$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/cOnS43Hkxk6bvwifqxycDsXtQes.roa File: cOnS43Hkxk6bvwifqxycDsXtQes.roa (raw, json) Hash identifier: uqBhIdG+bbXUuyMQWJ4IsHHM4zN802dGfkHwWr0/L4g= Subject key identifier: 70:E9:D2:E3:71:E4:C6:4E:9B:BF:08:9F:AB:1C:9C:0E:C5:ED:41:EB Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36 Certificate serial: 18 Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/cOnS43Hkxk6bvwifqxycDsXtQes.roa Signing time: Sat 08 Feb 2025 06:48:17 +0000 ROA not before: Sat 08 Feb 2025 06:48:17 +0000 ROA not after: Fri 06 Feb 2026 03:05:32 +0000 asID: 23831 IP address blocks: 103.235.112.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36 Validity Not Before: Feb 8 06:48:17 2025 GMT Not After : Feb 6 03:05:32 2026 GMT Subject: CN=70E9D2E371E4C64E9BBF089FAB1C9C0EC5ED41EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:f3:81:9a:06:00:e3:5e:f2:0f:01:68:ff: 6a:fd:70:f4:df:2c:fb:ee:1d:0e:41:5e:6f:56:bd: 7c:16:46:ba:3a:8f:83:bf:40:4f:a7:06:8f:ef:98: 52:71:80:cf:2c:c5:9b:da:a9:8f:e1:17:82:d8:fe: fe:72:a0:98:f5:f3:e3:52:18:8d:3d:0e:aa:38:13: 2b:8c:3f:83:34:96:56:49:45:83:49:8c:3c:56:85: 4a:d4:b5:83:89:60:48:6c:87:47:b7:d5:29:82:d0: 53:45:a1:3e:2b:c9:00:e1:18:af:47:af:96:a5:b3: 80:12:bc:6a:7d:2c:d9:10:96:fa:af:c6:70:fd:25: 84:cf:01:6e:48:d6:a6:cd:7b:0e:e0:7d:5f:f2:ef: e4:d2:ff:c4:f2:d4:7d:9b:5d:b9:01:93:84:49:b2: 10:13:3e:4f:40:0d:b7:95:04:50:5a:73:45:92:68: 60:e1:20:41:27:21:94:a0:c2:36:f4:e3:15:59:7c: d9:73:1f:26:93:32:d0:ab:86:e3:c0:1f:0f:7f:00: 0a:a8:2d:d4:02:6c:73:6b:3f:57:4b:94:a9:92:5d: 46:cf:29:05:0b:8a:79:79:d2:72:43:c6:16:64:42: d4:86:43:3b:b6:dc:e3:b7:fd:96:c8:39:f8:c1:5a: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:D2:E3:71:E4:C6:4E:9B:BF:08:9F:AB:1C:9C:0E:C5:ED:41:EB X509v3 Authority Key Identifier: keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/cOnS43Hkxk6bvwifqxycDsXtQes.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.112.0/22 Signature Algorithm: sha256WithRSAEncryption 85:e5:1d:3b:b5:e0:5d:58:af:c7:a6:49:b5:39:ac:a4:94:bb: a3:f4:7a:14:0f:79:9d:25:e0:5b:b5:d2:da:ac:ca:e9:2f:a7: 40:f6:10:27:2c:0b:e2:83:2b:14:eb:1c:28:0d:69:37:08:1e: be:70:bd:79:06:0a:d4:4e:bc:c3:77:be:e1:38:09:9b:db:8e: 3e:51:0f:04:4c:13:2a:7f:6d:8c:55:4d:d2:02:f6:2e:9b:f4: 4a:eb:08:96:27:ec:e4:2f:85:df:74:95:8f:0e:45:10:16:83: c8:eb:21:38:6a:fb:1b:03:5d:fd:e9:81:70:42:c9:71:63:e9: a1:df:e7:11:72:be:3d:4a:82:45:99:f0:0a:eb:1c:94:d9:13: c7:ed:8b:0f:ae:b4:9a:5c:31:1d:83:77:0b:5b:fd:2c:e9:ff: 9e:c8:9a:e1:51:f4:e3:e2:c8:85:fe:00:39:e8:0c:a1:62:af: 58:ce:2f:45:e0:62:86:54:8d:ec:e4:18:69:7d:55:a1:b6:6f: 27:f3:fe:05:13:9e:f4:b3:13:29:c3:b0:f1:07:f1:f9:ce:6d: 21:3c:47:9d:28:08:50:16:41:0f:bb:44:74:2c:87:16:a3:71: 6f:f9:49:41:8f:d0:ee:65:1d:3c:9f:e0:63:fe:e5:a7:fd:09: 9d:74:76:73 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI1MDIwODA2 NDgxN1oXDTI2MDIwNjAzMDUzMlowMzExMC8GA1UEAxMoNzBFOUQyRTM3MUU0QzY0 RTlCQkYwODlGQUIxQzlDMEVDNUVENDFFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKx284GaBgDjXvIPAWj/av1w9N8s++4dDkFeb1a9fBZGujqPg79A T6cGj++YUnGAzyzFm9qpj+EXgtj+/nKgmPXz41IYjT0OqjgTK4w/gzSWVklFg0mM PFaFStS1g4lgSGyHR7fVKYLQU0WhPivJAOEYr0evlqWzgBK8an0s2RCW+q/GcP0l hM8BbkjWps17DuB9X/Lv5NL/xPLUfZtduQGThEmyEBM+T0ANt5UEUFpzRZJoYOEg QSchlKDCNvTjFVl82XMfJpMy0KuG48AfD38ACqgt1AJsc2s/V0uUqZJdRs8pBQuK eXnSckPGFmRC1IZDO7bc47f9lsg5+MFaGHECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRw6dLjceTGTpu/CJ+rHJwOxe1B6zAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1 TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NzMvY09uUzQzSGt4azZidndpZnF4eWNEc1h0UWVzLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfrcDANBgkqhkiG9w0BAQsFAAOCAQEAheUdO7XgXVivx6ZJtTmspJS7o/R6 FA95nSXgW7XS2qzK6S+nQPYQJywL4oMrFOscKA1pNwgevnC9eQYK1E68w3e+4TgJ m9uOPlEPBEwTKn9tjFVN0gL2Lpv0SusIlifs5C+F33SVjw5FEBaDyOshOGr7GwNd /emBcELJcWPpod/nEXK+PUqCRZnwCusclNkTx+2LD660mlwxHYN3C1v9LOn/nsia 4VH04+LIhf4AOegMoWKvWM4vReBihlSN7OQYaX1VobZvJ/P+BROe9LMTKcOw8Qfx +c5tITxHnSgIUBZBD7tEdCyHFqNxb/lJQY/Q7mUdPJ/gY/7lp/0JnXR2cw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:35:23 2025 by rpki-client