$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/2Fhq6Bg-iLtYcN-wtwX56TV4QCI.roa File: 2Fhq6Bg-iLtYcN-wtwX56TV4QCI.roa (raw, json) Hash identifier: A4W3m3sRe8aQWOzvsJXLoIkMfHzdG/pevOM+D1hvre4= Subject key identifier: D8:58:6A:E8:18:3E:88:BB:58:70:DF:B0:B7:05:F9:E9:35:78:40:22 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01F1 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/2Fhq6Bg-iLtYcN-wtwX56TV4QCI.roa Signing time: Fri 01 Aug 2025 01:33:48 +0000 ROA not before: Fri 01 Aug 2025 01:33:48 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 38628 IP address blocks: 163.131.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Aug 1 01:33:48 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D8586AE8183E88BB5870DFB0B705F9E935784022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:c0:40:d9:ca:aa:d7:dd:4e:da:d8:80:b8: d8:bd:1b:43:45:22:d9:4b:93:fb:bc:cb:05:01:ba: b9:e0:34:e1:ba:7a:81:ce:71:0c:f4:f3:f3:58:12: b0:dc:d3:21:1e:78:5c:8a:f5:dc:5c:68:c6:a3:29: 9f:0d:33:f5:1d:59:42:62:57:5a:d6:2a:be:9e:de: 9d:7b:1f:c5:82:58:c2:7e:5c:77:8c:0e:ad:8b:e5: 98:2b:a4:9a:04:72:30:5c:64:61:20:e8:6b:8c:39: a1:78:4c:b5:77:90:54:a6:e7:77:07:be:e6:c4:4e: 7e:7e:df:e4:2d:05:d8:89:77:1f:0a:23:a6:07:9d: a6:cb:4c:bf:03:a5:cb:7b:43:fe:c5:ea:39:05:c1: bc:5e:84:19:19:50:b5:36:33:b3:6e:38:c6:5b:4f: c8:99:a9:95:d5:e1:49:50:aa:6b:29:2e:99:d7:a3: c3:f8:75:8d:bd:7d:cc:d1:7a:89:37:f5:f5:80:7b: c1:32:a6:cd:97:8d:cb:7c:6a:aa:58:48:b5:e5:e5: 52:35:fb:cc:42:6c:88:e0:7e:95:34:3a:7b:29:a8: 15:65:f8:5d:e2:47:ea:0b:8a:db:42:6c:73:47:84: 93:ee:80:2d:25:39:f0:11:4d:59:a1:3c:5a:ea:0d: 73:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:6A:E8:18:3E:88:BB:58:70:DF:B0:B7:05:F9:E9:35:78:40:22 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/2Fhq6Bg-iLtYcN-wtwX56TV4QCI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.131.80.0/20 Signature Algorithm: sha256WithRSAEncryption 15:e5:5f:31:99:aa:a2:31:b4:4e:f2:26:1b:4d:10:e0:53:d5: 6f:94:f3:3c:22:00:04:3e:66:41:43:34:a3:f9:e8:62:ac:58: 56:c2:57:4a:ad:ef:ae:40:db:6f:74:73:70:82:86:62:7a:26: 5c:fb:92:a6:4e:e6:ee:8b:f6:93:fe:2c:6a:70:f8:3b:ba:3a: 44:33:53:aa:8f:05:5c:29:8a:d7:ed:0d:50:2d:0e:a7:ac:50: d2:6a:7b:72:f6:56:56:4c:99:a0:c7:77:c7:c9:61:3d:e9:17: ab:dc:92:18:0f:43:01:5e:ce:bb:b9:26:ed:9f:36:ab:49:70: 7d:7a:ee:d2:c8:1d:cf:4a:e5:21:50:b3:1e:4b:63:39:91:3f: b7:a2:65:d0:a7:03:28:68:71:50:2d:4a:77:b9:35:49:bb:a8: 21:6a:00:3c:73:56:e4:b0:df:db:17:90:46:59:f6:2b:10:32: ad:5a:7c:9b:a1:2f:31:98:30:c2:bc:46:a6:7a:77:f4:55:e2: 8f:82:86:da:e7:78:f1:d2:82:0b:48:8a:48:5e:34:a7:24:0f: 60:c5:41:68:bd:d5:19:16:b5:f3:a0:d9:ff:f5:24:fd:94:3e: af:79:84:03:ae:2c:0c:e8:d3:67:10:89:10:2d:4f:db:00:84: b4:69:19:92 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA4MDEw MTMzNDhaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEQ4NTg2QUU4MTgzRTg4 QkI1ODcwREZCMEI3MDVGOUU5MzU3ODQwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7MBA2cqq191O2tiAuNi9G0NFItlLk/u8ywUBurngNOG6eoHO cQz08/NYErDc0yEeeFyK9dxcaMajKZ8NM/UdWUJiV1rWKr6e3p17H8WCWMJ+XHeM Dq2L5ZgrpJoEcjBcZGEg6GuMOaF4TLV3kFSm53cHvubETn5+3+QtBdiJdx8KI6YH nabLTL8Dpct7Q/7F6jkFwbxehBkZULU2M7NuOMZbT8iZqZXV4UlQqmspLpnXo8P4 dY29fczReok39fWAe8Eyps2Xjct8aqpYSLXl5VI1+8xCbIjgfpU0OnspqBVl+F3i R+oLittCbHNHhJPugC0lOfARTVmhPFrqDXMhAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQU2Fhq6Bg+iLtYcN+wtwX56TV4QCIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvMkZocTZCZy1pTHRZY04td3R3WDU2VFY0UUNJLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BKODUDANBgkqhkiG9w0BAQsFAAOCAQEAFeVfMZmqojG0TvImG00Q4FPVb5TzPCIA BD5mQUM0o/noYqxYVsJXSq3vrkDbb3RzcIKGYnomXPuSpk7m7ov2k/4sanD4O7o6 RDNTqo8FXCmK1+0NUC0Op6xQ0mp7cvZWVkyZoMd3x8lhPekXq9ySGA9DAV7Ou7km 7Z82q0lwfXru0sgdz0rlIVCzHktjOZE/t6Jl0KcDKGhxUC1Kd7k1SbuoIWoAPHNW 5LDf2xeQRln2KxAyrVp8m6EvMZgwwrxGpnp39FXij4KG2ud48dKCC0iKSF40pyQP YMVBaL3VGRa186DZ//Uk/ZQ+r3mEA64sDOjTZxCJEC1P2wCEtGkZkg== -----END CERTIFICATE-----Generated at Mon Aug 11 07:45:18 2025 by rpki-client