$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/U0vXYNc7Msk1_8rq8-TMzPOKBi4.roa File: U0vXYNc7Msk1_8rq8-TMzPOKBi4.roa (raw, json) Hash identifier: Tg4GWg9n0DIKwpUzm0t+jtHLUwNGuGTAKGb7g/7b+HM= Subject key identifier: 53:4B:D7:60:D7:3B:32:C9:35:FF:CA:EA:F3:E4:CC:CC:F3:8A:06:2E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0368 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/U0vXYNc7Msk1_8rq8-TMzPOKBi4.roa Signing time: Fri 01 Aug 2025 01:43:52 +0000 ROA not before: Fri 01 Aug 2025 01:43:52 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 61.203.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:43:52 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=534BD760D73B32C935FFCAEAF3E4CCCCF38A062E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:32:ee:86:c3:ff:24:6f:14:02:f0:f4:10: d2:e3:85:d1:32:c4:4e:32:bd:a6:b1:82:4e:63:77: 52:27:69:a2:52:d6:c2:38:42:f6:dc:43:68:01:3e: c1:a9:4d:a1:be:b4:7a:85:57:8e:97:8d:66:f4:3c: ac:3d:bb:43:60:4c:18:8b:96:04:5d:3d:dd:77:c4: fb:db:eb:45:07:39:93:b1:b1:2a:3f:0a:6a:15:52: 55:f7:8a:30:b6:c9:16:f8:e0:05:36:74:5e:c9:49: 97:d1:ae:c8:d3:e8:ca:6c:1e:63:33:25:95:b4:09: c5:08:e2:92:dd:2f:a8:fc:3a:19:f9:51:1c:9f:d9: 0b:2d:42:5f:88:c3:bb:2b:d0:85:e7:7c:1f:a7:be: 12:99:45:aa:e2:cb:e3:ad:40:79:b7:5e:b7:4e:5a: 6b:cd:ab:86:45:96:16:d9:7b:b7:9f:63:b4:9b:90: 8b:d6:ea:e1:10:9b:e8:67:9c:b5:69:65:43:f0:9a: 9f:27:d4:8c:0c:ba:72:93:7d:d4:9d:2d:21:fe:04: b3:13:5e:9d:0e:6c:55:26:fe:b2:dd:e0:58:c7:98: f3:22:c4:9b:ef:de:cb:46:e2:77:fd:04:1a:ab:32: 92:9b:0b:ea:25:c9:e6:e8:2d:31:e9:00:49:94:4c: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4B:D7:60:D7:3B:32:C9:35:FF:CA:EA:F3:E4:CC:CC:F3:8A:06:2E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/U0vXYNc7Msk1_8rq8-TMzPOKBi4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.203.224.0/19 Signature Algorithm: sha256WithRSAEncryption 52:dd:47:8f:c2:e1:36:14:e4:24:26:42:59:4d:19:46:93:d2: ca:1c:bd:fc:e3:bf:46:28:c4:dd:34:da:a9:87:bc:86:a9:1d: 34:6d:f2:b3:8d:6f:9a:ce:49:5f:f0:b3:2c:29:1f:81:74:ac: ee:0a:57:87:1a:c4:8c:38:46:7b:3e:5b:23:c5:b8:23:68:98: 31:c3:91:5c:ab:8d:63:b2:21:d7:ec:d5:9f:24:1f:14:61:05: 13:8f:c9:2b:54:22:58:b5:d5:92:d4:33:ea:79:43:5c:67:59: 3f:c0:af:6b:2d:c9:d3:98:df:1e:65:54:5d:e3:28:90:e2:ed: a9:f0:0c:a7:6c:2c:df:2d:8e:e4:a8:06:35:bd:33:54:0e:31: 25:7d:b4:a3:ed:df:66:a3:8b:b4:0f:42:4d:6e:67:05:2c:ff: 50:1e:c5:8b:77:23:90:e6:24:20:ff:d9:26:22:1c:9c:57:8e: 0d:66:c9:64:ca:34:0b:a9:83:8b:c8:d3:a0:7b:e2:ff:0f:22: ba:89:fb:28:47:6a:62:1b:4d:9e:5a:30:6e:fe:32:cf:2a:85: 63:14:f1:46:a6:a2:27:6f:78:33:7f:24:b3:2e:aa:55:74:46: 89:c2:ed:74:36:45:13:ed:ef:52:db:8e:0c:6a:d2:1e:6c:0b: 45:bf:72:cd -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQzNTJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDUzNEJENzYwRDczQjMy QzkzNUZGQ0FFQUYzRTRDQ0NDRjM4QTA2MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBfzLuhsP/JG8UAvD0ENLjhdEyxE4yvaaxgk5jd1InaaJS1sI4 QvbcQ2gBPsGpTaG+tHqFV46XjWb0PKw9u0NgTBiLlgRdPd13xPvb60UHOZOxsSo/ CmoVUlX3ijC2yRb44AU2dF7JSZfRrsjT6MpsHmMzJZW0CcUI4pLdL6j8Ohn5URyf 2QstQl+Iw7sr0IXnfB+nvhKZRariy+OtQHm3XrdOWmvNq4ZFlhbZe7efY7SbkIvW 6uEQm+hnnLVpZUPwmp8n1IwMunKTfdSdLSH+BLMTXp0ObFUm/rLd4FjHmPMixJvv 3stG4nf9BBqrMpKbC+olyeboLTHpAEmUTHybAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUU0vXYNc7Msk1/8rq8+TMzPOKBi4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1UwdlhZTmM3TXNrMV84cnE4LVRNelBPS0JpNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU9y+AwDQYJKoZIhvcNAQELBQADggEBAFLdR4/C4TYU5CQmQllNGUaT0soc vfzjv0YoxN002qmHvIapHTRt8rONb5rOSV/wsywpH4F0rO4KV4caxIw4Rns+WyPF uCNomDHDkVyrjWOyIdfs1Z8kHxRhBROPyStUIli11ZLUM+p5Q1xnWT/Ar2stydOY 3x5lVF3jKJDi7anwDKdsLN8tjuSoBjW9M1QOMSV9tKPt32aji7QPQk1uZwUs/1Ae xYt3I5DmJCD/2SYiHJxXjg1myWTKNAupg4vI06B74v8PIrqJ+yhHamIbTZ5aMG7+ Ms8qhWMU8UamoidveDN/JLMuqlV0RonC7XQ2RRPt71Lbjgxq0h5sC0W/cs0= -----END CERTIFICATE-----Generated at Mon Aug 11 13:31:58 2025 by rpki-client