$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/JMX4neQwx6irc417B4UAeKPa2vI.roa File: JMX4neQwx6irc417B4UAeKPa2vI.roa (raw, json) Hash identifier: dnq2oLoId1UNs3+HITNaXxLxiQIvH4yszliFKzEiGK0= Subject key identifier: 24:C5:F8:9D:E4:30:C7:A8:AB:73:8D:7B:07:85:00:78:A3:DA:DA:F2 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 81 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/JMX4neQwx6irc417B4UAeKPa2vI.roa Signing time: Fri 01 Aug 2025 01:29:26 +0000 ROA not before: Fri 01 Aug 2025 01:29:26 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18144 IP address blocks: 203.168.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 1 01:29:26 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=24C5F89DE430C7A8AB738D7B07850078A3DADAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:24:bc:cc:d2:ad:cc:de:a8:08:0a:25:ac: 47:d1:66:cc:7c:1f:a2:63:1f:05:63:74:b3:dc:9e: 0b:9a:7c:82:b4:b7:ec:21:c7:61:60:ff:e4:95:9d: f1:d2:87:0a:0a:74:b4:ad:ee:c9:53:74:4a:d8:a2: 50:d1:c5:9b:e5:1d:ce:23:6f:01:14:79:ee:8e:5f: c8:ce:58:86:3c:81:c9:5b:ee:50:06:71:f6:b1:97: 82:0f:33:ff:c0:b5:97:f9:5a:63:8d:df:5d:05:59: 50:ed:11:90:03:77:28:e2:1f:bb:86:8e:da:f7:7e: dc:ff:21:9a:ae:ea:ed:0e:de:2a:8e:e7:69:fd:52: 9f:22:c0:90:45:34:40:68:9a:99:75:50:4d:04:f2: ee:6f:fa:e0:d6:16:95:63:b6:59:49:07:78:69:69: bf:f8:22:93:e5:97:8a:db:e5:61:ec:b6:80:d6:d9: d0:ca:8e:3b:b9:63:09:a0:4e:57:a7:e7:9c:85:ab: 7e:3c:86:eb:cf:a6:7e:f1:61:4b:87:ed:8a:32:e4: c6:58:3b:7c:ea:13:22:59:18:e5:4f:c0:3a:fd:6a: ef:a5:ba:d9:81:26:fb:35:5f:84:4c:12:18:f4:95: b6:fd:9b:7c:99:f4:f3:4e:d2:ce:6c:20:8a:b9:9e: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:F8:9D:E4:30:C7:A8:AB:73:8D:7B:07:85:00:78:A3:DA:DA:F2 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/JMX4neQwx6irc417B4UAeKPa2vI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.168.64.0/18 Signature Algorithm: sha256WithRSAEncryption 3d:ad:f2:73:c5:3a:63:06:4d:2c:5f:a3:c9:8d:73:5d:39:fd: 1e:d4:26:a3:3d:fb:0c:2d:e8:34:52:31:d5:7c:3b:4c:49:11: 0e:dd:17:c3:66:88:98:62:c3:31:d3:b7:05:fa:90:ae:91:ff: 90:b6:49:c7:3b:2b:09:b2:77:19:0d:0c:d3:a9:9f:1d:5f:c9: 32:10:2f:ac:bf:14:f1:49:fe:32:17:5c:1f:64:93:05:d2:3d: 2f:84:bd:34:c1:88:e4:b8:2b:28:19:bd:9d:a1:63:8d:c4:7d: cd:fe:18:ce:d2:c3:39:60:82:4e:9b:14:10:e8:c4:16:4f:27: d5:a7:79:6d:89:b0:d0:f3:cf:99:90:b8:81:e0:48:ae:c3:7f: 2d:36:14:b1:63:1a:66:a2:2a:88:29:3e:0f:be:94:d9:43:e6: a2:ed:e4:ec:ab:ba:16:25:ba:22:29:1e:57:6e:ca:ce:40:3f: 6e:1c:78:ff:f3:38:24:42:b3:f6:8e:ee:d6:76:bc:d8:71:40: 27:4b:ad:97:89:1d:2b:cc:95:2d:f7:bd:d5:7e:13:1a:74:f8: 74:89:c6:11:fd:93:ad:de:80:e1:1c:d1:01:06:21:9c:a7:12: f6:c4:19:51:5b:8b:90:6b:ff:15:e6:58:8a:91:16:74:d9:97: 78:08:31:bb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0I4 MzAwQjIwNjU5QkI5NTEwNjBGNjBCMUY0QkM2MDkxQUYyNzYzOTAeFw0yNTA4MDEw MTI5MjZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDI0QzVGODlERTQzMEM3 QThBQjczOEQ3QjA3ODUwMDc4QTNEQURBRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGvSS8zNKtzN6oCAolrEfRZsx8H6JjHwVjdLPcnguafIK0t+wh x2Fg/+SVnfHShwoKdLSt7slTdErYolDRxZvlHc4jbwEUee6OX8jOWIY8gclb7lAG cfaxl4IPM//AtZf5WmON310FWVDtEZADdyjiH7uGjtr3ftz/IZqu6u0O3iqO52n9 Up8iwJBFNEBompl1UE0E8u5v+uDWFpVjtllJB3hpab/4IpPll4rb5WHstoDW2dDK jju5YwmgTlen55yFq348huvPpn7xYUuH7Yoy5MZYO3zqEyJZGOVPwDr9au+lutmB Jvs1X4RMEhj0lbb9m3yZ9PNO0s5sIIq5no6BAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUJMX4neQwx6irc417B4UAeKPa2vIwHwYDVR0jBBgwFoAUy4MAsgZZu5UQYPYL H0vGCRrydjkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzc4My95NE1Bc2daWnU1VVFZUFlMSDB2R0NScnlkamsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95NE1Bc2daWnU1VVFZUFlMSDB2R0NS cnlkamsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNzgzL0pNWDRuZVF3eDZpcmM0MTdCNFVBZUtQYTJ2SS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbLqEAwDQYJKoZIhvcNAQELBQADggEBAD2t8nPFOmMGTSxfo8mNc105/R7U JqM9+wwt6DRSMdV8O0xJEQ7dF8NmiJhiwzHTtwX6kK6R/5C2Scc7KwmydxkNDNOp nx1fyTIQL6y/FPFJ/jIXXB9kkwXSPS+EvTTBiOS4KygZvZ2hY43Efc3+GM7Swzlg gk6bFBDoxBZPJ9WneW2JsNDzz5mQuIHgSK7Dfy02FLFjGmaiKogpPg++lNlD5qLt 5OyruhYluiIpHlduys5AP24ceP/zOCRCs/aO7tZ2vNhxQCdLrZeJHSvMlS33vdV+ Exp0+HSJxhH9k63egOEc0QEGIZynEvbEGVFbi5Br/xXmWIqRFnTZl3gIMbs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:27 2025 by rpki-client