$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa File: Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa (raw, json) Hash identifier: iOGPOuYPj5r/cN0YDKN/ZOwI7ZDH9ZX/pSQ7K6nAdxU= Subject key identifier: 17:0E:1B:F0:11:CD:70:81:BC:9C:64:23:9F:54:AA:D6:D2:CF:A5:AD Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 6F Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa Signing time: Fri 01 Aug 2025 01:30:54 +0000 ROA not before: Fri 01 Aug 2025 01:30:54 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 10000 IP address blocks: 203.170.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Aug 1 01:30:54 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=170E1BF011CD7081BC9C64239F54AAD6D2CFA5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:50:e4:7b:b2:e5:7e:4e:29:b0:0d:85:6e: b0:be:4c:21:a4:e2:c3:11:1d:2c:37:e6:5b:13:26: 83:b2:b2:49:24:b5:1f:33:93:f1:91:0f:9e:51:0a: 06:bf:b4:e7:86:d6:88:fd:cf:a5:6a:a0:bc:96:59: 9d:07:bb:70:f1:eb:ad:1c:e9:12:9c:bb:70:26:47: 5c:da:83:95:8e:dd:0c:9e:17:4d:29:b3:1a:7e:d3: 9f:76:70:3f:a8:7d:9b:f1:b5:73:b8:71:34:d0:eb: 66:74:68:6c:96:88:66:29:0a:49:61:38:49:5e:2a: 07:a7:89:e3:55:c5:45:c1:52:0b:5e:a4:47:52:1f: de:2c:68:14:0f:f9:e7:9b:a0:3c:09:d9:0c:83:71: ba:f5:13:68:c1:07:f3:2e:ba:74:3e:50:41:37:5f: 02:7a:8f:12:a2:31:11:3b:9c:b5:63:b3:26:d7:ac: 57:24:ea:36:66:cc:e9:4c:74:12:fb:24:e1:03:c1: a7:f1:16:a6:40:92:d3:c1:92:99:54:d4:43:15:5b: 4e:2a:33:5a:52:3e:b0:35:ea:0e:09:af:a3:44:52: 6e:ca:08:35:74:ef:59:57:58:f1:db:da:c7:ad:81: 2e:51:70:a5:49:87:9a:56:57:d0:ce:66:03:72:c0: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0E:1B:F0:11:CD:70:81:BC:9C:64:23:9F:54:AA:D6:D2:CF:A5:AD X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.32.0/20 Signature Algorithm: sha256WithRSAEncryption 38:b5:0c:79:9a:5b:a1:72:8c:8a:a4:77:66:6a:c8:08:8c:c5: c9:58:66:b8:b9:fb:a9:59:77:5d:d2:74:19:4a:e5:df:90:f6: 3b:81:be:48:0d:d0:ea:17:11:81:a4:3d:77:d0:38:44:7a:15: 68:66:b4:95:ea:36:59:f6:27:82:98:71:45:f6:c7:58:47:8e: 13:ce:7b:ab:7c:64:d9:e0:7a:c8:5a:27:0f:4f:5c:1e:e2:ac: ed:d5:e1:3e:68:d6:93:a5:60:f9:dd:e6:79:f7:22:b2:ec:04: 5b:ee:ce:e3:e9:5a:b3:71:60:1e:f9:a6:1d:63:a0:e2:c4:bc: 27:a6:47:97:bc:9e:19:b7:bc:54:6d:59:aa:6c:b2:56:cc:c4: e1:f6:0d:30:79:8e:58:ec:e4:28:72:e7:2c:49:52:e2:b4:a4: 75:a5:9d:7c:6e:c1:6f:cf:24:ec:4a:57:91:4b:81:ac:f5:fd: 32:64:c5:28:97:f3:83:e5:9d:01:3f:2c:3b:22:8b:91:77:10: 07:23:f0:db:70:f2:f5:fb:5c:67:62:0e:d2:ce:c1:4a:23:8b: b1:8c:ad:4b:9f:4f:22:ec:24:9f:18:35:f8:4c:ec:78:3c:b3: 83:a0:cc:82:c6:28:90:1f:b6:01:23:4d:87:93:31:b6:e7:3a: db:3a:27:30 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDgwMTAx MzA1NFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTcwRTFCRjAxMUNENzA4 MUJDOUM2NDIzOUY1NEFBRDZEMkNGQTVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/gUOR7suV+TimwDYVusL5MIaTiwxEdLDfmWxMmg7KySSS1HzOT 8ZEPnlEKBr+054bWiP3PpWqgvJZZnQe7cPHrrRzpEpy7cCZHXNqDlY7dDJ4XTSmz Gn7Tn3ZwP6h9m/G1c7hxNNDrZnRobJaIZikKSWE4SV4qB6eJ41XFRcFSC16kR1If 3ixoFA/555ugPAnZDINxuvUTaMEH8y66dD5QQTdfAnqPEqIxETuctWOzJtesVyTq NmbM6Ux0Evsk4QPBp/EWpkCS08GSmVTUQxVbTiozWlI+sDXqDgmvo0RSbsoINXTv WVdY8dvax62BLlFwpUmHmlZX0M5mA3LAyYcCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQXDhvwEc1wgbycZCOfVKrW0s+lrTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvRnc0YjhCSE5jSUc4bkdRam4xU3ExdExQcGEwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMuqIDANBgkqhkiG9w0BAQsFAAOCAQEAOLUMeZpboXKMiqR3ZmrICIzFyVhm uLn7qVl3XdJ0GUrl35D2O4G+SA3Q6hcRgaQ9d9A4RHoVaGa0leo2WfYngphxRfbH WEeOE857q3xk2eB6yFonD09cHuKs7dXhPmjWk6Vg+d3mefcisuwEW+7O4+las3Fg HvmmHWOg4sS8J6ZHl7yeGbe8VG1ZqmyyVszE4fYNMHmOWOzkKHLnLElS4rSkdaWd fG7Bb88k7EpXkUuBrPX9MmTFKJfzg+WdAT8sOyKLkXcQByPw23Dy9ftcZ2IO0s7B SiOLsYytS59PIuwknxg1+EzseDyzg6DMgsYokB+2ASNNh5Mxtuc62zonMA== -----END CERTIFICATE-----Generated at Mon Aug 11 10:48:13 2025 by rpki-client