$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/IFBuqwM7cXpzWBm1RlCKPl3549Y.roa File: IFBuqwM7cXpzWBm1RlCKPl3549Y.roa (raw, json) Hash identifier: hfbm9CPsEL44MCHqW8vAGF3ti7u9HE4IhbIKJ1y5bYE= Subject key identifier: 20:50:6E:AB:03:3B:71:7A:73:58:19:B5:46:50:8A:3E:5D:F9:E3:D6 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03A5 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/IFBuqwM7cXpzWBm1RlCKPl3549Y.roa Signing time: Fri 01 Aug 2025 01:54:56 +0000 ROA not before: Fri 01 Aug 2025 01:54:56 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4721 IP address blocks: 219.117.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:54:56 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=20506EAB033B717A735819B546508A3E5DF9E3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:9f:c2:75:d3:8f:01:94:a7:f5:09:5c:c7: 2a:76:93:4c:0e:a6:b4:d4:a3:d7:d0:7e:d0:9e:b9: ed:58:7f:19:82:47:88:7c:94:07:e2:d2:74:bd:2d: 72:44:93:b7:5a:32:41:ce:36:c3:09:34:c8:14:f8: fe:35:2f:43:26:e4:95:5f:63:f4:fe:20:68:b5:8b: 55:82:cc:91:e3:d8:25:1e:87:f0:8e:d7:71:82:f8: 8d:09:4e:a7:35:1f:8c:18:df:52:ba:2c:f1:53:c0: 84:34:c1:93:f2:49:88:ef:0e:ac:7e:b6:72:81:de: 95:1f:06:b0:a0:66:4d:fb:11:ff:de:c2:0b:89:6a: ed:3c:19:09:2e:f4:eb:af:ea:56:6f:42:a0:db:dd: a4:e1:8e:90:95:d4:bc:5c:91:bb:1b:70:01:44:2f: d6:9c:c5:fb:4d:68:15:2f:06:de:75:fb:5e:dd:08: 95:66:44:09:ef:97:7f:66:12:b6:ee:5d:02:e5:82: 0c:41:78:ee:99:db:56:ff:3a:6c:7b:d6:d2:71:3a: 7e:b1:9c:9b:10:5b:fb:46:88:0e:b3:8d:4e:5e:16: 4e:8c:7a:99:87:45:a4:67:d1:e8:a5:34:ba:72:30: f7:18:ff:79:19:59:93:1b:75:c1:a3:01:18:07:0f: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:50:6E:AB:03:3B:71:7A:73:58:19:B5:46:50:8A:3E:5D:F9:E3:D6 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/IFBuqwM7cXpzWBm1RlCKPl3549Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.117.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:d7:ff:36:a4:66:24:05:9e:38:c5:e6:d9:74:30:d4:dd:45: 18:9e:0d:d6:16:71:19:7f:be:f1:23:5d:90:83:7e:d2:ee:3c: 16:fe:a9:54:58:32:a0:ab:01:b1:dc:f4:fc:a4:cc:ae:34:9b: 31:0c:03:59:d4:ce:79:be:d3:f9:67:e6:09:a5:15:19:0c:d5: 95:97:0b:0a:81:80:bc:3c:69:6e:21:5c:7f:d0:47:06:f3:8b: c4:c0:a3:63:06:85:17:e2:28:c9:86:52:46:30:89:53:60:14: 79:d3:42:4e:54:07:f3:1c:ea:fc:fd:8f:c6:58:1c:68:d9:4f: 86:52:f7:4a:af:eb:1b:1d:21:49:f1:86:73:55:94:78:3c:7b: 9a:8a:5c:8b:f6:33:7f:97:22:77:24:07:95:23:5d:7f:c5:e9: 7c:b5:b1:f1:f2:7c:b7:c6:e6:9b:d9:db:20:a2:6e:c2:c2:a7: 7c:11:f4:5a:59:ba:ec:bd:b2:3c:7f:3e:68:13:2d:30:42:62: 87:59:2f:cb:f9:ab:a7:6c:56:9b:30:3b:31:c6:3d:84:de:b4: 98:65:91:62:04:e1:62:41:69:46:6c:4c:ed:bc:be:b7:a3:74: 12:89:a3:7f:fa:9e:03:76:8e:40:6a:7a:19:45:ef:99:fa:c1: 8e:44:1a:27 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTU0NTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDIwNTA2RUFCMDMzQjcx N0E3MzU4MTlCNTQ2NTA4QTNFNURGOUUzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzFZ/CddOPAZSn9Qlcxyp2k0wOprTUo9fQftCeue1YfxmCR4h8 lAfi0nS9LXJEk7daMkHONsMJNMgU+P41L0Mm5JVfY/T+IGi1i1WCzJHj2CUeh/CO 13GC+I0JTqc1H4wY31K6LPFTwIQ0wZPySYjvDqx+tnKB3pUfBrCgZk37Ef/ewguJ au08GQku9Ouv6lZvQqDb3aThjpCV1LxckbsbcAFEL9acxftNaBUvBt51+17dCJVm RAnvl39mErbuXQLlggxBeO6Z21b/Omx71tJxOn6xnJsQW/tGiA6zjU5eFk6MepmH RaRn0eilNLpyMPcY/3kZWZMbdcGjARgHD21tAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUIFBuqwM7cXpzWBm1RlCKPl3549YwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0lGQnVxd003Y1hweldCbTFSbENLUGwzNTQ5WS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbdQAwDQYJKoZIhvcNAQELBQADggEBAG7X/zakZiQFnjjF5tl0MNTdRRie DdYWcRl/vvEjXZCDftLuPBb+qVRYMqCrAbHc9PykzK40mzEMA1nUznm+0/ln5gml FRkM1ZWXCwqBgLw8aW4hXH/QRwbzi8TAo2MGhRfiKMmGUkYwiVNgFHnTQk5UB/Mc 6vz9j8ZYHGjZT4ZS90qv6xsdIUnxhnNVlHg8e5qKXIv2M3+XInckB5UjXX/F6Xy1 sfHyfLfG5pvZ2yCibsLCp3wR9FpZuuy9sjx/PmgTLTBCYodZL8v5q6dsVpswOzHG PYTetJhlkWIE4WJBaUZsTO28vrejdBKJo3/6ngN2jkBqehlF75n6wY5EGic= -----END CERTIFICATE-----Generated at Mon Aug 11 13:26:15 2025 by rpki-client