$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/wCDh38DbWV281qx3SSWzsyiinEk.roa File: wCDh38DbWV281qx3SSWzsyiinEk.roa (raw, json) Hash identifier: UrhVQBSeQdfgzqSW4p7cTXi0A8EWVtPSRwg78ZUVfTk= Subject key identifier: C0:20:E1:DF:C0:DB:59:5D:BC:D6:AC:77:49:25:B3:B3:28:A2:9C:49 Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D Certificate serial: 2D Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wCDh38DbWV281qx3SSWzsyiinEk.roa Signing time: Fri 01 Aug 2025 01:36:03 +0000 ROA not before: Fri 01 Aug 2025 01:36:03 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 24255 IP address blocks: 202.88.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D Validity Not Before: Aug 1 01:36:03 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=C020E1DFC0DB595DBCD6AC774925B3B328A29C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:9e:df:e7:2d:9b:89:60:d5:f9:e7:a6:e7: 0f:ad:85:45:e1:ac:e9:e7:be:91:41:a1:84:32:18: a8:a2:7a:8b:59:a4:68:7d:9f:08:c5:61:68:bf:8f: 14:9b:5d:6a:6e:94:cf:2f:cc:5b:a2:a3:7a:2d:fc: 24:13:6e:75:91:5f:a2:02:0f:ab:62:4c:8a:b1:70: a7:02:e3:c8:ef:c5:87:0a:50:d9:a1:a8:d2:38:cc: 14:64:c2:be:8c:e6:01:3d:4a:1b:6e:e1:60:53:8f: 79:db:62:cb:3b:c7:4e:f6:0a:17:58:c1:b9:fe:10: 95:73:02:d1:91:97:b0:5f:1a:d3:66:65:a6:32:14: 26:ea:40:d3:32:0e:3a:b6:bf:23:c8:82:32:2c:df: e2:62:39:23:36:e0:d9:7d:e9:e4:6d:8f:16:9d:5f: fc:33:77:79:ce:f1:93:1a:76:42:d4:3f:05:b2:5d: f4:8c:99:93:36:b8:bc:25:83:30:44:3e:58:ea:6a: c8:b0:f5:ba:70:59:71:f5:3f:e4:2c:3e:7c:dd:a3: da:54:92:4b:5c:ce:dc:7a:39:d2:c2:ec:3b:68:e2: 25:6e:75:78:ec:e8:f6:71:2e:13:97:28:90:63:37: d1:50:cf:75:a2:39:17:db:aa:90:46:62:95:c9:42: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:E1:DF:C0:DB:59:5D:BC:D6:AC:77:49:25:B3:B3:28:A2:9C:49 X509v3 Authority Key Identifier: keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wCDh38DbWV281qx3SSWzsyiinEk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.88.192.0/21 Signature Algorithm: sha256WithRSAEncryption a9:e2:48:83:92:e3:4b:6d:a7:0c:b2:65:e2:78:14:cd:9e:1c: fe:ec:1e:18:9c:e9:68:d3:3d:07:d6:0a:13:1b:c8:f2:21:cb: 92:40:6f:dd:a0:c2:15:6d:36:86:7f:6c:b5:10:4c:7a:b7:17: 8c:56:d6:05:50:1e:61:41:58:fb:1a:e9:de:c2:f9:43:17:73: a8:12:48:cf:95:12:19:54:68:82:6d:34:fe:be:cc:74:90:6a: 09:37:64:02:7e:23:98:27:2f:ae:32:cd:93:09:2f:b5:73:a9: 25:8d:ad:83:1f:cd:58:e0:80:01:dc:3d:19:68:9d:0e:25:1b: 2f:32:fa:0a:65:39:00:41:3a:67:10:22:67:ba:6b:ee:bc:7c: b6:a4:4a:fc:1e:7b:99:a9:2c:24:9c:9b:26:8a:3d:8c:6d:56: cf:7e:57:2d:b2:68:09:9a:98:2d:38:95:30:0d:cf:2e:d9:fd: 82:a7:3c:13:7b:f0:b4:8b:75:65:90:57:fe:29:0f:af:76:9f: 6d:e8:4c:4c:73:ae:b1:e6:8b:16:b6:10:2b:5d:f5:9d:e1:93: df:fd:78:23:d4:62:6c:33:39:03:7d:51:24:62:37:8c:65:d4: 32:ce:ba:38:1e:08:57:55:64:7c:bd:ee:e9:b1:96:c4:b8:2c: e9:44:0f:8c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQUVG NTdGRjE0NEQyNTA5NEU0NjBFMEZEMzhDODAzNzkzMzRFRDZEMB4XDTI1MDgwMTAx MzYwM1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQzAyMEUxREZDMERCNTk1 REJDRDZBQzc3NDkyNUIzQjMyOEEyOUM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALNCnt/nLZuJYNX556bnD62FReGs6ee+kUGhhDIYqKJ6i1mkaH2f CMVhaL+PFJtdam6Uzy/MW6Kjei38JBNudZFfogIPq2JMirFwpwLjyO/FhwpQ2aGo 0jjMFGTCvozmAT1KG27hYFOPedtiyzvHTvYKF1jBuf4QlXMC0ZGXsF8a02ZlpjIU JupA0zIOOra/I8iCMizf4mI5Izbg2X3p5G2PFp1f/DN3ec7xkxp2QtQ/BbJd9IyZ kza4vCWDMEQ+WOpqyLD1unBZcfU/5Cw+fN2j2lSSS1zO3Ho50sLsO2jiJW51eOzo 9nEuE5cokGM30VDPdaI5F9uqkEZilclCMEMCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTAIOHfwNtZXbzWrHdJJbOzKKKcSTAfBgNVHSMEGDAWgBT671f/FE0lCU5GDg/T jIA3kzTtbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA1Ly11OVhfeFJOSlFsT1JnNFAwNHlBTjVNMDdXMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy11OVhfeFJOSlFsT1JnNFAwNHlBTjVN MDdXMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDUvd0NEaDM4RGJXVjI4MXF4M1NTV3pzeWlpbkVrLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8pYwDANBgkqhkiG9w0BAQsFAAOCAQEAqeJIg5LjS22nDLJl4ngUzZ4c/uwe GJzpaNM9B9YKExvI8iHLkkBv3aDCFW02hn9stRBMercXjFbWBVAeYUFY+xrp3sL5 QxdzqBJIz5USGVRogm00/r7MdJBqCTdkAn4jmCcvrjLNkwkvtXOpJY2tgx/NWOCA Adw9GWidDiUbLzL6CmU5AEE6ZxAiZ7pr7rx8tqRK/B57maksJJybJoo9jG1Wz35X LbJoCZqYLTiVMA3PLtn9gqc8E3vwtIt1ZZBX/ikPr3afbehMTHOuseaLFrYQK131 neGT3/14I9RibDM5A31RJGI3jGXUMs66OB4IV1VkfL3u6bGWxLgs6UQPjA== -----END CERTIFICATE-----Generated at Mon Aug 11 12:58:31 2025 by rpki-client