$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/bDa2tvJ2QN7y7-HJqKMEerOig28.roa File: bDa2tvJ2QN7y7-HJqKMEerOig28.roa (raw, json) Hash identifier: a5xy44ls98XpdrcTnhpc2gzGJmBwMtnFhMDd6kJkqT8= Subject key identifier: 6C:36:B6:B6:F2:76:40:DE:F2:EF:E1:C9:A8:A3:04:7A:B3:A2:83:6F Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 40 Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/bDa2tvJ2QN7y7-HJqKMEerOig28.roa Signing time: Tue 10 Jun 2025 10:48:47 +0000 ROA not before: Tue 10 Jun 2025 10:48:47 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38628 IP address blocks: 115.84.184.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 10 10:48:47 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=6C36B6B6F27640DEF2EFE1C9A8A3047AB3A2836F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:a4:9e:ad:58:a8:12:a6:4f:b9:e3:b0:9d: e3:5b:b4:76:38:76:fb:8e:d1:57:f1:b8:57:eb:eb: 02:bc:6a:01:54:2d:51:ed:1f:f9:2c:8d:9d:cc:47: 42:37:0b:25:44:1c:22:62:ac:2b:ef:7e:7c:2c:98: da:71:ee:c8:31:34:20:9e:3d:54:4a:2c:c7:99:4a: df:2a:78:7c:36:30:86:8b:1f:96:50:34:55:1f:a2: 28:b6:6f:96:81:02:d4:35:40:b3:4a:76:fb:d6:9f: 1c:d5:b6:8b:2b:9e:f3:f0:32:51:99:f8:8d:69:ee: f4:a8:29:52:05:30:ab:21:6c:2f:f0:15:40:2c:5a: 18:48:48:cf:f9:a5:b1:53:22:1e:58:15:27:c1:c2: ea:1f:2f:15:25:3e:e2:25:40:f3:43:d8:09:ee:54: 53:58:ea:6f:6f:e7:55:35:86:48:22:d4:72:b8:8a: f3:75:54:b2:76:39:1a:65:c9:9a:83:a0:9f:13:5a: c1:19:c3:e5:c6:f2:96:a5:87:14:1f:dd:ac:c4:ac: 76:d0:f8:cb:98:05:9f:e6:68:b7:6b:3c:18:ba:4c: 64:80:f7:92:09:4f:1e:44:a4:af:d4:81:dc:32:75: 92:7d:f1:d8:46:2b:5f:50:72:cc:d6:ac:62:78:ee: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:36:B6:B6:F2:76:40:DE:F2:EF:E1:C9:A8:A3:04:7A:B3:A2:83:6F X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/bDa2tvJ2QN7y7-HJqKMEerOig28.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.84.184.0/21 Signature Algorithm: sha256WithRSAEncryption 06:39:a1:fd:fc:e9:32:e4:c9:62:ad:02:88:8f:3d:0e:88:5a: 19:d3:84:dd:aa:75:47:8e:67:5c:e8:a2:c9:88:e9:8c:d6:de: 2b:c4:82:06:24:07:93:7d:05:d7:ef:84:fd:04:c4:7d:ee:45: 3b:f4:16:f2:e6:2b:56:5e:24:e2:5f:88:9b:4c:a6:21:be:52: c6:b3:71:7b:c7:76:c6:ce:f4:b2:dc:e8:5f:b7:e2:d5:48:cc: 51:fe:7f:a9:f7:16:94:50:5b:9d:8e:46:e7:7f:f7:e1:e7:71: 21:2f:05:4e:89:28:95:fe:a9:dc:65:19:71:7b:10:25:54:26: ea:35:cc:9d:a2:97:fe:35:05:3c:05:6f:9e:d9:91:b4:68:ad: 22:aa:fe:55:31:a0:35:12:3a:79:68:1a:7d:fa:ec:ce:e4:13: 5d:20:df:48:c6:b5:d2:94:07:d1:a4:93:35:7a:29:ff:5c:f2: bb:b4:37:52:6a:3b:c9:90:45:bc:1d:ba:c4:28:e3:79:5c:37: bf:74:5b:0a:b8:0a:e9:55:7b:a1:68:78:00:66:88:cf:f6:93: 3b:a2:1a:6a:7e:9a:34:c0:f0:df:4d:06:0f:1e:88:bb:c8:70: 30:d3:6d:29:15:0d:c6:3f:ca:31:67:44:a5:51:52:55:4f:fe: de:f3:c9:a0 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI1MDYxMDEw NDg0N1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoNkMzNkI2QjZGMjc2NDBE RUYyRUZFMUM5QThBMzA0N0FCM0EyODM2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMknpJ6tWKgSpk+547Cd41u0djh2+47RV/G4V+vrArxqAVQtUe0f +SyNncxHQjcLJUQcImKsK+9+fCyY2nHuyDE0IJ49VEosx5lK3yp4fDYwhosfllA0 VR+iKLZvloEC1DVAs0p2+9afHNW2iyue8/AyUZn4jWnu9KgpUgUwqyFsL/AVQCxa GEhIz/mlsVMiHlgVJ8HC6h8vFSU+4iVA80PYCe5UU1jqb2/nVTWGSCLUcriK83VU snY5GmXJmoOgnxNawRnD5cbylqWHFB/drMSsdtD4y5gFn+Zot2s8GLpMZID3kglP HkSkr9SB3DJ1kn3x2EYrX1ByzNasYnjuxV8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBRsNra28nZA3vLv4cmoowR6s6KDbzAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvYkRhMnR2SjJRTjd5Ny1ISnFLTUVlck9pZzI4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3NUuDANBgkqhkiG9w0BAQsFAAOCAQEABjmh/fzpMuTJYq0CiI89DohaGdOE 3ap1R45nXOiiyYjpjNbeK8SCBiQHk30F1++E/QTEfe5FO/QW8uYrVl4k4l+Im0ym Ib5SxrNxe8d2xs70stzoX7fi1UjMUf5/qfcWlFBbnY5G53/34edxIS8FTokolf6p 3GUZcXsQJVQm6jXMnaKX/jUFPAVvntmRtGitIqr+VTGgNRI6eWgaffrszuQTXSDf SMa10pQH0aSTNXop/1zyu7Q3Umo7yZBFvB26xCjjeVw3v3RbCrgK6VV7oWh4AGaI z/aTO6Iaan6aNMDw300GDx6Iu8hwMNNtKRUNxj/KMWdEpVFSVU/+3vPJoA== -----END CERTIFICATE-----Generated at Sun Jun 22 05:09:16 2025 by rpki-client