$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa File: h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa (raw, json) Hash identifier: UNvvBLc8nbMmM23sWxHwczhG6wRHOey7P8iCXoxaXWs= Subject key identifier: 87:A6:49:84:8C:67:48:88:15:14:AC:ED:A0:46:D7:6B:95:B9:51:3C Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 88 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa Signing time: Fri 01 Aug 2025 01:29:53 +0000 ROA not before: Fri 01 Aug 2025 01:29:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 119.75.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=87A649848C6748881514ACEDA046D76B95B9513C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:ca:e3:ca:4d:ac:65:1f:5e:42:b9:0e:fd: d3:7b:46:1f:ef:33:0f:5c:d8:3b:03:19:9a:64:8d: 01:37:e9:96:9a:c0:33:30:9d:c6:b7:f9:54:3e:cc: 3e:3e:a0:80:ef:76:ff:2c:cc:ce:d2:8f:a5:77:4d: ba:f3:9a:bb:bb:76:2e:1e:08:5e:02:33:71:b6:6c: f1:37:83:c6:de:fe:c9:5c:d5:ad:d0:a3:d4:c1:30: f2:5c:c9:48:5c:ee:4b:50:d7:9a:5f:df:9c:5a:bd: 36:c6:66:4c:ba:7c:b3:b8:fd:1a:76:2b:22:a2:4c: 29:85:59:11:f1:f1:12:45:db:53:58:7a:16:6e:41: 6e:b7:45:f3:77:2c:0a:4a:1b:ff:1e:f7:86:de:06: cf:c1:44:95:56:46:06:82:d3:18:f9:3c:95:fd:31: 3a:49:94:97:b7:98:a6:45:77:10:f9:62:98:a5:be: 43:4b:16:7b:94:79:3f:36:3c:c4:76:2a:40:1e:74: cd:1e:76:a3:52:16:ab:c1:83:f5:a8:c4:42:5f:f6: 7b:d7:a9:2d:5a:59:92:e9:74:fc:83:b3:76:16:9f: 68:7b:8c:be:dc:ff:f2:d9:d2:f5:a3:64:68:d2:54: db:76:7f:69:78:cd:94:d3:74:89:9b:21:de:3e:33: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:49:84:8C:67:48:88:15:14:AC:ED:A0:46:D7:6B:95:B9:51:3C X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.75.224.0/20 Signature Algorithm: sha256WithRSAEncryption 79:75:ff:26:0b:52:c7:3f:67:de:e7:9f:0d:0d:1d:b5:d0:a3: 2d:17:5f:6c:7a:34:bc:20:7f:b6:31:5f:a8:e3:05:6f:94:0b: 4e:7c:12:97:f1:8c:5e:05:dc:1e:88:05:52:ef:5e:90:38:ff: 1e:54:fc:d7:46:25:13:0e:c9:39:f3:45:c9:66:c2:47:71:b7: 8d:0c:4e:63:f7:ea:f0:ef:06:f3:38:9b:9b:70:e9:fc:0c:c8: 48:81:69:bf:e3:b7:32:aa:b2:89:ff:06:0b:6d:10:9a:14:aa: 1e:cd:5d:cc:7c:9a:4b:ad:92:f1:35:7d:d8:77:48:e3:6d:5e: aa:34:19:84:69:1e:ef:d1:c8:c9:da:63:20:8e:50:a7:38:0d: 18:ae:e6:9e:f3:56:f0:19:02:a5:09:60:e9:49:64:4b:24:a7: 06:8d:0a:16:07:d2:4b:7c:13:8a:51:cf:84:a9:8f:50:b1:58: e7:fc:13:45:9c:7c:e2:94:57:05:90:50:88:7b:c9:56:cc:2c: 68:5a:10:41:1d:03:ca:0f:a1:7c:d4:54:37:6e:d1:ae:50:79: 0f:0e:a5:ac:d9:2d:f7:cb:82:8e:10:a6:ba:36:27:dc:12:7c: 3a:ac:3f:50:24:a5:5d:b3:d2:ea:3d:2d:8a:ee:06:e1:36:57: 37:1c:b7:58 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDg3QTY0OTg0OEM2NzQ4 ODgxNTE0QUNFREEwNDZENzZCOTVCOTUxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Asrjyk2sZR9eQrkO/dN7Rh/vMw9c2DsDGZpkjQE36ZaawDMw nca3+VQ+zD4+oIDvdv8szM7Sj6V3Tbrzmru7di4eCF4CM3G2bPE3g8be/slc1a3Q o9TBMPJcyUhc7ktQ15pf35xavTbGZky6fLO4/Rp2KyKiTCmFWRHx8RJF21NYehZu QW63RfN3LApKG/8e94beBs/BRJVWRgaC0xj5PJX9MTpJlJe3mKZFdxD5YpilvkNL FnuUeT82PMR2KkAedM0edqNSFqvBg/WoxEJf9nvXqS1aWZLpdPyDs3YWn2h7jL7c //LZ0vWjZGjSVNt2f2l4zZTTdImbId4+M+yLAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUh6ZJhIxnSIgVFKztoEbXa5W5UTwwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi9oNlpKaEl4blNJZ1ZGS3p0b0ViWGE1VzVVVHcu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEd0vgMA0GCSqGSIb3DQEBCwUAA4IBAQB5df8mC1LHP2fe558NDR21 0KMtF19sejS8IH+2MV+o4wVvlAtOfBKX8YxeBdweiAVS716QOP8eVPzXRiUTDsk5 80XJZsJHcbeNDE5j9+rw7wbzOJubcOn8DMhIgWm/47cyqrKJ/wYLbRCaFKoezV3M fJpLrZLxNX3Yd0jjbV6qNBmEaR7v0cjJ2mMgjlCnOA0Yruae81bwGQKlCWDpSWRL JKcGjQoWB9JLfBOKUc+EqY9QsVjn/BNFnHzilFcFkFCIe8lWzCxoWhBBHQPKD6F8 1FQ3btGuUHkPDqWs2S33y4KOEKa6NifcEnw6rD9QJKVds9LqPS2K7gbhNlc3HLdY -----END CERTIFICATE-----Generated at Mon Aug 11 02:23:41 2025 by rpki-client