$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/884/Pfcx3SOqh1PPDKQzOEY_2PkE4po.roa File: Pfcx3SOqh1PPDKQzOEY_2PkE4po.roa (raw, json) Hash identifier: Zyq0Qo+RbWiSdOIFsR1yq2FnBj/8DbsFQhMmKxJAV7I= Subject key identifier: 3D:F7:31:DD:23:AA:87:53:CF:0C:A4:33:38:46:3F:D8:F9:04:E2:9A Certificate issuer: /CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Certificate serial: 33 Authority key identifier: 8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/Pfcx3SOqh1PPDKQzOEY_2PkE4po.roa Signing time: Thu 01 May 2025 01:33:17 +0000 ROA not before: Thu 01 May 2025 01:33:17 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 23808 IP address blocks: 103.40.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 02:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF420F19200E11BE4AE8D914EBA2ACB42917B6E Validity Not Before: May 1 01:33:17 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=3DF731DD23AA8753CF0CA43338463FD8F904E29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:b1:07:ca:f7:fa:19:03:9e:cf:07:69:08: 2a:29:92:a2:db:9f:c8:e0:73:7d:5b:88:0f:2d:68: ca:94:3f:1e:6f:ae:d2:0c:7b:78:bc:dd:d5:19:23: 29:f4:7b:ba:b7:20:d4:02:2f:0e:79:e5:5c:16:69: 7c:16:36:08:f9:42:78:e5:4c:8b:c9:73:9a:e8:38: f7:ff:68:8b:95:86:07:46:32:41:fd:52:75:97:4c: d9:66:f2:a0:f5:57:6b:7f:4f:6c:b5:6c:4c:60:e9: 73:7a:32:3c:c9:13:1d:05:9d:05:36:7e:2b:1c:ac: a5:ea:19:ab:de:4b:a4:8a:8a:29:a4:0d:3c:a1:44: c6:22:56:2d:55:6b:22:50:31:e8:1e:9a:06:45:8f: 3c:5f:dd:9e:bf:51:03:b4:4e:ac:7a:f4:43:5b:ea: 68:c2:70:39:11:e4:52:14:0c:b2:3a:05:4c:aa:73: 0c:9a:01:56:9c:26:1e:2d:09:46:aa:d7:33:e2:1f: 7a:49:86:ed:f8:b1:01:46:5a:92:37:1e:e7:41:2f: 28:fa:5a:ba:6a:cb:a7:0c:c8:1c:94:4e:f8:c9:f6: 16:1b:22:d4:68:a7:06:ff:cd:3e:3b:27:77:22:f5: b2:e1:f9:78:ad:cb:2e:72:7a:da:39:e0:26:3a:33: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F7:31:DD:23:AA:87:53:CF:0C:A4:33:38:46:3F:D8:F9:04:E2:9A X509v3 Authority Key Identifier: keyid:8A:F4:20:F1:92:00:E1:1B:E4:AE:8D:91:4E:BA:2A:CB:42:91:7B:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/ivQg8ZIA4Rvkro2RTroqy0KRe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ivQg8ZIA4Rvkro2RTroqy0KRe24.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/884/Pfcx3SOqh1PPDKQzOEY_2PkE4po.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.128.0/22 Signature Algorithm: sha256WithRSAEncryption c6:39:23:57:78:6e:f6:e4:a4:3c:77:5a:37:ed:e2:66:45:44: 5a:30:a6:1c:bd:3e:6b:7f:e6:9b:df:e3:7d:81:3e:3b:16:41: 74:84:a1:85:4b:69:41:74:bf:d2:8d:18:12:1f:41:34:3a:89: 72:93:09:7e:f6:ca:8c:7c:a2:cd:50:ae:75:bc:18:9c:6d:05: e9:b3:c3:12:ef:95:58:29:15:11:c0:cb:7b:02:8b:69:08:4e: b3:91:d6:fe:69:6c:96:61:12:19:4a:3e:0a:42:58:39:87:b8: 6b:41:ca:13:8f:07:02:89:5d:a3:86:8d:97:6a:a8:dc:7e:4c: 60:39:17:86:09:6b:b6:2d:b7:f7:ee:52:83:28:5c:5a:ba:91: 8a:b6:98:6b:64:9c:05:85:35:10:08:f5:59:85:d2:c9:12:ac: d6:b6:10:19:23:09:42:57:7d:4f:9e:8c:af:2c:ba:62:4e:44: f1:2c:c1:51:b1:a1:5f:11:6a:73:c5:5f:48:30:96:c5:f2:f2: da:18:d7:7f:37:39:6c:76:f3:bb:f7:d1:88:d3:83:9d:8f:d2: 4b:09:a1:af:58:b4:5b:6d:a3:ca:75:8c:82:2f:b3:e5:e2:e4: 7c:64:8d:d1:16:e2:52:e9:ae:fc:ba:19:0f:84:16:9a:a2:74: 0a:97:f8:6c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUY0 MjBGMTkyMDBFMTFCRTRBRThEOTE0RUJBMkFDQjQyOTE3QjZFMB4XDTI1MDUwMTAx MzMxN1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoM0RGNzMxREQyM0FBODc1 M0NGMENBNDMzMzg0NjNGRDhGOTA0RTI5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOTasQfK9/oZA57PB2kIKimSotufyOBzfVuIDy1oypQ/Hm+u0gx7 eLzd1RkjKfR7urcg1AIvDnnlXBZpfBY2CPlCeOVMi8lzmug49/9oi5WGB0YyQf1S dZdM2WbyoPVXa39PbLVsTGDpc3oyPMkTHQWdBTZ+KxyspeoZq95LpIqKKaQNPKFE xiJWLVVrIlAx6B6aBkWPPF/dnr9RA7ROrHr0Q1vqaMJwORHkUhQMsjoFTKpzDJoB VpwmHi0JRqrXM+IfekmG7fixAUZakjce50EvKPpaumrLpwzIHJRO+Mn2Fhsi1Gin Bv/NPjsndyL1suH5eK3LLnJ62jngJjozrd8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQ99zHdI6qHU88MpDM4Rj/Y+QTimjAfBgNVHSMEGDAWgBSK9CDxkgDhG+SujZFO uirLQpF7bjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODg0L2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBLUmUyNC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2l2UWc4WklBNFJ2a3JvMlJUcm9xeTBL UmUyNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84ODQvUGZjeDNTT3FoMVBQREtRek9FWV8yUGtFNHBvLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcogDANBgkqhkiG9w0BAQsFAAOCAQEAxjkjV3hu9uSkPHdaN+3iZkVEWjCm HL0+a3/mm9/jfYE+OxZBdIShhUtpQXS/0o0YEh9BNDqJcpMJfvbKjHyizVCudbwY nG0F6bPDEu+VWCkVEcDLewKLaQhOs5HW/mlslmESGUo+CkJYOYe4a0HKE48HAold o4aNl2qo3H5MYDkXhglrti239+5SgyhcWrqRiraYa2ScBYU1EAj1WYXSyRKs1rYQ GSMJQld9T56Mryy6Yk5E8SzBUbGhXxFqc8VfSDCWxfLy2hjXfzc5bHbzu/fRiNOD nY/SSwmhr1i0W22jynWMgi+z5eLkfGSN0RbiUumu/LoZD4QWmqJ0Cpf4bA== -----END CERTIFICATE-----Generated at Thu Nov 6 03:33:02 2025 by rpki-client