$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8hNH-e9jDAaZM9S1iMqq1E4iSfE.roa File: 8hNH-e9jDAaZM9S1iMqq1E4iSfE.roa (raw, json) Hash identifier: C8rYrowP349uicAXrOe72smYR0uxux7d8u7P/8fC0PE= Subject key identifier: F2:13:47:F9:EF:63:0C:06:99:33:D4:B5:88:CA:AA:D4:4E:22:49:F1 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0332 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8hNH-e9jDAaZM9S1iMqq1E4iSfE.roa Signing time: Fri 01 Aug 2025 01:34:58 +0000 ROA not before: Fri 01 Aug 2025 01:34:58 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 180.131.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:34:58 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=F21347F9EF630C069933D4B588CAAAD44E2249F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:ac:6a:b3:cd:44:48:db:41:12:cf:fb:e3: 5d:f3:48:70:3a:7c:90:81:d8:eb:2d:17:89:93:13: fc:c3:a3:11:7d:19:6c:b6:1b:9b:e8:e1:87:d8:96: a5:05:96:50:e1:54:72:c2:d3:d5:41:09:d3:4c:46: 8e:6b:56:24:b1:8e:0e:b3:13:53:9e:cd:49:8a:ca: fb:96:b0:bc:84:0f:b7:23:bf:a3:b1:d7:da:9d:f2: e5:2c:e1:87:49:cb:9b:39:d2:b9:19:98:36:aa:94: d0:91:cb:e2:67:fe:53:5d:62:c4:30:d1:bd:67:5a: 18:bf:1d:64:10:cf:bf:40:86:07:35:bd:1b:41:71: 05:dc:b1:cb:b7:24:ec:74:56:36:1e:1b:e5:bd:2b: ed:0f:7a:d4:72:81:d5:8d:92:e8:07:20:cd:fa:5d: d2:14:39:39:aa:0a:a7:e0:9f:4d:8e:23:d8:29:1b: 88:f3:72:07:f9:5a:ed:14:e6:a7:d1:c0:31:81:d9: c9:5c:93:5a:c8:86:ab:25:74:f2:3c:be:c5:a2:06: a7:e3:52:9c:de:ad:38:c9:78:cd:3e:27:ae:33:f8: 26:58:c6:5f:d9:7a:d2:c2:56:ff:d1:5b:8c:3f:5d: e8:32:01:87:40:55:05:df:74:b6:41:d6:6f:aa:0d: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:13:47:F9:EF:63:0C:06:99:33:D4:B5:88:CA:AA:D4:4E:22:49:F1 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8hNH-e9jDAaZM9S1iMqq1E4iSfE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.152.0/21 Signature Algorithm: sha256WithRSAEncryption ec:f5:d7:bc:1c:a9:b2:0c:4e:73:b5:aa:15:f6:55:5c:87:93: 6f:3c:2c:d0:b5:da:aa:5c:c7:98:a2:cd:e9:bb:01:a0:4a:91: 10:13:21:c7:41:70:18:74:12:a2:41:1a:b1:08:b0:26:a2:72: 52:2a:09:b7:dc:a9:e3:52:56:47:94:2b:5f:a2:6b:05:0b:17: 0d:61:b3:2b:19:8d:ff:07:04:11:4f:af:dd:05:f3:f4:40:a4: 60:cd:43:f7:4d:b9:f6:b0:15:39:26:26:c1:41:e5:6c:9f:e6: 3e:9b:54:94:8c:fd:dc:9c:2e:00:e1:f7:30:3e:1b:4e:a6:26: 41:ce:bc:d9:62:63:18:1c:c3:1f:0d:b9:6f:1e:0f:75:f0:e7: 5f:1a:16:4c:ad:9a:45:d9:f6:a9:95:38:35:85:61:60:01:3e: bb:dc:2a:93:e4:ed:63:4b:27:5c:57:1f:28:00:35:df:8b:a5: 95:51:ea:ba:60:db:60:d4:dd:4b:32:d4:49:07:44:a4:72:cb: 4c:9e:ca:69:44:c6:b0:97:a8:f7:9b:20:54:cb:7c:f2:ef:f8: 91:9c:25:98:8d:a5:cb:f6:cd:02:b3:50:00:f4:9d:54:02:13: 7b:fa:db:04:b3:a9:0d:bc:bf:e9:45:82:ed:5f:ab:79:c8:31: c8:30:ed:47 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM0NThaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEYyMTM0N0Y5RUY2MzBD MDY5OTMzRDRCNTg4Q0FBQUQ0NEUyMjQ5RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDdaxqs81ESNtBEs/7413zSHA6fJCB2OstF4mTE/zDoxF9GWy2 G5vo4YfYlqUFllDhVHLC09VBCdNMRo5rViSxjg6zE1OezUmKyvuWsLyED7cjv6Ox 19qd8uUs4YdJy5s50rkZmDaqlNCRy+Jn/lNdYsQw0b1nWhi/HWQQz79Ahgc1vRtB cQXcscu3JOx0VjYeG+W9K+0PetRygdWNkugHIM36XdIUOTmqCqfgn02OI9gpG4jz cgf5Wu0U5qfRwDGB2clck1rIhqsldPI8vsWiBqfjUpzerTjJeM0+J64z+CZYxl/Z etLCVv/RW4w/XegyAYdAVQXfdLZB1m+qDQQTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU8hNH+e9jDAaZM9S1iMqq1E4iSfEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzhoTkgtZTlqREFhWk05UzFpTXFxMUU0aVNmRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAO0g5gwDQYJKoZIhvcNAQELBQADggEBAOz117wcqbIMTnO1qhX2VVyHk288 LNC12qpcx5iizem7AaBKkRATIcdBcBh0EqJBGrEIsCaiclIqCbfcqeNSVkeUK1+i awULFw1hsysZjf8HBBFPr90F8/RApGDNQ/dNufawFTkmJsFB5Wyf5j6bVJSM/dyc LgDh9zA+G06mJkHOvNliYxgcwx8NuW8eD3Xw518aFkytmkXZ9qmVODWFYWABPrvc KpPk7WNLJ1xXHygANd+LpZVR6rpg22DU3Usy1EkHRKRyy0yeymlExrCXqPebIFTL fPLv+JGcJZiNpcv2zQKzUAD0nVQCE3v62wSzqQ28v+lFgu1fq3nIMcgw7Uc= -----END CERTIFICATE-----Generated at Mon Aug 11 13:16:19 2025 by rpki-client