$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/KqxtPcvZngYjZMq4KcKm2CX1M28.roa File: KqxtPcvZngYjZMq4KcKm2CX1M28.roa (raw, json) Hash identifier: dMCbQd/wZkhwndq50PeKlx7Z2bN8PghmHUelBXbzgiw= Subject key identifier: 2A:AC:6D:3D:CB:D9:9E:06:23:64:CA:B8:29:C2:A6:D8:25:F5:33:6F Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0330 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KqxtPcvZngYjZMq4KcKm2CX1M28.roa Signing time: Fri 01 Aug 2025 01:34:55 +0000 ROA not before: Fri 01 Aug 2025 01:34:55 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 124.195.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:34:55 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=2AAC6D3DCBD99E062364CAB829C2A6D825F5336F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:55:86:7b:f6:62:92:e1:dc:b0:2d:51:57:fb: 6d:d2:fa:bb:27:0e:39:1b:68:ac:c8:34:47:b7:8d: df:e1:3f:91:42:ae:cb:c8:61:07:e2:56:53:b0:1f: 29:e3:a5:95:07:bb:9c:a3:95:b8:45:26:19:8a:61: 6f:d9:79:3f:f2:c4:a4:e5:73:2e:23:f2:84:d9:53: ee:cd:a8:35:ec:c8:ae:bd:22:a8:d8:91:4e:ab:34: 87:c6:22:ae:6d:19:31:9e:7a:a5:5c:f4:0f:91:6d: de:d9:14:7e:01:9c:60:ba:e7:af:ec:f5:b7:e2:89: 87:af:82:48:1d:42:94:17:83:dc:e2:cb:f2:06:b2: 99:0c:77:9f:26:ed:76:43:b4:45:d7:39:fa:c5:6c: df:81:0d:f8:34:68:c9:4f:d5:dd:76:f4:51:d8:8c: f3:b6:2a:78:1e:11:63:4d:a3:0b:e4:fa:c9:86:ed: ea:b2:c0:f2:44:00:18:60:81:00:6a:97:39:a2:f7: 88:c8:4f:43:af:03:5b:3d:01:ca:b2:dc:5e:c5:08: c2:8f:10:e3:0b:8e:50:93:3d:93:aa:a7:45:e8:95: f7:27:24:4b:ad:5b:17:06:c7:30:d5:fc:91:58:a3: 74:14:88:9e:9a:da:19:96:5d:68:87:89:3b:fc:d1: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:6D:3D:CB:D9:9E:06:23:64:CA:B8:29:C2:A6:D8:25:F5:33:6F X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/KqxtPcvZngYjZMq4KcKm2CX1M28.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.195.144.0/20 Signature Algorithm: sha256WithRSAEncryption 90:65:88:41:18:aa:d6:36:e0:b1:53:26:2c:dc:34:6b:c3:78: f5:7f:0e:99:b6:3a:9e:3b:ca:07:37:13:77:f7:2d:35:a9:d2: 24:97:4f:eb:74:2d:30:16:f2:91:ce:ed:93:40:f2:6d:de:11: b7:42:22:ab:ab:22:92:39:ab:96:fa:9d:da:06:37:e7:26:0c: 8f:28:4a:9d:4e:de:b4:db:02:af:d6:2a:89:15:81:1a:7d:60: 1f:7c:e1:2e:df:6e:fb:35:18:a0:30:77:46:21:b2:38:fb:86: 27:be:94:72:f8:e0:28:a2:bb:e4:2a:3c:fe:60:cf:2d:71:34: 34:62:18:ad:04:c4:33:96:6e:aa:a9:d4:dd:44:2c:08:b9:cc: 9b:62:b2:ca:e2:5f:a6:f4:90:b3:c6:2e:f1:7a:cc:2b:6c:eb: dd:90:08:98:f4:b8:ed:46:34:a4:5e:35:fb:9b:e5:f5:62:38: 58:ed:c8:db:26:84:11:ed:dc:6f:fb:ae:eb:7c:d6:78:c4:66: 89:c5:c8:51:5f:e3:25:36:ca:0c:fa:99:a9:a3:72:b3:ae:3d: d5:48:57:21:9a:a8:ed:f7:1f:f9:4f:8d:1b:3d:bc:e7:5a:8e: 0f:44:c4:86:ca:a7:58:63:45:31:e5:7a:fe:37:71:df:62:68: 78:c6:c2:96 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM0NTVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDJBQUM2RDNEQ0JEOTlF MDYyMzY0Q0FCODI5QzJBNkQ4MjVGNTMzNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWVYZ79mKS4dywLVFX+23S+rsnDjkbaKzINEe3jd/hP5FCrsvI YQfiVlOwHynjpZUHu5yjlbhFJhmKYW/ZeT/yxKTlcy4j8oTZU+7NqDXsyK69IqjY kU6rNIfGIq5tGTGeeqVc9A+Rbd7ZFH4BnGC656/s9bfiiYevgkgdQpQXg9ziy/IG spkMd58m7XZDtEXXOfrFbN+BDfg0aMlP1d129FHYjPO2KngeEWNNowvk+smG7eqy wPJEABhggQBqlzmi94jIT0OvA1s9Acqy3F7FCMKPEOMLjlCTPZOqp0XolfcnJEut WxcGxzDV/JFYo3QUiJ6a2hmWXWiHiTv80dcxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKqxtPcvZngYjZMq4KcKm2CX1M28wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0txeHRQY3ZabmdZalpNcTRLY0ttMkNYMU0yOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR8w5AwDQYJKoZIhvcNAQELBQADggEBAJBliEEYqtY24LFTJizcNGvDePV/ Dpm2Op47ygc3E3f3LTWp0iSXT+t0LTAW8pHO7ZNA8m3eEbdCIqurIpI5q5b6ndoG N+cmDI8oSp1O3rTbAq/WKokVgRp9YB984S7fbvs1GKAwd0Yhsjj7hie+lHL44Cii u+QqPP5gzy1xNDRiGK0ExDOWbqqp1N1ELAi5zJtissriX6b0kLPGLvF6zCts692Q CJj0uO1GNKReNfub5fViOFjtyNsmhBHt3G/7rut81njEZonFyFFf4yU2ygz6mamj crOuPdVIVyGaqO33H/lPjRs9vOdajg9ExIbKp1hjRTHlev43cd9iaHjGwpY= -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:55 2025 by rpki-client