$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0bj09WLEmYUFcsPL1n3ZFyM91Pc.roa File: 0bj09WLEmYUFcsPL1n3ZFyM91Pc.roa (raw, json) Hash identifier: /vNZ9oP+xiFzcRwrGmaTL6C8MJGZ925bFw2qI0Vq16I= Subject key identifier: D1:B8:F4:F5:62:C4:99:85:05:72:C3:CB:D6:7D:D9:17:23:3D:D4:F7 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03DE Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0bj09WLEmYUFcsPL1n3ZFyM91Pc.roa Signing time: Fri 01 Aug 2025 02:03:14 +0000 ROA not before: Fri 01 Aug 2025 02:03:14 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 122.255.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 02:03:14 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=D1B8F4F562C499850572C3CBD67DD917233DD4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:c0:91:53:ee:3f:eb:72:02:02:c4:dd:73: 88:ca:80:1c:a4:aa:94:63:1a:67:d1:f5:07:1a:5e: f7:c9:bf:87:f8:df:01:bc:5c:23:9b:75:36:59:71: 94:f4:71:f4:80:9f:8c:0f:16:b1:6d:db:67:06:e4: 99:e9:0e:17:41:a8:2c:4a:ec:78:15:7a:5e:32:fc: ec:af:80:f5:15:61:c8:c4:a5:76:69:74:9b:2e:bd: 69:4e:f7:dd:97:28:3b:19:c2:b5:51:2c:ce:a6:0d: fb:d1:8b:c3:55:e7:7e:da:1c:e8:6a:77:08:10:30: 06:63:46:97:db:ed:d5:58:5a:5b:b5:3a:49:d6:26: 6a:bb:cb:40:1e:d8:00:81:63:35:7d:74:1b:f3:10: f0:76:9a:22:54:c9:fb:e3:fb:2a:4d:82:28:d4:b7: e5:2c:da:55:99:66:0e:b8:76:af:06:5f:36:3f:89: dd:9c:1f:9b:3e:8c:8b:16:e9:20:64:d2:76:bc:ee: 13:99:02:c4:2f:98:0d:7d:f1:c2:48:df:d4:4f:ce: 25:65:5d:b9:6f:bb:a6:aa:9d:f9:cb:73:4d:1c:88: a1:89:1f:be:2b:32:97:39:37:65:38:cf:12:17:3f: 7a:79:fb:d3:2a:b3:25:63:48:5a:1c:80:16:36:b9: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:F4:F5:62:C4:99:85:05:72:C3:CB:D6:7D:D9:17:23:3D:D4:F7 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0bj09WLEmYUFcsPL1n3ZFyM91Pc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.255.128.0/17 Signature Algorithm: sha256WithRSAEncryption c7:d2:19:bf:e1:a3:68:a2:1f:15:98:00:2f:d0:7c:14:bc:b5: ea:e3:22:8a:79:6a:f1:51:51:6e:33:26:12:5f:01:5b:df:b3: 5a:ea:60:76:da:62:72:b5:b2:9d:25:50:ed:db:97:aa:dc:da: 36:f1:77:5d:d6:52:c9:06:2e:39:6f:6c:34:13:73:b3:52:c3: bc:85:a8:12:50:d8:f9:2b:ea:ea:00:96:60:b3:73:09:00:eb: 35:2b:cd:04:1e:02:85:3b:19:ff:08:34:e8:41:1a:0f:66:c9: dd:d2:46:97:e3:89:27:6f:6b:02:c1:b5:b7:54:d3:ff:d2:61: 8d:23:71:3a:22:b0:0a:62:b8:11:97:b8:f1:27:b6:36:20:e9: 69:4f:f8:47:77:e2:8e:83:d5:3c:ab:c6:1b:b7:22:2f:ec:a6: ce:42:8d:c7:cd:a8:a3:e4:0f:45:e6:ac:15:a7:e4:ca:4a:f4: 88:93:3a:27:e4:fd:5e:e3:0c:18:cf:b2:34:78:fc:ca:b3:66: 4d:ce:2b:95:4c:19:dd:e9:13:21:1c:7f:52:be:c9:25:fe:a9: 54:1d:fb:d7:6f:60:4a:7e:a7:33:fa:ed:23:1e:96:35:08:16: 23:da:28:36:33:ad:59:a4:92:86:33:54:b6:20:61:f4:59:be: 7c:e0:f5:d3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MjAzMTRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEQxQjhGNEY1NjJDNDk5 ODUwNTcyQzNDQkQ2N0REOTE3MjMzREQ0RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAHsCRU+4/63ICAsTdc4jKgBykqpRjGmfR9QcaXvfJv4f43wG8 XCObdTZZcZT0cfSAn4wPFrFt22cG5JnpDhdBqCxK7HgVel4y/OyvgPUVYcjEpXZp dJsuvWlO992XKDsZwrVRLM6mDfvRi8NV537aHOhqdwgQMAZjRpfb7dVYWlu1OknW Jmq7y0Ae2ACBYzV9dBvzEPB2miJUyfvj+ypNgijUt+Us2lWZZg64dq8GXzY/id2c H5s+jIsW6SBk0na87hOZAsQvmA198cJI39RPziVlXblvu6aqnfnLc00ciKGJH74r Mpc5N2U4zxIXP3p5+9MqsyVjSFocgBY2ufbXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU0bj09WLEmYUFcsPL1n3ZFyM91PcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzBiajA5V0xFbVlVRmNzUEwxbjNaRnlNOTFQYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAd6/4AwDQYJKoZIhvcNAQELBQADggEBAMfSGb/ho2iiHxWYAC/QfBS8terj Iop5avFRUW4zJhJfAVvfs1rqYHbaYnK1sp0lUO3bl6rc2jbxd13WUskGLjlvbDQT c7NSw7yFqBJQ2Pkr6uoAlmCzcwkA6zUrzQQeAoU7Gf8INOhBGg9myd3SRpfjiSdv awLBtbdU0//SYY0jcToisApiuBGXuPEntjYg6WlP+Ed34o6D1Tyrxhu3Ii/sps5C jcfNqKPkD0XmrBWn5MpK9IiTOifk/V7jDBjPsjR4/MqzZk3OK5VMGd3pEyEcf1K+ ySX+qVQd+9dvYEp+pzP67SMeljUIFiPaKDYzrVmkkoYzVLYgYfRZvnzg9dM= -----END CERTIFICATE-----Generated at Mon Aug 11 13:19:59 2025 by rpki-client