$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/nNG20POrCXUinTxaLNsCADgKYVw.roa File: nNG20POrCXUinTxaLNsCADgKYVw.roa (raw, json) Hash identifier: Fyp/yWTyNRaLIHcDqINoKnpb+tB4WUr3TlHwsjkFcYg= Subject key identifier: 9C:D1:B6:D0:F3:AB:09:75:22:9D:3C:5A:2C:DB:02:00:38:0A:61:5C Certificate issuer: /CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Certificate serial: 30 Authority key identifier: 49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/nNG20POrCXUinTxaLNsCADgKYVw.roa Signing time: Fri 01 Aug 2025 01:29:34 +0000 ROA not before: Fri 01 Aug 2025 01:29:34 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9357 IP address blocks: 133.250.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49D7AAA47057BC50ABDD410A8FA39ABDA1003E10 Validity Not Before: Aug 1 01:29:34 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=9CD1B6D0F3AB0975229D3C5A2CDB0200380A615C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:ac:8d:92:c8:41:29:3d:70:cf:06:b0:5b: 41:1a:53:47:f8:3b:89:18:60:34:6d:06:d6:ce:06: e2:92:c1:28:3f:cb:d6:50:ac:85:ce:e1:8e:64:cb: 47:1a:72:14:a2:ad:85:0f:a5:49:59:ae:c9:04:25: 38:da:49:ba:85:46:71:2a:f9:65:ea:62:97:3b:0e: c2:9a:01:29:a0:ba:0b:d4:9e:87:85:d8:81:f6:4f: 92:e8:8c:77:a7:be:e1:68:10:6c:90:bb:1a:bb:0f: 46:6e:1b:17:ee:c5:0c:91:f3:b1:2d:57:4e:4f:c1: c1:df:2b:6a:d4:8c:66:50:59:e8:c4:e7:3d:ee:69: e6:08:51:a0:f0:71:f7:00:3e:a0:8e:d2:92:c7:61: 55:52:f9:d4:29:d1:b0:c8:b6:02:be:c0:42:52:08: 32:43:56:4b:90:00:0a:9a:1f:91:b9:c8:70:9d:65: 96:0a:87:ce:ee:9d:f3:ca:93:0b:37:cc:e9:a7:f5: bd:67:2b:34:6c:35:0e:08:8f:15:21:3b:18:d1:61: 9b:85:3e:12:a1:e4:01:92:3a:e4:04:54:64:84:52: 3f:26:4a:8c:26:47:f0:94:10:91:2d:7a:f7:c1:46: f1:81:79:b5:76:63:e7:8c:a6:38:2a:b4:a5:5e:1f: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:B6:D0:F3:AB:09:75:22:9D:3C:5A:2C:DB:02:00:38:0A:61:5C X509v3 Authority Key Identifier: keyid:49:D7:AA:A4:70:57:BC:50:AB:DD:41:0A:8F:A3:9A:BD:A1:00:3E:10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/SdeqpHBXvFCr3UEKj6OavaEAPhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SdeqpHBXvFCr3UEKj6OavaEAPhA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/nNG20POrCXUinTxaLNsCADgKYVw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.250.128.0/17 Signature Algorithm: sha256WithRSAEncryption 8b:0f:68:f2:e4:1c:ab:34:db:13:b5:42:e4:dc:fa:7f:e7:63: 47:95:f7:92:2c:02:2d:aa:6b:12:8e:0e:0a:2e:ec:77:2d:0c: 86:3c:aa:42:a3:df:8a:a0:d3:84:65:9e:44:8a:e1:04:ad:fd: 4e:5a:7a:80:2e:82:a7:fd:5e:8f:c9:d5:aa:ff:64:54:b4:50: a1:c1:8f:61:36:38:07:ee:6e:6a:8a:1f:b8:58:bc:de:4a:81: ef:0b:42:ca:bc:2b:35:ca:5c:38:ad:0c:14:ee:10:28:f0:67: 4f:4f:b2:09:1f:c9:f0:89:6d:39:28:3b:db:10:34:9a:40:7d: b9:cf:d4:4b:72:b2:83:98:22:53:83:ee:64:1e:85:4c:7f:dc: 00:53:b6:df:3a:0a:6d:a3:11:78:bc:78:46:44:a2:a6:ec:ca: 95:f8:f6:fb:80:d5:95:86:9f:d8:9d:fe:ce:ca:38:fa:7d:e5: 34:09:52:c6:be:19:2c:aa:72:4e:21:91:e0:a8:3b:1e:2e:91: e5:ad:aa:d3:14:c0:ba:6b:4d:93:a3:3c:b4:a4:8d:0d:89:e8: 7c:2c:57:62:3f:3e:d7:b0:c3:56:3c:4f:66:20:20:85:70:96: 45:8c:68:e6:ac:ac:3d:f0:4f:5e:cb:0f:3d:2d:24:ee:96:fd: 72:9f:aa:9f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OUQ3 QUFBNDcwNTdCQzUwQUJERDQxMEE4RkEzOUFCREExMDAzRTEwMB4XDTI1MDgwMTAx MjkzNFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOUNEMUI2RDBGM0FCMDk3 NTIyOUQzQzVBMkNEQjAyMDAzODBBNjE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKK+rI2SyEEpPXDPBrBbQRpTR/g7iRhgNG0G1s4G4pLBKD/L1lCs hc7hjmTLRxpyFKKthQ+lSVmuyQQlONpJuoVGcSr5ZepilzsOwpoBKaC6C9Seh4XY gfZPkuiMd6e+4WgQbJC7GrsPRm4bF+7FDJHzsS1XTk/Bwd8ratSMZlBZ6MTnPe5p 5ghRoPBx9wA+oI7SksdhVVL51CnRsMi2Ar7AQlIIMkNWS5AACpofkbnIcJ1llgqH zu6d88qTCzfM6af1vWcrNGw1DgiPFSE7GNFhm4U+EqHkAZI65ARUZIRSPyZKjCZH 8JQQkS1698FG8YF5tXZj54ymOCq0pV4fHisCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBSc0bbQ86sJdSKdPFos2wIAOAphXDAfBgNVHSMEGDAWgBRJ16qkcFe8UKvdQQqP o5q9oQA+EDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZhRUFQaEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TZGVxcEhCWHZGQ3IzVUVLajZPYXZh RUFQaEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC9uTkcyMFBPckNYVWluVHhhTE5zQ0FEZ0tZVncucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHhfqAMA0GCSqGSIb3DQEBCwUAA4IBAQCLD2jy5ByrNNsTtULk3Pp/52NH lfeSLAItqmsSjg4KLux3LQyGPKpCo9+KoNOEZZ5EiuEErf1OWnqALoKn/V6PydWq /2RUtFChwY9hNjgH7m5qih+4WLzeSoHvC0LKvCs1ylw4rQwU7hAo8GdPT7IJH8nw iW05KDvbEDSaQH25z9RLcrKDmCJTg+5kHoVMf9wAU7bfOgptoxF4vHhGRKKm7MqV +Pb7gNWVhp/Ynf7Oyjj6feU0CVLGvhksqnJOIZHgqDseLpHlrarTFMC6a02Tozy0 pI0Nieh8LFdiPz7XsMNWPE9mICCFcJZFjGjmrKw98E9eyw89LSTulv1yn6qf -----END CERTIFICATE-----Generated at Mon Aug 11 13:08:48 2025 by rpki-client