5mZrfxJEFTB9g8o7dMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQZIHrVPgtoXxMR+4K7quY5caegXDAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MTMvR1NCNjFUNExhRjhURWZ1Q3U2cm1PWEdub0Z3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBdt54DANBgkqhkiG9w0BAQsFAAOCAQEAAlFnUTztHFwFkUt87VELvZD83nTc EX3ikhPRhjnMb3Yb1Axj3jMgVT7d/G4LZ8ubUT4ZqNls4zWsx0c5NXtgUvg2Eaju cU5V+ZYCD0mImgxTqvKh8/rsygIm+6+ilPixHwhgLeNaIdMp3aeLEttLWcM6OHUu I3Q5CL+PSYralG/GKZ3WVmXxcrUbvyJOaBO43MrV8a+Z7W8g4uL9lR42msZukxq8 rhI7RoNR0+VssSWml6BTDyE6/VE6ECFkJLR2SYTkmDBaKH3xHSWtQsESAcPQjJJt XfkzmkXTl6LM10bxOuixVM8mEJrQC5mmsu2MQ9jIScUNj87uwQMUxeV1Hw== -----END CERTIFICATE-----Generated at Mon Aug 11 13:03:30 2025 by rpki-client