$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/q1GjCumXoBxPA-ZCcpdhqmlO3F0.roa File: q1GjCumXoBxPA-ZCcpdhqmlO3F0.roa (raw, json) Hash identifier: vicASxjLvXb4Yg2fIt287rfi0eY/50Q7jdHGjdEpFFc= Subject key identifier: AB:51:A3:0A:E9:97:A0:1C:4F:03:E6:42:72:97:61:AA:69:4E:DC:5D Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 87 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/q1GjCumXoBxPA-ZCcpdhqmlO3F0.roa Signing time: Fri 01 Aug 2025 01:29:53 +0000 ROA not before: Fri 01 Aug 2025 01:29:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 118.67.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:29:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=AB51A30AE997A01C4F03E642729761AA694EDC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:87:49:19:f4:bd:3e:d3:ae:93:43:a9:47: 5b:10:8b:4b:2b:95:0d:a1:cc:f7:51:eb:a3:bb:e6: 87:de:38:7f:47:eb:fb:07:5b:70:a6:61:29:cf:82: 61:60:23:f6:72:cc:77:f9:34:6c:2f:56:d6:62:51: d3:c5:53:0c:ee:da:a3:b1:42:9e:f5:66:a3:01:3c: ba:0e:2a:52:e9:35:23:e6:4b:99:51:00:28:f0:16: 74:00:09:5d:8c:bf:60:d9:6c:61:dc:48:ce:2f:e4: 9c:11:8f:ec:2d:29:0a:b4:23:80:0b:06:00:39:ab: e7:13:b0:a6:ad:44:b5:ae:a9:5b:0d:3a:50:ca:b1: 42:1a:a9:48:49:d2:08:25:c1:4c:26:bd:4b:07:db: 46:d5:76:56:56:2f:7e:a8:e7:b5:a0:60:0a:0b:26: 3f:e9:d1:79:31:56:f0:f1:df:51:80:89:71:7e:60: 34:f8:27:ed:12:07:a0:91:3f:3a:03:4d:af:5c:a4: 06:13:ac:4e:54:35:cf:82:5c:8a:a7:16:7a:e7:5a: 7e:f8:17:77:96:7c:02:45:79:f1:81:17:36:3e:7a: b1:ad:bb:40:64:a3:77:c4:1d:80:cd:78:b1:68:44: 1e:f4:50:05:bf:9b:40:d5:e0:2a:29:aa:98:76:11: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:51:A3:0A:E9:97:A0:1C:4F:03:E6:42:72:97:61:AA:69:4E:DC:5D X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/q1GjCumXoBxPA-ZCcpdhqmlO3F0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.67.96.0/20 Signature Algorithm: sha256WithRSAEncryption 28:f1:26:65:6f:c2:0c:a1:ab:66:56:9e:f5:3a:79:78:45:08: 42:4c:d3:24:cd:4e:27:71:b7:5a:43:a1:76:7d:44:5e:44:ab: 61:05:f0:cc:16:be:77:85:7f:3f:28:eb:18:80:37:82:b3:14: 47:9e:4b:9e:78:89:3a:18:4f:2a:28:5f:ed:bd:11:f7:cb:66: 82:f6:27:4a:14:ca:ec:ba:f4:fd:67:5f:c7:b9:82:1a:53:04: 17:93:b5:2f:46:cd:fa:95:3d:64:69:dd:fb:82:2d:43:c2:9b: 70:22:2d:b7:51:a3:9b:dd:54:3f:7b:72:b2:9b:39:5f:29:98: b8:6e:94:e3:81:4c:14:09:2b:4a:2b:9d:8f:80:ce:e5:a8:7c: d1:b0:92:04:b7:41:bf:1f:1b:08:d0:65:6f:71:2a:fd:b5:ae: 82:50:e5:6d:f9:f3:c9:fe:30:44:a1:83:ab:8a:7a:71:24:47: 22:43:27:55:0b:87:5f:4d:69:46:1b:07:6e:db:92:df:21:04: 78:a9:0b:22:37:cd:c4:af:6d:7a:96:a9:d1:90:0a:97:24:00: 93:3d:d2:31:f8:e7:0a:b3:12:46:1b:97:50:4e:fb:45:82:97: df:0a:b9:23:b1:46:f1:e0:e9:7d:33:84:84:69:f2:e9:3b:ab: 6e:c3:2c:ce -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTI5NTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEFCNTFBMzBBRTk5N0Ew MUM0RjAzRTY0MjcyOTc2MUFBNjk0RURDNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp8IdJGfS9PtOuk0OpR1sQi0srlQ2hzPdR66O75ofeOH9H6/sH W3CmYSnPgmFgI/ZyzHf5NGwvVtZiUdPFUwzu2qOxQp71ZqMBPLoOKlLpNSPmS5lR ACjwFnQACV2Mv2DZbGHcSM4v5JwRj+wtKQq0I4ALBgA5q+cTsKatRLWuqVsNOlDK sUIaqUhJ0gglwUwmvUsH20bVdlZWL36o57WgYAoLJj/p0XkxVvDx31GAiXF+YDT4 J+0SB6CRPzoDTa9cpAYTrE5UNc+CXIqnFnrnWn74F3eWfAJFefGBFzY+erGtu0Bk o3fEHYDNeLFoRB70UAW/m0DV4Copqph2EeOLAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUq1GjCumXoBxPA+ZCcpdhqmlO3F0wHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi9xMUdqQ3VtWG9CeFBBLVpDY3BkaHFtbE8zRjAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEdkNgMA0GCSqGSIb3DQEBCwUAA4IBAQAo8SZlb8IMoatmVp71Onl4 RQhCTNMkzU4ncbdaQ6F2fUReRKthBfDMFr53hX8/KOsYgDeCsxRHnkueeIk6GE8q KF/tvRH3y2aC9idKFMrsuvT9Z1/HuYIaUwQXk7UvRs36lT1kad37gi1DwptwIi23 UaOb3VQ/e3KymzlfKZi4bpTjgUwUCStKK52PgM7lqHzRsJIEt0G/HxsI0GVvcSr9 ta6CUOVt+fPJ/jBEoYOrinpxJEciQydVC4dfTWlGGwdu25LfIQR4qQsiN83Er216 lqnRkAqXJACTPdIx+OcKsxJGG5dQTvtFgpffCrkjsUbx4Ol9M4SEafLpO6tuwyzO -----END CERTIFICATE-----Generated at Mon Aug 11 02:09:19 2025 by rpki-client