$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/AGF6BVTB37rJn6cfIGftHxTXYC4.roa File: AGF6BVTB37rJn6cfIGftHxTXYC4.roa (raw, json) Hash identifier: GYS9hhupWZxpcCNiV89CUq9c770pM3L2yY/a/3J4tdU= Subject key identifier: 00:61:7A:05:54:C1:DF:BA:C9:9F:A7:1F:20:67:ED:1F:14:D7:60:2E Certificate issuer: /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Certificate serial: 02 Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/AGF6BVTB37rJn6cfIGftHxTXYC4.roa Signing time: Thu 12 Jun 2025 06:11:25 +0000 ROA not before: Thu 12 Jun 2025 06:11:25 +0000 ROA not after: Tue 26 May 2026 07:57:30 +0000 asID: 131958 IP address blocks: 103.144.122.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 13:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5 Validity Not Before: Jun 12 06:11:25 2025 GMT Not After : May 26 07:57:30 2026 GMT Subject: CN=00617A0554C1DFBAC99FA71F2067ED1F14D7602E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:5e:4b:ad:37:cd:8c:93:34:3c:40:3a:13: 1f:31:c6:cd:dc:c7:8d:15:5a:40:cb:e4:84:62:f5: cf:6c:31:90:ab:2e:5f:5a:f4:23:a4:b6:37:a1:56: af:f9:28:0e:56:57:3f:6a:fd:d9:d9:8c:52:56:a6: 3d:e7:a9:12:f9:7e:9c:0e:bf:65:44:d2:02:e5:65: a0:f5:f6:fa:16:1e:aa:9c:bb:9a:79:ed:2c:3b:15: ab:33:c0:21:30:51:00:10:54:82:a6:a4:05:b0:da: 98:4d:ca:33:5f:39:1b:e8:42:b4:bf:6e:7d:06:3d: 01:e1:0b:84:e1:fd:c0:a9:ad:82:26:7d:c9:3d:cf: 47:22:66:c7:8f:4d:ea:f6:c0:9f:76:63:a5:1c:dc: 8a:af:f3:c6:c6:4a:d6:65:17:ed:4d:af:5d:52:87: fa:7e:c6:df:20:8a:1b:7a:d1:70:29:15:cf:02:47: f8:31:bc:1a:52:fa:aa:9b:67:49:8a:fd:f3:72:7c: 48:ff:cd:30:c4:54:a6:41:07:69:46:e4:f2:8c:61: cc:2d:25:fe:6d:11:94:70:d1:94:fe:b3:24:f0:ac: 09:a8:76:96:b6:1c:ed:cf:98:cc:cf:1e:96:ce:f8: c9:3e:d0:f1:7a:2d:9d:b5:43:fb:c8:3b:92:b7:1a: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:7A:05:54:C1:DF:BA:C9:9F:A7:1F:20:67:ED:1F:14:D7:60:2E X509v3 Authority Key Identifier: keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/AGF6BVTB37rJn6cfIGftHxTXYC4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.144.122.0/23 Signature Algorithm: sha256WithRSAEncryption ac:f7:6b:54:98:5c:a1:8f:0e:3e:24:35:e3:f2:f2:10:5c:a0: d1:70:38:1c:2e:6f:c3:80:ee:1c:40:e6:12:22:1c:21:b1:4a: ce:99:3d:9c:8c:f2:b5:73:3b:a7:33:f7:38:79:57:63:f6:32: a2:ea:ab:58:11:c0:0e:88:6b:70:b4:15:71:ac:50:36:e2:2d: 51:5a:03:b3:77:5b:7d:8b:fc:23:69:a3:9d:f2:48:10:7c:d3: 4d:35:77:a4:65:18:ff:67:53:7a:12:ac:0a:04:3c:22:09:75: 3d:48:b1:ee:bd:20:e7:47:0e:8d:4b:e4:24:05:ee:92:49:8a: 55:c8:8a:d4:0c:b8:85:1a:0a:74:33:81:4b:eb:6e:7b:ed:82: 6e:47:14:7c:11:9e:23:db:9c:2d:ed:90:7d:97:16:2a:80:23: 0c:03:d8:3f:a0:f5:71:8f:3a:7d:36:d8:f1:0f:4d:09:53:24: 4b:cb:eb:eb:65:18:eb:5e:4a:3f:4f:06:bb:af:a1:0b:96:d3: 3c:5f:17:aa:e1:31:70:26:61:c3:0e:fa:e2:2a:3f:de:92:66: b8:67:28:f8:56:ab:00:d0:ea:9c:d9:df:3a:9c:ca:6e:a3:1a: 1f:1e:b4:c7:e4:4c:18:ee:8d:f1:42:5b:e2:c5:19:66:5d:ac: d4:be:be:7d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkQ4 MjQ3N0EwOTFCMTdDREE2MUM1NTYzQkMyOTIwQ0RDRDdBQUE1MB4XDTI1MDYxMjA2 MTEyNVoXDTI2MDUyNjA3NTczMFowMzExMC8GA1UEAxMoMDA2MTdBMDU1NEMxREZC QUM5OUZBNzFGMjA2N0VEMUYxNEQ3NjAyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANwwXkutN82MkzQ8QDoTHzHGzdzHjRVaQMvkhGL1z2wxkKsuX1r0 I6S2N6FWr/koDlZXP2r92dmMUlamPeepEvl+nA6/ZUTSAuVloPX2+hYeqpy7mnnt LDsVqzPAITBRABBUgqakBbDamE3KM185G+hCtL9ufQY9AeELhOH9wKmtgiZ9yT3P RyJmx49N6vbAn3ZjpRzciq/zxsZK1mUX7U2vXVKH+n7G3yCKG3rRcCkVzwJH+DG8 GlL6qptnSYr983J8SP/NMMRUpkEHaUbk8oxhzC0l/m0RlHDRlP6zJPCsCah2lrYc 7c+YzM8els74yT7Q8XotnbVD+8g7krcaR40CAwEAAaOCAigwggIkMB0GA1UdDgQW BBQAYXoFVMHfusmfpx8gZ+0fFNdgLjAfBgNVHSMEGDAWgBSv2CR3oJGxfNphxVY7 wpIM3NeqpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMDYvcjlna2Q2Q1JzWHphWWNWV084S1NETnpYcXFVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcjlna2Q2Q1JzWHphWWNWV084S1NE TnpYcXFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTA2L0FHRjZCVlRCMzdySm42Y2ZJR2Z0SHhUWFlDNC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnkHowDQYJKoZIhvcNAQELBQADggEBAKz3a1SYXKGPDj4kNePy8hBc oNFwOBwub8OA7hxA5hIiHCGxSs6ZPZyM8rVzO6cz9zh5V2P2MqLqq1gRwA6Ia3C0 FXGsUDbiLVFaA7N3W32L/CNpo53ySBB80001d6RlGP9nU3oSrAoEPCIJdT1Ise69 IOdHDo1L5CQF7pJJilXIitQMuIUaCnQzgUvrbnvtgm5HFHwRniPbnC3tkH2XFiqA IwwD2D+g9XGPOn022PEPTQlTJEvL6+tlGOteSj9PBruvoQuW0zxfF6rhMXAmYcMO +uIqP96SZrhnKPhWqwDQ6pzZ3zqcym6jGh8etMfkTBjujfFCW+LFGWZdrNS+vn0= -----END CERTIFICATE-----Generated at Sun Jun 22 16:42:46 2025 by rpki-client