$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/JRHORhNzFsnHE8qyT9vBhBmypzY.roa File: JRHORhNzFsnHE8qyT9vBhBmypzY.roa (raw, json) Hash identifier: gVc8WhQtsqP6mIFkGdjQxp6UgbMVOhUKDRmAX8Shq50= Subject key identifier: 25:11:CE:46:13:73:16:C9:C7:13:CA:B2:4F:DB:C1:84:19:B2:A7:36 Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Certificate serial: B8 Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/JRHORhNzFsnHE8qyT9vBhBmypzY.roa Signing time: Fri 01 Aug 2025 01:31:43 +0000 ROA not before: Fri 01 Aug 2025 01:31:43 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4685 IP address blocks: 121.1.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736 Validity Not Before: Aug 1 01:31:43 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=2511CE46137316C9C713CAB24FDBC18419B2A736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:4c:f0:1d:38:52:93:cc:d0:42:81:d0:eb: 63:3c:42:6a:d9:04:2c:55:7a:66:05:5d:a3:14:8c: 02:15:aa:d4:df:24:4c:63:45:a4:8e:a0:40:01:32: ea:e0:31:e3:b3:b9:b7:85:46:bf:dc:8e:bc:76:12: e1:59:66:51:23:7c:22:0b:91:01:20:0c:8d:d8:8a: 5a:34:52:a2:04:68:19:ba:2c:7f:ac:75:19:52:f2: 67:25:30:84:f0:5a:ab:aa:55:a6:cc:0e:75:a5:53: a6:ce:e1:11:ca:23:8d:68:23:db:a6:9c:60:3c:e0: ec:c1:fe:1c:20:42:80:57:4a:84:d4:9e:a9:85:b4: d6:03:14:f9:b1:a9:ff:c2:4d:2c:23:0d:01:9c:29: dc:f0:9c:40:d9:b4:3c:fb:60:e2:33:9e:48:3b:6e: 7e:5b:44:22:ee:a4:b9:ed:41:48:07:21:91:9d:9a: 04:29:29:13:1c:ab:b9:d3:28:6a:bd:2e:cd:93:01: 51:d5:a7:11:d7:3c:74:bb:d6:25:cc:89:a9:ab:3f: b2:07:12:77:87:79:67:37:ba:5c:e3:05:f4:e5:b4: cb:46:33:d0:be:84:27:bf:84:5e:63:4e:78:90:54: 36:ae:90:b9:ef:aa:28:c9:aa:5f:3d:63:48:ad:ff: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:11:CE:46:13:73:16:C9:C7:13:CA:B2:4F:DB:C1:84:19:B2:A7:36 X509v3 Authority Key Identifier: keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/JRHORhNzFsnHE8qyT9vBhBmypzY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.1.128.0/17 Signature Algorithm: sha256WithRSAEncryption 21:2a:ab:d0:97:0e:3b:c0:06:1e:da:0c:0f:cf:4c:23:78:e1: b1:d7:a9:55:4e:37:a7:63:1c:61:4d:91:7a:02:b3:ac:af:bf: d0:80:52:e3:cc:0d:e5:f6:fb:20:fa:f5:32:29:65:6e:0b:ba: 6b:c0:dd:5a:28:50:bb:ae:dc:6d:f3:3a:35:7c:05:0f:0d:f0: 6d:1b:7a:ae:82:ef:e2:5d:30:ab:e4:8e:9a:5f:99:eb:65:04: b7:2b:7b:e4:b9:02:c8:c4:5f:d6:41:58:c2:53:66:55:bf:f0: 93:61:9d:b6:11:d1:df:27:2c:96:06:24:00:f9:e1:2a:ba:9f: 42:76:00:a7:39:6e:7d:d8:e0:0a:73:f7:75:e1:92:25:80:5f: 01:79:22:7b:35:76:06:cf:0a:b5:70:53:f0:46:55:47:25:ad: b9:ba:63:f7:e5:bd:6e:23:db:a7:e8:c4:5f:31:b2:22:cb:2f: 31:0e:e2:e6:d7:14:5c:ae:fb:1c:d1:d7:11:65:47:4d:ad:7a: 3c:bd:e2:54:e4:c8:32:f9:1b:3b:ad:47:89:50:bf:d8:73:ec: 40:06:e6:21:61:22:43:9b:e8:74:47:8f:bb:0e:e2:92:c3:71: 96:cb:07:14:83:86:e8:e1:8b:54:c1:29:3e:2e:3b:0c:b5:dd: 37:a6:d8:fb -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgICALgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTA4MDEw MTMxNDNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDI1MTFDRTQ2MTM3MzE2 QzlDNzEzQ0FCMjRGREJDMTg0MTlCMkE3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC68EzwHThSk8zQQoHQ62M8QmrZBCxVemYFXaMUjAIVqtTfJExj RaSOoEABMurgMeOzubeFRr/cjrx2EuFZZlEjfCILkQEgDI3Yilo0UqIEaBm6LH+s dRlS8mclMITwWquqVabMDnWlU6bO4RHKI41oI9umnGA84OzB/hwgQoBXSoTUnqmF tNYDFPmxqf/CTSwjDQGcKdzwnEDZtDz7YOIznkg7bn5bRCLupLntQUgHIZGdmgQp KRMcq7nTKGq9Ls2TAVHVpxHXPHS71iXMiamrP7IHEneHeWc3ulzjBfTltMtGM9C+ hCe/hF5jTniQVDaukLnvqijJql89Y0it/wWHAgMBAAGjggIiMIICHjAdBgNVHQ4E FgQUJRHORhNzFsnHE8qyT9vBhBmypzYwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51 FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MC9KUkhPUmhOekZzbkhFOHF5VDl2QmhCbXlwelkucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHeQGAMA0GCSqGSIb3DQEBCwUAA4IBAQAhKqvQlw47wAYe2gwPz0wjeOGx16lV TjenYxxhTZF6ArOsr7/QgFLjzA3l9vsg+vUyKWVuC7prwN1aKFC7rtxt8zo1fAUP DfBtG3qugu/iXTCr5I6aX5nrZQS3K3vkuQLIxF/WQVjCU2ZVv/CTYZ22EdHfJyyW BiQA+eEqup9CdgCnOW592OAKc/d14ZIlgF8BeSJ7NXYGzwq1cFPwRlVHJa25umP3 5b1uI9un6MRfMbIiyy8xDuLm1xRcrvsc0dcRZUdNrXo8veJU5Mgy+Rs7rUeJUL/Y c+xABuYhYSJDm+h0R4+7DuKSw3GWywcUg4bo4YtUwSk+LjsMtd03ptj7 -----END CERTIFICATE-----Generated at Mon Aug 11 13:31:50 2025 by rpki-client