$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/d0_fvys9RBcez5NAz4p6hFCfaLQ.roa File: d0_fvys9RBcez5NAz4p6hFCfaLQ.roa (raw, json) Hash identifier: X6ycNiBinqVQMY/T2ryDmB+usk3qUEmjYz1HU7gQOEI= Subject key identifier: 77:4F:DF:BF:2B:3D:44:17:1E:CF:93:40:CF:8A:7A:84:50:9F:68:B4 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 89 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/d0_fvys9RBcez5NAz4p6hFCfaLQ.roa Signing time: Fri 01 Aug 2025 01:29:54 +0000 ROA not before: Fri 01 Aug 2025 01:29:54 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 175.111.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:54 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=774FDFBF2B3D44171ECF9340CF8A7A84509F68B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:bc:81:87:93:fc:f3:48:f4:b4:d2:78:dc: 27:c3:8d:f5:a5:76:4b:cc:d3:2d:db:9c:03:40:08: ce:90:ee:80:68:6a:a9:5c:bf:d1:ee:8f:86:9c:a6: 4e:5d:fe:53:78:9d:71:9a:c4:5d:c1:d9:be:42:5e: 44:0b:02:b3:89:3f:9b:4e:06:ad:d8:83:53:2c:42: ea:ce:07:7a:05:a3:a5:96:4c:cf:da:00:06:52:4f: 87:65:c7:97:2a:b8:66:1e:dc:9d:ba:9f:32:25:5a: 09:f6:a7:71:16:1a:03:3f:7e:20:0f:44:8b:6f:5c: d7:40:18:0d:03:0e:25:eb:28:f6:b7:53:81:ee:c0: 49:2a:20:c6:e8:a3:1d:e2:0a:c2:b3:af:a8:58:7f: a2:73:23:bf:d5:66:c5:73:fb:ae:a1:31:e6:24:5e: fd:bb:ec:21:2c:20:0f:6f:bc:ec:62:bb:00:3e:67: 2b:01:31:d7:ff:a5:1f:10:f5:c0:0e:a8:04:50:a8: f4:f5:f8:4b:bd:fe:db:fb:16:5c:00:68:f9:d4:81: 84:ef:ef:8f:93:ea:d8:44:ff:37:21:f5:f9:84:b9: ef:a7:90:4a:7b:eb:e5:2c:51:c6:76:bf:be:c8:c0: 96:3f:b8:82:3b:7a:d0:5e:db:44:4e:5d:46:e6:92: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4F:DF:BF:2B:3D:44:17:1E:CF:93:40:CF:8A:7A:84:50:9F:68:B4 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/d0_fvys9RBcez5NAz4p6hFCfaLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.111.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:d6:86:dc:f0:5c:c0:7b:84:b4:93:97:77:5d:89:04:be:bb: c0:37:ef:3e:83:7c:b8:cd:db:d8:76:53:ff:f9:8f:e5:55:40: 09:a8:7c:33:03:24:ef:c4:d4:87:16:ae:a3:f8:e4:67:1c:35: f0:1c:a2:67:c8:f6:0d:b9:4e:9b:9a:7c:00:48:43:b1:cc:67: dc:3b:5b:db:67:fa:ce:dc:1c:c8:a3:ed:88:b0:41:03:81:a5: 14:ef:30:e3:14:79:a7:8f:22:50:63:79:80:7b:39:a6:86:97: 3d:ca:9c:6e:f9:79:c8:74:0c:bd:1d:b2:a2:ba:3c:72:43:67: a0:cc:83:c5:2d:90:14:cc:9b:1a:19:94:a2:08:0a:c0:c0:af: f6:a0:89:fd:b1:5a:8c:a2:cd:f4:4f:6b:50:e1:72:68:73:42: b6:ec:56:d3:44:fa:ca:f4:f5:47:60:34:78:e8:d6:1b:e9:b6: 7e:9c:e7:7f:85:1d:4f:58:82:14:29:6f:13:d5:a8:8b:2a:29: 8e:3f:bc:5b:7e:9f:e7:6d:1f:6d:27:8e:b8:5d:e6:9b:6b:5d: 6a:3c:e5:1e:a9:e4:8b:bc:8e:96:4a:c4:0c:11:ba:b9:e2:bf: fa:cd:3e:81:95:4f:43:23:0c:d2:6a:68:75:bb:6e:b9:15:a3: 06:71:af:02 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NTRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDc3NEZERkJGMkIzRDQ0 MTcxRUNGOTM0MENGOEE3QTg0NTA5RjY4QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqZbyBh5P880j0tNJ43CfDjfWldkvM0y3bnANACM6Q7oBoaqlc v9Huj4acpk5d/lN4nXGaxF3B2b5CXkQLArOJP5tOBq3Yg1MsQurOB3oFo6WWTM/a AAZST4dlx5cquGYe3J26nzIlWgn2p3EWGgM/fiAPRItvXNdAGA0DDiXrKPa3U4Hu wEkqIMboox3iCsKzr6hYf6JzI7/VZsVz+66hMeYkXv277CEsIA9vvOxiuwA+ZysB Mdf/pR8Q9cAOqARQqPT1+Eu9/tv7FlwAaPnUgYTv74+T6thE/zch9fmEue+nkEp7 6+UsUcZ2v77IwJY/uII7etBe20ROXUbmktpRAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUd0/fvys9RBcez5NAz4p6hFCfaLQwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi9kMF9mdnlzOVJCY2V6NU5BejRwNmhGQ2ZhTFEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEr29AMA0GCSqGSIb3DQEBCwUAA4IBAQAr1obc8FzAe4S0k5d3XYkE vrvAN+8+g3y4zdvYdlP/+Y/lVUAJqHwzAyTvxNSHFq6j+ORnHDXwHKJnyPYNuU6b mnwASEOxzGfcO1vbZ/rO3BzIo+2IsEEDgaUU7zDjFHmnjyJQY3mAezmmhpc9ypxu +XnIdAy9HbKiujxyQ2egzIPFLZAUzJsaGZSiCArAwK/2oIn9sVqMos30T2tQ4XJo c0K27FbTRPrK9PVHYDR46NYb6bZ+nOd/hR1PWIIUKW8T1aiLKimOP7xbfp/nbR9t J464Xeaba11qPOUeqeSLvI6WSsQMEbq54r/6zT6BlU9DIwzSamh1u265FaMGca8C -----END CERTIFICATE-----Generated at Mon Aug 11 02:22:24 2025 by rpki-client