$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/rxGBT4z_FZoWEPgRiiOgR9VEuu8.roa File: rxGBT4z_FZoWEPgRiiOgR9VEuu8.roa (raw, json) Hash identifier: HncWDL8vPwO73TJuf1H6U9tMi9Tg4byoz7tUGpiz2sI= Subject key identifier: AF:11:81:4F:8C:FF:15:9A:16:10:F8:11:8A:23:A0:47:D5:44:BA:EF Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Certificate serial: 3D Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/rxGBT4z_FZoWEPgRiiOgR9VEuu8.roa Signing time: Tue 10 Jun 2025 10:48:46 +0000 ROA not before: Tue 10 Jun 2025 10:48:45 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 38628 IP address blocks: 125.254.56.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C Validity Not Before: Jun 10 10:48:45 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=AF11814F8CFF159A1610F8118A23A047D544BAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:cf:f8:bf:ff:d8:bd:b2:52:f3:e2:76:6b: 9e:34:f7:c5:4e:f4:a8:3a:63:f1:6b:86:a4:b9:be: 13:4d:af:6f:99:c2:be:f0:43:e4:03:d1:b5:30:e2: 6b:bd:b7:93:78:83:16:25:b0:44:5a:e9:6a:1f:9b: e6:de:40:99:8d:64:99:63:dd:6f:5d:b6:1c:e3:4c: 86:8f:7a:77:f0:2c:c1:1b:ef:0c:20:3e:88:f3:2f: 5f:67:5f:dc:6d:0f:98:3b:f1:a9:b3:cc:0c:16:6d: 01:6f:6b:e6:d9:1c:b7:75:f9:fa:61:4f:ca:31:c8: 45:66:2c:b0:fa:40:ac:b0:0b:9c:7e:d7:51:d6:30: c8:20:f6:18:a7:c5:39:a6:ff:ce:67:47:7c:4c:dc: 59:b2:22:29:3a:1d:24:60:26:76:52:79:94:7e:e9: 5a:45:ea:9d:89:1e:1a:16:4e:cb:42:aa:21:ad:3d: 06:1c:f3:a4:d0:75:56:e9:6e:99:1b:de:8b:d5:ac: 18:fc:40:aa:9e:b0:8e:f6:1e:81:68:7d:69:7b:20: 11:a7:97:05:73:7c:63:9b:a1:2f:19:97:b1:25:c9: d7:03:db:ea:ef:f6:ad:5b:08:7d:c4:44:5f:88:f0: c3:ce:73:6b:5b:49:27:24:7c:7e:63:df:c2:c7:14: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:11:81:4F:8C:FF:15:9A:16:10:F8:11:8A:23:A0:47:D5:44:BA:EF X509v3 Authority Key Identifier: keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/rxGBT4z_FZoWEPgRiiOgR9VEuu8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.254.56.0/22 Signature Algorithm: sha256WithRSAEncryption 28:43:eb:df:cc:0a:b6:b7:e9:5d:2b:0d:70:21:88:d1:8c:f3: cf:10:cb:cd:98:04:58:5a:a2:0b:d8:fe:e3:86:23:f0:0b:5b: 4e:f2:f6:25:74:62:3e:d5:ef:c7:da:c8:44:b8:7c:bd:ed:d3: 44:e3:00:ec:3c:f4:18:07:ca:b9:2e:60:38:d9:c4:3b:de:ed: 87:c8:ea:48:cd:c2:7d:08:47:75:05:49:cf:9a:51:18:ce:6f: 61:fb:32:79:1c:b7:aa:48:09:fe:17:96:d4:27:60:29:49:07: 2e:ed:12:71:6a:ed:05:cc:20:11:63:c3:d9:f0:c6:c4:1b:24: e1:6b:9d:e1:09:49:89:0d:67:f5:d3:7a:17:4b:18:f5:7a:9f: 7d:2e:ae:e8:d0:01:0d:99:14:ad:b0:6e:f6:2f:b7:e6:62:22: 70:32:dc:cd:ef:1b:c3:b8:1a:c1:53:56:bb:73:ad:37:dc:c7: 9b:f1:2d:93:d5:8f:e9:01:f2:ec:27:84:56:0a:98:eb:99:69: ad:0c:02:6d:98:71:d0:44:b2:29:00:13:c5:0e:fb:3b:2d:a7: a4:79:19:1b:84:3b:02:8f:4d:ee:38:02:b2:94:7f:87:7e:67: e7:ef:62:b9:aa:f3:03:58:89:1d:b5:5d:b6:7c:03:fe:f2:3e: 27:a4:24:18 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNEI5 NTM2QzRFQzc4NUI4ODEyRTUzQTIxOUQyQjA5QTdEQ0JDRTBDMB4XDTI1MDYxMDEw NDg0NVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQUYxMTgxNEY4Q0ZGMTU5 QTE2MTBGODExOEEyM0EwNDdENTQ0QkFFRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOcLz/i//9i9slLz4nZrnjT3xU70qDpj8WuGpLm+E02vb5nCvvBD 5APRtTDia723k3iDFiWwRFrpah+b5t5AmY1kmWPdb122HONMho96d/AswRvvDCA+ iPMvX2df3G0PmDvxqbPMDBZtAW9r5tkct3X5+mFPyjHIRWYssPpArLALnH7XUdYw yCD2GKfFOab/zmdHfEzcWbIiKTodJGAmdlJ5lH7pWkXqnYkeGhZOy0KqIa09Bhzz pNB1VulumRvei9WsGPxAqp6wjvYegWh9aXsgEaeXBXN8Y5uhLxmXsSXJ1wPb6u/2 rVsIfcREX4jww85za1tJJyR8fmPfwscUPnsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSvEYFPjP8VmhYQ+BGKI6BH1US67zAfBgNVHSMEGDAWgBTEuVNsTseFuIEuU6IZ 0rCafcvODDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTQ4L3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4zTHpndy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hMbFRiRTdIaGJpQkxsT2lHZEt3bW4z THpndy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NDgvcnhHQlQ0el9GWm9XRVBnUmlpT2dSOVZFdXU4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAn3+ODANBgkqhkiG9w0BAQsFAAOCAQEAKEPr38wKtrfpXSsNcCGI0YzzzxDL zZgEWFqiC9j+44Yj8AtbTvL2JXRiPtXvx9rIRLh8ve3TROMA7Dz0GAfKuS5gONnE O97th8jqSM3CfQhHdQVJz5pRGM5vYfsyeRy3qkgJ/heW1CdgKUkHLu0ScWrtBcwg EWPD2fDGxBsk4Wud4QlJiQ1n9dN6F0sY9XqffS6u6NABDZkUrbBu9i+35mIicDLc ze8bw7gawVNWu3OtN9zHm/Etk9WP6QHy7CeEVgqY65lprQwCbZhx0ESyKQATxQ77 Oy2npHkZG4Q7Ao9N7jgCspR/h35n5+9iuarzA1iJHbVdtnwD/vI+J6QkGA== -----END CERTIFICATE-----Generated at Sun Jun 22 08:51:16 2025 by rpki-client