$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/D69mHvRQirzJlu5CJlGLqDEeivw.roa File: D69mHvRQirzJlu5CJlGLqDEeivw.roa (raw, json) Hash identifier: vZ9rRlYbjtXNGNSSLngyUUKOlziWBYOUehj8Q32V9i8= Subject key identifier: 0F:AF:66:1E:F4:50:8A:BC:C9:96:EE:42:26:51:8B:A8:31:1E:8A:FC Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 5B Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/D69mHvRQirzJlu5CJlGLqDEeivw.roa Signing time: Tue 10 Jun 2025 10:46:48 +0000 ROA not before: Tue 10 Jun 2025 10:46:48 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 2515 IP address blocks: 211.120.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Jun 10 10:46:48 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=0FAF661EF4508ABCC996EE4226518BA8311E8AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:f9:68:0f:d9:ee:f5:0d:dd:a3:b7:9e:6c: 52:8f:b1:e0:30:ca:d2:03:c8:2e:93:02:29:42:83: 5c:ed:66:a4:c7:67:38:35:93:f1:52:3e:d4:a1:91: 10:14:2d:10:ce:c5:53:03:3f:90:88:50:6a:63:e2: 34:8b:37:e5:fa:31:64:6b:1d:f2:0e:a9:f3:a7:90: e2:d2:46:c9:50:85:75:1d:dc:a2:ed:0f:59:45:2f: 61:8f:c8:3f:ff:36:92:3f:13:31:93:1b:7e:b0:d7: 98:ac:aa:ec:4a:d7:99:9e:1c:b4:fe:2b:03:b1:1c: 83:32:b3:7f:c1:3c:80:73:96:4b:34:ee:bd:eb:50: a2:6e:84:5e:59:9a:08:41:8a:fc:68:8e:f3:09:0f: e3:9d:96:0c:7b:48:0e:4f:3e:12:58:5c:91:10:2d: 7d:4f:ed:31:26:50:87:44:cf:a7:2d:57:20:0e:f0: 8a:ab:2c:16:6f:82:23:3a:df:a3:c8:e8:cb:82:40: c7:69:3a:05:aa:bd:e7:36:37:b7:43:3f:a7:d0:b4: f2:c4:51:db:d3:80:8e:38:90:e9:cb:16:e2:7b:ef: a7:8e:97:15:f8:85:fe:fe:94:e9:72:52:f0:98:e5: ee:06:b3:69:7a:d5:09:c2:29:8b:8d:5e:c6:45:e4: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:66:1E:F4:50:8A:BC:C9:96:EE:42:26:51:8B:A8:31:1E:8A:FC X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/D69mHvRQirzJlu5CJlGLqDEeivw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.240.0/21 Signature Algorithm: sha256WithRSAEncryption 86:a6:d8:be:2e:1c:f4:38:c5:12:39:15:a3:e6:8b:d0:de:da: 6f:2f:07:1f:c8:37:31:10:ed:0b:57:33:a5:f2:55:dc:02:d7: 53:af:2a:11:0b:63:9d:5b:a9:02:8a:cd:5c:e7:a9:19:11:de: 7b:68:4b:f5:c1:77:65:02:e5:f7:67:9f:a1:c1:9c:73:08:bc: f1:a6:7b:d8:22:bc:e9:22:ef:9a:1a:fd:ec:83:e3:12:42:63: 82:ae:38:d3:ab:ce:b3:ad:c7:e3:4d:2e:03:bb:54:65:09:43: d2:9e:49:8a:3f:25:20:33:ff:cf:4c:69:e4:55:15:92:0c:26: f7:10:3d:bc:59:10:10:b3:66:e4:69:f2:f0:1c:b7:a8:2b:ac: db:a7:0f:9d:9e:2b:20:f5:73:2b:ff:85:00:9b:26:98:3d:08: da:18:37:30:81:50:5f:f5:8b:ed:8a:b0:2c:3c:f5:c3:29:15: fc:a5:53:30:7d:cb:41:c7:cd:d9:af:b8:62:1c:70:7d:66:34: ba:9f:42:5e:0c:01:07:d2:96:20:53:4c:a9:4b:fb:e6:18:c3: e1:62:1d:72:d8:b7:4b:46:6a:4a:49:67:46:3a:e0:10:fa:2f: 80:56:ad:be:00:a8:8b:85:53:a9:ce:bd:42:2c:3d:53:a6:96: e9:cf:45:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI1MDYxMDEw NDY0OFoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMEZBRjY2MUVGNDUwOEFC Q0M5OTZFRTQyMjY1MThCQTgzMTFFOEFGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKtL+WgP2e71Dd2jt55sUo+x4DDK0gPILpMCKUKDXO1mpMdnODWT 8VI+1KGREBQtEM7FUwM/kIhQamPiNIs35foxZGsd8g6p86eQ4tJGyVCFdR3cou0P WUUvYY/IP/82kj8TMZMbfrDXmKyq7ErXmZ4ctP4rA7EcgzKzf8E8gHOWSzTuvetQ om6EXlmaCEGK/GiO8wkP452WDHtIDk8+ElhckRAtfU/tMSZQh0TPpy1XIA7wiqss Fm+CIzrfo8joy4JAx2k6Baq95zY3t0M/p9C08sRR29OAjjiQ6csW4nvvp46XFfiF /v6U6XJS8Jjl7gazaXrVCcIpi41exkXkOncCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQPr2Ye9FCKvMmW7kImUYuoMR6K/DAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny9ENjltSHZSUWlyekpsdTVDSmxHTHFERWVpdncucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQD03jwMA0GCSqGSIb3DQEBCwUAA4IBAQCGpti+Lhz0OMUSORWj5ovQ3tpv LwcfyDcxEO0LVzOl8lXcAtdTryoRC2OdW6kCis1c56kZEd57aEv1wXdlAuX3Z5+h wZxzCLzxpnvYIrzpIu+aGv3sg+MSQmOCrjjTq86zrcfjTS4Du1RlCUPSnkmKPyUg M//PTGnkVRWSDCb3ED28WRAQs2bkafLwHLeoK6zbpw+dnisg9XMr/4UAmyaYPQja GDcwgVBf9YvtirAsPPXDKRX8pVMwfctBx83Zr7hiHHB9ZjS6n0JeDAEH0pYgU0yp S/vmGMPhYh1y2LdLRmpKSWdGOuAQ+i+AVq2+AKiLhVOpzr1CLD1Tppbpz0Vm -----END CERTIFICATE-----Generated at Sun Jun 22 10:49:40 2025 by rpki-client