$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tO5ZGYutNr6mQBNua74X90HYAe8.roa File: tO5ZGYutNr6mQBNua74X90HYAe8.roa (raw, json) Hash identifier: QYoAZdk1NWU4+I8rugZJOmvVPAF3+m1862UOuZHK7XA= Subject key identifier: B4:EE:59:19:8B:AD:36:BE:A6:40:13:6E:6B:BE:17:F7:41:D8:01:EF Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0115 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tO5ZGYutNr6mQBNua74X90HYAe8.roa Signing time: Thu 24 Jul 2025 02:22:00 +0000 ROA not before: Thu 24 Jul 2025 02:22:00 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.239.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:22:00 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=B4EE59198BAD36BEA640136E6BBE17F741D801EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:a3:13:c7:02:f2:f8:69:c7:9c:77:bb:28: ea:89:48:b6:86:34:db:78:10:f0:23:c1:1d:4e:bc: b6:03:91:86:cc:d9:97:41:6f:24:61:db:2b:dc:75: 60:1b:31:4b:71:b5:77:ef:bc:77:55:d5:c0:42:7d: a7:e4:1d:f7:5d:cc:84:db:73:39:8a:76:34:df:c9: 2f:40:d3:47:57:57:9d:03:01:71:3c:77:57:6f:d5: 2f:58:7c:23:ec:55:97:1a:59:11:0d:19:4b:97:df: d3:3a:f9:60:c7:94:70:49:fd:40:7d:45:a5:30:a4: ff:6e:89:f5:5d:f9:15:af:12:61:d1:c7:1a:fb:3c: 5f:47:26:90:f4:a6:a3:85:55:f7:b3:54:32:c0:90: 4b:49:ee:33:b9:b8:a9:50:ad:95:90:28:ea:17:3b: 38:8b:af:1c:8d:e6:ed:fd:6c:e8:98:68:32:7d:de: 8a:18:5a:02:23:54:6e:f6:d0:4f:af:dc:c2:70:57: 69:68:63:99:1d:9c:b1:88:07:da:0e:a3:d1:77:da: c8:d8:1b:f0:aa:4b:ac:80:9e:7e:11:2d:d5:4f:54: 4e:d8:e6:e0:14:45:fb:be:65:af:0c:be:b4:63:5e: 24:8c:92:bc:a1:45:9d:83:3d:eb:b9:e5:77:e1:89: 04:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EE:59:19:8B:AD:36:BE:A6:40:13:6E:6B:BE:17:F7:41:D8:01:EF X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tO5ZGYutNr6mQBNua74X90HYAe8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.239.32.0/19 Signature Algorithm: sha256WithRSAEncryption 39:02:b6:8e:01:5b:0f:1a:8a:50:3e:1b:6a:f5:11:58:97:47: 06:d6:e6:7f:16:a4:39:25:37:2c:20:e5:89:51:55:22:0f:b4: ee:b8:f1:0e:1f:f6:82:cf:8a:5c:da:4b:15:e4:54:65:30:73: dc:33:ae:9c:0b:98:63:12:d1:e6:63:42:72:58:17:c2:f8:29: 70:e1:1d:37:34:bb:92:85:72:b3:13:17:88:ee:ea:9f:05:39: 0b:89:0f:05:c5:bf:16:9e:98:fb:be:2c:4b:25:e6:04:d4:85: 5b:04:5a:51:f7:3f:e0:a0:63:ed:06:8e:6f:0e:a1:3d:ba:d0: f2:70:6d:95:2b:bf:10:7f:2f:37:57:4c:32:74:7f:18:e4:a4: 35:ff:bf:2e:25:2e:77:c6:96:81:a2:03:9c:14:ef:6e:c6:ac: 6a:73:86:2b:e9:60:87:ed:7b:b9:ed:b0:f8:ec:a6:c2:1a:29: ab:3f:44:8a:10:6a:9f:ac:a0:7f:75:2f:0a:d7:40:28:f2:61: 61:70:38:f0:5e:e4:18:3f:e8:7f:83:c8:cf:db:89:7f:fd:78: 8c:ba:a5:99:a1:07:84:19:8a:89:b7:0b:e7:ed:01:aa:e9:a2: bd:29:e0:73:9c:bd:1a:ed:f3:45:b5:78:78:f8:86:ca:e4:71: 7e:ee:98:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICARUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjIyMDBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEI0RUU1OTE5OEJBRDM2 QkVBNjQwMTM2RTZCQkUxN0Y3NDFEODAxRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2xKMTxwLy+GnHnHe7KOqJSLaGNNt4EPAjwR1OvLYDkYbM2ZdB byRh2yvcdWAbMUtxtXfvvHdV1cBCfafkHfddzITbczmKdjTfyS9A00dXV50DAXE8 d1dv1S9YfCPsVZcaWRENGUuX39M6+WDHlHBJ/UB9RaUwpP9uifVd+RWvEmHRxxr7 PF9HJpD0pqOFVfezVDLAkEtJ7jO5uKlQrZWQKOoXOziLrxyN5u39bOiYaDJ93ooY WgIjVG720E+v3MJwV2loY5kdnLGIB9oOo9F32sjYG/CqS6yAnn4RLdVPVE7Y5uAU Rfu+Za8MvrRjXiSMkryhRZ2DPeu55XfhiQQvAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUtO5ZGYutNr6mQBNua74X90HYAe8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My90TzVaR1l1dE5yNm1RQk51YTc0WDkwSFlBZTgu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFyu8gMA0GCSqGSIb3DQEBCwUAA4IBAQA5AraOAVsPGopQPhtq9RFY l0cG1uZ/FqQ5JTcsIOWJUVUiD7TuuPEOH/aCz4pc2ksV5FRlMHPcM66cC5hjEtHm Y0JyWBfC+Clw4R03NLuShXKzExeI7uqfBTkLiQ8Fxb8Wnpj7vixLJeYE1IVbBFpR 9z/goGPtBo5vDqE9utDycG2VK78Qfy83V0wydH8Y5KQ1/78uJS53xpaBogOcFO9u xqxqc4Yr6WCH7Xu57bD47KbCGimrP0SKEGqfrKB/dS8K10Ao8mFhcDjwXuQYP+h/ g8jP24l//XiMuqWZoQeEGYqJtwvn7QGq6aK9KeBznL0a7fNFtXh4+IbK5HF+7pgX -----END CERTIFICATE-----Generated at Wed Nov 5 19:54:45 2025 by rpki-client