$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/xJGz7jpi6zfMq66yIRgle-hq_IQ.roa File: xJGz7jpi6zfMq66yIRgle-hq_IQ.roa (raw, json) Hash identifier: r6PuAufHFFqGpkZvPTbHyGxxmAA0/Xr5hFsuAqhlGGo= Subject key identifier: C4:91:B3:EE:3A:62:EB:37:CC:AB:AE:B2:21:18:25:7B:E8:6A:FC:84 Certificate issuer: /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407 Certificate serial: 39 Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/xJGz7jpi6zfMq66yIRgle-hq_IQ.roa Signing time: Fri 01 Aug 2025 01:30:44 +0000 ROA not before: Fri 01 Aug 2025 01:30:44 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 55376 IP address blocks: 27.118.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407 Validity Not Before: Aug 1 01:30:44 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=C491B3EE3A62EB37CCABAEB22118257BE86AFC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:36:68:84:f5:5a:ea:00:7d:27:83:36:62: 6f:b1:09:58:a0:ca:d4:e9:fb:c1:17:ec:5c:d7:88: a2:39:38:48:9a:92:0d:7d:7d:61:ce:07:d9:db:66: 62:24:84:08:9c:a9:52:1f:f1:2e:db:f4:6b:be:ea: 50:29:d2:55:4c:47:ac:f9:9a:08:3f:43:df:f2:9b: e9:71:9f:0f:52:e2:4b:8b:50:01:21:c5:56:ed:f3: e3:a3:ad:e9:3b:b9:91:27:e3:af:9b:c5:98:45:f3: af:a6:39:a1:22:fc:3f:44:d5:b1:58:7f:a9:30:9e: 81:23:90:c7:41:83:d3:dc:60:d2:39:d4:19:4d:56: 1d:85:16:9a:cc:01:37:40:ef:d7:81:72:a7:04:6a: fe:fb:63:0b:7f:b1:85:b8:56:d6:b6:aa:a9:b2:98: 6f:1a:b5:d7:83:d7:22:36:99:95:86:e2:fc:59:f7: 32:58:ac:00:f6:e8:9c:f0:04:91:63:ad:de:d1:eb: 77:8f:a0:40:12:e2:05:48:85:cc:21:2c:b1:1e:c2: 95:31:b6:4d:55:0a:52:55:f8:0d:84:2c:43:d3:12: 83:7b:12:49:28:48:be:c9:09:83:b0:ec:44:4e:75: d7:59:d4:72:6e:26:8f:8c:5d:b9:54:12:b9:7d:90: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:B3:EE:3A:62:EB:37:CC:AB:AE:B2:21:18:25:7B:E8:6A:FC:84 X509v3 Authority Key Identifier: keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/xJGz7jpi6zfMq66yIRgle-hq_IQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.118.0.0/20 Signature Algorithm: sha256WithRSAEncryption 35:45:1c:7e:38:db:6d:7b:77:08:ff:33:06:7d:b9:1c:76:75: 57:93:cf:c0:ac:a0:63:a0:ea:06:e3:49:7f:71:cc:c9:cd:fc: e2:ff:f4:32:85:69:87:76:17:85:94:fa:c3:a3:58:6b:f0:f9: d1:f8:ce:03:85:13:a5:27:b3:1e:02:10:6c:62:9b:98:c7:d5: 7b:16:ac:8f:bf:63:b9:ee:87:7f:a4:cb:fd:60:a1:cd:d6:99: 6b:77:d3:ab:91:54:f6:aa:d6:bf:6a:46:6d:c7:c1:b6:d0:b0: b0:49:c3:2f:24:98:93:c4:53:63:f6:0d:40:cf:cb:3f:46:0b: 74:9f:62:32:87:a4:c9:78:98:90:40:cc:7b:08:c3:f8:31:12: 1b:2f:f3:78:08:88:b1:27:af:9c:f4:25:af:b8:ac:39:2c:0c: c9:5c:a2:51:30:09:7a:c3:fc:6d:ed:b2:0b:84:44:b0:3d:9e: a2:4f:b3:2b:ce:0f:72:61:e0:4b:0a:30:96:53:19:98:16:96: 85:f5:6d:12:d9:bf:f2:19:93:87:93:e5:d1:35:62:a9:ad:4f: c9:33:e7:7e:28:7b:6a:28:24:e9:03:dc:16:cd:6b:2d:8a:1e: 54:47:3a:23:44:86:53:8b:2d:0e:8c:9e:ff:71:b9:2c:46:6e: 2e:de:9f:42 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCQUVE MEUzNUE3QjU4REFDMjE1OUY3RjFDRDc0MEE1NEI5RThCNDA3MB4XDTI1MDgwMTAx MzA0NFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQzQ5MUIzRUUzQTYyRUIz N0NDQUJBRUIyMjExODI1N0JFODZBRkM4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALXTNmiE9VrqAH0ngzZib7EJWKDK1On7wRfsXNeIojk4SJqSDX19 Yc4H2dtmYiSECJypUh/xLtv0a77qUCnSVUxHrPmaCD9D3/Kb6XGfD1LiS4tQASHF Vu3z46Ot6Tu5kSfjr5vFmEXzr6Y5oSL8P0TVsVh/qTCegSOQx0GD09xg0jnUGU1W HYUWmswBN0Dv14FypwRq/vtjC3+xhbhW1raqqbKYbxq114PXIjaZlYbi/Fn3Mlis APbonPAEkWOt3tHrd4+gQBLiBUiFzCEssR7ClTG2TVUKUlX4DYQsQ9MSg3sSSShI vskJg7DsRE5111nUcm4mj4xduVQSuX2Q1IsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTEkbPuOmLrN8yrrrIhGCV76Gr8hDAfBgNVHSMEGDAWgBS67Q41p7WNrCFZ9/HN dApUuei0BzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTEyL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxub3RBYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3V1ME9OYWUxamF3aFdmZnh6WFFLVkxu b3RBYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MTIveEpHejdqcGk2emZNcTY2eUlSZ2xlLWhxX0lRLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBBt2ADANBgkqhkiG9w0BAQsFAAOCAQEANUUcfjjbbXt3CP8zBn25HHZ1V5PP wKygY6DqBuNJf3HMyc384v/0MoVph3YXhZT6w6NYa/D50fjOA4UTpSezHgIQbGKb mMfVexasj79jue6Hf6TL/WChzdaZa3fTq5FU9qrWv2pGbcfBttCwsEnDLySYk8RT Y/YNQM/LP0YLdJ9iMoekyXiYkEDMewjD+DESGy/zeAiIsSevnPQlr7isOSwMyVyi UTAJesP8be2yC4REsD2eok+zK84PcmHgSwowllMZmBaWhfVtEtm/8hmTh5Pl0TVi qa1PyTPnfih7aigk6QPcFs1rLYoeVEc6I0SGU4stDoye/3G5LEZuLt6fQg== -----END CERTIFICATE-----Generated at Mon Aug 11 13:25:58 2025 by rpki-client