$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ueebm2Iv8v0GYIwbCElca3NEVZE.roa File: Ueebm2Iv8v0GYIwbCElca3NEVZE.roa (raw, json) Hash identifier: 3QUe9oPCeAI3AEnhn754UpN/JMx/XJpk8UpvG2EFjGw= Subject key identifier: 51:E7:9B:9B:62:2F:F2:FD:06:60:8C:1B:08:49:5C:6B:73:44:55:91 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03AC Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ueebm2Iv8v0GYIwbCElca3NEVZE.roa Signing time: Fri 01 Aug 2025 01:55:00 +0000 ROA not before: Fri 01 Aug 2025 01:55:00 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 220.208.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:55:00 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=51E79B9B622FF2FD06608C1B08495C6B73445591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:f1:b3:29:86:a5:ef:46:c4:2d:61:4f:3c: cc:e2:40:92:60:d9:d0:bd:89:b7:83:11:db:a4:00: 1c:0d:a4:24:c4:f3:a0:da:4c:c2:3e:11:70:13:10: 04:fa:be:69:d4:a0:96:91:29:43:4f:c0:ad:de:9e: d3:31:6d:94:5e:52:e9:88:ba:bd:98:ae:3b:49:b7: f3:1c:21:71:20:a3:15:15:67:90:b8:54:1f:68:0a: 23:1c:18:b4:4f:0e:b2:d1:36:c9:c5:0e:7d:6a:fa: fe:25:ce:d6:f1:6a:5d:e8:9b:84:b2:b2:67:f4:42: da:d6:0e:e0:68:1b:56:e1:8a:9b:8f:c3:18:2a:3e: e1:88:9d:61:b7:bd:5b:b7:2e:cb:8c:35:b3:15:b6: cd:b9:ae:99:f8:27:2a:6a:0a:78:56:43:64:8e:23: e0:8f:31:48:a3:e9:4d:20:5e:ac:00:03:2d:18:89: 3a:e7:1e:38:fc:5a:5a:84:f1:fb:9c:48:af:3d:72: dd:fd:29:89:ba:b3:c0:08:5e:d8:c7:8a:8e:2d:71: e1:c9:ae:7c:3b:f1:a2:a1:8f:c0:7e:35:2d:ef:fa: 27:2b:c5:60:e8:92:8d:94:0b:78:c9:0a:9a:0b:28: b7:2f:bf:37:38:87:a4:46:bf:7f:24:01:ee:b1:b8: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E7:9B:9B:62:2F:F2:FD:06:60:8C:1B:08:49:5C:6B:73:44:55:91 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ueebm2Iv8v0GYIwbCElca3NEVZE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.208.64.0/18 Signature Algorithm: sha256WithRSAEncryption b2:96:d6:cb:c7:21:e1:92:7f:35:0d:b9:de:fa:7e:26:ad:4f: b1:0b:cd:1e:4c:66:63:32:15:54:4d:c1:30:4b:da:49:25:c6: f8:a4:be:0a:71:3b:68:2a:5c:53:6f:80:1d:09:f0:a7:42:96: 54:b0:93:cb:95:31:e5:30:fe:1b:4a:01:f4:3f:ef:a0:4e:02: 46:58:69:68:ce:34:50:d5:46:39:f4:8e:47:0d:e9:d1:77:ba: 3c:ea:de:74:08:83:4c:c8:f2:c7:51:53:0c:01:61:e4:6a:da: 26:2c:58:30:e5:52:5f:bc:75:ab:10:0e:35:c9:89:aa:bc:65: 25:05:85:b6:47:57:04:56:33:47:8d:12:3c:a1:0d:3f:fe:89: a2:a8:17:f7:de:e3:73:5d:33:c3:a1:e2:a5:8b:c6:f2:e0:a5: 98:fc:95:a4:75:f5:70:4e:1d:31:6d:a9:cc:f8:dd:61:d4:47: f6:45:94:fb:d4:ac:81:55:d7:10:c9:97:fb:0c:db:c5:c3:4f: df:f6:bb:cd:37:3b:6d:a8:96:61:bd:cc:0f:9b:26:53:1b:cf: df:9d:4d:d1:84:ff:bc:a5:25:fa:ad:ec:c3:c3:d5:7f:21:c7: 57:39:28:b3:2e:d4:df:02:3a:b7:0f:69:c0:0a:4e:82:6f:08: 40:42:15:63 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTU1MDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDUxRTc5QjlCNjIyRkYy RkQwNjYwOEMxQjA4NDk1QzZCNzM0NDU1OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5cPGzKYal70bELWFPPMziQJJg2dC9ibeDEdukABwNpCTE86Da TMI+EXATEAT6vmnUoJaRKUNPwK3entMxbZReUumIur2YrjtJt/McIXEgoxUVZ5C4 VB9oCiMcGLRPDrLRNsnFDn1q+v4lztbxal3om4Sysmf0QtrWDuBoG1bhipuPwxgq PuGInWG3vVu3LsuMNbMVts25rpn4JypqCnhWQ2SOI+CPMUij6U0gXqwAAy0YiTrn Hjj8WlqE8fucSK89ct39KYm6s8AIXtjHio4tceHJrnw78aKhj8B+NS3v+icrxWDo ko2UC3jJCpoLKLcvvzc4h6RGv38kAe6xuJ+9AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUeebm2Iv8v0GYIwbCElca3NEVZEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1VlZWJtMkl2OHYwR1lJd2JDRWxjYTNORVZaRS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAbc0EAwDQYJKoZIhvcNAQELBQADggEBALKW1svHIeGSfzUNud76fiatT7EL zR5MZmMyFVRNwTBL2kklxvikvgpxO2gqXFNvgB0J8KdCllSwk8uVMeUw/htKAfQ/ 76BOAkZYaWjONFDVRjn0jkcN6dF3ujzq3nQIg0zI8sdRUwwBYeRq2iYsWDDlUl+8 dasQDjXJiaq8ZSUFhbZHVwRWM0eNEjyhDT/+iaKoF/fe43NdM8Oh4qWLxvLgpZj8 laR19XBOHTFtqcz43WHUR/ZFlPvUrIFV1xDJl/sM28XDT9/2u803O22olmG9zA+b JlMbz9+dTdGE/7ylJfqt7MPD1X8hx1c5KLMu1N8COrcPacAKToJvCEBCFWM= -----END CERTIFICATE-----Generated at Mon Aug 11 13:16:04 2025 by rpki-client