$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/NGoTa5Vc9nzPXUgee0IYATKczjc.roa File: NGoTa5Vc9nzPXUgee0IYATKczjc.roa (raw, json) Hash identifier: DQ/GaV7ynwo1Fr2ZmhknjnJVPEEVX+gJf59DSeOeKKM= Subject key identifier: 34:6A:13:6B:95:5C:F6:7C:CF:5D:48:1E:7B:42:18:01:32:9C:CE:37 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03A4 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NGoTa5Vc9nzPXUgee0IYATKczjc.roa Signing time: Fri 01 Aug 2025 01:54:56 +0000 ROA not before: Fri 01 Aug 2025 01:54:56 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 219.113.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:54:56 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=346A136B955CF67CCF5D481E7B421801329CCE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:7b:e9:a8:d5:21:63:c6:41:a7:a2:46:56: 78:b4:4b:1b:4d:cc:19:29:20:3a:19:61:04:d0:68: e7:3a:66:a3:a5:ba:91:ef:22:19:97:d2:84:d5:d6: 66:3c:ea:3e:23:7b:36:2f:25:ba:58:3c:4b:76:5b: b1:45:f2:ad:8f:1b:89:ff:78:a2:46:f1:24:01:43: fb:96:19:8b:d4:1d:88:b4:c4:70:de:0d:b6:e8:88: 0b:ae:52:36:68:c7:0a:ef:11:9b:3f:0e:e8:0f:4c: 69:a4:a7:67:94:ba:d1:7b:13:93:cd:fe:2b:f9:5c: 61:18:6c:90:e0:96:b0:0e:1f:5f:1b:de:b6:68:7a: 3e:be:5d:70:5c:2d:b7:f7:c5:01:1c:3f:6a:58:86: c3:f2:7a:f1:ad:42:2c:1c:d4:88:4a:4d:e7:df:77: d4:13:8b:0b:e8:b2:c7:05:4b:33:b8:8c:79:11:fb: 84:bb:fc:72:db:b1:6e:b1:89:0c:38:54:9e:a2:2f: ba:83:6a:5d:f5:aa:ac:c3:46:dd:33:70:6d:d1:0c: c5:f9:b1:74:b0:b8:cc:ba:f1:29:65:db:8a:b2:7f: 15:15:d5:53:a3:c1:81:9a:40:d1:b0:c5:fa:73:ec: 91:8c:5a:1c:5f:cc:3b:a1:07:81:6f:21:70:dd:03: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:13:6B:95:5C:F6:7C:CF:5D:48:1E:7B:42:18:01:32:9C:CE:37 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/NGoTa5Vc9nzPXUgee0IYATKczjc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.113.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:ce:2d:b8:0c:4f:c1:89:26:0c:a7:af:34:a3:cb:5d:c2:4e: 96:77:b8:58:a6:83:40:77:3e:51:68:b3:ee:e0:91:e7:b1:89: 4f:5f:37:71:cc:1e:e7:ae:a2:a3:cf:86:c9:1a:c9:4e:e2:72: b5:f9:83:b0:fd:8e:ec:f9:7b:b2:07:00:14:27:e8:ff:04:fb: f4:ce:fd:87:4a:04:a7:d6:f3:c4:d5:c2:4a:a7:3a:4d:29:fb: 8f:79:55:91:35:61:d2:c1:03:61:fc:43:73:ba:cc:5d:93:a1: 2d:cd:4a:b3:48:47:dd:27:2a:4a:e8:92:d1:2c:fe:67:07:1d: 17:22:53:fe:cf:28:71:25:96:48:8c:83:c9:14:07:e8:b6:98: 46:b2:cd:29:17:fe:80:54:64:9f:37:a7:2b:1f:7b:49:f4:e1: f0:4b:e9:3b:5e:02:88:ef:68:0a:71:dd:bb:90:24:37:d3:4e: 34:91:ab:02:0b:d0:19:36:52:b8:3d:cb:9f:13:61:04:84:c9: b1:40:04:2d:8e:14:3f:06:91:3c:42:4f:a7:13:f6:ed:98:4c: 09:de:be:df:5c:ea:a8:69:47:3e:dc:c3:0c:6e:93:d7:41:9a: 96:81:fa:e1:a3:bc:77:89:83:4d:e7:00:48:f3:f8:96:bb:0c: 70:44:f1:9b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTU0NTZaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDM0NkExMzZCOTU1Q0Y2 N0NDRjVENDgxRTdCNDIxODAxMzI5Q0NFMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYDnvpqNUhY8ZBp6JGVni0SxtNzBkpIDoZYQTQaOc6ZqOlupHv IhmX0oTV1mY86j4jezYvJbpYPEt2W7FF8q2PG4n/eKJG8SQBQ/uWGYvUHYi0xHDe DbboiAuuUjZoxwrvEZs/DugPTGmkp2eUutF7E5PN/iv5XGEYbJDglrAOH18b3rZo ej6+XXBcLbf3xQEcP2pYhsPyevGtQiwc1IhKTeffd9QTiwvosscFSzO4jHkR+4S7 /HLbsW6xiQw4VJ6iL7qDal31qqzDRt0zcG3RDMX5sXSwuMy68Sll24qyfxUV1VOj wYGaQNGwxfpz7JGMWhxfzDuhB4FvIXDdA+BtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUNGoTa5Vc9nzPXUgee0IYATKczjcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL05Hb1RhNVZjOW56UFhVZ2VlMElZQVRLY3pqYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbcWAwDQYJKoZIhvcNAQELBQADggEBACvOLbgMT8GJJgynrzSjy13CTpZ3 uFimg0B3PlFos+7gkeexiU9fN3HMHueuoqPPhskayU7icrX5g7D9juz5e7IHABQn 6P8E+/TO/YdKBKfW88TVwkqnOk0p+495VZE1YdLBA2H8Q3O6zF2ToS3NSrNIR90n KkroktEs/mcHHRciU/7PKHEllkiMg8kUB+i2mEayzSkX/oBUZJ83pysfe0n04fBL 6TteAojvaApx3buQJDfTTjSRqwIL0Bk2Urg9y58TYQSEybFABC2OFD8GkTxCT6cT 9u2YTAnevt9c6qhpRz7cwwxuk9dBmpaB+uGjvHeJg03nAEjz+Ja7DHBE8Zs= -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:56 2025 by rpki-client