$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MOQbvzVjNxbXqYd0mS3CUdLFEg4.roa File: MOQbvzVjNxbXqYd0mS3CUdLFEg4.roa (raw, json) Hash identifier: eoIxi65SIehyGMDj2h/ggoX+IRPLfB9InA4lYm0q3Jw= Subject key identifier: 30:E4:1B:BF:35:63:37:16:D7:A9:87:74:99:2D:C2:51:D2:C5:12:0E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03CA Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MOQbvzVjNxbXqYd0mS3CUdLFEg4.roa Signing time: Fri 01 Aug 2025 01:59:00 +0000 ROA not before: Fri 01 Aug 2025 01:59:00 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 211.135.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:59:00 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=30E41BBF35633716D7A98774992DC251D2C5120E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:ca:54:fa:c2:fb:d7:8e:19:69:b9:7f:e1: e0:84:32:fa:dc:bd:e9:77:37:66:ff:d4:ab:b1:e8: 19:b9:cf:26:65:86:c5:f1:6a:ab:5a:8a:44:8f:f1: fb:fa:52:e5:d4:9c:e7:88:47:b0:9a:c7:d9:93:7f: ca:54:f2:fb:53:c5:6b:de:96:65:c5:02:5d:57:55: 15:56:91:1f:65:1f:d9:b8:c0:bb:cb:b6:3f:18:63: 63:6e:23:de:ef:84:f7:f3:d5:80:ed:a9:57:d9:75: 5e:ba:1d:da:c6:31:76:e8:c0:20:cf:cc:d9:a3:50: 0c:b7:ef:8e:8e:5c:68:b7:42:27:42:a6:31:27:0c: 7b:4b:6f:ed:ee:dc:14:83:3e:eb:33:85:c1:58:92: 45:4a:00:26:6d:b5:34:a4:c4:53:23:0e:ff:f8:bd: 93:3f:b5:5a:9d:64:62:db:d5:bb:43:f8:63:f5:7b: 33:ec:73:ba:00:e1:01:02:58:57:16:df:fe:9d:f8: 65:74:a4:45:75:33:e6:6f:a1:f8:8b:98:d1:63:31: 16:b8:a8:e6:3a:6d:b5:0b:5e:e7:61:96:a6:eb:90: 26:04:08:53:e5:cd:c1:ec:29:ed:75:35:18:fb:ab: 92:42:26:5c:79:a2:5e:c3:63:cf:ae:94:f7:ff:51: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E4:1B:BF:35:63:37:16:D7:A9:87:74:99:2D:C2:51:D2:C5:12:0E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MOQbvzVjNxbXqYd0mS3CUdLFEg4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.135.0.0/17 Signature Algorithm: sha256WithRSAEncryption c1:38:93:65:5d:a8:26:35:d4:96:e5:37:ed:b8:a3:ab:f4:19: 35:1b:cc:56:d4:ba:ef:5e:d6:9f:82:16:4e:5d:d2:36:e3:6d: c0:e1:01:d3:44:80:c4:15:72:cf:0d:c2:9a:d1:1e:52:06:8a: b9:0e:07:55:39:84:b6:13:28:f9:40:56:f3:8b:c5:15:fc:ca: b1:8f:e2:c7:f6:96:04:42:d5:e4:f6:c7:6a:10:d8:4d:8b:48: fa:17:bc:35:82:52:85:9c:9a:d0:f9:3a:a8:a3:69:62:89:70: 42:fd:7b:be:43:5a:e2:1e:c9:8e:25:75:c8:42:2b:5b:bd:aa: 9e:20:dd:56:2a:d5:82:6f:a5:df:58:13:f2:fc:73:7b:44:b3: a8:71:84:a9:04:fd:97:30:e7:2f:94:07:4e:01:9a:3b:2f:cf: 8e:59:ad:0d:97:c1:47:25:7d:b9:ba:52:31:8c:96:92:6b:7e: 9f:65:3f:3a:a2:2d:67:c7:5f:d4:e7:2f:06:b7:6f:e1:e4:9b: 55:bc:81:8d:87:0c:f3:11:96:64:5f:a3:f8:5f:01:72:cc:40: 87:c8:3d:36:82:2f:93:8b:23:2b:8d:35:c8:ba:2a:00:52:b8: 90:ce:3a:51:e0:07:b6:70:14:78:6c:75:9a:41:e8:b4:17:aa: a4:fe:5a:94 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTU5MDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDMwRTQxQkJGMzU2MzM3 MTZEN0E5ODc3NDk5MkRDMjUxRDJDNTEyMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3icpU+sL7144Zabl/4eCEMvrcvel3N2b/1Kux6Bm5zyZlhsXx aqtaikSP8fv6UuXUnOeIR7Cax9mTf8pU8vtTxWvelmXFAl1XVRVWkR9lH9m4wLvL tj8YY2NuI97vhPfz1YDtqVfZdV66HdrGMXbowCDPzNmjUAy3746OXGi3QidCpjEn DHtLb+3u3BSDPuszhcFYkkVKACZttTSkxFMjDv/4vZM/tVqdZGLb1btD+GP1ezPs c7oA4QECWFcW3/6d+GV0pEV1M+ZvofiLmNFjMRa4qOY6bbULXudhlqbrkCYECFPl zcHsKe11NRj7q5JCJlx5ol7DY8+ulPf/UcXjAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUMOQbvzVjNxbXqYd0mS3CUdLFEg4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL01PUWJ2elZqTnhiWHFZZDBtUzNDVWRMRkVnNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAfThwAwDQYJKoZIhvcNAQELBQADggEBAME4k2VdqCY11JblN+24o6v0GTUb zFbUuu9e1p+CFk5d0jbjbcDhAdNEgMQVcs8NwprRHlIGirkOB1U5hLYTKPlAVvOL xRX8yrGP4sf2lgRC1eT2x2oQ2E2LSPoXvDWCUoWcmtD5OqijaWKJcEL9e75DWuIe yY4ldchCK1u9qp4g3VYq1YJvpd9YE/L8c3tEs6hxhKkE/Zcw5y+UB04Bmjsvz45Z rQ2XwUclfbm6UjGMlpJrfp9lPzqiLWfHX9TnLwa3b+Hkm1W8gY2HDPMRlmRfo/hf AXLMQIfIPTaCL5OLIyuNNci6KgBSuJDOOlHgB7ZwFHhsdZpB6LQXqqT+WpQ= -----END CERTIFICATE-----Generated at Mon Aug 11 13:26:18 2025 by rpki-client