$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UzwmtPKk6n5r2ffRJKdya5joxwc.roa File: UzwmtPKk6n5r2ffRJKdya5joxwc.roa (raw, json) Hash identifier: jkWYE37kCmbkKYsaar7otfPVSqRlMd60GbOi6NAaIPk= Subject key identifier: 53:3C:26:B4:F2:A4:EA:7E:6B:D9:F7:D1:24:A7:72:6B:98:E8:C7:07 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0339 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UzwmtPKk6n5r2ffRJKdya5joxwc.roa Signing time: Fri 01 Aug 2025 01:39:57 +0000 ROA not before: Fri 01 Aug 2025 01:39:57 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9378 IP address blocks: 219.124.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:39:57 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=533C26B4F2A4EA7E6BD9F7D124A7726B98E8C707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1e:e1:42:bc:9b:7f:38:ea:4b:32:a7:a0:f0: 74:56:3a:37:de:9b:c6:78:2c:12:ca:a3:c1:b6:8a: 03:75:0c:29:da:68:c0:db:ea:83:9e:59:8b:f7:52: 57:6f:5c:b0:50:f0:31:6d:16:26:52:6b:3f:de:da: 41:8b:9e:13:3d:07:10:dc:e9:fa:4c:63:a1:31:27: 25:9c:d9:76:11:3e:9b:62:cb:f9:2a:48:26:eb:00: 8d:88:a8:c6:39:dc:14:da:59:37:9f:d0:d4:b1:06: ec:cc:c8:5b:e2:b4:5f:ee:df:f4:3f:73:f9:2d:7a: 8e:0e:cb:25:ac:72:b6:2c:48:d3:be:92:97:4c:d2: 62:45:3f:c4:9a:b3:e2:28:ee:a7:54:aa:de:5f:eb: 72:29:17:7d:fd:57:40:34:a9:1f:8f:3f:93:56:6a: f2:91:10:81:52:62:ea:0b:03:84:62:20:06:a2:c0: 20:07:a3:97:be:7f:2a:62:8e:9b:f5:87:13:0c:51: 1b:d2:fb:c9:82:b6:ee:d7:15:00:02:63:50:bd:be: 78:25:b0:69:b9:cc:81:21:b6:7e:a0:b0:3b:e1:ee: 10:5f:66:16:58:1b:3c:58:d2:98:2b:75:32:d6:6e: 5a:6a:e1:20:11:9c:82:2a:06:01:c2:ba:d3:c5:e1: 77:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3C:26:B4:F2:A4:EA:7E:6B:D9:F7:D1:24:A7:72:6B:98:E8:C7:07 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UzwmtPKk6n5r2ffRJKdya5joxwc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.124.16.0/20 Signature Algorithm: sha256WithRSAEncryption 90:4d:80:80:48:0c:d9:e1:83:dc:31:1a:c5:76:94:57:87:0b: 0f:d5:9e:75:0f:1b:29:f8:ee:36:be:99:95:cc:d5:6e:07:0a: 35:76:46:05:22:ca:5b:2c:99:21:84:e0:76:f1:6b:8a:a0:55: 2c:ce:ba:55:6d:f1:ad:25:98:ba:8e:5d:54:bd:0e:c5:ce:d1: 27:20:98:81:33:5c:ae:2d:0e:85:47:5a:d6:93:19:18:a5:81: 6d:bb:be:b9:a3:31:e4:86:29:b9:f8:ea:df:9a:2d:28:64:56: da:27:f4:4e:8b:ad:26:cd:90:9a:c7:a0:21:b0:a8:ea:e7:6e: cf:e3:de:a2:97:27:6e:2e:20:8c:dc:39:76:4f:5a:21:dc:3d: d3:6b:45:8d:62:49:a3:2b:e6:38:05:73:9a:64:48:1b:14:27: e7:24:32:c7:9c:70:c7:f8:ea:f0:9c:9a:13:39:c0:43:a0:0c: 58:c4:4c:22:a0:59:f7:e1:eb:69:03:f9:81:b9:e2:f5:c8:80: e5:b8:cb:f4:91:9f:51:b5:0e:c1:b4:e7:a9:a4:e5:4c:fb:41: 05:7a:83:bf:5b:da:f1:47:b3:c0:80:81:23:ac:70:ee:39:31: de:3b:ea:37:32:d4:05:8e:2c:9d:9c:17:ed:66:15:1c:d7:9e: 46:1b:43:80 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM5NTdaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDUzM0MyNkI0RjJBNEVB N0U2QkQ5RjdEMTI0QTc3MjZCOThFOEM3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOHuFCvJt/OOpLMqeg8HRWOjfem8Z4LBLKo8G2igN1DCnaaMDb 6oOeWYv3UldvXLBQ8DFtFiZSaz/e2kGLnhM9BxDc6fpMY6ExJyWc2XYRPptiy/kq SCbrAI2IqMY53BTaWTef0NSxBuzMyFvitF/u3/Q/c/kteo4OyyWscrYsSNO+kpdM 0mJFP8Sas+Io7qdUqt5f63IpF339V0A0qR+PP5NWavKREIFSYuoLA4RiIAaiwCAH o5e+fypijpv1hxMMURvS+8mCtu7XFQACY1C9vnglsGm5zIEhtn6gsDvh7hBfZhZY GzxY0pgrdTLWblpq4SARnIIqBgHCutPF4XcVAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUUzwmtPKk6n5r2ffRJKdya5joxwcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1V6d210UEtrNm41cjJmZlJKS2R5YTVqb3h3Yy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATbfBAwDQYJKoZIhvcNAQELBQADggEBAJBNgIBIDNnhg9wxGsV2lFeHCw/V nnUPGyn47ja+mZXM1W4HCjV2RgUiylssmSGE4Hbxa4qgVSzOulVt8a0lmLqOXVS9 DsXO0ScgmIEzXK4tDoVHWtaTGRilgW27vrmjMeSGKbn46t+aLShkVton9E6LrSbN kJrHoCGwqOrnbs/j3qKXJ24uIIzcOXZPWiHcPdNrRY1iSaMr5jgFc5pkSBsUJ+ck MseccMf46vCcmhM5wEOgDFjETCKgWffh62kD+YG54vXIgOW4y/SRn1G1DsG056mk 5Uz7QQV6g79b2vFHs8CAgSOscO45Md476jcy1AWOLJ2cF+1mFRzXnkYbQ4A= -----END CERTIFICATE-----Generated at Mon Aug 11 13:19:32 2025 by rpki-client