$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/4Zy06IeiInqtxi4dVD_70hix-V0.roa File: 4Zy06IeiInqtxi4dVD_70hix-V0.roa (raw, json) Hash identifier: PmTjk7dyT+5XM7hMELhYOgf5zZMwu6yp5Y34OyG7AFA= Subject key identifier: E1:9C:B4:E8:87:A2:22:7A:AD:C6:2E:1D:54:3F:FB:D2:18:B1:F9:5D Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 41 Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/4Zy06IeiInqtxi4dVD_70hix-V0.roa Signing time: Tue 10 Jun 2025 10:48:48 +0000 ROA not before: Tue 10 Jun 2025 10:48:48 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38628 IP address blocks: 115.126.136.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 10 10:48:48 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=E19CB4E887A2227AADC62E1D543FFBD218B1F95D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:95:3e:bb:ca:46:b4:14:c3:e5:9f:3d:b3: 04:55:98:2c:b9:cb:30:82:17:30:3d:34:51:b6:ca: 64:62:48:68:62:05:d0:14:2e:e2:3c:6c:22:43:93: ff:49:1f:95:7a:8e:46:5f:88:fb:00:72:ce:cf:6d: 4a:ba:2f:0e:be:32:7c:43:b2:96:0f:80:e7:43:fb: 3b:76:18:89:c2:23:64:39:ca:60:71:2f:fa:84:5b: 72:85:76:72:fa:3c:bb:2c:55:f9:b1:3e:cf:06:a1: e4:37:48:ba:ec:e0:94:a1:22:a9:f0:ce:a9:56:28: 9f:07:c3:08:da:05:60:d6:dc:45:ea:b3:c2:47:84: 7b:c4:6a:9a:24:d3:3d:37:65:e4:b2:15:4b:d5:40: 13:94:9a:5a:90:28:51:b4:5a:3a:30:2a:2a:ed:c1: f7:e3:21:68:08:33:e7:ec:91:6a:cf:fc:29:af:5b: 4b:59:bd:42:fa:ed:91:ae:cf:39:a3:0d:ca:84:c1: ce:35:a0:8e:98:c4:cf:a1:8c:6a:ac:74:e0:47:1f: 3d:93:97:bb:ea:4b:44:a0:dd:52:43:48:83:45:43: e7:2d:9c:d9:06:25:62:77:1e:27:5e:c2:45:04:77: 63:cd:10:8a:9a:18:cd:86:64:c4:50:bb:69:19:47: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9C:B4:E8:87:A2:22:7A:AD:C6:2E:1D:54:3F:FB:D2:18:B1:F9:5D X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/4Zy06IeiInqtxi4dVD_70hix-V0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.126.136.0/21 Signature Algorithm: sha256WithRSAEncryption 49:70:8b:1a:8f:be:d1:36:03:b1:8e:32:2c:88:77:e1:13:a3: ae:0a:e5:63:81:c7:ee:bd:24:c3:6d:90:c5:5a:54:54:c0:4a: 64:64:ff:63:c6:1e:b8:c4:58:60:0b:82:6b:77:89:ca:a6:d3: fd:2e:90:fc:13:89:81:97:1a:1b:93:69:8a:0f:67:13:c3:6b: f2:cf:c2:69:9e:f2:5a:b7:33:b4:b0:af:9d:9c:62:cc:2a:0f: 14:90:5f:93:fb:d7:98:a9:aa:f6:1e:16:3e:55:a4:95:62:ea: 78:98:5b:9a:8e:08:ed:8a:20:78:25:d8:45:ad:12:ca:fe:b0: 8b:d2:88:60:c9:04:90:67:1a:e5:15:a6:4e:9d:3c:94:01:82: c3:29:4d:18:f3:0f:98:bc:1a:5f:91:d5:0d:48:de:96:30:90: 55:55:bf:d0:b9:67:30:f9:e0:b3:2c:10:11:df:d7:9c:0a:6f: b4:c5:bf:d7:dc:bc:28:22:73:f1:ee:61:ef:df:8f:0b:9f:bc: 67:28:7b:73:96:f8:d7:e1:70:a2:ad:61:0c:81:ee:5d:a1:56: 1b:09:18:39:f4:25:fc:bb:a3:2f:46:69:d4:8f:c7:35:b1:0f: dc:68:c9:5c:de:2d:4e:ab:ee:83:3b:f2:8d:5c:cb:09:7e:ca: 59:2f:fb:70 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI1MDYxMDEw NDg0OFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoRTE5Q0I0RTg4N0EyMjI3 QUFEQzYyRTFENTQzRkZCRDIxOEIxRjk1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALiXlT67yka0FMPlnz2zBFWYLLnLMIIXMD00UbbKZGJIaGIF0BQu 4jxsIkOT/0kflXqORl+I+wByzs9tSrovDr4yfEOylg+A50P7O3YYicIjZDnKYHEv +oRbcoV2cvo8uyxV+bE+zwah5DdIuuzglKEiqfDOqVYonwfDCNoFYNbcReqzwkeE e8RqmiTTPTdl5LIVS9VAE5SaWpAoUbRaOjAqKu3B9+MhaAgz5+yRas/8Ka9bS1m9 Qvrtka7POaMNyoTBzjWgjpjEz6GMaqx04EcfPZOXu+pLRKDdUkNIg0VD5y2c2QYl YnceJ17CRQR3Y80QipoYzYZkxFC7aRlH7yUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBThnLToh6Iieq3GLh1UP/vSGLH5XTAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvNFp5MDZJZWlJbnF0eGk0ZFZEXzcwaGl4LVYwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3N+iDANBgkqhkiG9w0BAQsFAAOCAQEASXCLGo++0TYDsY4yLIh34ROjrgrl Y4HH7r0kw22QxVpUVMBKZGT/Y8YeuMRYYAuCa3eJyqbT/S6Q/BOJgZcaG5Npig9n E8Nr8s/CaZ7yWrcztLCvnZxizCoPFJBfk/vXmKmq9h4WPlWklWLqeJhbmo4I7Yog eCXYRa0Syv6wi9KIYMkEkGca5RWmTp08lAGCwylNGPMPmLwaX5HVDUjeljCQVVW/ 0LlnMPngsywQEd/XnApvtMW/19y8KCJz8e5h79+PC5+8Zyh7c5b41+Fwoq1hDIHu XaFWGwkYOfQl/LujL0Zp1I/HNbEP3GjJXN4tTqvugzvyjVzLCX7KWS/7cA== -----END CERTIFICATE-----Generated at Sun Jun 22 07:26:00 2025 by rpki-client