$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2ZZ_N9Kpig8_gW-cRNaHgghvhOc.roa File: 2ZZ_N9Kpig8_gW-cRNaHgghvhOc.roa (raw, json) Hash identifier: DU4+Eip+/6VasGLi7AB8Y3K7b/RHMY8i1e2lVoZfeZE= Subject key identifier: D9:96:7F:37:D2:A9:8A:0F:3F:81:6F:9C:44:D6:87:82:08:6F:84:E7 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0107 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2ZZ_N9Kpig8_gW-cRNaHgghvhOc.roa Signing time: Thu 24 Jul 2025 02:05:33 +0000 ROA not before: Thu 24 Jul 2025 02:05:33 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 61.203.176.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:05:33 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=D9967F37D2A98A0F3F816F9C44D68782086F84E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:6e:56:9e:d7:a1:93:69:dd:4a:38:77:db: 4f:98:b1:22:a1:0b:2e:46:b9:a6:4b:1b:01:01:ad: 36:83:e2:8a:33:1e:d9:4d:ea:cc:1d:fa:bd:6a:dd: 36:64:6d:97:86:8a:c6:26:d0:f2:61:f1:ba:c9:23: fe:78:87:7d:b9:38:76:ac:3a:10:8a:9e:80:79:a8: 71:80:81:ed:2f:57:23:bb:99:8a:37:95:5b:12:87: e8:17:b8:4b:f1:7a:bc:1c:8b:30:3d:38:44:ec:4f: 28:5f:25:b0:12:1f:79:6e:12:c2:26:a4:62:33:94: 31:62:f3:07:f6:73:fd:4c:cf:4d:e4:21:04:6d:49: d1:45:65:40:5f:00:c7:ac:a1:37:cb:8f:db:7f:72: 7d:52:29:8e:6d:b7:08:c3:55:ad:07:09:6c:06:e4: f6:f7:1b:a0:ec:2a:45:73:4e:01:8c:a5:2d:f3:7a: 77:bf:c6:40:9d:33:fe:55:0d:bd:e3:a9:31:03:a6: 49:eb:f0:2c:2a:69:1b:18:4e:ef:06:25:7e:d3:22: bc:a1:88:65:f1:57:35:46:ec:39:fa:e0:f4:f7:f3: 35:b3:27:93:25:dc:ae:a9:ec:f1:32:e5:f9:8f:21: 81:68:c5:d0:0b:ed:d1:43:75:aa:5c:34:90:7a:ec: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:96:7F:37:D2:A9:8A:0F:3F:81:6F:9C:44:D6:87:82:08:6F:84:E7 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/2ZZ_N9Kpig8_gW-cRNaHgghvhOc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.203.176.0/20 Signature Algorithm: sha256WithRSAEncryption 53:a1:78:5e:61:77:5d:7e:ce:6a:fa:8f:aa:a1:54:b9:99:7f: 60:fd:e8:36:e0:d4:27:98:2e:e6:84:ad:39:49:b6:fd:6f:bc: 8f:b7:84:c1:0e:65:d9:53:90:43:1e:d3:ba:8d:ea:dc:fb:de: 3e:e7:0a:97:53:6d:fb:56:cb:b7:52:5d:cc:9e:18:ac:cb:a3: a1:de:46:89:10:5e:24:70:ff:eb:e2:a4:b1:63:2c:cb:be:18: aa:cf:cd:f5:ec:64:05:ba:b8:f8:34:b6:f4:72:25:a3:37:9d: ed:74:39:4c:8b:3b:cb:07:5e:d5:79:4e:2d:73:ff:f8:7d:0b: 35:fe:c4:14:7a:60:c5:95:57:ba:f2:65:f8:6b:13:c8:1d:5a: a9:59:e1:a7:33:84:c3:b0:57:34:f0:0d:49:f5:97:83:28:34: 74:94:d1:09:04:09:a4:a8:49:ce:28:47:33:40:e6:c5:f3:5f: 38:c3:f4:c8:db:d9:99:98:81:90:97:cf:4d:76:7d:d9:2d:ed: 58:c3:1d:df:30:4d:4f:84:b4:ba:34:0d:71:e4:c8:10:1c:1e: 81:21:96:fa:8a:ba:d7:e4:d7:26:e8:78:58:9f:06:3b:51:43: 3a:ad:56:18:73:7b:97:39:4e:a4:84:22:91:15:03:39:be:c9: e5:98:6d:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjA1MzNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEQ5OTY3RjM3RDJBOThB MEYzRjgxNkY5QzQ0RDY4NzgyMDg2Rjg0RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdvm5Wntehk2ndSjh320+YsSKhCy5GuaZLGwEBrTaD4oozHtlN 6swd+r1q3TZkbZeGisYm0PJh8brJI/54h325OHasOhCKnoB5qHGAge0vVyO7mYo3 lVsSh+gXuEvxerwcizA9OETsTyhfJbASH3luEsImpGIzlDFi8wf2c/1Mz03kIQRt SdFFZUBfAMesoTfLj9t/cn1SKY5ttwjDVa0HCWwG5Pb3G6DsKkVzTgGMpS3zene/ xkCdM/5VDb3jqTEDpknr8CwqaRsYTu8GJX7TIryhiGXxVzVG7Dn64PT38zWzJ5Ml 3K6p7PEy5fmPIYFoxdAL7dFDdapcNJB67GyZAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU2ZZ/N9Kpig8/gW+cRNaHgghvhOcwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My8yWlpfTjlLcGlnOF9nVy1jUk5hSGdnaHZoT2Mu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEPcuwMA0GCSqGSIb3DQEBCwUAA4IBAQBToXheYXddfs5q+o+qoVS5 mX9g/eg24NQnmC7mhK05Sbb9b7yPt4TBDmXZU5BDHtO6jerc+94+5wqXU237Vsu3 Ul3Mnhisy6Oh3kaJEF4kcP/r4qSxYyzLvhiqz8317GQFurj4NLb0ciWjN53tdDlM izvLB17VeU4tc//4fQs1/sQUemDFlVe68mX4axPIHVqpWeGnM4TDsFc08A1J9ZeD KDR0lNEJBAmkqEnOKEczQObF8184w/TI29mZmIGQl89Ndn3ZLe1Ywx3fME1PhLS6 NA1x5MgQHB6BIZb6irrX5Ncm6HhYnwY7UUM6rVYYc3uXOU6khCKRFQM5vsnlmG37 -----END CERTIFICATE-----Generated at Wed Nov 5 19:54:06 2025 by rpki-client