$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yFo9KqpSlcpuHFz9FBxAhpm79hc.roa File: yFo9KqpSlcpuHFz9FBxAhpm79hc.roa (raw, json) Hash identifier: 765A+dRLqOhZwCQAekJb2q+ZE++8T5QYs9Z+38LhmUg= Subject key identifier: C8:5A:3D:2A:AA:52:95:CA:6E:1C:5C:FD:14:1C:40:86:99:BB:F6:17 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 84 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yFo9KqpSlcpuHFz9FBxAhpm79hc.roa Signing time: Thu 17 Jul 2025 01:25:34 +0000 ROA not before: Thu 17 Jul 2025 01:25:34 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.230.204.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 17 01:25:34 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=C85A3D2AAA5295CA6E1C5CFD141C408699BBF617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:2c:bf:42:0f:be:b5:d4:72:0f:4c:8f:06: 2a:f8:e3:4a:85:8e:e3:3f:f8:89:fa:95:2d:f0:92: 32:39:3c:97:fd:7e:bb:21:b6:61:9c:ec:e8:39:c9: 73:a1:32:ad:8c:7e:49:4b:af:18:5b:b2:f3:04:02: a2:44:7b:60:b7:d9:9e:3d:65:87:c4:d9:95:aa:48: 64:7a:43:1e:cf:8d:64:75:bf:c0:df:9d:71:ec:71: 1a:45:0d:ef:40:e2:df:be:d2:1a:b2:eb:8e:84:01: 1c:05:75:f2:0d:06:41:b8:36:35:27:dc:2d:63:d3: de:9c:3d:e0:9a:08:f1:e7:3d:b5:5a:5f:a1:f5:0a: 21:a3:cf:b5:10:0b:ac:06:92:8c:bb:10:f2:d2:09: 64:5f:aa:2e:56:52:13:91:ef:62:b7:16:83:cf:bf: 64:a9:67:11:2e:b6:84:a1:d6:87:d5:5c:81:3b:f2: 7d:db:3a:e4:03:29:36:08:6c:9e:82:45:7b:7b:54: 69:e8:1b:f3:35:57:7d:92:6b:84:ba:b4:27:9f:3e: ef:d4:d3:36:e3:c0:c1:fd:44:c4:84:3d:ec:96:4a: be:e8:6b:0a:08:54:9d:50:a7:c6:26:ef:cf:9f:bb: 24:60:bd:4c:c2:56:92:52:f8:6b:ae:b6:2a:87:c7: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5A:3D:2A:AA:52:95:CA:6E:1C:5C:FD:14:1C:40:86:99:BB:F6:17 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yFo9KqpSlcpuHFz9FBxAhpm79hc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.230.204.0/23 Signature Algorithm: sha256WithRSAEncryption 79:bf:aa:fc:f3:34:d3:f9:38:6d:96:a8:d0:1f:e6:a1:43:5c: 2b:3f:ff:c9:7f:e3:2a:80:c5:83:82:6e:e7:21:b7:51:ce:1b: 75:1c:1f:3a:c5:2e:1d:8f:45:66:15:9b:3a:40:3b:37:69:47: 2c:df:66:9c:3f:9f:41:9c:b4:72:07:5c:a9:71:eb:e7:94:92: 83:98:0a:ad:ea:b5:1f:1b:79:e5:f9:11:45:e9:3a:b9:53:80: 5c:62:6b:6d:91:b1:b6:f9:4a:0a:e5:41:65:82:41:2b:42:3c: ce:69:0e:f5:04:eb:95:4b:1a:39:5a:68:aa:f2:b8:52:99:d5: 18:8e:31:f7:45:4d:f4:c5:2e:36:e7:b9:08:31:dc:c0:83:95: 93:ac:c9:f9:13:a7:8b:48:ba:14:1a:41:c7:97:dc:92:43:d9: c5:34:79:66:e9:db:a1:55:ce:52:55:a5:6d:c1:95:96:f2:3a: 2b:07:14:7d:92:22:e9:42:e6:68:ed:92:5d:45:3d:ed:d0:09: 52:5c:bf:0e:4c:ce:d7:5c:85:55:a0:e4:20:11:21:3f:c7:48: 1a:b1:31:d8:88:d3:a6:44:52:07:4e:68:11:65:67:a6:b2:55: 02:1a:03:c0:6e:a1:f9:fa:65:3d:21:c9:cd:2b:fb:70:ca:8a: 3e:a2:1e:f0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MTcw MTI1MzRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEM4NUEzRDJBQUE1Mjk1 Q0E2RTFDNUNGRDE0MUM0MDg2OTlCQkY2MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIvSy/Qg++tdRyD0yPBir440qFjuM/+In6lS3wkjI5PJf9frsh tmGc7Og5yXOhMq2MfklLrxhbsvMEAqJEe2C32Z49ZYfE2ZWqSGR6Qx7PjWR1v8Df nXHscRpFDe9A4t++0hqy646EARwFdfINBkG4NjUn3C1j096cPeCaCPHnPbVaX6H1 CiGjz7UQC6wGkoy7EPLSCWRfqi5WUhOR72K3FoPPv2SpZxEutoSh1ofVXIE78n3b OuQDKTYIbJ6CRXt7VGnoG/M1V32Sa4S6tCefPu/U0zbjwMH9RMSEPeyWSr7oawoI VJ1Qp8Ym78+fuyRgvUzCVpJS+GuutiqHxyrbAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUyFo9KqpSlcpuHFz9FBxAhpm79hcwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My95Rm85S3FwU2xjcHVIRno5RkJ4QWhwbTc5aGMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByubMMA0GCSqGSIb3DQEBCwUAA4IBAQB5v6r88zTT+ThtlqjQH+ah Q1wrP//Jf+MqgMWDgm7nIbdRzht1HB86xS4dj0VmFZs6QDs3aUcs32acP59BnLRy B1ypcevnlJKDmAqt6rUfG3nl+RFF6Tq5U4BcYmttkbG2+UoK5UFlgkErQjzOaQ71 BOuVSxo5Wmiq8rhSmdUYjjH3RU30xS4257kIMdzAg5WTrMn5E6eLSLoUGkHHl9yS Q9nFNHlm6duhVc5SVaVtwZWW8jorBxR9kiLpQuZo7ZJdRT3t0AlSXL8OTM7XXIVV oOQgESE/x0gasTHYiNOmRFIHTmgRZWemslUCGgPAbqH5+mU9IcnNK/twyoo+oh7w -----END CERTIFICATE-----Generated at Wed Nov 5 19:52:35 2025 by rpki-client