$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/0-umak37KSwlcpo7iZLY_m8OCek.roa File: 0-umak37KSwlcpo7iZLY_m8OCek.roa (raw, json) Hash identifier: pxS4Cu5P22mZk+wGl1yH4xK0miZZ1MXdVWFHEnDMd4s= Subject key identifier: D3:EB:A6:6A:4D:FB:29:2C:25:72:9A:3B:89:92:D8:FE:6F:0E:09:E9 Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: C4 Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/0-umak37KSwlcpo7iZLY_m8OCek.roa Signing time: Fri 01 Aug 2025 01:37:53 +0000 ROA not before: Fri 01 Aug 2025 01:37:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4685 IP address blocks: 203.212.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Aug 1 01:37:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D3EBA66A4DFB292C25729A3B8992D8FE6F0E09E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:50:d7:a5:96:b7:4f:24:fd:5d:01:e9:24: 38:79:29:a2:c0:c4:99:24:a2:9f:62:aa:49:0c:99: 2d:6f:5f:50:2d:80:06:89:d3:6a:62:90:23:66:a8: 23:f8:ea:90:30:98:f5:6e:fe:49:0a:83:41:6a:b6: 6f:70:be:7d:de:f5:c2:1c:8c:78:21:3a:7a:32:83: cd:9b:ec:57:9f:2a:fa:ac:3c:75:5f:93:8c:72:64: d8:e4:49:e3:a4:ac:29:34:92:75:33:bc:46:b7:4f: 5f:a6:42:42:f6:1c:74:e0:c6:34:c7:f7:8f:63:a2: e1:ff:1a:a5:f2:86:a3:50:eb:49:2f:fe:8a:98:fe: 36:99:12:2d:d6:3d:f0:57:af:7c:7b:61:30:57:fe: 77:3a:47:62:4c:78:91:9f:fa:97:88:a9:46:48:a4: c0:ae:1d:75:64:8e:56:fc:67:7f:d8:6a:52:d8:3b: 86:73:aa:e1:9a:1b:3f:d6:02:dd:82:82:aa:95:40: aa:37:68:8d:f0:02:24:72:d9:9e:b5:d9:e2:b0:d4: 35:e0:94:0f:61:46:79:0b:11:d0:42:a6:67:50:80: 5b:06:90:2d:08:eb:b0:08:8b:b1:a3:e2:56:13:fe: 45:64:b0:89:40:35:d4:10:4e:25:a6:d5:5e:85:43: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EB:A6:6A:4D:FB:29:2C:25:72:9A:3B:89:92:D8:FE:6F:0E:09:E9 X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/0-umak37KSwlcpo7iZLY_m8OCek.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.212.32.0/19 Signature Algorithm: sha256WithRSAEncryption ce:b4:6e:e5:a1:35:aa:d9:6a:13:80:89:e0:ac:40:43:b3:d0: e2:93:e6:db:8e:8b:c9:6b:bc:ca:36:c2:4b:67:da:13:24:b9: d0:bc:28:35:a2:af:33:f7:ba:f8:3e:60:d0:68:05:68:9b:df: f8:ac:a5:fa:97:c8:06:3d:1f:06:62:f4:b7:85:06:42:a7:96: 34:6d:05:3a:bc:0a:41:3c:4e:75:50:2c:51:9a:4f:81:19:b9: 06:e2:9c:b6:bf:67:7f:c2:f6:50:4a:00:8c:eb:b5:77:01:17: a2:67:8d:ba:41:a4:3f:44:21:22:32:ba:bd:f6:32:f4:94:35: d5:91:76:c0:e3:db:a0:8f:46:6e:a2:eb:15:3a:d8:84:8d:13: 42:df:39:16:9b:86:28:20:94:6f:21:b8:6a:1a:b4:44:31:b6: d0:3a:e0:2a:3c:39:fb:f0:9f:b1:43:cf:d2:5c:22:fe:87:e0: 7e:c7:31:97:0e:b0:16:4c:7c:e7:7d:1f:6d:4c:70:aa:aa:22: 3a:f0:20:bb:8b:be:23:9a:54:0a:4c:be:b3:98:c0:13:f2:92: 2a:aa:c2:69:24:51:fe:02:6d:0d:f6:29:00:27:ff:94:b4:e5: bb:38:b2:1e:78:8c:d2:15:96:cf:1e:e1:6e:9b:44:b3:60:5c: 86:92:80:70 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTA4MDEw MTM3NTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEQzRUJBNjZBNERGQjI5 MkMyNTcyOUEzQjg5OTJEOEZFNkYwRTA5RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyu1DXpZa3TyT9XQHpJDh5KaLAxJkkop9iqkkMmS1vX1AtgAaJ 02pikCNmqCP46pAwmPVu/kkKg0Fqtm9wvn3e9cIcjHghOnoyg82b7FefKvqsPHVf k4xyZNjkSeOkrCk0knUzvEa3T1+mQkL2HHTgxjTH949jouH/GqXyhqNQ60kv/oqY /jaZEi3WPfBXr3x7YTBX/nc6R2JMeJGf+peIqUZIpMCuHXVkjlb8Z3/YalLYO4Zz quGaGz/WAt2CgqqVQKo3aI3wAiRy2Z612eKw1DXglA9hRnkLEdBCpmdQgFsGkC0I 67AIi7Gj4lYT/kVksIlANdQQTiWm1V6FQ+I/AgMBAAGjggIiMIICHjAdBgNVHQ4E FgQU0+umak37KSwlcpo7iZLY/m8OCekwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51 FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MC8wLXVtYWszN0tTd2xjcG83aVpMWV9tOE9DZWsucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFy9QgMA0GCSqGSIb3DQEBCwUAA4IBAQDOtG7loTWq2WoTgIngrEBDs9Dik+bb jovJa7zKNsJLZ9oTJLnQvCg1oq8z97r4PmDQaAVom9/4rKX6l8gGPR8GYvS3hQZC p5Y0bQU6vApBPE51UCxRmk+BGbkG4py2v2d/wvZQSgCM67V3AReiZ426QaQ/RCEi Mrq99jL0lDXVkXbA49ugj0ZuousVOtiEjRNC3zkWm4YoIJRvIbhqGrREMbbQOuAq PDn78J+xQ8/SXCL+h+B+xzGXDrAWTHznfR9tTHCqqiI68CC7i74jmlQKTL6zmMAT 8pIqqsJpJFH+Am0N9ikAJ/+UtOW7OLIeeIzSFZbPHuFum0SzYFyGkoBw -----END CERTIFICATE-----Generated at Mon Aug 11 13:32:03 2025 by rpki-client