$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Xi_e7oU5d2LhyVgpxqH7tP1kZps.roa File: Xi_e7oU5d2LhyVgpxqH7tP1kZps.roa (raw, json) Hash identifier: AVbKWCwrhgLf4HvFizWHVUdQJyCKoqAFKn3sY14dY+g= Subject key identifier: 5E:2F:DE:EE:85:39:77:62:E1:C9:58:29:C6:A1:FB:B4:FD:64:66:9B Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0374 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Xi_e7oU5d2LhyVgpxqH7tP1kZps.roa Signing time: Fri 01 Aug 2025 01:47:15 +0000 ROA not before: Fri 01 Aug 2025 01:47:15 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 113.52.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884 (0x374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:47:15 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=5E2FDEEE85397762E1C95829C6A1FBB4FD64669B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:cc:80:b0:77:94:ea:da:32:20:df:19:3d: cb:2d:83:69:3d:ec:ff:c0:16:72:65:02:61:ff:0c: 17:0b:ca:3a:18:8c:20:60:18:e9:29:37:50:09:11: af:cb:7f:a4:ab:74:16:e0:d1:c9:60:9a:5b:09:d1: cd:d5:c5:2f:13:62:0a:1e:c1:32:f1:e5:91:4a:ee: c2:46:88:eb:67:b3:25:d5:4f:a5:aa:d3:2c:74:d0: ff:c2:84:c9:e7:30:b6:7b:3d:85:7d:4a:32:59:09: 12:04:e9:7c:48:96:ae:c9:a0:83:f9:0e:f3:0a:a5: 96:65:8b:1d:f6:95:87:87:ea:8e:d4:bd:d5:ab:0b: 81:64:e1:7b:af:3d:a8:0f:f1:34:6f:e1:f8:f4:42: 15:86:76:45:c5:e6:68:f9:a7:e5:da:10:79:d3:33: 4b:e8:cb:a3:8f:4b:80:d0:f7:45:78:f1:26:7f:bc: 9a:86:25:96:70:40:b2:3a:5d:25:2d:31:34:bd:39: 2a:61:63:0f:19:fc:65:83:e0:21:9b:c2:95:36:05: 22:84:da:aa:2c:01:60:f5:59:4f:1d:aa:f9:e9:c9: 7e:01:8a:e6:32:df:97:e0:11:3c:67:5c:31:54:e7: 02:51:34:92:fa:07:53:19:7b:73:28:3a:5e:76:ca: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2F:DE:EE:85:39:77:62:E1:C9:58:29:C6:A1:FB:B4:FD:64:66:9B X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Xi_e7oU5d2LhyVgpxqH7tP1kZps.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.52.16.0/20 Signature Algorithm: sha256WithRSAEncryption a1:75:55:d2:20:9e:66:24:a7:1a:7f:f0:ad:99:63:5e:9e:96: de:62:d4:a9:8e:d3:13:e3:55:e2:34:b3:e0:00:8d:6f:5e:ac: a6:c4:02:ef:93:02:aa:29:34:14:07:d0:2a:cd:92:17:04:77: 01:f2:31:2c:03:57:dc:9e:43:34:d3:e2:52:cd:f8:1e:7c:df: b1:1e:ca:6e:8b:1e:aa:57:40:b9:15:63:ff:1d:eb:37:2f:a1: 65:34:d0:be:8a:bf:c3:a2:1b:d5:00:4f:e0:03:26:71:12:62: 1a:8c:52:fc:b7:f5:f2:90:08:e2:3f:c0:a9:83:7b:81:ad:08: 43:75:37:c9:bb:11:0f:fa:c2:73:1d:c3:19:4e:ce:51:92:de: cb:8a:14:57:35:85:c1:09:68:3b:40:bc:8b:e0:56:e8:32:f8: 65:f2:47:84:36:e8:58:0d:65:cc:5e:25:1a:34:5f:e4:55:e7: d9:d2:49:f4:d7:b7:c4:47:f1:47:06:2b:0c:0d:37:00:e5:73: c4:b8:b7:bc:a0:e9:f3:bb:64:a0:c7:95:51:3a:92:f6:be:08: c6:27:db:6e:18:23:9a:9b:2f:f0:77:5e:ea:11:e0:0c:ad:ee: be:e6:ac:0f:cd:87:d1:34:99:35:ce:48:2a:e4:33:38:de:6b: 71:1c:f5:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQ3MTVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDVFMkZERUVFODUzOTc3 NjJFMUM5NTgyOUM2QTFGQkI0RkQ2NDY2OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIh8yAsHeU6toyIN8ZPcstg2k97P/AFnJlAmH/DBcLyjoYjCBg GOkpN1AJEa/Lf6SrdBbg0clgmlsJ0c3VxS8TYgoewTLx5ZFK7sJGiOtnsyXVT6Wq 0yx00P/ChMnnMLZ7PYV9SjJZCRIE6XxIlq7JoIP5DvMKpZZlix32lYeH6o7UvdWr C4Fk4XuvPagP8TRv4fj0QhWGdkXF5mj5p+XaEHnTM0voy6OPS4DQ90V48SZ/vJqG JZZwQLI6XSUtMTS9OSphYw8Z/GWD4CGbwpU2BSKE2qosAWD1WU8dqvnpyX4BiuYy 35fgETxnXDFU5wJRNJL6B1MZe3MoOl52ytKDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUXi/e7oU5d2LhyVgpxqH7tP1kZpswHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1hpX2U3b1U1ZDJMaHlWZ3B4cUg3dFAxa1pwcy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARxNBAwDQYJKoZIhvcNAQELBQADggEBAKF1VdIgnmYkpxp/8K2ZY16elt5i 1KmO0xPjVeI0s+AAjW9erKbEAu+TAqopNBQH0CrNkhcEdwHyMSwDV9yeQzTT4lLN +B5837Eeym6LHqpXQLkVY/8d6zcvoWU00L6Kv8OiG9UAT+ADJnESYhqMUvy39fKQ COI/wKmDe4GtCEN1N8m7EQ/6wnMdwxlOzlGS3suKFFc1hcEJaDtAvIvgVugy+GXy R4Q26FgNZcxeJRo0X+RV59nSSfTXt8RH8UcGKwwNNwDlc8S4t7yg6fO7ZKDHlVE6 kva+CMYn224YI5qbL/B3XuoR4Ayt7r7mrA/Nh9E0mTXOSCrkMzjea3Ec9bg= -----END CERTIFICATE-----Generated at Mon Aug 11 13:28:19 2025 by rpki-client