$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/DmOrUU3wZVupo1Wcn1MQtugdqn4.roa File: DmOrUU3wZVupo1Wcn1MQtugdqn4.roa (raw, json) Hash identifier: 6IG+LadCHDm0+lffeS6esPq0PI+5MSTQPexSUb8hcOI= Subject key identifier: 0E:63:AB:51:4D:F0:65:5B:A9:A3:55:9C:9F:53:10:B6:E8:1D:AA:7E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0336 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DmOrUU3wZVupo1Wcn1MQtugdqn4.roa Signing time: Fri 01 Aug 2025 01:35:00 +0000 ROA not before: Fri 01 Aug 2025 01:35:00 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 202.179.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:35:00 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=0E63AB514DF0655BA9A3559C9F5310B6E81DAA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:89:45:3e:f9:e6:ca:94:0f:91:fe:6d:f5: b5:c3:c0:d3:70:3b:7a:1e:16:17:d8:80:a2:20:5d: 75:12:c6:6a:36:78:89:df:ab:cb:00:b7:8d:94:3b: 9b:50:34:39:c7:4d:8d:aa:c8:ee:11:56:5f:ce:6b: a4:5c:89:b0:d2:c2:e6:d8:87:e1:9c:ee:39:bd:d0: 51:85:01:1c:02:dd:5a:4b:46:dd:52:14:31:a6:77: b8:77:4a:68:c9:65:d6:93:01:30:12:1e:79:0e:05: dc:f9:0a:b0:25:e1:0f:fa:cb:82:8d:ca:75:37:02: fe:5c:a0:4d:ce:99:37:4a:2a:f1:65:7d:15:82:6a: 9a:51:5a:da:d8:fb:7d:69:32:b6:e5:bb:32:67:c6: 09:bb:1f:8a:f9:fe:58:5e:62:4d:c7:d2:8d:c5:36: 6b:cf:d0:37:91:ef:5d:cd:22:03:59:e1:97:a3:ee: 4e:19:ef:ba:2c:82:96:bb:48:ab:ac:1e:b2:d5:16: 6f:28:8a:65:1a:4c:63:e8:d2:0d:66:ce:8c:06:6e: b6:97:83:3a:c9:e8:4c:72:0a:ee:fb:fb:0c:77:99: 40:9a:f3:a9:d1:2b:ec:08:38:67:a3:33:3a:08:6a: 9a:59:6f:38:0e:8e:d0:8c:76:85:de:81:f6:75:08: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:AB:51:4D:F0:65:5B:A9:A3:55:9C:9F:53:10:B6:E8:1D:AA:7E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/DmOrUU3wZVupo1Wcn1MQtugdqn4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.224.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:a5:99:18:e2:0d:93:39:6a:61:e6:da:48:3f:f0:0e:bd:f6: 00:52:99:ff:68:85:79:b7:e6:22:04:e7:8f:78:4a:c4:ae:a1: cb:04:b5:66:2e:d7:05:fb:ec:0c:4a:0b:70:c9:70:9e:2d:53: 2b:96:f8:59:d1:45:a4:d8:41:af:21:90:33:0a:80:57:71:d1: 67:5d:51:9d:65:0d:98:95:55:3e:7d:47:20:d7:05:a2:25:6b: 18:8c:4f:e5:1b:b4:1c:f4:c1:56:b3:4d:26:51:9c:e2:61:45: 4f:11:5f:61:0e:17:fd:43:b4:f2:0a:a2:80:a3:9c:3a:fe:ad: 02:aa:9b:f9:70:4c:2f:60:f9:42:21:a4:1e:e4:06:66:ef:d4: cb:d8:05:74:1c:11:da:31:a6:a1:22:2f:2a:a0:b6:39:08:02: 97:62:dc:3c:a7:24:10:ca:2a:2b:7e:b5:0f:46:0a:4c:f2:3f: a0:8e:8c:32:97:ad:78:d1:7b:a3:d2:90:ae:e8:3f:ab:a5:61: e3:16:d4:3d:19:13:c3:de:82:02:1c:64:a9:fb:08:da:1f:86: 9b:9c:47:d0:c5:71:cc:82:f9:76:38:6f:b3:37:d8:e4:5d:95: 79:54:88:ab:02:04:62:f2:d8:80:2f:0f:a5:f2:93:df:ee:38: 4e:ea:ca:88 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM1MDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDBFNjNBQjUxNERGMDY1 NUJBOUEzNTU5QzlGNTMxMEI2RTgxREFBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUs4lFPvnmypQPkf5t9bXDwNNwO3oeFhfYgKIgXXUSxmo2eInf q8sAt42UO5tQNDnHTY2qyO4RVl/Oa6RcibDSwubYh+Gc7jm90FGFARwC3VpLRt1S FDGmd7h3SmjJZdaTATASHnkOBdz5CrAl4Q/6y4KNynU3Av5coE3OmTdKKvFlfRWC appRWtrY+31pMrbluzJnxgm7H4r5/lheYk3H0o3FNmvP0DeR713NIgNZ4Zej7k4Z 77osgpa7SKusHrLVFm8oimUaTGPo0g1mzowGbraXgzrJ6ExyCu77+wx3mUCa86nR K+wIOGejMzoIappZbzgOjtCMdoXegfZ1CLPHAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUDmOrUU3wZVupo1Wcn1MQtugdqn4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0RtT3JVVTN3WlZ1cG8xV2NuMU1RdHVnZHFuNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKs+AwDQYJKoZIhvcNAQELBQADggEBAH2lmRjiDZM5amHm2kg/8A699gBS mf9ohXm35iIE5494SsSuocsEtWYu1wX77AxKC3DJcJ4tUyuW+FnRRaTYQa8hkDMK gFdx0WddUZ1lDZiVVT59RyDXBaIlaxiMT+UbtBz0wVazTSZRnOJhRU8RX2EOF/1D tPIKooCjnDr+rQKqm/lwTC9g+UIhpB7kBmbv1MvYBXQcEdoxpqEiLyqgtjkIApdi 3DynJBDKKit+tQ9GCkzyP6COjDKXrXjRe6PSkK7oP6ulYeMW1D0ZE8PeggIcZKn7 CNofhpucR9DFccyC+XY4b7M32ORdlXlUiKsCBGLy2IAvD6Xyk9/uOE7qyog= -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:26 2025 by rpki-client