$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1yWogL8CV1nTfH3RN9GxWOC0cqs.roa File: 1yWogL8CV1nTfH3RN9GxWOC0cqs.roa (raw, json) Hash identifier: 5OWgnk4zQjNBnKaZG0qxuSkOoaREUqAqCpMbQddOxH4= Subject key identifier: D7:25:A8:80:BF:02:57:59:D3:7C:7D:D1:37:D1:B1:58:E0:B4:72:AB Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03E5 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1yWogL8CV1nTfH3RN9GxWOC0cqs.roa Signing time: Mon 01 Sep 2025 01:30:56 +0000 ROA not before: Mon 01 Sep 2025 01:30:56 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 202.180.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:56 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=D725A880BF025759D37C7DD137D1B158E0B472AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:e4:30:0b:c0:d6:41:f1:c7:ae:d8:84:89: 9f:ae:b8:aa:86:88:dd:55:fc:ce:ee:11:a2:a5:4d: b6:9c:21:2d:ee:04:9d:9a:66:28:a5:1b:5b:65:98: cf:f7:09:79:05:58:26:57:b6:33:13:67:1f:86:a2: 4b:e4:b9:22:6f:9c:ff:a2:a5:09:12:5b:68:e5:71: ca:c7:e1:cb:c9:80:3d:80:d1:fc:3f:7a:aa:c3:1f: e2:7e:a3:3c:95:cc:9e:ab:fc:5a:31:7d:0a:ca:86: 79:45:1b:a2:bd:0c:93:74:30:55:55:b7:44:6e:23: 88:bf:f4:0b:31:26:ca:73:c0:f2:e2:de:a6:a4:ce: 1a:f2:15:c6:b8:62:1a:7d:74:6a:31:15:62:aa:57: 00:a9:7a:ff:05:08:70:38:e1:1d:f0:18:b7:77:f2: f3:df:45:bc:cc:ec:6d:91:29:16:e3:89:31:c2:36: 13:f2:58:b8:3b:73:22:ad:e4:1d:6d:b4:9c:e5:d5: 33:a1:1d:e3:7b:ca:4f:cb:4c:b4:e2:f0:d8:df:8f: f9:82:31:86:74:36:48:96:02:7b:f8:7b:a7:9e:97: cd:df:b7:71:f0:d7:dc:eb:1f:cf:c1:7e:d0:da:59: 60:df:f9:b9:ed:0c:96:e4:13:4d:e2:5e:00:82:9e: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:25:A8:80:BF:02:57:59:D3:7C:7D:D1:37:D1:B1:58:E0:B4:72:AB X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1yWogL8CV1nTfH3RN9GxWOC0cqs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.180.176.0/20 Signature Algorithm: sha256WithRSAEncryption e3:1a:d3:cf:9b:8f:ea:a1:f4:fc:54:fe:74:b5:5e:15:02:18: a5:0e:f4:c6:fc:fa:aa:33:0b:4a:88:c1:70:dc:b6:83:e6:1f: 29:9d:bf:9c:f8:03:c7:79:19:33:63:d1:f8:f3:9a:ab:a9:10: 06:73:a1:aa:bf:92:ae:73:6c:b8:93:a4:19:b0:c5:57:44:2a: 08:db:27:45:d1:fb:af:e4:2b:e4:5e:fa:33:e3:d0:54:47:7d: 91:f9:5b:e1:bc:07:58:e2:5e:31:66:13:70:0e:cb:81:60:19: 7b:1f:19:51:91:03:f3:e4:d4:df:60:12:41:cb:99:e2:89:17: 5e:4e:0b:ac:da:02:8c:fd:40:c4:c7:39:5f:e9:61:ca:e3:5a: b2:31:e8:0b:30:79:f1:95:f1:bd:03:01:56:3b:99:6a:52:bb: ab:6a:0d:29:29:21:ed:05:d9:aa:02:6f:a8:06:2e:77:83:e5: 03:5c:24:cb:51:a7:18:ea:c9:0a:50:55:02:a8:62:93:f5:11: b3:9b:9f:1f:c7:e8:e7:7c:c8:b1:9e:70:b7:f7:a3:bb:9f:1c: d3:3b:84:8b:83:7d:66:ce:90:5f:c4:40:0f:20:3d:46:35:8c: be:9f:51:9b:5e:9b:96:ae:09:d0:17:c8:ec:d5:34:eb:c1:41: ee:ab:2a:c3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA5MDEw MTMwNTZaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ3MjVBODgwQkYwMjU3 NTlEMzdDN0REMTM3RDFCMTU4RTBCNDcyQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhy+QwC8DWQfHHrtiEiZ+uuKqGiN1V/M7uEaKlTbacIS3uBJ2a ZiilG1tlmM/3CXkFWCZXtjMTZx+GokvkuSJvnP+ipQkSW2jlccrH4cvJgD2A0fw/ eqrDH+J+ozyVzJ6r/FoxfQrKhnlFG6K9DJN0MFVVt0RuI4i/9AsxJspzwPLi3qak zhryFca4Yhp9dGoxFWKqVwCpev8FCHA44R3wGLd38vPfRbzM7G2RKRbjiTHCNhPy WLg7cyKt5B1ttJzl1TOhHeN7yk/LTLTi8Njfj/mCMYZ0NkiWAnv4e6eel83ft3Hw 19zrH8/BftDaWWDf+bntDJbkE03iXgCCnhtjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU1yWogL8CV1nTfH3RN9GxWOC0cqswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzF5V29nTDhDVjFuVGZIM1JOOUd4V09DMGNxcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKtLAwDQYJKoZIhvcNAQELBQADggEBAOMa08+bj+qh9PxU/nS1XhUCGKUO 9Mb8+qozC0qIwXDctoPmHymdv5z4A8d5GTNj0fjzmqupEAZzoaq/kq5zbLiTpBmw xVdEKgjbJ0XR+6/kK+Re+jPj0FRHfZH5W+G8B1jiXjFmE3AOy4FgGXsfGVGRA/Pk 1N9gEkHLmeKJF15OC6zaAoz9QMTHOV/pYcrjWrIx6AswefGV8b0DAVY7mWpSu6tq DSkpIe0F2aoCb6gGLneD5QNcJMtRpxjqyQpQVQKoYpP1EbObnx/H6Od8yLGecLf3 o7ufHNM7hIuDfWbOkF/EQA8gPUY1jL6fUZtem5auCdAXyOzVNOvBQe6rKsM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:34:58 2025 by rpki-client