$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ve86-6Wr-TtDNHXxw7PbjQ4Pdjw.roa File: Ve86-6Wr-TtDNHXxw7PbjQ4Pdjw.roa (raw, json) Hash identifier: 1U2cuPFrn4q7fDFia7yIg+6NbOFGPsysHjtECNqEskg= Subject key identifier: 55:EF:3A:FB:A5:AB:F9:3B:43:34:75:F1:C3:B3:DB:8D:0E:0F:76:3C Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 038D Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ve86-6Wr-TtDNHXxw7PbjQ4Pdjw.roa Signing time: Fri 01 Aug 2025 01:50:58 +0000 ROA not before: Fri 01 Aug 2025 01:50:58 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4721 IP address blocks: 202.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:50:58 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=55EF3AFBA5ABF93B433475F1C3B3DB8D0E0F763C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:09:5c:0d:ca:e9:90:97:14:3d:35:be:47: 73:49:8b:4d:98:4f:d0:a8:d9:94:e4:58:82:a3:b6: 71:68:2f:e3:ec:fc:05:0d:c2:fc:86:01:1d:07:7b: 7e:7b:4f:d5:a7:34:94:83:49:52:8b:b6:83:ab:4e: 09:46:e1:8a:fa:e8:1f:2c:ab:2e:df:26:3d:9f:7d: dc:e6:4c:17:70:29:23:55:f4:a7:40:a3:0e:cf:e6: 66:28:a6:9d:98:aa:fa:fa:a3:63:21:e5:46:ee:47: a8:9f:58:85:f7:10:78:61:28:c5:ad:9f:29:7e:7b: 9f:46:1b:7c:7b:df:30:61:f9:57:35:a0:40:2f:11: 0f:20:39:91:30:2f:a7:2f:2d:b4:43:29:e2:f8:bb: 07:37:1c:2d:16:84:b8:65:08:83:9b:84:b7:86:7c: b6:1f:92:16:bb:b9:6e:ec:1e:5e:e9:d3:3a:4e:23: 65:b7:ce:f5:5c:11:05:ea:9f:0a:6f:bd:7e:91:94: dd:f9:bf:87:17:fa:2d:02:b8:63:bb:34:43:12:ed: 99:48:a7:e4:6c:4d:71:af:1e:c0:bb:b4:2d:50:84: 87:8d:1e:aa:9f:36:b4:d8:17:bd:c8:03:e2:4c:66: a1:e3:a0:e3:a8:08:dd:97:d2:44:28:2a:81:04:72: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:3A:FB:A5:AB:F9:3B:43:34:75:F1:C3:B3:DB:8D:0E:0F:76:3C X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ve86-6Wr-TtDNHXxw7PbjQ4Pdjw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.16.0/20 Signature Algorithm: sha256WithRSAEncryption 84:51:c6:4e:f4:4e:f8:98:80:5a:85:2e:a5:a8:26:b8:b2:74: 2c:f9:8a:4b:cc:4c:6e:06:7e:52:eb:98:6b:2c:8c:a4:67:90: f5:ac:73:23:e1:f9:f3:34:90:fa:0a:11:9c:ed:e2:a9:a5:fe: 4b:3d:18:4c:24:2e:fe:c8:1d:d5:63:da:bf:c5:4e:9c:3c:2b: 3b:f1:78:dd:40:94:e9:f9:2d:37:cc:2c:95:fb:cb:36:ef:52: e7:ce:7a:40:8c:23:16:2c:f2:be:af:e5:db:c1:a9:a9:48:8f: 33:2b:69:a5:32:77:52:c9:0d:64:e9:ff:3e:f7:11:22:3b:f9: f2:23:fe:cc:59:b4:91:c6:ab:7d:c4:bb:83:b2:ba:23:8b:c9: 6a:f1:0f:23:ac:00:8a:3e:10:26:31:1e:9c:b8:3d:c3:b2:2f: b1:ad:9b:ec:cf:fa:70:e5:89:b5:a4:c0:74:fc:e9:ce:ab:35: 30:81:01:df:c2:3e:42:2f:e6:a5:15:4b:12:c9:2a:85:0b:5a: 10:6a:78:e0:70:7b:9e:73:93:a2:a9:75:76:cb:2b:30:03:f3: f3:14:af:a2:73:54:4c:69:78:1b:84:bb:51:b1:b9:0e:c8:ab: d9:31:87:45:ec:c7:9a:2c:ea:f9:bd:49:c2:83:2f:80:b4:9b: d5:ce:5d:f3 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTUwNThaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDU1RUYzQUZCQTVBQkY5 M0I0MzM0NzVGMUMzQjNEQjhEMEUwRjc2M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVNwlcDcrpkJcUPTW+R3NJi02YT9Co2ZTkWIKjtnFoL+Ps/AUN wvyGAR0He357T9WnNJSDSVKLtoOrTglG4Yr66B8sqy7fJj2ffdzmTBdwKSNV9KdA ow7P5mYopp2Yqvr6o2Mh5UbuR6ifWIX3EHhhKMWtnyl+e59GG3x73zBh+Vc1oEAv EQ8gOZEwL6cvLbRDKeL4uwc3HC0WhLhlCIObhLeGfLYfkha7uW7sHl7p0zpOI2W3 zvVcEQXqnwpvvX6RlN35v4cX+i0CuGO7NEMS7ZlIp+RsTXGvHsC7tC1QhIeNHqqf NrTYF73IA+JMZqHjoOOoCN2X0kQoKoEEcrgxAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVe86+6Wr+TtDNHXxw7PbjQ4PdjwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1ZlODYtNldyLVR0RE5IWHh3N1BialE0UGRqdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKKxAwDQYJKoZIhvcNAQELBQADggEBAIRRxk70TviYgFqFLqWoJriydCz5 ikvMTG4GflLrmGssjKRnkPWscyPh+fM0kPoKEZzt4qml/ks9GEwkLv7IHdVj2r/F Tpw8KzvxeN1AlOn5LTfMLJX7yzbvUufOekCMIxYs8r6v5dvBqalIjzMraaUyd1LJ DWTp/z73ESI7+fIj/sxZtJHGq33Eu4OyuiOLyWrxDyOsAIo+ECYxHpy4PcOyL7Gt m+zP+nDlibWkwHT86c6rNTCBAd/CPkIv5qUVSxLJKoULWhBqeOBwe55zk6KpdXbL KzAD8/MUr6JzVExpeBuEu1GxuQ7Iq9kxh0Xsx5os6vm9ScKDL4C0m9XOXfM= -----END CERTIFICATE-----Generated at Mon Aug 11 13:34:59 2025 by rpki-client