$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/A2csjo2tLDxLUCl9KyzctZSAg8o.roa File: A2csjo2tLDxLUCl9KyzctZSAg8o.roa (raw, json) Hash identifier: AEF/XqPf5CF26gzG+ELnrnLjc2lLGV69nWoLeAvnfjU= Subject key identifier: 03:67:2C:8E:8D:AD:2C:3C:4B:50:29:7D:2B:2C:DC:B5:94:80:83:CA Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01ED Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/A2csjo2tLDxLUCl9KyzctZSAg8o.roa Signing time: Fri 01 Aug 2025 01:33:46 +0000 ROA not before: Fri 01 Aug 2025 01:33:46 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 2497 IP address blocks: 133.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Aug 1 01:33:46 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=03672C8E8DAD2C3C4B50297D2B2CDCB5948083CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:2b:34:fe:d7:0e:6b:c1:10:2f:3a:b9:0a: 7f:eb:80:de:f3:63:9f:8a:98:3a:fa:ae:10:40:7b: 06:ce:3b:be:62:2b:bd:95:7b:e1:d7:79:17:9f:b7: 76:62:0e:f3:d4:5a:42:5c:fa:51:ac:ac:23:85:54: 8f:a6:11:e3:4e:19:69:86:45:89:8a:27:f5:4a:16: e0:68:25:cb:2d:9f:19:ba:87:22:b0:4e:32:01:07: 84:b6:72:d4:00:01:db:c0:0a:66:ce:c8:26:18:c4: 12:15:af:7e:fd:b3:55:95:a4:54:81:f7:c5:ac:49: 53:b4:a5:47:dd:8b:cb:0d:76:77:b8:c2:53:ae:40: 9a:45:d4:14:8d:6b:70:45:de:b1:33:53:17:b7:91: e4:00:24:42:fd:e9:c9:07:fd:c0:60:9e:13:7e:f9: 35:7f:3d:86:ef:9e:33:20:4c:70:3d:04:25:a7:97: be:99:70:61:ba:3b:69:92:fd:73:ee:d5:b6:00:93: 94:87:56:d3:52:21:e4:54:da:17:b8:7b:97:4d:9e: d9:59:80:0e:eb:43:39:95:1b:17:68:fc:0b:ce:1d: 73:a3:b1:3c:cd:d8:67:bd:a9:49:a4:19:3a:be:de: f9:db:4b:80:ab:48:88:bc:d7:58:7a:fa:56:1e:c4: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:2C:8E:8D:AD:2C:3C:4B:50:29:7D:2B:2C:DC:B5:94:80:83:CA X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/A2csjo2tLDxLUCl9KyzctZSAg8o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.238.16.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:1f:d8:2c:fc:e3:61:b7:10:63:4a:75:37:c9:1f:94:5f:24: 52:47:4d:ff:05:ee:8a:76:7a:54:c9:5c:42:8b:e9:44:2c:8b: 20:b6:9f:e3:c8:f1:03:01:f8:36:ca:c1:d5:b8:c3:e9:8c:f7: c2:da:e5:92:eb:b3:b8:87:64:1e:f6:11:38:64:f7:e0:e3:43: 76:d5:73:b6:2a:ca:b6:b0:b4:1d:5e:90:b2:2e:c2:c8:f7:b1: ac:2d:fa:83:6b:f2:6f:00:47:bf:3d:10:fb:d1:34:a0:8a:be: 84:e7:e5:1a:b3:cb:ac:69:1f:84:1c:6d:bd:f3:63:ce:8d:61: e2:23:88:42:fd:33:3f:f0:7d:53:1f:b7:0d:75:1b:22:ae:c6: 28:a9:42:f3:ab:7c:f6:8d:03:a9:b3:ff:1b:29:8c:8e:bb:d8: 52:1c:ce:fe:5d:8c:84:ca:48:c9:9e:25:0f:33:7c:ee:ed:19: cf:92:02:82:1b:28:26:01:88:04:11:dc:35:45:da:30:39:d5: ae:a8:7a:02:04:73:9c:03:f3:23:ee:a3:b7:75:cc:bc:96:6b: 97:05:2e:91:da:01:0d:25:21:e6:15:0f:c7:53:ab:69:24:f0: 98:b5:30:14:37:2e:86:fb:3f:92:3e:28:78:66:d0:91:5b:51: 78:c1:ce:f0 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA4MDEw MTMzNDZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDAzNjcyQzhFOERBRDJD M0M0QjUwMjk3RDJCMkNEQ0I1OTQ4MDgzQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOgys0/tcOa8EQLzq5Cn/rgN7zY5+KmDr6rhBAewbOO75iK72V e+HXeReft3ZiDvPUWkJc+lGsrCOFVI+mEeNOGWmGRYmKJ/VKFuBoJcstnxm6hyKw TjIBB4S2ctQAAdvACmbOyCYYxBIVr379s1WVpFSB98WsSVO0pUfdi8sNdne4wlOu QJpF1BSNa3BF3rEzUxe3keQAJEL96ckH/cBgnhN++TV/PYbvnjMgTHA9BCWnl76Z cGG6O2mS/XPu1bYAk5SHVtNSIeRU2he4e5dNntlZgA7rQzmVGxdo/AvOHXOjsTzN 2Ge9qUmkGTq+3vnbS4CrSIi811h6+lYexAW9AgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUA2csjo2tLDxLUCl9KyzctZSAg8owHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvQTJjc2pvMnRMRHhMVUNsOUt5emN0WlNBZzhvLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BIXuEDANBgkqhkiG9w0BAQsFAAOCAQEAPR/YLPzjYbcQY0p1N8kflF8kUkdN/wXu inZ6VMlcQovpRCyLILaf48jxAwH4NsrB1bjD6Yz3wtrlkuuzuIdkHvYROGT34OND dtVztirKtrC0HV6Qsi7CyPexrC36g2vybwBHvz0Q+9E0oIq+hOflGrPLrGkfhBxt vfNjzo1h4iOIQv0zP/B9Ux+3DXUbIq7GKKlC86t89o0DqbP/GymMjrvYUhzO/l2M hMpIyZ4lDzN87u0Zz5ICghsoJgGIBBHcNUXaMDnVrqh6AgRznAPzI+6jt3XMvJZr lwUukdoBDSUh5hUPx1OraSTwmLUwFDcuhvs/kj4oeGbQkVtReMHO8A== -----END CERTIFICATE-----Generated at Mon Aug 11 07:45:35 2025 by rpki-client