$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/FxKYkolRP4Be6VfaJFUBfcOAmpM.roa File: FxKYkolRP4Be6VfaJFUBfcOAmpM.roa (raw, json) Hash identifier: IDoEyKJ6DxSM+0ujCbjY9grApoSsGYLE62FPSms0KMs= Subject key identifier: 17:12:98:92:89:51:3F:80:5E:E9:57:DA:24:55:01:7D:C3:80:9A:93 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03CC Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FxKYkolRP4Be6VfaJFUBfcOAmpM.roa Signing time: Fri 01 Aug 2025 01:59:01 +0000 ROA not before: Fri 01 Aug 2025 01:59:01 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 218.220.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:59:01 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=1712989289513F805EE957DA2455017DC3809A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:d6:30:fc:1a:28:02:96:b1:49:fb:72:31: 95:5f:bf:8a:a6:d2:2c:32:4b:59:b7:a8:3a:17:0b: 30:37:c9:91:82:e0:65:2b:ed:70:9d:36:8f:db:c6: 21:76:b6:f2:ec:a3:99:0f:92:b2:86:c1:72:a9:ee: c8:60:57:f0:f4:30:2d:f5:8b:89:49:ef:15:fb:80: 08:5b:37:d9:a2:73:d7:b5:d4:cc:12:0d:b2:ba:b6: 59:5f:f1:e9:01:8c:74:40:6e:84:59:99:dd:1b:4a: 18:99:17:7f:15:5e:78:3c:06:d9:d0:2b:a0:d1:67: 79:90:32:dc:c7:b2:14:59:5c:1f:48:c6:bd:0b:84: 39:74:60:d0:2f:a1:2c:cc:16:0c:b6:f6:43:83:c4: 46:28:40:c3:9a:22:68:da:d2:bb:d0:9d:70:96:b1: 9e:af:c7:d3:ff:e9:7a:cf:bd:4f:af:e5:e5:07:d7: 16:11:ed:89:c7:b3:42:bc:1a:25:7a:70:1a:73:38: 1c:2c:50:c6:37:57:42:6b:4b:30:1e:27:83:d2:df: a8:d8:55:84:de:23:32:0f:62:5c:ec:5f:c7:ab:5f: 4f:11:7d:96:29:ad:16:a0:c8:a3:12:20:31:e6:cd: ce:da:ca:ab:9d:f4:34:90:74:d5:cc:bb:c7:9c:3f: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:98:92:89:51:3F:80:5E:E9:57:DA:24:55:01:7D:C3:80:9A:93 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FxKYkolRP4Be6VfaJFUBfcOAmpM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:b7:d8:19:20:a2:83:a9:2d:70:b7:f2:08:18:a5:e8:74:a7: c5:1a:9a:53:54:78:00:00:34:fd:52:d3:60:09:93:aa:05:04: 9d:54:b6:9e:12:54:64:91:cd:3d:97:5b:6e:bb:0f:5b:3e:30: b3:95:b5:e0:49:cb:cc:5b:2e:79:e9:9f:5e:ad:40:e9:f0:90: 34:e7:96:36:b2:af:34:c7:0f:f9:a4:e9:0b:5b:7a:4f:b5:b3: 2c:45:08:a8:be:3b:cd:5c:84:4d:47:91:b7:08:e0:c8:d8:76: 86:53:c7:0f:0e:29:00:d6:23:00:fc:ef:30:90:90:bd:df:a1: d6:bc:e3:a9:7a:ce:18:af:f5:0f:b7:88:de:26:ff:a9:4b:8e: 52:a6:3d:d6:f8:41:93:94:98:50:e1:37:8d:e4:26:39:f6:cc: b8:35:aa:ad:6e:93:c2:07:db:5e:40:c8:fd:20:0b:e0:79:5d: b4:1f:21:7e:cb:50:3c:e5:6c:63:2b:3e:e2:d0:86:aa:b2:79: 7f:29:88:c4:f4:fe:40:2e:85:c8:1d:0b:b5:81:70:0f:9d:e8: 82:5c:9c:5f:47:18:59:e3:ae:e1:77:ac:4d:df:26:71:04:4f: d5:97:ed:30:6a:1d:51:f0:59:92:48:c4:38:93:0a:ea:31:4a: c6:0e:59:cf -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTU5MDFaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDE3MTI5ODkyODk1MTNG ODA1RUU5NTdEQTI0NTUwMTdEQzM4MDlBOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkNdYw/BooApaxSftyMZVfv4qm0iwyS1m3qDoXCzA3yZGC4GUr 7XCdNo/bxiF2tvLso5kPkrKGwXKp7shgV/D0MC31i4lJ7xX7gAhbN9mic9e11MwS DbK6tllf8ekBjHRAboRZmd0bShiZF38VXng8BtnQK6DRZ3mQMtzHshRZXB9Ixr0L hDl0YNAvoSzMFgy29kODxEYoQMOaImja0rvQnXCWsZ6vx9P/6XrPvU+v5eUH1xYR 7YnHs0K8GiV6cBpzOBwsUMY3V0JrSzAeJ4PS36jYVYTeIzIPYlzsX8erX08RfZYp rRagyKMSIDHmzc7ayqud9DSQdNXMu8ecP9XzAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUFxKYkolRP4Be6VfaJFUBfcOAmpMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0Z4S1lrb2xSUDRCZTZWZmFKRlVCZmNPQW1wTS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDa3DANBgkqhkiG9w0BAQsFAAOCAQEAJ7fYGSCig6ktcLfyCBil6HSnxRqa U1R4AAA0/VLTYAmTqgUEnVS2nhJUZJHNPZdbbrsPWz4ws5W14EnLzFsueemfXq1A 6fCQNOeWNrKvNMcP+aTpC1t6T7WzLEUIqL47zVyETUeRtwjgyNh2hlPHDw4pANYj APzvMJCQvd+h1rzjqXrOGK/1D7eI3ib/qUuOUqY91vhBk5SYUOE3jeQmOfbMuDWq rW6TwgfbXkDI/SAL4HldtB8hfstQPOVsYys+4tCGqrJ5fymIxPT+QC6FyB0LtYFw D53oglycX0cYWeOu4XesTd8mcQRP1ZftMGodUfBZkkjEOJMK6jFKxg5Zzw== -----END CERTIFICATE-----Generated at Mon Aug 11 13:36:43 2025 by rpki-client