$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/aiO4zW8Sxv_2Etnx_XQfrfeg9ik.roa File: aiO4zW8Sxv_2Etnx_XQfrfeg9ik.roa (raw, json) Hash identifier: bAOmdgD5lxPX6S4I/hg232O9rE/1zJ8xwtoW6KH/x4w= Subject key identifier: 6A:23:B8:CD:6F:12:C6:FF:F6:12:D9:F1:FD:74:1F:AD:F7:A0:F6:29 Certificate issuer: /CN=FB72FAA523BA6526855D99065E21B4B958C5F016 Certificate serial: 4F Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/aiO4zW8Sxv_2Etnx_XQfrfeg9ik.roa Signing time: Fri 01 Aug 2025 01:29:41 +0000 ROA not before: Fri 01 Aug 2025 01:29:41 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 146987 IP address blocks: 157.120.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 21:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016 Validity Not Before: Aug 1 01:29:41 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=6A23B8CD6F12C6FFF612D9F1FD741FADF7A0F629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:e8:96:b3:e5:06:66:e7:38:15:52:ee:3e: 43:ca:af:0a:4b:0e:b0:96:78:1a:86:01:e3:d3:71: 62:3d:c6:17:cc:76:14:bb:d1:c6:ec:65:14:be:30: be:51:40:6b:19:a1:02:69:a5:ac:82:9b:8c:54:73: 40:6c:52:d7:c3:7c:dd:7f:fb:b1:73:14:84:c9:c3: 7c:7a:e8:f5:a2:5c:51:fe:85:28:f6:23:f6:e9:14: 95:bb:eb:f5:2a:19:4f:c8:3c:44:91:69:42:74:c8: ec:d9:c3:d7:29:05:a1:9c:f9:a4:2f:39:0c:ca:98: 29:98:5f:e4:7e:9c:d9:1c:f6:5e:0e:75:6b:f2:f7: 25:3c:ca:d6:1d:2a:e6:50:4a:36:77:a8:cd:7e:b5: f0:31:dd:64:ce:8e:9d:0e:ff:c8:52:e2:42:f1:f8: e8:e6:c2:73:c8:6b:24:ef:be:a9:11:93:e1:45:00: 9f:bd:db:cf:66:f8:45:44:20:77:ba:16:52:f1:ca: 5a:62:9d:2e:40:fb:83:d9:27:1f:0f:a0:ff:29:f3: b1:ee:3e:9b:68:ab:4f:2b:d2:f4:3b:4a:e1:df:ca: 8f:28:02:e7:dd:ba:20:2f:75:e9:48:57:d0:04:aa: 0a:56:f6:36:97:72:2a:c6:3b:47:ec:27:ab:e1:5e: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:B8:CD:6F:12:C6:FF:F6:12:D9:F1:FD:74:1F:AD:F7:A0:F6:29 X509v3 Authority Key Identifier: keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/aiO4zW8Sxv_2Etnx_XQfrfeg9ik.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.112.0/24 Signature Algorithm: sha256WithRSAEncryption 54:71:62:0c:01:80:f8:20:6a:f7:69:7f:c3:9f:62:c0:a2:ef: ec:e9:32:00:6b:f4:d1:51:bc:04:be:1e:c3:32:05:b2:8e:72: a1:94:5d:81:55:41:db:f4:44:f9:87:eb:e3:e8:30:01:8b:3b: ee:6e:ed:c2:d0:ce:6f:89:39:57:48:e2:2b:4d:13:f6:6a:11: e2:9a:04:7c:79:14:55:8c:3e:3f:74:f7:a0:b5:a9:c2:59:8d: b2:00:5a:e9:59:1d:38:4c:d5:e6:c3:3d:85:ca:3e:bc:53:41: 5b:af:a5:fa:42:d8:84:13:e2:25:97:cf:ee:9e:b6:a9:cb:bb: 36:1a:fa:d0:82:91:31:09:da:fa:91:76:93:c9:68:74:92:ec: f7:de:18:d9:10:21:b9:58:9d:f2:70:7a:63:ed:35:e5:e6:e9: 16:2a:1e:4e:30:28:69:95:1b:90:3b:e4:53:eb:6a:67:9e:2a: 54:d3:5a:2a:59:a6:cd:46:cb:21:b3:ca:20:8d:6a:8e:11:a3: 1e:b9:33:e9:79:dd:6c:8b:20:83:0a:66:87:15:94:7e:2b:b7: 9f:a1:fb:f1:56:04:f9:c2:be:17:df:d3:ce:8b:63:37:0d:20: 88:99:99:b8:e9:13:17:38:f8:bf:df:41:1b:7f:ec:6f:94:e2: 34:5e:16:9a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjcy RkFBNTIzQkE2NTI2ODU1RDk5MDY1RTIxQjRCOTU4QzVGMDE2MB4XDTI1MDgwMTAx Mjk0MVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNkEyM0I4Q0Q2RjEyQzZG RkY2MTJEOUYxRkQ3NDFGQURGN0EwRjYyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKqE6Jaz5QZm5zgVUu4+Q8qvCksOsJZ4GoYB49NxYj3GF8x2FLvR xuxlFL4wvlFAaxmhAmmlrIKbjFRzQGxS18N83X/7sXMUhMnDfHro9aJcUf6FKPYj 9ukUlbvr9SoZT8g8RJFpQnTI7NnD1ykFoZz5pC85DMqYKZhf5H6c2Rz2Xg51a/L3 JTzK1h0q5lBKNneozX618DHdZM6OnQ7/yFLiQvH46ObCc8hrJO++qRGT4UUAn73b z2b4RUQgd7oWUvHKWmKdLkD7g9knHw+g/ynzse4+m2irTyvS9DtK4d/KjygC5926 IC916UhX0ASqClb2NpdyKsY7R+wnq+FeB/8CAwEAAaOCAigwggIkMB0GA1UdDgQW BBRqI7jNbxLG//YS2fH9dB+t96D2KTAfBgNVHSMEGDAWgBT7cvqlI7plJoVdmQZe IbS5WMXwFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5NjYvLTNMNnBTTzZaU2FGWFprR1hpRzB1VmpGOEJZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLTNMNnBTTzZaU2FGWFprR1hpRzB1 VmpGOEJZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwOTY2L2FpTzR6VzhTeHZfMkV0bnhfWFFmcmZlZzlpay5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACdeHAwDQYJKoZIhvcNAQELBQADggEBAFRxYgwBgPggavdpf8OfYsCi 7+zpMgBr9NFRvAS+HsMyBbKOcqGUXYFVQdv0RPmH6+PoMAGLO+5u7cLQzm+JOVdI 4itNE/ZqEeKaBHx5FFWMPj9096C1qcJZjbIAWulZHThM1ebDPYXKPrxTQVuvpfpC 2IQT4iWXz+6etqnLuzYa+tCCkTEJ2vqRdpPJaHSS7PfeGNkQIblYnfJwemPtNeXm 6RYqHk4wKGmVG5A75FPrameeKlTTWipZps1GyyGzyiCNao4Rox65M+l53WyLIIMK ZocVlH4rt5+h+/FWBPnCvhff086LYzcNIIiZmbjpExc4+L/fQRt/7G+U4jReFpo= -----END CERTIFICATE-----Generated at Wed Aug 13 23:02:56 2025 by rpki-client