$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/vzIlY2MXuGgxt481RgiujD6ikAQ.roa File: vzIlY2MXuGgxt481RgiujD6ikAQ.roa (raw, json) Hash identifier: 2IiYTq1jGJTrWoyXNq4MN8AK2fBJJoSK2RkRY3pCVRU= Subject key identifier: BF:32:25:63:63:17:B8:68:31:B7:8F:35:46:08:AE:8C:3E:A2:90:04 Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Certificate serial: 6D Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/vzIlY2MXuGgxt481RgiujD6ikAQ.roa Signing time: Fri 01 Aug 2025 01:30:53 +0000 ROA not before: Fri 01 Aug 2025 01:30:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 10000 IP address blocks: 202.228.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0 Validity Not Before: Aug 1 01:30:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=BF3225636317B86831B78F354608AE8C3EA29004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:55:06:e1:ff:9b:0f:c5:9b:16:60:41:f2: 41:76:6a:cf:ec:12:f1:34:de:f4:d1:51:8c:5c:2b: a3:14:ec:88:03:14:72:9c:b1:d3:8c:7d:76:54:e8: 68:d8:2f:8b:49:74:9b:fd:3b:bb:ff:cc:b5:40:87: d7:86:65:6d:b4:3a:dd:a9:74:03:fd:aa:f4:70:3b: 25:bf:ea:ce:01:a9:9d:1b:f9:54:27:2d:f2:05:3b: 84:1d:f7:90:96:d5:91:1d:31:46:72:90:5a:06:02: df:34:cb:b1:62:e9:75:21:51:b1:c6:b4:91:b3:a4: ad:fe:3a:fb:77:ad:c5:37:d6:e9:d8:2b:5f:53:ca: c4:72:9c:94:b3:01:4b:7c:2c:b1:a3:6f:91:aa:b4: a7:c0:a2:64:8f:ab:de:c0:c2:a6:05:00:56:8e:c6: 0e:94:34:d0:9c:de:57:c1:1c:4f:39:97:a8:c2:36: 6a:7d:c5:86:c7:84:e0:e6:da:2c:8b:27:f8:7f:98: 1f:37:15:fc:4f:61:86:7e:a6:70:5c:b9:80:f8:8d: d6:03:70:64:20:07:57:1c:99:39:0a:90:46:d5:77: 95:47:2d:33:00:3f:ec:64:23:34:2b:0d:2f:bc:1b: b1:94:72:32:e4:d0:7b:c8:39:af:1f:73:02:25:99: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:25:63:63:17:B8:68:31:B7:8F:35:46:08:AE:8C:3E:A2:90:04 X509v3 Authority Key Identifier: keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/vzIlY2MXuGgxt481RgiujD6ikAQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.228.240.0/20 Signature Algorithm: sha256WithRSAEncryption 70:2e:a5:d1:0b:6d:98:b5:80:2d:68:e4:00:05:91:97:0a:05: 93:2c:93:1d:aa:a3:d7:d4:81:30:8e:09:5a:1f:b2:15:74:c5: 9c:53:19:92:f0:68:1e:a8:ce:ad:1c:9a:8a:80:ef:29:c9:75: 53:51:8c:00:ad:d5:8b:ea:9e:08:08:18:24:1f:69:64:11:ab: 47:26:59:fd:ba:8b:55:8b:1d:4e:8d:50:62:d2:cf:ca:66:47: 2f:4e:ac:d8:33:25:6c:d8:05:fe:76:04:95:5b:b2:6e:e0:50: 24:97:d6:42:4c:2e:35:64:36:66:3b:0a:6e:78:ac:6a:e1:ff: a1:65:33:72:d0:0f:0f:49:fb:bb:69:22:d4:98:0d:a7:81:8a: b0:76:0f:5d:fc:e8:93:39:ea:c4:ae:b0:6f:f5:bf:5d:74:ae: ea:c0:de:67:3e:ca:00:e1:9f:e7:c7:70:31:ea:08:ce:c8:51: d8:75:d4:71:c7:26:7c:56:d5:b9:72:9a:87:7c:61:1d:e0:5e: fa:df:19:90:d0:80:83:13:35:2e:8f:5c:45:a9:fd:89:9c:a3: f4:b7:08:b9:8c:0f:c8:41:8b:72:16:cc:45:91:40:c4:d5:de: 3f:91:24:ea:5d:8f:78:b9:59:0c:b5:01:21:97:96:83:73:4a: 7d:d4:d3:6d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3 NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDgwMTAx MzA1M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQkYzMjI1NjM2MzE3Qjg2 ODMxQjc4RjM1NDYwOEFFOEMzRUEyOTAwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMFPVQbh/5sPxZsWYEHyQXZqz+wS8TTe9NFRjFwroxTsiAMUcpyx 04x9dlToaNgvi0l0m/07u//MtUCH14ZlbbQ63al0A/2q9HA7Jb/qzgGpnRv5VCct 8gU7hB33kJbVkR0xRnKQWgYC3zTLsWLpdSFRsca0kbOkrf46+3etxTfW6dgrX1PK xHKclLMBS3wssaNvkaq0p8CiZI+r3sDCpgUAVo7GDpQ00JzeV8EcTzmXqMI2an3F hseE4ObaLIsn+H+YHzcV/E9hhn6mcFy5gPiN1gNwZCAHVxyZOQqQRtV3lUctMwA/ 7GQjNCsNL7wbsZRyMuTQe8g5rx9zAiWZS6ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS/MiVjYxe4aDG3jzVGCK6MPqKQBDAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos 4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5 c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NTQvdnpJbFkyTVh1R2d4dDQ4MVJnaXVqRDZpa0FRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMrk8DANBgkqhkiG9w0BAQsFAAOCAQEAcC6l0QttmLWALWjkAAWRlwoFkyyT Haqj19SBMI4JWh+yFXTFnFMZkvBoHqjOrRyaioDvKcl1U1GMAK3Vi+qeCAgYJB9p ZBGrRyZZ/bqLVYsdTo1QYtLPymZHL06s2DMlbNgF/nYElVuybuBQJJfWQkwuNWQ2 ZjsKbnisauH/oWUzctAPD0n7u2ki1JgNp4GKsHYPXfzokznqxK6wb/W/XXSu6sDe Zz7KAOGf58dwMeoIzshR2HXUcccmfFbVuXKah3xhHeBe+t8ZkNCAgxM1Lo9cRan9 iZyj9LcIuYwPyEGLchbMRZFAxNXeP5Ek6l2PeLlZDLUBIZeWg3NKfdTTbQ== -----END CERTIFICATE-----Generated at Mon Aug 11 10:47:47 2025 by rpki-client