$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wGx8nN-QKK11yzxUXSEzmJ5CSWM.roa File: wGx8nN-QKK11yzxUXSEzmJ5CSWM.roa (raw, json) Hash identifier: Vp2G1o7ihEn83AJv+NqhHBxWYcshRr3XD6GFAMzfLhY= Subject key identifier: C0:6C:7C:9C:DF:90:28:AD:75:CB:3C:54:5D:21:33:98:9E:42:49:63 Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Certificate serial: 93 Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wGx8nN-QKK11yzxUXSEzmJ5CSWM.roa Signing time: Fri 01 Aug 2025 01:30:00 +0000 ROA not before: Fri 01 Aug 2025 01:30:00 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 15830 IP address blocks: 218.219.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543 Validity Not Before: Aug 1 01:30:00 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=C06C7C9CDF9028AD75CB3C545D2133989E424963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:89:e5:76:92:7c:39:ac:4b:40:91:b9:fb: 69:cc:5d:7d:1d:17:ae:98:ea:b6:b8:bd:33:cb:96: 25:77:a0:e0:e1:e8:e3:12:d3:db:e5:b8:6d:45:99: 3d:6b:1b:f1:36:ad:17:7d:6c:9d:bb:e4:3c:9b:0d: 96:10:9e:6d:c7:83:57:f2:38:ee:b8:ca:17:c4:5d: 56:61:c8:ae:f5:5f:b9:e6:6b:59:1a:d0:53:32:5a: be:82:d5:91:7d:8e:47:cb:17:85:93:1d:0c:7c:08: 47:10:8d:68:d2:41:0f:c3:e9:5b:63:18:0f:15:74: ed:92:f9:e3:07:9e:e9:a9:8a:c5:08:fa:80:c7:e1: 0b:63:25:af:ad:30:b0:83:31:c5:bc:9a:8a:ad:32: 2d:30:19:f3:d2:0a:46:34:e3:a7:f9:d2:7f:52:2a: 3e:25:cf:05:02:99:a2:65:3f:eb:b0:b2:21:68:5b: 22:ca:ef:eb:51:74:99:3e:6d:8c:14:aa:53:67:b3: c9:e1:0c:d9:aa:b6:70:e8:e7:9a:2a:25:64:4c:dd: f7:8f:97:86:d6:3e:e4:3c:0a:e0:94:d4:c8:ad:0c: ff:8e:81:0c:91:81:e0:16:19:ee:59:24:23:9b:0b: fe:36:f3:1d:a9:bb:f5:bb:53:6e:8b:b9:9f:3e:d7: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:7C:9C:DF:90:28:AD:75:CB:3C:54:5D:21:33:98:9E:42:49:63 X509v3 Authority Key Identifier: keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/wGx8nN-QKK11yzxUXSEzmJ5CSWM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.219.64.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:d6:85:ab:3d:ae:82:1a:7a:ae:fb:ee:97:05:8e:9a:93:05: 16:51:3c:83:37:e3:f3:d3:3a:50:df:1c:d6:03:bf:48:bf:b5: 6a:94:88:6b:02:20:a5:95:aa:ee:07:de:69:b6:83:53:5b:4c: ba:de:b1:29:e8:03:71:22:d4:2c:a0:c7:26:34:a5:27:62:48: b7:7c:c4:eb:8d:6c:31:6a:55:a5:b3:dc:ae:25:8f:8a:92:c1: d4:53:00:fa:ed:3c:72:60:15:63:13:5e:ab:79:fd:0c:40:91: 79:bc:35:4a:ee:0f:ce:1f:80:cc:88:57:62:60:04:52:73:58: 4c:67:ba:67:95:59:be:6c:39:f2:b3:d2:98:b3:6a:06:f4:eb: 7d:32:a4:62:29:1a:9f:4a:7b:65:98:aa:d1:0c:f0:3e:5a:7d: d7:bc:33:65:f5:6d:3d:1e:be:0b:56:7b:3c:81:91:b9:d7:6e: d1:bc:68:28:c3:39:c7:08:5e:4d:65:e9:cc:b8:3f:6e:c3:15: 15:c9:76:b7:4a:39:64:5f:d1:2c:68:23:fe:08:fc:b8:98:ce: 13:e5:ac:6b:7e:29:56:f8:eb:75:a8:6f:ff:67:15:0c:05:6e: a2:6e:3d:33:ae:6c:ab:c4:71:6b:9e:c9:00:42:e4:27:7f:dd: d5:6d:6a:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA4MDEw MTMwMDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEMwNkM3QzlDREY5MDI4 QUQ3NUNCM0M1NDVEMjEzMzk4OUU0MjQ5NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAK4nldpJ8OaxLQJG5+2nMXX0dF66Y6ra4vTPLliV3oODh6OMS 09vluG1FmT1rG/E2rRd9bJ275DybDZYQnm3Hg1fyOO64yhfEXVZhyK71X7nma1ka 0FMyWr6C1ZF9jkfLF4WTHQx8CEcQjWjSQQ/D6VtjGA8VdO2S+eMHnumpisUI+oDH 4QtjJa+tMLCDMcW8moqtMi0wGfPSCkY046f50n9SKj4lzwUCmaJlP+uwsiFoWyLK 7+tRdJk+bYwUqlNns8nhDNmqtnDo55oqJWRM3fePl4bWPuQ8CuCU1MitDP+OgQyR geAWGe5ZJCObC/428x2pu/W7U26LuZ8+15lzAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUwGx8nN+QKK11yzxUXSEzmJ5CSWMwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA0Mi93R3g4bk4tUUtLMTF5enhVWFNFem1KNUNTV00u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQE2ttAMA0GCSqGSIb3DQEBCwUAA4IBAQBO1oWrPa6CGnqu++6XBY6a kwUWUTyDN+Pz0zpQ3xzWA79Iv7VqlIhrAiCllaruB95ptoNTW0y63rEp6ANxItQs oMcmNKUnYki3fMTrjWwxalWls9yuJY+KksHUUwD67TxyYBVjE16ref0MQJF5vDVK 7g/OH4DMiFdiYARSc1hMZ7pnlVm+bDnys9KYs2oG9Ot9MqRiKRqfSntlmKrRDPA+ Wn3XvDNl9W09Hr4LVns8gZG5127RvGgowznHCF5NZenMuD9uwxUVyXa3SjlkX9Es aCP+CPy4mM4T5axrfilW+Ot1qG//ZxUMBW6ibj0zrmyrxHFrnskAQuQnf93VbWqB -----END CERTIFICATE-----Generated at Wed Nov 5 22:47:01 2025 by rpki-client