$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-mTp7CGpaAyfGFzYPgwq3g0-0TE.roa File: -mTp7CGpaAyfGFzYPgwq3g0-0TE.roa (raw, json) Hash identifier: ImaWK/Xek2iBMosBnPJ5h3LKDOSsV/w+1uM9qPRuB48= Subject key identifier: FA:64:E9:EC:21:A9:68:0C:9F:18:5C:D8:3E:0C:2A:DE:0D:3E:D1:31 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 8C Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-mTp7CGpaAyfGFzYPgwq3g0-0TE.roa Signing time: Fri 01 Aug 2025 01:29:56 +0000 ROA not before: Fri 01 Aug 2025 01:29:56 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 182.236.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:56 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=FA64E9EC21A9680C9F185CD83E0C2ADE0D3ED131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:ad:37:81:21:ec:77:bd:38:d3:bd:eb:ce: cb:a6:e8:4b:f3:60:2d:f3:f2:52:ca:69:24:9f:46: 76:25:2c:0d:a1:74:a8:4e:02:64:c8:5e:cf:08:37: 38:1c:49:f1:11:d8:20:23:33:75:70:a5:ab:43:3b: fd:9a:e0:f8:93:a5:18:0d:b7:ba:1c:22:5c:56:33: fc:00:a9:6e:3f:00:7e:18:01:7c:89:fe:cc:97:0f: 52:c6:c5:11:ec:a6:ce:ce:27:dc:05:0d:3c:ba:f1: 82:73:b0:b0:73:39:3e:33:af:6f:2f:8c:af:0e:4b: 89:5d:ae:4e:03:8a:a9:83:0d:93:8e:07:44:9d:e0: fb:80:87:25:88:99:d8:54:ec:09:3f:0c:9f:32:b9: 32:00:1c:03:f9:db:13:d9:b6:28:e3:71:30:11:77: 41:00:0e:41:af:96:e0:49:d6:87:3a:c2:fe:30:c9: e0:5e:bb:52:04:85:0c:fa:5e:3d:c6:7d:c7:15:df: 3f:ba:10:9d:2d:1a:8c:d9:69:75:81:38:e0:4b:68: e7:fc:aa:e0:1d:61:88:d7:12:31:bb:2b:86:3f:3c: f6:55:71:84:26:31:96:26:8b:81:77:43:72:63:37: 66:fb:b1:da:a5:ae:83:93:00:49:e6:bf:d6:58:c9: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:E9:EC:21:A9:68:0C:9F:18:5C:D8:3E:0C:2A:DE:0D:3E:D1:31 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-mTp7CGpaAyfGFzYPgwq3g0-0TE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.64.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:75:eb:d9:db:43:2c:f5:a3:46:48:f8:eb:c0:56:3b:48:e9: 07:8b:20:96:ff:70:93:77:5a:a2:f3:72:2d:83:ca:cb:d8:8b: db:3d:62:92:6e:9d:3e:4c:14:a2:b3:d0:d0:02:74:bb:f4:a0: b5:bb:64:9d:6b:dc:77:b8:2a:f6:0a:96:5b:15:6b:b9:62:f5: f7:35:48:8a:66:da:2a:6e:f7:55:a5:c2:49:31:2e:ae:95:e4: e5:b1:51:b7:a9:79:96:d1:85:48:5f:4a:06:55:89:7c:17:30: 6d:7a:71:51:c5:78:da:36:5f:dd:01:d9:b0:e7:f3:bb:b4:11: 00:e0:bb:5f:0b:60:48:cb:b6:37:be:7d:2f:b7:0c:80:cf:f6: 59:97:56:3e:a0:05:ca:b0:5e:e5:6d:34:c3:4e:0d:7c:76:75: 26:47:50:4e:82:89:f0:fa:40:16:49:7e:94:eb:1c:dd:b2:ed: fd:ce:b7:78:b4:9f:e7:0c:8a:d3:98:8f:31:75:ff:01:b0:5c: 3d:46:20:b9:49:57:55:4b:71:95:6d:f1:f6:23:10:1b:11:1d: a8:20:cf:a9:91:96:7b:00:c2:fd:21:17:7b:2c:10:76:28:9f: 00:ea:e5:4c:ac:4f:6b:21:28:c6:3e:29:74:9e:eb:18:4c:9d: 63:55:40:df -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEZBNjRFOUVDMjFBOTY4 MEM5RjE4NUNEODNFMEMyQURFMEQzRUQxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCe3q03gSHsd704073rzsum6EvzYC3z8lLKaSSfRnYlLA2hdKhO AmTIXs8INzgcSfER2CAjM3VwpatDO/2a4PiTpRgNt7ocIlxWM/wAqW4/AH4YAXyJ /syXD1LGxRHsps7OJ9wFDTy68YJzsLBzOT4zr28vjK8OS4ldrk4DiqmDDZOOB0Sd 4PuAhyWImdhU7Ak/DJ8yuTIAHAP52xPZtijjcTARd0EADkGvluBJ1oc6wv4wyeBe u1IEhQz6Xj3GfccV3z+6EJ0tGozZaXWBOOBLaOf8quAdYYjXEjG7K4Y/PPZVcYQm MZYmi4F3Q3JjN2b7sdqlroOTAEnmv9ZYyZbFAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU+mTp7CGpaAyfGFzYPgwq3g0+0TEwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi8tbVRwN0NHcGFBeWZHRnpZUGd3cTNnMC0wVEUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFtuxAMA0GCSqGSIb3DQEBCwUAA4IBAQBfdevZ20Ms9aNGSPjrwFY7 SOkHiyCW/3CTd1qi83Itg8rL2IvbPWKSbp0+TBSis9DQAnS79KC1u2Sda9x3uCr2 CpZbFWu5YvX3NUiKZtoqbvdVpcJJMS6uleTlsVG3qXmW0YVIX0oGVYl8FzBtenFR xXjaNl/dAdmw5/O7tBEA4LtfC2BIy7Y3vn0vtwyAz/ZZl1Y+oAXKsF7lbTTDTg18 dnUmR1BOgonw+kAWSX6U6xzdsu39zrd4tJ/nDIrTmI8xdf8BsFw9RiC5SVdVS3GV bfH2IxAbER2oIM+pkZZ7AML9IRd7LBB2KJ8A6uVMrE9rISjGPil0nusYTJ1jVUDf -----END CERTIFICATE-----Generated at Mon Aug 11 04:43:36 2025 by rpki-client