$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/38014/-nKWlYpf8KZBtpoNJM1iBs1d9Qc.roa File: -nKWlYpf8KZBtpoNJM1iBs1d9Qc.roa (raw, json) Hash identifier: XMsfdjcXGYu1xuVi3MIgy+OtB1NAgzSwQGT0uI4JtdU= Subject key identifier: FA:72:96:95:8A:5F:F0:A6:41:B6:9A:0D:24:CD:62:06:CD:5D:F5:07 Certificate issuer: /CN=CFC9F9D6C1EEAD816401C7C76B6CB206175FE227 Certificate serial: 02 Authority key identifier: CF:C9:F9:D6:C1:EE:AD:81:64:01:C7:C7:6B:6C:B2:06:17:5F:E2:27 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/-nKWlYpf8KZBtpoNJM1iBs1d9Qc.roa Signing time: Fri 25 Jul 2025 07:31:18 +0000 ROA not before: Fri 25 Jul 2025 07:31:18 +0000 ROA not after: Sat 25 Jul 2026 07:17:21 +0000 asID: 45689 IP address blocks: 202.222.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFC9F9D6C1EEAD816401C7C76B6CB206175FE227 Validity Not Before: Jul 25 07:31:18 2025 GMT Not After : Jul 25 07:17:21 2026 GMT Subject: CN=FA7296958A5FF0A641B69A0D24CD6206CD5DF507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7b:14:d0:ae:03:fe:7e:1a:d9:2c:a9:45:7c: 22:9c:f3:d1:dc:01:92:94:ad:3b:6a:95:26:85:b9: 53:a2:bb:73:fd:2b:43:e9:a0:00:20:4b:07:2f:28: 9f:8e:c5:74:9e:c0:55:45:28:d6:17:90:4d:50:2a: 9c:b9:51:e2:e2:f0:19:e2:6b:60:53:44:52:f6:69: 2d:65:d9:25:bb:06:5d:f5:42:a6:06:3f:cd:b0:6e: c9:05:1b:3e:2d:ae:9a:e6:72:32:d4:2b:1c:10:04: 14:6d:9d:63:a3:16:3e:d8:45:39:d3:6e:08:2b:5a: d2:5b:e7:70:99:39:72:ee:15:5b:6f:3b:30:94:ef: b2:80:b4:e9:87:aa:85:93:c0:71:cb:4a:d8:7a:58: 75:84:37:37:85:49:f6:da:cb:ee:92:3a:a3:53:43: c3:6e:ca:a7:c3:fa:ad:9c:3e:8e:ea:90:47:7d:0c: 52:40:f4:55:4f:41:11:c7:70:96:5f:5f:d6:4c:a1: 7a:fb:95:12:c3:f0:38:92:97:29:cb:c8:57:93:bb: 5a:fa:4b:8f:94:73:cb:b2:7a:a6:e6:da:2f:1b:88: 19:1d:85:af:2f:c3:52:ba:bc:07:67:24:f6:6d:ed: 0e:fd:91:7b:80:62:d2:0c:3a:ca:b2:92:a3:23:e5: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:96:95:8A:5F:F0:A6:41:B6:9A:0D:24:CD:62:06:CD:5D:F5:07 X509v3 Authority Key Identifier: keyid:CF:C9:F9:D6:C1:EE:AD:81:64:01:C7:C7:6B:6C:B2:06:17:5F:E2:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/-nKWlYpf8KZBtpoNJM1iBs1d9Qc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.222.160.0/20 Signature Algorithm: sha256WithRSAEncryption ba:0d:ec:f0:68:28:12:fd:8a:f5:14:67:ea:bd:ea:a5:44:56: ac:dc:96:db:73:cc:7c:8c:24:e6:a9:2b:99:3b:86:af:f3:69: 37:cb:9a:71:84:25:56:fc:23:69:04:a2:7a:c5:1d:cc:ef:a8: 8e:89:28:f6:dc:b7:88:e3:ab:aa:40:86:a8:20:aa:dd:a7:7d: 94:8c:95:60:68:3f:56:ee:ca:d0:4d:05:99:e2:d0:5d:f1:aa: 17:22:7d:d6:ca:0d:7f:05:78:6f:7f:89:93:55:c1:f9:f9:df: 8d:63:dd:1f:26:f1:8d:7d:70:5b:2b:04:7e:54:51:d9:c8:cf: d2:f3:c0:4e:2c:d3:a1:6d:e0:71:a6:cd:ff:e0:8b:4b:d2:e4: 96:d3:a8:8a:fc:a6:e4:fe:66:e7:ff:e7:c5:5b:28:ab:51:f3: c4:85:cb:e1:1d:8f:2c:3b:4c:df:14:63:f5:64:89:ba:79:ff: f9:d1:81:3f:bb:ff:d1:e5:0f:e4:18:b9:60:f2:26:16:b5:1e: d4:de:a7:12:8a:53:62:a1:69:f7:85:c7:fb:8b:df:1d:42:c8: aa:9b:37:45:a0:d1:b6:96:34:9b:e3:8a:bc:04:0f:8f:18:93: e8:1c:f9:85:68:fe:06:c5:0a:82:ac:a3:d7:66:cf:e8:73:15: 70:ce:3d:a8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkM5 RjlENkMxRUVBRDgxNjQwMUM3Qzc2QjZDQjIwNjE3NUZFMjI3MB4XDTI1MDcyNTA3 MzExOFoXDTI2MDcyNTA3MTcyMVowMzExMC8GA1UEAxMoRkE3Mjk2OTU4QTVGRjBB NjQxQjY5QTBEMjRDRDYyMDZDRDVERjUwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZ7FNCuA/5+GtksqUV8Ipzz0dwBkpStO2qVJoW5U6K7c/0rQ+mg ACBLBy8on47FdJ7AVUUo1heQTVAqnLlR4uLwGeJrYFNEUvZpLWXZJbsGXfVCpgY/ zbBuyQUbPi2umuZyMtQrHBAEFG2dY6MWPthFOdNuCCta0lvncJk5cu4VW287MJTv soC06YeqhZPAcctK2HpYdYQ3N4VJ9trL7pI6o1NDw27Kp8P6rZw+juqQR30MUkD0 VU9BEcdwll9f1kyhevuVEsPwOJKXKcvIV5O7WvpLj5Rzy7J6pubaLxuIGR2Fry/D Urq8B2ck9m3tDv2Re4Bi0gw6yrKSoyPlA2sCAwEAAaOCAigwggIkMB0GA1UdDgQW BBT6cpaVil/wpkG2mg0kzWIGzV31BzAfBgNVHSMEGDAWgBTPyfnWwe6tgWQBx8dr bLIGF1/iJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzgwMTQvejhuNTFzSHVyWUZrQWNmSGEyeXlCaGRmNGljLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvejhuNTFzSHVyWUZrQWNmSGEyeXlC aGRmNGljLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzM4MDE0Ly1uS1dsWXBmOEtaQnRwb05KTTFpQnMxZDlRYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATK3qAwDQYJKoZIhvcNAQELBQADggEBALoN7PBoKBL9ivUUZ+q96qVE VqzclttzzHyMJOapK5k7hq/zaTfLmnGEJVb8I2kEonrFHczvqI6JKPbct4jjq6pA hqggqt2nfZSMlWBoP1buytBNBZni0F3xqhcifdbKDX8FeG9/iZNVwfn5341j3R8m 8Y19cFsrBH5UUdnIz9LzwE4s06Ft4HGmzf/gi0vS5JbTqIr8puT+Zuf/58VbKKtR 88SFy+Edjyw7TN8UY/Vkibp5//nRgT+7/9HlD+QYuWDyJha1HtTepxKKU2KhafeF x/uL3x1CyKqbN0Wg0baWNJvjirwED48Yk+gc+YVo/gbFCoKso9dmz+hzFXDOPag= -----END CERTIFICATE-----Generated at Mon Aug 11 15:17:06 2025 by rpki-client