$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/NzV2I5yYmw655m8zQiTmWLOZP1Y.roa File: NzV2I5yYmw655m8zQiTmWLOZP1Y.roa (raw, json) Hash identifier: ytuMkDj9GAoMgk+vomAsD7oK0dJaBc3uAQ9dF8T6wII= Subject key identifier: 37:35:76:23:9C:98:9B:0E:B9:E6:6F:33:42:24:E6:58:B3:99:3F:56 Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016 Certificate serial: 51 Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/NzV2I5yYmw655m8zQiTmWLOZP1Y.roa Signing time: Fri 01 Aug 2025 01:29:42 +0000 ROA not before: Fri 01 Aug 2025 01:29:42 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 146987 IP address blocks: 157.120.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016 Validity Not Before: Aug 1 01:29:42 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=373576239C989B0EB9E66F334224E658B3993F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:c2:7d:69:ff:5e:5a:71:49:a3:21:9c:24: 4b:61:6f:ec:0b:76:9e:5e:c0:4e:c6:bf:6a:93:2f: e3:55:6b:1a:13:95:fa:4d:89:77:9b:d4:39:f9:7c: e0:86:5e:8f:ef:8a:f5:8f:8f:42:ac:a7:6b:c6:bd: ba:fd:f6:9c:33:56:02:c1:6b:1b:5f:e5:5d:ab:80: e2:6c:bf:7b:3b:2c:c0:20:33:a3:aa:c1:64:4e:c0: 2e:d1:4b:27:91:cf:ab:95:a7:79:9d:7c:e5:02:1f: 65:fe:37:4e:4f:8f:d9:1c:f5:91:ac:b7:95:86:fc: df:ac:90:1b:08:41:06:ee:d8:e3:7f:59:7e:9a:95: c9:d5:76:10:eb:e5:54:51:95:0b:e2:c4:27:f6:f8: 06:8e:0d:d5:f5:27:79:bd:23:ec:ae:85:b7:cd:29: ca:fb:d9:7e:a0:b3:05:0a:1a:07:39:0a:97:79:55: 68:c7:4d:01:90:62:e5:d7:0f:c5:55:b3:b1:ab:a3: 08:c4:6f:79:e8:53:7f:db:2f:f8:8f:f2:c7:ac:4c: 45:b1:be:35:a0:e0:09:b1:61:ff:58:c7:df:e2:1b: 08:2b:79:cf:5c:a7:7d:96:f9:aa:d4:d0:a4:0e:5e: ef:d0:b9:80:f5:d6:ee:4b:55:25:6a:9a:0e:0a:9e: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:35:76:23:9C:98:9B:0E:B9:E6:6F:33:42:24:E6:58:B3:99:3F:56 X509v3 Authority Key Identifier: keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/NzV2I5yYmw655m8zQiTmWLOZP1Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.114.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:4f:ff:7a:26:74:9c:9f:e5:50:78:14:dc:ba:2d:a5:ec:7d: 01:62:c4:02:b3:09:1b:c0:93:55:3e:dd:b1:4e:c5:46:b8:92: 56:ef:fb:50:76:64:2f:f8:59:8e:47:08:b7:93:b7:41:06:df: 5b:54:a7:e3:82:d4:1f:c9:e1:9b:69:da:cc:a8:e6:b6:14:36: 76:2d:7f:96:fb:42:45:79:aa:22:da:b0:20:76:f4:ed:ac:be: 3f:94:ee:7c:4e:3d:e2:fe:78:76:f6:e1:96:f3:62:95:32:7a: 26:30:48:46:4d:31:1c:de:d9:cd:47:ad:50:e7:46:44:f4:4b: 74:1d:c9:fa:f1:45:e4:b5:9b:ff:eb:6b:75:04:3a:4e:81:68: c4:3a:bf:96:41:58:88:31:65:50:42:fd:ee:ed:7c:78:b6:82: a7:02:56:03:ec:fc:5d:2b:15:cb:08:d5:23:73:49:73:d3:6f: 9a:c7:0a:4f:0f:1c:6a:77:a1:a5:30:90:95:5c:df:a3:d2:92: 68:27:eb:b1:d1:bd:86:c8:de:9f:75:21:32:90:f5:bc:c2:9d: d5:63:43:04:c1:53:18:bf:ef:97:dc:e0:ae:45:0e:6f:24:68: c9:5e:17:4d:38:1a:51:8b:91:bd:d7:69:18:2b:30:3b:26:ea: 38:37:1a:04 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjcy RkFBNTIzQkE2NTI2ODU1RDk5MDY1RTIxQjRCOTU4QzVGMDE2MB4XDTI1MDgwMTAx Mjk0MloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMzczNTc2MjM5Qzk4OUIw RUI5RTY2RjMzNDIyNEU2NThCMzk5M0Y1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANmAwn1p/15acUmjIZwkS2Fv7At2nl7ATsa/apMv41VrGhOV+k2J d5vUOfl84IZej++K9Y+PQqyna8a9uv32nDNWAsFrG1/lXauA4my/ezsswCAzo6rB ZE7ALtFLJ5HPq5WneZ185QIfZf43Tk+P2Rz1kay3lYb836yQGwhBBu7Y439ZfpqV ydV2EOvlVFGVC+LEJ/b4Bo4N1fUneb0j7K6Ft80pyvvZfqCzBQoaBzkKl3lVaMdN AZBi5dcPxVWzsaujCMRveehTf9sv+I/yx6xMRbG+NaDgCbFh/1jH3+IbCCt5z1yn fZb5qtTQpA5e79C5gPXW7ktVJWqaDgqe3eECAwEAAaOCAigwggIkMB0GA1UdDgQW BBQ3NXYjnJibDrnmbzNCJOZYs5k/VjAfBgNVHSMEGDAWgBT7cvqlI7plJoVdmQZe IbS5WMXwFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5NjYvLTNMNnBTTzZaU2FGWFprR1hpRzB1VmpGOEJZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLTNMNnBTTzZaU2FGWFprR1hpRzB1 VmpGOEJZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwOTY2L056VjJJNXlZbXc2NTVtOHpRaVRtV0xPWlAxWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACdeHIwDQYJKoZIhvcNAQELBQADggEBAGpP/3omdJyf5VB4FNy6LaXs fQFixAKzCRvAk1U+3bFOxUa4klbv+1B2ZC/4WY5HCLeTt0EG31tUp+OC1B/J4Ztp 2syo5rYUNnYtf5b7QkV5qiLasCB29O2svj+U7nxOPeL+eHb24ZbzYpUyeiYwSEZN MRze2c1HrVDnRkT0S3QdyfrxReS1m//ra3UEOk6BaMQ6v5ZBWIgxZVBC/e7tfHi2 gqcCVgPs/F0rFcsI1SNzSXPTb5rHCk8PHGp3oaUwkJVc36PSkmgn67HRvYbI3p91 ITKQ9bzCndVjQwTBUxi/75fc4K5FDm8kaMleF004GlGLkb3XaRgrMDsm6jg3GgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:53 2025 by rpki-client