$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/p9U4HgkaF--BkNLTmH3i3rZ30uM.roa File: p9U4HgkaF--BkNLTmH3i3rZ30uM.roa (raw, json) Hash identifier: fxgpZ06Kw3FXiY9ZU/Hw7MO//Y2cp3Ui8UY/Jf5hZVY= Subject key identifier: A7:D5:38:1E:09:1A:17:EF:81:90:D2:D3:98:7D:E2:DE:B6:77:D2:E3 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 8D Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/p9U4HgkaF--BkNLTmH3i3rZ30uM.roa Signing time: Fri 01 Aug 2025 01:29:56 +0000 ROA not before: Fri 01 Aug 2025 01:29:56 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 182.236.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:56 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=A7D5381E091A17EF8190D2D3987DE2DEB677D2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:0a:5c:ce:ab:77:1f:35:ed:0f:90:a3:20: 06:7b:63:bf:55:88:3f:78:af:2c:f6:58:d9:85:94: 7f:75:2b:86:c9:e6:a2:32:89:e2:12:74:9c:70:28: 10:71:99:7f:fc:5b:a2:64:ef:49:ff:18:9d:db:0a: 5a:d2:84:61:3b:aa:d9:13:be:04:86:2f:38:00:d6: 4f:60:20:09:0a:14:05:a6:e7:dd:3a:3d:e3:9a:33: b7:9c:d3:4d:aa:53:8a:ef:5b:a3:db:a4:3e:a8:a1: c9:85:75:30:50:6b:4c:2c:02:7f:97:04:40:9d:6c: 09:c0:bb:e5:1b:c4:02:e0:05:61:8a:f2:55:3e:84: 5c:48:ff:e6:ec:f6:ac:e7:07:5a:39:91:d8:6b:7b: 3d:70:25:8b:ee:b9:e7:1e:d8:08:fd:8d:0a:c6:13: f4:7b:fd:dd:9c:fa:f9:b0:0f:2c:6b:bb:71:a5:83: d4:b5:09:9e:da:ee:20:86:dd:2e:44:cf:5f:eb:23: fc:52:53:50:1f:31:25:7c:cf:b5:62:3e:5a:4b:b8: 86:b7:00:f7:93:ae:6d:4f:81:b5:ae:fd:da:6a:51: 68:a1:f4:66:6c:61:07:c9:4e:fd:50:b6:ed:3c:4d: 1b:a1:29:1e:f5:27:4b:36:5a:83:47:8c:b2:99:22: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D5:38:1E:09:1A:17:EF:81:90:D2:D3:98:7D:E2:DE:B6:77:D2:E3 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/p9U4HgkaF--BkNLTmH3i3rZ30uM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.236.96.0/20 Signature Algorithm: sha256WithRSAEncryption 16:74:f4:9e:33:34:5a:46:6b:3e:49:cc:59:75:cd:d2:e4:37: 8d:9e:ba:a5:53:94:00:65:92:48:81:28:23:7a:ae:b6:95:96: a5:f8:be:dc:fe:c2:62:b3:d3:21:a0:ac:8f:b5:77:89:4e:2c: d9:84:a4:70:a3:6f:ce:c4:b9:f1:27:6a:89:a9:98:3c:b3:be: 39:dd:4f:22:20:f0:f5:b1:e3:97:eb:ef:c3:28:af:12:65:3e: a2:45:9d:40:fb:2b:3b:d5:79:4b:85:2a:df:4a:87:79:c3:c2: ff:9c:cb:ee:3c:33:27:95:e5:cf:27:c6:88:ac:95:ef:d2:bd: ab:21:1a:1e:09:32:93:e0:c2:a7:ef:d9:2f:e7:21:0c:31:36: b7:17:ec:44:80:c2:3d:43:a2:a7:d8:a9:b5:0f:7f:7d:92:dd: 46:24:e2:10:99:92:4d:17:53:96:71:3e:ac:a3:f8:9c:b6:8c: c9:3f:ed:b8:61:fa:3f:03:21:5b:c1:1d:a3:37:44:77:71:06: b6:e8:01:cd:13:4f:78:8c:6c:14:82:9e:f0:9d:bf:29:86:c9: 4a:c2:f4:87:9b:12:3a:28:14:66:28:d4:0d:04:b3:81:40:d4: 9f:69:59:11:11:aa:78:08:13:5a:e5:66:8b:c7:05:42:b2:7c: c1:5d:9b:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEE3RDUzODFFMDkxQTE3 RUY4MTkwRDJEMzk4N0RFMkRFQjY3N0QyRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEPApczqt3HzXtD5CjIAZ7Y79ViD94ryz2WNmFlH91K4bJ5qIy ieISdJxwKBBxmX/8W6Jk70n/GJ3bClrShGE7qtkTvgSGLzgA1k9gIAkKFAWm5906 PeOaM7ec002qU4rvW6PbpD6oocmFdTBQa0wsAn+XBECdbAnAu+UbxALgBWGK8lU+ hFxI/+bs9qznB1o5kdhrez1wJYvuuece2Aj9jQrGE/R7/d2c+vmwDyxru3Glg9S1 CZ7a7iCG3S5Ez1/rI/xSU1AfMSV8z7ViPlpLuIa3APeTrm1PgbWu/dpqUWih9GZs YQfJTv1Qtu08TRuhKR71J0s2WoNHjLKZIj6pAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUp9U4HgkaF++BkNLTmH3i3rZ30uMwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi9wOVU0SGdrYUYtLUJrTkxUbUgzaTNyWjMwdU0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEtuxgMA0GCSqGSIb3DQEBCwUAA4IBAQAWdPSeMzRaRms+ScxZdc3S 5DeNnrqlU5QAZZJIgSgjeq62lZal+L7c/sJis9MhoKyPtXeJTizZhKRwo2/OxLnx J2qJqZg8s7453U8iIPD1seOX6+/DKK8SZT6iRZ1A+ys71XlLhSrfSod5w8L/nMvu PDMnleXPJ8aIrJXv0r2rIRoeCTKT4MKn79kv5yEMMTa3F+xEgMI9Q6Kn2Km1D399 kt1GJOIQmZJNF1OWcT6so/ictozJP+24Yfo/AyFbwR2jN0R3cQa26AHNE094jGwU gp7wnb8phslKwvSHmxI6KBRmKNQNBLOBQNSfaVkREap4CBNa5WaLxwVCsnzBXZsV -----END CERTIFICATE-----Generated at Mon Aug 11 02:26:16 2025 by rpki-client