$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Sj4Kq00ZXtrxiMnrXXZOFYV-Cak.roa File: Sj4Kq00ZXtrxiMnrXXZOFYV-Cak.roa (raw, json) Hash identifier: f2IMJyDpCJvHDKjtkNaHl9P6BwvKpZULplBaxzETmn0= Subject key identifier: 4A:3E:0A:AB:4D:19:5E:DA:F1:88:C9:EB:5D:76:4E:15:85:7E:09:A9 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0372 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Sj4Kq00ZXtrxiMnrXXZOFYV-Cak.roa Signing time: Fri 01 Aug 2025 01:47:14 +0000 ROA not before: Fri 01 Aug 2025 01:47:14 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 112.137.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:47:14 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=4A3E0AAB4D195EDAF188C9EB5D764E15857E09A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:74:30:df:0e:77:da:b0:30:81:84:92:25: 72:6e:66:8e:9b:26:51:4e:a5:1f:a4:72:f4:35:d9: 34:0d:08:9c:b7:b9:d2:01:f0:d8:8e:51:59:56:6f: 0f:c4:3e:d5:44:f9:1a:e8:3c:20:27:cb:03:f1:75: 92:aa:e7:6f:7e:b0:63:48:77:98:db:10:d4:33:0b: 05:c4:f3:e3:0e:98:6a:b7:6c:8e:41:66:4a:b8:a4: ab:1b:7a:7d:17:7c:07:4a:68:ff:af:e4:bf:a9:7a: f1:f7:46:55:5d:9f:0a:16:dc:48:52:dd:49:74:fd: 34:03:5f:5a:9a:76:26:75:97:6d:5a:33:74:e2:bd: 9b:dc:d7:3c:85:6e:9b:fc:4a:45:8f:26:be:b0:cf: 9c:40:01:6f:73:b5:73:34:95:ce:74:a4:9f:8f:80: 89:70:95:d1:a9:8e:36:84:83:0e:f4:70:c3:1e:d0: 8c:6e:9c:80:00:53:83:0a:4f:ff:1b:81:c2:92:0b: 7a:8e:7e:b7:7e:70:eb:7b:33:43:32:b2:f0:04:9a: bd:87:e6:07:c1:c0:d1:7e:b7:5a:1b:82:95:bc:ea: 32:52:cf:2d:cb:36:34:92:2d:52:8d:7a:21:7c:e9: 4a:23:27:62:01:6b:73:b0:3f:e3:b2:9d:d4:ff:4b: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:0A:AB:4D:19:5E:DA:F1:88:C9:EB:5D:76:4E:15:85:7E:09:A9 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Sj4Kq00ZXtrxiMnrXXZOFYV-Cak.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.32.0/20 Signature Algorithm: sha256WithRSAEncryption c6:23:00:fc:ed:c9:94:37:63:f6:2b:5c:d2:e0:04:b0:45:7d: 60:3c:bd:39:d5:94:c9:e9:7a:7e:50:3d:e2:35:13:dc:40:9d: c6:52:42:af:46:49:ac:0f:ee:94:bd:9a:2e:01:25:6a:3c:ad: 2b:25:28:e6:f0:71:5c:18:ce:15:78:65:b9:30:e8:4e:53:50: d7:f7:c8:c5:fc:35:17:6f:32:0d:6c:97:24:1f:9e:ff:3b:ff: 3b:e5:c9:de:69:cc:fc:6d:75:3c:2b:76:f1:36:cc:a5:df:ef: d2:d2:46:73:8f:55:86:89:7f:c4:bb:98:62:d5:fe:2c:fc:90: 9c:9f:36:67:96:9a:ef:3c:63:e3:66:64:88:13:93:70:1e:c1: 44:fb:b7:a9:b6:a4:9f:a3:74:db:1a:cc:ed:24:87:6d:54:15: b6:b7:36:f0:65:63:99:bc:04:97:3f:69:6f:49:33:07:76:1c: bb:db:32:64:44:c2:a5:4b:2f:ce:79:9f:4c:8d:5c:0f:c3:cd: af:d3:b0:25:fb:24:d5:02:c6:01:73:a9:1d:2a:9a:6d:b3:c2: a1:6a:e6:5f:d9:9d:e0:70:5a:f7:e8:ac:14:59:0b:92:bb:39: 4b:c3:61:45:55:5d:44:c1:eb:c7:31:2e:4e:0e:3f:cb:d3:86: bf:0e:f7:a4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQ3MTRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDRBM0UwQUFCNEQxOTVF REFGMTg4QzlFQjVENzY0RTE1ODU3RTA5QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCiXQw3w532rAwgYSSJXJuZo6bJlFOpR+kcvQ12TQNCJy3udIB 8NiOUVlWbw/EPtVE+RroPCAnywPxdZKq529+sGNId5jbENQzCwXE8+MOmGq3bI5B Zkq4pKsben0XfAdKaP+v5L+pevH3RlVdnwoW3EhS3Ul0/TQDX1qadiZ1l21aM3Ti vZvc1zyFbpv8SkWPJr6wz5xAAW9ztXM0lc50pJ+PgIlwldGpjjaEgw70cMMe0Ixu nIAAU4MKT/8bgcKSC3qOfrd+cOt7M0MysvAEmr2H5gfBwNF+t1obgpW86jJSzy3L NjSSLVKNeiF86UojJ2IBa3OwP+OyndT/S1j1AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUSj4Kq00ZXtrxiMnrXXZOFYV+CakwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1NqNEtxMDBaWHRyeGlNbnJYWFpPRllWLUNhay5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARwiSAwDQYJKoZIhvcNAQELBQADggEBAMYjAPztyZQ3Y/YrXNLgBLBFfWA8 vTnVlMnpen5QPeI1E9xAncZSQq9GSawP7pS9mi4BJWo8rSslKObwcVwYzhV4Zbkw 6E5TUNf3yMX8NRdvMg1slyQfnv87/zvlyd5pzPxtdTwrdvE2zKXf79LSRnOPVYaJ f8S7mGLV/iz8kJyfNmeWmu88Y+NmZIgTk3AewUT7t6m2pJ+jdNsazO0kh21UFba3 NvBlY5m8BJc/aW9JMwd2HLvbMmREwqVLL855n0yNXA/Dza/TsCX7JNUCxgFzqR0q mm2zwqFq5l/ZneBwWvforBRZC5K7OUvDYUVVXUTB68cxLk4OP8vThr8O96Q= -----END CERTIFICATE-----Generated at Mon Aug 11 13:21:41 2025 by rpki-client