$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZeL_AtbmWVNsbEsvHyv6msQl0EA.roa File: ZeL_AtbmWVNsbEsvHyv6msQl0EA.roa (raw, json) Hash identifier: ffIWA9hvLO+fW7P51658vnjJjhal/vLJsDHg3ZPVLy4= Subject key identifier: 65:E2:FF:02:D6:E6:59:53:6C:6C:4B:2F:1F:2B:FA:9A:C4:25:D0:40 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 037E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZeL_AtbmWVNsbEsvHyv6msQl0EA.roa Signing time: Fri 01 Aug 2025 01:47:22 +0000 ROA not before: Fri 01 Aug 2025 01:47:22 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 114.198.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:47:22 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=65E2FF02D6E659536C6C4B2F1F2BFA9AC425D040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:2f:d1:cb:f5:71:d3:49:cc:80:6b:c8:f8: cd:e8:88:57:c8:1b:4e:f7:66:7a:49:dd:73:ec:a7: bb:a6:2d:bc:87:f3:f4:5b:8e:10:3a:05:66:f4:9e: e1:34:09:91:aa:48:dd:a2:f1:f9:aa:74:6b:ca:d5: d8:f2:46:93:42:55:70:fd:1c:19:f1:7d:08:b9:ee: 8f:a5:b3:7e:9e:f7:b8:31:66:50:65:fa:53:57:6a: 8c:44:5b:56:3c:58:cb:b7:44:ee:6a:d5:79:57:ed: 6d:c1:a1:59:f3:f6:70:33:45:d0:c4:b8:37:5f:d5: 49:8c:23:5d:4a:76:80:1d:93:35:1f:76:6f:89:18: 59:f5:f6:ea:83:ae:c8:4a:e9:c1:a7:c0:61:e7:32: df:69:3d:ba:e3:61:f9:dc:a2:a7:bd:21:4c:b7:99: 29:1a:72:a5:01:c7:ad:a8:65:14:83:5f:50:7b:3f: 9f:7c:a0:d4:62:6b:4e:96:81:27:82:fe:cb:c0:79: e2:e3:ec:aa:49:4d:dc:5b:30:3c:8c:ff:b9:c0:d5: 2d:71:dc:ea:37:d3:2c:a6:bd:18:e7:49:96:48:4c: 7a:13:aa:71:5d:e7:ff:24:d5:c4:7a:1c:15:e7:4d: 1c:cb:15:9f:a5:56:3f:62:0b:10:35:29:48:f6:af: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E2:FF:02:D6:E6:59:53:6C:6C:4B:2F:1F:2B:FA:9A:C4:25:D0:40 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ZeL_AtbmWVNsbEsvHyv6msQl0EA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.198.224.0/21 Signature Algorithm: sha256WithRSAEncryption aa:f5:a8:58:58:57:cf:35:79:fa:30:d4:87:7c:cd:3a:24:27: 69:42:2d:51:4f:34:3a:f4:0c:e8:58:89:a8:27:5a:61:d6:25: 42:49:d9:5e:01:a0:fa:60:b5:62:c4:4a:e6:8e:1c:38:12:3e: a4:7a:e7:f7:2d:15:9f:39:8c:c9:4a:de:51:5d:f6:53:59:73: b1:ec:2d:27:09:42:0e:26:71:ec:e1:5e:4d:cb:76:3c:96:c9: 50:cd:77:d1:e3:76:88:c0:72:81:41:3d:f6:f3:82:41:bc:27: 8e:b9:d3:9c:0e:ac:54:e9:cf:14:6e:b5:e5:cf:99:ba:3c:e5: 50:3e:fc:f4:d6:8b:b1:36:76:a3:ac:f7:3b:71:45:a2:16:b0: df:5c:7d:ce:b1:bb:bd:9a:c9:3b:15:4f:74:3b:9a:d3:a4:07: f1:ed:cb:e0:e0:5e:70:81:2a:ee:0c:17:6f:d0:ef:07:4a:59: b3:fd:08:90:05:e2:2c:11:dd:a5:78:79:4e:3a:0b:64:e5:0a: 3b:b2:19:67:79:b3:ce:a0:e7:73:d2:aa:e8:94:a2:c9:be:c5: 47:23:16:39:98:b7:ed:5c:a5:b9:3b:42:80:4d:0a:8b:23:83: 2d:c1:84:ed:ac:b0:7c:59:d2:6e:34:5f:20:c8:69:8a:81:fa: 9a:07:4f:ef -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQ3MjJaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDY1RTJGRjAyRDZFNjU5 NTM2QzZDNEIyRjFGMkJGQTlBQzQyNUQwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8SS/Ry/Vx00nMgGvI+M3oiFfIG073ZnpJ3XPsp7umLbyH8/Rb jhA6BWb0nuE0CZGqSN2i8fmqdGvK1djyRpNCVXD9HBnxfQi57o+ls36e97gxZlBl +lNXaoxEW1Y8WMu3RO5q1XlX7W3BoVnz9nAzRdDEuDdf1UmMI11KdoAdkzUfdm+J GFn19uqDrshK6cGnwGHnMt9pPbrjYfncoqe9IUy3mSkacqUBx62oZRSDX1B7P598 oNRia06WgSeC/svAeeLj7KpJTdxbMDyM/7nA1S1x3Oo30yymvRjnSZZITHoTqnFd 5/8k1cR6HBXnTRzLFZ+lVj9iCxA1KUj2r0GXAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUZeL/AtbmWVNsbEsvHyv6msQl0EAwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL1plTF9BdGJtV1ZOc2JFc3ZIeXY2bXNRbDBFQS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANyxuAwDQYJKoZIhvcNAQELBQADggEBAKr1qFhYV881efow1Id8zTokJ2lC LVFPNDr0DOhYiagnWmHWJUJJ2V4BoPpgtWLESuaOHDgSPqR65/ctFZ85jMlK3lFd 9lNZc7HsLScJQg4mcezhXk3LdjyWyVDNd9HjdojAcoFBPfbzgkG8J46505wOrFTp zxRuteXPmbo85VA+/PTWi7E2dqOs9ztxRaIWsN9cfc6xu72ayTsVT3Q7mtOkB/Ht y+DgXnCBKu4MF2/Q7wdKWbP9CJAF4iwR3aV4eU46C2TlCjuyGWd5s86g53PSquiU osm+xUcjFjmYt+1cpbk7QoBNCosjgy3BhO2ssHxZ0m40XyDIaYqB+poHT+8= -----END CERTIFICATE-----Generated at Mon Aug 11 13:21:46 2025 by rpki-client