$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CbvyK27P1DFzcLT-QJXWPAoCgvs.roa File: CbvyK27P1DFzcLT-QJXWPAoCgvs.roa (raw, json) Hash identifier: qbH0Lcrw7jiTJBAiXdBaNa8cszkFD/aGndnxJ8Sijnw= Subject key identifier: 09:BB:F2:2B:6E:CF:D4:31:73:70:B4:FE:40:95:D6:3C:0A:02:82:FB Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0394 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CbvyK27P1DFzcLT-QJXWPAoCgvs.roa Signing time: Fri 01 Aug 2025 01:51:02 +0000 ROA not before: Fri 01 Aug 2025 01:51:02 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 202.178.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:51:02 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=09BBF22B6ECFD4317370B4FE4095D63C0A0282FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:57:33:27:9f:2d:1f:33:a0:32:08:36:ff: f9:c3:5c:ba:42:37:ca:48:02:76:ba:53:e8:cc:55: 9c:92:d2:9f:95:eb:af:8a:d1:d0:6b:43:57:6e:17: 30:43:9b:1c:2f:59:5b:c7:ad:5d:40:dd:cc:0d:af: d8:2e:1d:c5:43:5f:f0:a6:67:fd:a9:b8:f1:3e:7b: 29:74:54:9b:fc:ed:3e:2f:f1:5c:25:c5:3b:46:1c: 04:ec:a3:76:ca:fd:19:a1:4a:7a:ff:89:19:02:97: 4b:41:80:75:b8:65:bd:f6:46:92:3a:d6:16:4c:40: e9:fa:3d:7e:f3:e2:15:bb:bd:f4:18:34:66:2b:31: 1b:93:27:e5:c7:37:bb:61:c6:59:72:69:38:12:77: 57:2d:40:5e:6a:d9:cf:8c:5f:a0:8a:13:60:fc:7e: f8:15:60:bb:c0:a5:07:cb:7c:8f:3a:2f:1a:f7:72: 24:8b:3b:9b:e4:83:e6:ff:93:e2:93:a4:b8:df:14: 79:8b:85:32:61:dc:72:1b:06:18:47:c3:08:10:be: 61:b7:5d:8d:3e:d2:f2:a8:d0:92:b8:cf:fc:c8:a8: eb:b1:e0:d3:fe:38:16:98:d8:16:f8:8e:75:11:c5: 93:db:26:df:2d:23:5b:cc:9c:51:92:2b:4e:94:ae: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:F2:2B:6E:CF:D4:31:73:70:B4:FE:40:95:D6:3C:0A:02:82:FB X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CbvyK27P1DFzcLT-QJXWPAoCgvs.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.178.80.0/20 Signature Algorithm: sha256WithRSAEncryption d6:d3:c0:76:83:b4:8c:d8:8e:15:4c:b8:77:4c:7a:ab:31:74: b5:fe:d0:71:bb:fa:84:bd:87:b0:2f:b1:03:c0:d8:6d:2c:77: ed:6b:8f:1c:bb:76:87:09:07:ea:3a:f3:03:a9:2e:86:0b:cd: ad:42:a6:e0:2e:30:32:cd:ef:a4:47:10:0e:da:54:de:6b:a1: 24:23:69:39:47:d2:1b:b5:fd:ce:a7:84:55:e7:4e:6c:17:03: de:22:47:f7:29:9c:a3:26:98:8e:3d:82:41:cb:5f:88:a8:e4: 46:48:2b:4b:c6:09:e3:d4:2f:70:6c:4b:47:87:8c:5d:61:a6: 16:b9:a2:4e:0c:fb:68:b8:3d:ae:97:da:2e:e7:8c:21:42:47: 2a:b7:61:c5:ab:42:95:e8:5e:9c:d7:fd:d4:53:df:6a:13:78: e0:ae:61:c9:40:e2:5f:28:34:b9:a4:bf:be:86:10:20:f4:3c: 15:6b:91:de:b9:bd:45:e2:8c:a0:f9:13:7a:84:c7:f9:07:19: 34:48:2e:c5:e1:24:9e:6f:08:ee:35:55:8c:89:3e:84:fd:ea: 59:6e:46:96:cd:bb:72:85:2e:1e:65:7e:af:ef:64:90:3f:b9: e4:4d:c6:1f:4d:e5:08:ca:ea:93:60:94:8d:9a:cf:7e:9d:01: 99:18:81:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTUxMDJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDA5QkJGMjJCNkVDRkQ0 MzE3MzcwQjRGRTQwOTVENjNDMEEwMjgyRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs8VczJ58tHzOgMgg2//nDXLpCN8pIAna6U+jMVZyS0p+V66+K 0dBrQ1duFzBDmxwvWVvHrV1A3cwNr9guHcVDX/CmZ/2puPE+eyl0VJv87T4v8Vwl xTtGHATso3bK/RmhSnr/iRkCl0tBgHW4Zb32RpI61hZMQOn6PX7z4hW7vfQYNGYr MRuTJ+XHN7thxllyaTgSd1ctQF5q2c+MX6CKE2D8fvgVYLvApQfLfI86Lxr3ciSL O5vkg+b/k+KTpLjfFHmLhTJh3HIbBhhHwwgQvmG3XY0+0vKo0JK4z/zIqOux4NP+ OBaY2Bb4jnURxZPbJt8tI1vMnFGSK06Urqz1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCbvyK27P1DFzcLT+QJXWPAoCgvswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0NidnlLMjdQMURGemNMVC1RSlhXUEFvQ2d2cy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKslAwDQYJKoZIhvcNAQELBQADggEBANbTwHaDtIzYjhVMuHdMeqsxdLX+ 0HG7+oS9h7AvsQPA2G0sd+1rjxy7docJB+o68wOpLoYLza1CpuAuMDLN76RHEA7a VN5roSQjaTlH0hu1/c6nhFXnTmwXA94iR/cpnKMmmI49gkHLX4io5EZIK0vGCePU L3BsS0eHjF1hpha5ok4M+2i4Pa6X2i7njCFCRyq3YcWrQpXoXpzX/dRT32oTeOCu YclA4l8oNLmkv76GECD0PBVrkd65vUXijKD5E3qEx/kHGTRILsXhJJ5vCO41VYyJ PoT96lluRpbNu3KFLh5lfq/vZJA/ueRNxh9N5QjK6pNglI2az36dAZkYgXQ= -----END CERTIFICATE-----Generated at Mon Aug 11 13:21:27 2025 by rpki-client