$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/z_bUNjAhBKn7oRHDE6HV0pvgeso.roa File: z_bUNjAhBKn7oRHDE6HV0pvgeso.roa (raw, json) Hash identifier: n5XjRoyfpd+nxCKa6LbM1MAPUJZScX90jhVh9Ad97D8= Subject key identifier: CF:F6:D4:36:30:21:04:A9:FB:A1:11:C3:13:A1:D5:D2:9B:E0:7A:CA Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 83 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/z_bUNjAhBKn7oRHDE6HV0pvgeso.roa Signing time: Thu 17 Jul 2025 01:25:34 +0000 ROA not before: Thu 17 Jul 2025 01:25:34 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.230.200.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 17 01:25:34 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=CFF6D436302104A9FBA111C313A1D5D29BE07ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:c9:00:34:b8:17:80:f8:04:bf:e7:9b:6e: 7e:92:63:65:ea:94:a5:21:07:25:70:4e:ad:45:37: f0:a0:c7:d1:aa:6e:1a:52:32:e1:0a:84:87:7b:a4: ee:1e:03:cd:89:9d:11:2f:be:45:f0:c8:d5:9e:e5: b1:b6:78:6a:15:f3:b6:43:d0:1c:7f:6a:71:b7:c7: a8:57:1a:36:e5:34:c7:77:ce:8d:fa:cc:a6:70:49: c3:c3:f8:ea:b9:05:97:6d:4d:ed:a6:fe:0d:02:29: 32:7c:b3:03:b2:63:0d:1d:45:00:15:14:83:8e:89: b6:06:03:2d:85:27:a5:b8:07:25:b8:9a:b9:d0:ab: 40:f0:82:47:36:2b:47:51:2a:97:45:45:a0:e3:a3: df:fc:87:a3:6b:62:a2:48:6b:20:2f:b9:99:f8:c8: 20:f4:d4:0e:e0:19:48:fb:d9:cc:91:24:22:bd:6b: 11:bb:da:c5:b1:30:fd:c2:19:1a:4f:a6:26:71:53: d4:d6:79:39:54:8e:f9:42:f2:a1:51:93:f2:77:35: a7:67:f1:fd:0d:a2:67:60:fb:06:bc:46:aa:23:0a: 2b:93:d5:da:59:18:d5:2b:ff:dd:b5:2c:5d:4e:78: ed:ce:c7:1f:0c:91:1e:ec:49:11:bd:ba:10:e3:0d: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:D4:36:30:21:04:A9:FB:A1:11:C3:13:A1:D5:D2:9B:E0:7A:CA X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/z_bUNjAhBKn7oRHDE6HV0pvgeso.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.230.200.0/22 Signature Algorithm: sha256WithRSAEncryption 56:a0:e3:93:26:d6:01:eb:2b:17:a5:98:9e:42:97:05:a7:9a: 93:22:6c:58:91:e0:8f:a0:25:88:13:25:c9:33:b5:82:77:ce: a0:b4:9f:29:de:cd:4c:cc:1d:72:5a:4d:4b:8c:77:b7:ee:2e: 5c:fa:b8:bf:78:04:b1:1b:e9:27:9d:fc:e0:d3:05:af:b7:fa: 67:35:11:3c:3e:67:d5:2f:a1:6b:05:eb:8a:53:ff:ba:19:e0: 97:89:7b:34:14:22:bf:e6:f5:85:3e:9a:1c:a6:13:7f:9a:e6: e1:ba:05:1f:22:df:6b:de:1a:7f:dc:80:53:f4:70:7b:4c:9e: 93:24:44:70:1c:96:d6:9f:61:8c:a2:95:0a:57:ac:8a:42:d7: 08:19:e2:f8:9c:d8:59:54:29:a7:28:12:aa:91:8b:53:07:f1: ba:5e:78:64:62:53:0a:83:39:c7:02:b1:06:2d:2c:e9:80:6a: 16:51:bd:cf:dc:8c:92:38:b0:6a:c8:cb:b6:74:f8:6a:55:8f: 3c:2b:bc:05:19:62:32:0e:17:05:36:fc:71:4a:5c:d2:c3:76: dc:59:f8:d8:c6:a3:d5:76:a6:bd:01:e8:7d:71:ff:3f:ba:0b: 61:21:29:8c:7d:b3:00:c4:5a:fa:3a:9b:3e:ba:76:e7:7d:d4: 35:ba:ef:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MTcw MTI1MzRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKENGRjZENDM2MzAyMTA0 QTlGQkExMTFDMzEzQTFENUQyOUJFMDdBQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCk6MkANLgXgPgEv+ebbn6SY2XqlKUhByVwTq1FN/Cgx9GqbhpS MuEKhId7pO4eA82JnREvvkXwyNWe5bG2eGoV87ZD0Bx/anG3x6hXGjblNMd3zo36 zKZwScPD+Oq5BZdtTe2m/g0CKTJ8swOyYw0dRQAVFIOOibYGAy2FJ6W4ByW4mrnQ q0Dwgkc2K0dRKpdFRaDjo9/8h6NrYqJIayAvuZn4yCD01A7gGUj72cyRJCK9axG7 2sWxMP3CGRpPpiZxU9TWeTlUjvlC8qFRk/J3Nadn8f0Nomdg+wa8RqojCiuT1dpZ GNUr/921LF1OeO3Oxx8MkR7sSRG9uhDjDcebAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUz/bUNjAhBKn7oRHDE6HV0pvgesowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My96X2JVTmpBaEJLbjdvUkhERTZIVjBwdmdlc28u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyubIMA0GCSqGSIb3DQEBCwUAA4IBAQBWoOOTJtYB6ysXpZieQpcF p5qTImxYkeCPoCWIEyXJM7WCd86gtJ8p3s1MzB1yWk1LjHe37i5c+ri/eASxG+kn nfzg0wWvt/pnNRE8PmfVL6FrBeuKU/+6GeCXiXs0FCK/5vWFPpocphN/mubhugUf It9r3hp/3IBT9HB7TJ6TJERwHJbWn2GMopUKV6yKQtcIGeL4nNhZVCmnKBKqkYtT B/G6XnhkYlMKgznHArEGLSzpgGoWUb3P3IySOLBqyMu2dPhqVY88K7wFGWIyDhcF NvxxSlzSw3bcWfjYxqPVdqa9Aeh9cf8/ugthISmMfbMAxFr6Ops+unbnfdQ1uu8G -----END CERTIFICATE-----Generated at Wed Nov 5 19:54:08 2025 by rpki-client