$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UjPgvOdo7tWFjSDbmEllUjGJdPE.roa File: UjPgvOdo7tWFjSDbmEllUjGJdPE.roa (raw, json) Hash identifier: wkeL3rf1/KKRfHx4r8JWSqLqqLtKjpfC41mL3/7GpfI= Subject key identifier: 52:33:E0:BC:E7:68:EE:D5:85:8D:20:DB:98:49:65:52:31:89:74:F1 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: A7 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UjPgvOdo7tWFjSDbmEllUjGJdPE.roa Signing time: Thu 24 Jul 2025 00:54:34 +0000 ROA not before: Thu 24 Jul 2025 00:54:34 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 203.183.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 00:54:34 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5233E0BCE768EED5858D20DB98496552318974F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:a4:c2:5e:df:16:da:fe:13:52:ca:4e:3a: 33:9a:68:46:b8:14:ee:97:81:9f:8f:40:b6:4c:0b: 35:8f:70:25:b0:aa:6c:d3:51:62:30:6d:68:0e:71: 51:37:71:49:61:34:39:02:40:e9:22:50:6f:9f:97: 63:62:71:e1:1f:33:8c:4f:3f:bf:00:84:f5:8d:aa: 6a:95:21:1b:76:ae:fd:8a:a4:cf:08:c2:d1:10:dd: 4c:11:a5:3c:3b:11:27:71:99:8b:6d:cc:9d:6e:bf: 1e:eb:df:40:a4:a1:72:53:58:68:f5:ee:3c:73:39: 22:56:53:17:66:9c:d3:e8:2f:1b:0e:9c:4d:f9:a9: 3b:31:ea:e1:97:c0:79:95:98:91:68:f7:7f:f2:fe: a7:75:d1:b0:65:2f:c9:f5:0a:de:ef:ed:5d:0a:44: 17:4b:6b:c1:43:17:dd:0b:0b:e0:22:e6:65:73:d8: 98:92:91:be:f0:69:28:dc:e6:ef:8a:29:24:c6:f4: c7:e3:8f:68:69:0c:9c:4c:75:27:c1:5f:84:8d:c9: b3:2a:ed:57:9a:2f:2f:7a:4e:4e:49:01:63:a1:48: ee:7c:43:e8:60:34:ab:10:42:42:51:d7:8d:49:6e: 41:d6:d5:b3:ca:08:5e:d2:bc:52:f2:5d:18:2f:64: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:33:E0:BC:E7:68:EE:D5:85:8D:20:DB:98:49:65:52:31:89:74:F1 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UjPgvOdo7tWFjSDbmEllUjGJdPE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.183.144.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:81:af:b3:d3:37:d7:9b:4d:64:07:26:92:cd:71:1c:3e:c9: 0e:c0:16:85:9a:87:73:7b:e3:0a:c9:83:eb:c9:f6:e6:dc:3d: 94:fa:4c:b5:53:70:17:0a:86:b4:3e:8c:3e:e2:2b:57:fa:af: 58:23:41:9b:e0:82:59:0d:ce:27:be:87:a9:d0:dc:c3:e3:83: 0a:a7:67:45:67:80:8c:84:06:4a:67:7d:60:34:50:96:ba:8a: cf:bd:ad:02:41:43:1e:60:b4:0e:30:15:46:98:99:ec:5b:45: 7a:39:85:53:75:3d:e8:91:39:e1:bf:cb:e6:57:c6:64:c3:cd: 44:82:12:ec:19:ed:2c:f8:bb:ca:58:8d:f7:e7:a3:95:d2:cb: 4a:c9:4b:23:2b:bc:08:02:5c:80:ec:09:98:55:4e:bf:64:b7: 1c:bc:df:0b:99:7e:20:09:6b:5e:50:d0:94:b9:e9:f8:ca:a6: 64:ae:a2:d8:5a:38:9e:5b:bd:35:02:ce:fb:4f:64:c6:70:6c: ea:93:1e:b9:e5:76:36:1e:c8:e0:23:90:15:aa:ce:7c:59:ca: 7b:02:5b:d8:3c:d1:ad:91:2d:0e:7a:64:bc:65:37:26:84:df: 3f:04:65:2a:f1:df:f6:28:47:61:33:db:7c:be:9c:bb:4a:dd: 0a:c4:1e:d5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MDU0MzRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDUyMzNFMEJDRTc2OEVF RDU4NThEMjBEQjk4NDk2NTUyMzE4OTc0RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCom6TCXt8W2v4TUspOOjOaaEa4FO6XgZ+PQLZMCzWPcCWwqmzT UWIwbWgOcVE3cUlhNDkCQOkiUG+fl2NiceEfM4xPP78AhPWNqmqVIRt2rv2KpM8I wtEQ3UwRpTw7ESdxmYttzJ1uvx7r30CkoXJTWGj17jxzOSJWUxdmnNPoLxsOnE35 qTsx6uGXwHmVmJFo93/y/qd10bBlL8n1Ct7v7V0KRBdLa8FDF90LC+Ai5mVz2JiS kb7waSjc5u+KKSTG9Mfjj2hpDJxMdSfBX4SNybMq7VeaLy96Tk5JAWOhSO58Q+hg NKsQQkJR141JbkHW1bPKCF7SvFLyXRgvZBGHAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUUjPgvOdo7tWFjSDbmEllUjGJdPEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9ValBndk9kbzd0V0ZqU0RibUVsbFVqR0pkUEUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDy7eQMA0GCSqGSIb3DQEBCwUAA4IBAQCNga+z0zfXm01kByaSzXEc PskOwBaFmodze+MKyYPryfbm3D2U+ky1U3AXCoa0Pow+4itX+q9YI0Gb4IJZDc4n voep0NzD44MKp2dFZ4CMhAZKZ31gNFCWuorPva0CQUMeYLQOMBVGmJnsW0V6OYVT dT3okTnhv8vmV8Zkw81EghLsGe0s+LvKWI3356OV0stKyUsjK7wIAlyA7AmYVU6/ ZLccvN8LmX4gCWteUNCUuen4yqZkrqLYWjieW701As77T2TGcGzqkx655XY2Hsjg I5AVqs58Wcp7AlvYPNGtkS0OemS8ZTcmhN8/BGUq8d/2KEdhM9t8vpy7St0KxB7V -----END CERTIFICATE-----Generated at Wed Nov 5 19:52:28 2025 by rpki-client