$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30055/MdMvm1Fcdk4ugFz6A2QIRgn6-YI.roa File: MdMvm1Fcdk4ugFz6A2QIRgn6-YI.roa (raw, json) Hash identifier: PYR6G3t7Q+PM4wqeURqMMPIHuVaxbGDiGHy1Jv+Udzc= Subject key identifier: 31:D3:2F:9B:51:5C:76:4E:2E:80:5C:FA:03:64:08:46:09:FA:F9:82 Certificate issuer: /CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0 Certificate serial: 23 Authority key identifier: 10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/MdMvm1Fcdk4ugFz6A2QIRgn6-YI.roa Signing time: Fri 01 Aug 2025 01:35:54 +0000 ROA not before: Fri 01 Aug 2025 01:35:54 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 7670 IP address blocks: 2001:2a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0 Validity Not Before: Aug 1 01:35:54 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=31D32F9B515C764E2E805CFA0364084609FAF982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:37:66:d9:3c:af:09:ba:09:6c:08:a7:36: f5:9b:f7:42:a2:09:92:7e:c7:8e:07:c5:57:ca:8f: e3:31:0b:93:db:84:a5:d8:07:b0:34:c4:b1:c1:62: f0:eb:85:d0:89:ea:b5:73:fb:83:24:b1:96:49:2a: c3:ab:78:e9:43:e6:a1:e3:6e:92:1e:f4:de:e4:bd: 5c:49:5b:c8:42:9b:d3:45:a4:6f:d8:d5:71:fa:76: c6:2b:15:34:d7:f2:d4:b8:b9:30:63:33:4d:53:de: f1:c6:df:f3:04:86:7f:1c:ed:92:8b:1d:d7:38:0e: 11:87:e4:1c:1a:ce:46:b0:43:27:72:97:0c:14:bb: e8:37:df:b8:13:56:e5:7a:9e:d0:7f:b2:89:3b:51: 91:20:c5:d7:8f:fb:c4:9e:94:b5:33:5e:72:bf:a6: 54:e9:47:ca:6e:a0:09:56:3c:f8:1c:ab:74:f5:da: 6c:77:b8:b6:fa:bb:95:13:20:30:3a:33:14:8f:b0: 3c:ac:37:08:81:b7:4a:95:26:52:09:70:d3:48:92: d4:d6:ff:d4:c1:bb:79:a9:9e:76:d0:89:e8:08:0d: 5e:7b:8f:09:a5:e4:bb:31:43:0a:e8:59:a9:60:cb: 29:4e:8c:e5:82:23:86:61:b9:c4:2b:94:6b:8d:bb: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D3:2F:9B:51:5C:76:4E:2E:80:5C:FA:03:64:08:46:09:FA:F9:82 X509v3 Authority Key Identifier: keyid:10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/MdMvm1Fcdk4ugFz6A2QIRgn6-YI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:2a8::/32 Signature Algorithm: sha256WithRSAEncryption 3f:c6:9e:23:bf:fa:db:07:fd:e3:bb:e9:7d:30:93:b5:d3:1c: 9c:cf:0d:73:5d:a6:e6:ea:69:32:a4:07:55:9b:0a:7d:08:e0: a5:df:78:fd:e4:b4:69:9c:75:87:84:3b:29:b0:91:c7:0f:89: 97:67:8f:87:69:93:bd:53:a4:0e:f3:1b:20:6e:70:6d:76:74: 3f:92:3a:80:2b:c7:bb:77:14:8f:f9:4e:bb:09:e1:04:23:0d: ce:e7:54:0f:2c:e4:8c:72:e1:bf:82:68:a2:2f:40:b6:74:b6: fc:e3:35:4b:50:74:b2:44:42:7a:d0:a4:b4:ed:4a:79:fc:71: cc:35:d6:9d:6c:00:d2:de:f5:91:4c:83:3c:aa:11:2b:f8:d5: 79:5c:73:93:14:e5:8d:4c:9a:21:b2:19:4b:b2:98:8f:3d:d9: c2:7c:f8:ef:6e:75:12:a7:da:be:d4:a0:f9:55:8b:ae:30:38: 54:f2:63:9c:03:e7:c7:48:78:97:d2:39:a4:39:b8:64:d1:64: 76:62:93:fe:87:4a:d0:db:b1:41:10:b9:fb:87:2d:54:52:d0: a5:7f:07:af:de:e9:4d:1d:91:1f:1f:e1:60:5f:2b:88:b7:65: d7:68:9c:6b:a4:6a:60:7d:0a:3b:df:40:a0:c1:08:e7:0f:62: c2:9a:18:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEZF MTlCQ0Q4MkMxNEE4MzNDMzgxNTk2MzBBQTc5NzZGMkJCM0QwMB4XDTI1MDgwMTAx MzU1NFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMzFEMzJGOUI1MTVDNzY0 RTJFODA1Q0ZBMDM2NDA4NDYwOUZBRjk4MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMIJN2bZPK8JuglsCKc29Zv3QqIJkn7HjgfFV8qP4zELk9uEpdgH sDTEscFi8OuF0InqtXP7gySxlkkqw6t46UPmoeNukh703uS9XElbyEKb00Wkb9jV cfp2xisVNNfy1Li5MGMzTVPe8cbf8wSGfxztkosd1zgOEYfkHBrORrBDJ3KXDBS7 6DffuBNW5Xqe0H+yiTtRkSDF14/7xJ6UtTNecr+mVOlHym6gCVY8+ByrdPXabHe4 tvq7lRMgMDozFI+wPKw3CIG3SpUmUglw00iS1Nb/1MG7eamedtCJ6AgNXnuPCaXk uzFDCuhZqWDLKU6M5YIjhmG5xCuUa4278skCAwEAAaOCAikwggIlMB0GA1UdDgQW BBQx0y+bUVx2Ti6AXPoDZAhGCfr5gjAfBgNVHSMEGDAWgBQQ/hm82CwUqDPDgVlj CqeXbyuz0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNTUvRVA0WnZOZ3NGS2d6dzRGWll3cW5sMjhyczlBLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRVA0WnZOZ3NGS2d6dzRGWll3cW5s MjhyczlBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDU1L01kTXZtMUZjZGs0dWdGejZBMlFJUmduNi1ZSS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAgAQKoMA0GCSqGSIb3DQEBCwUAA4IBAQA/xp4jv/rbB/3ju+l9MJO1 0xyczw1zXabm6mkypAdVmwp9COCl33j95LRpnHWHhDspsJHHD4mXZ4+HaZO9U6QO 8xsgbnBtdnQ/kjqAK8e7dxSP+U67CeEEIw3O51QPLOSMcuG/gmiiL0C2dLb84zVL UHSyREJ60KS07Up5/HHMNdadbADS3vWRTIM8qhEr+NV5XHOTFOWNTJohshlLspiP PdnCfPjvbnUSp9q+1KD5VYuuMDhU8mOcA+fHSHiX0jmkObhk0WR2YpP+h0rQ27FB ELn7hy1UUtClfwev3ulNHZEfH+FgXyuIt2XXaJxrpGpgfQo730CgwQjnD2LCmhhr -----END CERTIFICATE-----Generated at Mon Aug 11 13:08:02 2025 by rpki-client