$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/cvBM3AvVzPWQqu_iSZucCXRzG7Q.roa File: cvBM3AvVzPWQqu_iSZucCXRzG7Q.roa (raw, json) Hash identifier: 46eNYi28KVqZEh7KWJADLOyaqX6+biPcAxC/kv5GOLg= Subject key identifier: 72:F0:4C:DC:0B:D5:CC:F5:90:AA:EF:E2:49:9B:9C:09:74:73:1B:B4 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 82 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/cvBM3AvVzPWQqu_iSZucCXRzG7Q.roa Signing time: Thu 17 Jul 2025 01:19:15 +0000 ROA not before: Thu 17 Jul 2025 01:19:15 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.152.206.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 17 01:19:15 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=72F04CDC0BD5CCF590AAEFE2499B9C0974731BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:f7:ee:dd:a1:8d:c2:b2:64:44:5f:0d:33: 2b:48:4c:1e:5d:aa:d7:e8:27:bb:37:1b:02:f8:25: 0a:b1:83:f3:1c:3f:04:e9:6b:a7:33:9f:6d:d5:ff: 96:ed:e7:ef:c1:e0:f7:00:62:40:64:db:fd:85:46: cd:28:58:a2:7d:47:20:10:c3:0e:6d:1f:ce:20:e6: 80:43:a6:51:50:d7:11:40:2a:8a:19:65:45:1b:99: 06:1b:4d:b6:88:4a:43:00:46:8e:d0:6c:05:ad:e4: ef:f9:b6:be:ad:45:ec:65:b6:fd:e3:19:d7:1a:1c: 06:b9:3f:f5:07:3e:2c:a5:29:1f:28:04:b2:66:f0: 91:91:0e:4d:e6:50:92:91:d9:f1:3f:66:25:36:45: e6:b0:53:11:3b:c3:f1:57:f7:ae:cb:cf:38:08:be: d0:54:91:89:5d:fd:3c:13:0d:90:33:42:5f:08:c0: c6:0f:5b:22:8e:5d:9d:e9:39:e2:30:f9:09:8c:35: df:a1:db:05:77:e6:4a:75:71:83:6e:77:1d:20:bb: 26:81:2c:47:21:2c:4e:b7:3e:a6:31:77:8f:a1:8e: 5c:9b:be:11:e9:a8:95:a1:a3:b8:bf:2d:b8:77:69: 03:c9:99:85:6a:4d:d8:e0:33:fd:46:f4:be:3c:bb: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F0:4C:DC:0B:D5:CC:F5:90:AA:EF:E2:49:9B:9C:09:74:73:1B:B4 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/cvBM3AvVzPWQqu_iSZucCXRzG7Q.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.152.206.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:df:8a:63:64:59:55:1b:65:c6:65:ac:cc:e4:f7:31:2f:8d: 5e:33:4c:b5:d7:fe:7c:3f:1a:cf:3f:97:4f:ab:ad:9c:53:35: 6a:79:a1:a8:76:78:8e:fd:ad:b6:a5:ae:57:d6:34:fa:56:f5: 61:6d:8e:dc:a9:fe:fe:d7:91:87:60:76:d5:1e:ed:fb:17:c1: 22:0c:c1:89:0e:64:b7:00:e9:40:2c:67:db:94:df:76:f6:5c: 32:39:e2:e0:fb:b6:9d:b1:7f:2a:92:60:8a:b0:d2:dd:59:57: 6c:a3:b0:c1:2b:f2:50:d7:64:30:67:61:6e:4f:90:a7:78:8e: 2b:05:01:be:18:3a:ed:fb:c6:71:5d:40:ba:7d:4f:59:88:9a: 68:c6:73:9c:71:30:f7:07:e4:dc:85:bd:b7:a8:ff:d2:ac:2f: 39:89:1f:4d:4a:a3:f5:7f:1d:9c:53:63:57:b0:0d:6f:72:b8: b6:cf:3b:7a:a2:2c:d9:eb:62:eb:15:12:d3:cf:62:be:90:bf: a0:ea:a7:67:77:fc:c2:f3:f6:53:3a:3d:f9:f8:f5:3f:e9:b2: 96:1f:23:0a:21:6e:0a:68:a7:4e:13:a7:f1:f0:96:d3:03:63: b8:10:87:d9:8a:15:66:a6:49:d1:39:45:66:ad:9d:d5:0c:ed: 82:33:79:0a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MTcw MTE5MTVaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDcyRjA0Q0RDMEJENUND RjU5MEFBRUZFMjQ5OUI5QzA5NzQ3MzFCQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxpffu3aGNwrJkRF8NMytITB5dqtfoJ7s3GwL4JQqxg/McPwTp a6czn23V/5bt5+/B4PcAYkBk2/2FRs0oWKJ9RyAQww5tH84g5oBDplFQ1xFAKooZ ZUUbmQYbTbaISkMARo7QbAWt5O/5tr6tRexltv3jGdcaHAa5P/UHPiylKR8oBLJm 8JGRDk3mUJKR2fE/ZiU2ReawUxE7w/FX967LzzgIvtBUkYld/TwTDZAzQl8IwMYP WyKOXZ3pOeIw+QmMNd+h2wV35kp1cYNudx0guyaBLEchLE63PqYxd4+hjlybvhHp qJWho7i/Lbh3aQPJmYVqTdjgM/1G9L48u6kXAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUcvBM3AvVzPWQqu/iSZucCXRzG7QwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9jdkJNM0F2VnpQV1FxdV9pU1p1Y0NYUnpHN1Eu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0pjOMA0GCSqGSIb3DQEBCwUAA4IBAQBe34pjZFlVG2XGZazM5Pcx L41eM0y11/58PxrPP5dPq62cUzVqeaGodniO/a22pa5X1jT6VvVhbY7cqf7+15GH YHbVHu37F8EiDMGJDmS3AOlALGfblN929lwyOeLg+7adsX8qkmCKsNLdWVdso7DB K/JQ12QwZ2FuT5CneI4rBQG+GDrt+8ZxXUC6fU9ZiJpoxnOccTD3B+Tchb23qP/S rC85iR9NSqP1fx2cU2NXsA1vcri2zzt6oizZ62LrFRLTz2K+kL+g6qdnd/zC8/ZT Oj35+PU/6bKWHyMKIW4KaKdOE6fx8JbTA2O4EIfZihVmpknROUVmrZ3VDO2CM3kK -----END CERTIFICATE-----Generated at Wed Nov 5 21:43:03 2025 by rpki-client