$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/NTP9DNsk25m7ShZa6-5Qk1gwBdM.roa File: NTP9DNsk25m7ShZa6-5Qk1gwBdM.roa (raw, json) Hash identifier: nnGwxbmOaQ2PcyIAvA38UkOG+pw6LeTpIBPHkVu8Oqk= Subject key identifier: 35:33:FD:0C:DB:24:DB:99:BB:4A:16:5A:EB:EE:50:93:58:30:05:D3 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 90 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/NTP9DNsk25m7ShZa6-5Qk1gwBdM.roa Signing time: Fri 01 Aug 2025 01:29:58 +0000 ROA not before: Fri 01 Aug 2025 01:29:58 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 202.144.224.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:58 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=3533FD0CDB24DB99BB4A165AEBEE5093583005D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:3a:5f:08:a7:47:23:76:7c:6a:5c:dc:76: 5f:51:96:db:b4:55:43:49:38:38:2c:2e:16:e8:29: 91:18:d4:38:54:7b:ab:01:cf:3e:01:41:e0:3e:8b: 80:42:df:21:47:9b:9e:08:8f:84:af:5e:6d:98:11: 20:da:af:35:20:18:2e:c8:c9:02:c4:ca:4d:b1:3c: e5:41:4e:ca:85:19:a8:49:91:63:6b:1a:dd:02:4d: 01:22:d6:46:93:4a:a6:ff:36:59:ae:88:b6:99:03: 9f:3b:49:ea:9a:28:6d:fd:69:b4:6a:86:e7:dc:fe: 8b:a4:af:c2:70:c5:50:5c:cf:68:d3:2f:38:96:ea: fe:c0:07:e3:3f:e2:4e:dd:92:e3:bf:6f:0d:23:50: 4f:9c:88:df:21:24:be:e7:84:ed:26:2e:06:20:ba: 25:98:96:3a:1b:52:e7:2a:f1:9a:b7:c3:f9:91:95: f1:81:f8:a4:2c:8a:d4:e8:25:99:fa:36:99:94:65: 93:9a:15:5c:74:fc:38:68:4c:1e:52:59:01:1c:63: 12:14:5c:43:18:b1:d1:64:d7:6d:5a:91:4f:5d:71: 02:81:27:d4:94:82:97:9a:1e:e1:88:34:0e:7c:88: c9:f8:58:41:1a:f4:fc:3d:bf:b0:9d:95:96:44:76: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:FD:0C:DB:24:DB:99:BB:4A:16:5A:EB:EE:50:93:58:30:05:D3 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/NTP9DNsk25m7ShZa6-5Qk1gwBdM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.144.224.0/19 Signature Algorithm: sha256WithRSAEncryption 87:83:73:74:7f:07:6d:37:77:b9:cb:ae:32:c9:59:a2:53:ce: ff:fc:82:d3:a7:05:67:28:11:47:04:f8:81:86:8b:e7:63:9f: 73:49:13:67:c9:fd:18:49:5c:a1:8a:66:48:97:f8:45:50:d3: 21:4a:10:04:77:a2:82:79:ab:5b:66:5d:37:21:93:b2:dc:a2: 57:eb:79:5d:e1:2b:36:bc:47:07:3b:0b:41:1d:87:03:59:cf: 1a:ef:b3:06:3c:97:4e:e9:6e:21:64:12:10:d0:b7:b7:38:42: 00:ea:f8:83:f9:2e:05:d2:bf:5e:78:f4:26:a1:3b:df:f3:7d: 47:bc:71:3a:53:a2:3b:6c:c9:78:a7:8b:b9:32:fa:e5:47:78: db:25:cd:be:9f:7e:a3:37:af:6d:1f:cf:cf:a8:33:7e:9f:f5: 8f:02:00:d2:cf:91:ba:7b:d6:66:df:49:e0:ab:ef:03:83:0b: 34:4e:0c:92:10:9a:e3:51:72:a1:f2:77:7f:64:6c:71:7c:49: 57:0e:b9:86:60:a8:35:91:cb:0a:0e:f2:1b:0f:7c:73:41:33: fb:13:31:7f:9c:34:ef:09:7a:18:88:f5:7d:fc:a4:be:2d:ae: 6d:c2:f3:87:6a:d1:a8:70:51:77:d4:70:ea:60:09:96:42:52: f0:41:df:dd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NThaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDM1MzNGRDBDREIyNERC OTlCQjRBMTY1QUVCRUU1MDkzNTgzMDA1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu6jpfCKdHI3Z8alzcdl9Rltu0VUNJODgsLhboKZEY1DhUe6sB zz4BQeA+i4BC3yFHm54Ij4SvXm2YESDarzUgGC7IyQLEyk2xPOVBTsqFGahJkWNr Gt0CTQEi1kaTSqb/NlmuiLaZA587SeqaKG39abRqhufc/oukr8JwxVBcz2jTLziW 6v7AB+M/4k7dkuO/bw0jUE+ciN8hJL7nhO0mLgYguiWYljobUucq8Zq3w/mRlfGB +KQsitToJZn6NpmUZZOaFVx0/DhoTB5SWQEcYxIUXEMYsdFk121akU9dcQKBJ9SU gpeaHuGINA58iMn4WEEa9Pw9v7CdlZZEdkH1AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUNTP9DNsk25m7ShZa6+5Qk1gwBdMwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi9OVFA5RE5zazI1bTdTaFphNi01UWsxZ3dCZE0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFypDgMA0GCSqGSIb3DQEBCwUAA4IBAQCHg3N0fwdtN3e5y64yyVmi U87//ILTpwVnKBFHBPiBhovnY59zSRNnyf0YSVyhimZIl/hFUNMhShAEd6KCeatb Zl03IZOy3KJX63ld4Ss2vEcHOwtBHYcDWc8a77MGPJdO6W4hZBIQ0Le3OEIA6viD +S4F0r9eePQmoTvf831HvHE6U6I7bMl4p4u5MvrlR3jbJc2+n36jN69tH8/PqDN+ n/WPAgDSz5G6e9Zm30ngq+8Dgws0TgySEJrjUXKh8nd/ZGxxfElXDrmGYKg1kcsK DvIbD3xzQTP7EzF/nDTvCXoYiPV9/KS+La5twvOHatGocFF31HDqYAmWQlLwQd/d -----END CERTIFICATE-----Generated at Mon Aug 11 04:34:03 2025 by rpki-client