$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/FoJo-7gG6Wj_8R-LvQDdJ-iVZGQ.roa File: FoJo-7gG6Wj_8R-LvQDdJ-iVZGQ.roa (raw, json) Hash identifier: r8dP3Sm8IboRBN5oNBlgWyLwbiKMt/bYyBUyoPbigps= Subject key identifier: 16:82:68:FB:B8:06:E9:68:FF:F1:1F:8B:BD:00:DD:27:E8:95:64:64 Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Certificate serial: 012B Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FoJo-7gG6Wj_8R-LvQDdJ-iVZGQ.roa Signing time: Tue 10 Jun 2025 10:46:26 +0000 ROA not before: Tue 10 Jun 2025 10:46:26 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 7530 IP address blocks: 210.231.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC Validity Not Before: Jun 10 10:46:26 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=168268FBB806E968FFF11F8BBD00DD27E8956464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:54:8e:03:47:23:f3:36:7c:d9:d7:3e:82: 94:cf:7c:f1:41:73:58:62:f5:87:5b:c1:e0:c8:b8: da:ff:b8:1a:1a:13:d6:8c:f7:2a:72:6a:e5:73:17: 1b:92:cf:d9:a6:a5:69:df:81:c7:48:82:cc:2c:d1: f1:ca:5e:99:17:84:62:90:27:cb:c2:6d:15:db:3d: fe:8a:d7:5f:14:c5:3a:7a:2d:4c:64:92:1e:07:24: 81:86:3d:bc:87:ba:27:95:a5:37:d2:7f:6a:0d:20: 25:ca:33:41:98:40:14:de:8a:f0:c7:ce:d4:91:3d: c3:8e:45:d7:28:39:1b:89:91:4d:73:80:bd:61:02: 67:ff:85:8e:da:46:11:67:70:e7:19:b0:37:31:f8: 67:5f:95:07:17:98:58:f2:94:e7:a6:56:88:07:8b: fd:2f:6e:4a:a6:ee:53:48:38:b5:54:1e:a6:be:22: f7:09:3a:91:5a:35:b0:7b:db:b2:d9:10:53:1a:29: d4:a6:20:d1:21:1a:9a:0c:a6:4d:8d:9d:79:7a:4f: 4d:fc:c7:7d:ad:bf:ed:a8:89:8e:27:55:3c:03:df: 4b:98:0a:49:7a:26:cc:7c:3a:10:e2:56:b6:19:83: 78:3c:47:e7:eb:1b:c3:74:a0:9b:49:45:d6:fb:3f: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:68:FB:B8:06:E9:68:FF:F1:1F:8B:BD:00:DD:27:E8:95:64:64 X509v3 Authority Key Identifier: keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FoJo-7gG6Wj_8R-LvQDdJ-iVZGQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.231.208.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:5f:83:b0:62:cb:d7:6e:44:6e:f2:29:0d:d4:01:fa:6f:67: 4a:94:0b:03:51:78:12:39:5c:3f:57:b9:5b:d7:11:e6:64:29: 1b:40:06:87:68:ef:de:3d:04:71:98:11:e9:0e:ba:b3:93:eb: 63:08:88:dc:41:2a:9a:f6:67:de:95:c8:c6:c2:86:44:5f:ea: aa:07:34:c8:e0:f2:3d:cb:72:7d:1a:b9:27:a8:54:96:3c:54: 3e:6a:46:d7:b4:13:f9:89:fc:05:8b:7e:b5:ef:a1:57:37:8a: 9a:97:53:ef:21:e8:3d:79:75:8a:10:c5:bc:f2:a0:ab:b0:d1: 29:b6:fd:1f:c4:b3:c9:90:75:b3:53:ce:a6:90:8d:33:36:32: db:d2:34:42:e8:38:69:45:76:07:76:71:03:a2:cf:00:3f:00: e0:13:aa:67:fd:10:40:8d:23:54:fc:ab:9c:3e:06:08:47:df: 10:67:4e:5e:c6:c4:84:3b:ba:95:b5:5e:68:9e:60:e0:74:a2: bd:80:95:81:64:b2:72:7f:b2:ff:a7:c4:cc:12:a7:d8:f4:96: f4:10:98:fe:49:61:81:13:2d:20:36:f1:5f:e2:2d:dc:8c:2d: 24:2d:0d:8e:03:b9:08:51:0c:e7:c8:0d:63:32:4a:30:eb:32: 57:58:dc:c5 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICASswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1 QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTA2MTAx MDQ2MjZaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKDE2ODI2OEZCQjgwNkU5 NjhGRkYxMUY4QkJEMDBERDI3RTg5NTY0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUEVSOA0cj8zZ82dc+gpTPfPFBc1hi9YdbweDIuNr/uBoaE9aM 9ypyauVzFxuSz9mmpWnfgcdIgsws0fHKXpkXhGKQJ8vCbRXbPf6K118UxTp6LUxk kh4HJIGGPbyHuieVpTfSf2oNICXKM0GYQBTeivDHztSRPcOORdcoORuJkU1zgL1h Amf/hY7aRhFncOcZsDcx+GdflQcXmFjylOemVogHi/0vbkqm7lNIOLVUHqa+IvcJ OpFaNbB727LZEFMaKdSmINEhGpoMpk2NnXl6T038x32tv+2oiY4nVTwD30uYCkl6 Jsx8OhDiVrYZg3g8R+frG8N0oJtJRdb7PynXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUFoJo+7gG6Wj/8R+LvQDdJ+iVZGQwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3 cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzU0L0ZvSm8tN2dHNldqXzhSLUx2UURkSi1pVlpHUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPS59AwDQYJKoZIhvcNAQELBQADggEBAH5fg7Biy9duRG7yKQ3UAfpvZ0qU CwNReBI5XD9XuVvXEeZkKRtABodo7949BHGYEekOurOT62MIiNxBKpr2Z96VyMbC hkRf6qoHNMjg8j3Lcn0auSeoVJY8VD5qRte0E/mJ/AWLfrXvoVc3ipqXU+8h6D15 dYoQxbzyoKuw0Sm2/R/Es8mQdbNTzqaQjTM2MtvSNELoOGlFdgd2cQOizwA/AOAT qmf9EECNI1T8q5w+BghH3xBnTl7GxIQ7upW1XmieYOB0or2AlYFksnJ/sv+nxMwS p9j0lvQQmP5JYYETLSA28V/iLdyMLSQtDY4DuQhRDOfIDWMySjDrMldY3MU= -----END CERTIFICATE-----Generated at Wed Nov 5 18:51:38 2025 by rpki-client