$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/caGkWST4m_yv6ki2ZhtV2oqwWJo.roa File: caGkWST4m_yv6ki2ZhtV2oqwWJo.roa (raw, json) Hash identifier: Wt7ohEbTlNP/1boNH1YMSKY+rCWI/gV1vbUUWLrdNFA= Subject key identifier: 71:A1:A4:59:24:F8:9B:FC:AF:EA:48:B6:66:1B:55:DA:8A:B0:58:9A Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0371 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/caGkWST4m_yv6ki2ZhtV2oqwWJo.roa Signing time: Fri 01 Aug 2025 01:47:13 +0000 ROA not before: Fri 01 Aug 2025 01:47:13 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4721 IP address blocks: 112.137.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:47:13 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=71A1A45924F89BFCAFEA48B6661B55DA8AB0589A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:af:74:da:16:78:8b:de:ef:54:82:49:a7: 1f:d7:92:16:cb:21:be:c4:8c:4a:35:70:47:6d:46: 39:e1:f2:48:23:6e:1d:1f:b7:23:1b:76:96:89:bc: 21:ff:8e:48:27:61:8c:df:fe:48:de:4a:6e:3c:2b: c4:11:bf:78:f8:80:f3:d8:88:2e:8d:46:0a:8e:c2: 20:8a:ce:4c:d6:bc:5d:7c:cf:47:b7:41:31:29:9f: c4:4b:5a:13:3e:fc:ff:b6:96:c9:e7:ef:be:f2:46: eb:7a:2c:48:69:f6:55:6d:9b:67:27:4a:8a:82:d3: 59:c4:3b:bf:e6:2e:a4:ff:4d:dc:e5:d9:c8:79:8c: e4:5b:89:36:90:a6:95:fc:43:36:62:b0:b1:46:b1: 71:ff:fc:bf:42:a6:29:21:85:22:f6:10:d7:84:03: e3:53:dc:fd:1b:e4:8d:12:a4:25:0b:70:2b:68:66: 1a:50:52:f8:23:6e:bb:a4:c5:84:08:2c:02:f1:aa: 1a:02:ff:91:05:d7:db:81:e6:f8:84:1b:94:d8:45: 3d:28:86:82:bd:f3:24:a9:e8:b2:5d:eb:29:14:62: dc:fe:02:34:1c:5e:9d:03:82:2d:cd:f9:78:d0:2f: a3:06:8f:95:4a:0f:f7:22:55:75:51:31:03:c6:e2: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A1:A4:59:24:F8:9B:FC:AF:EA:48:B6:66:1B:55:DA:8A:B0:58:9A X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/caGkWST4m_yv6ki2ZhtV2oqwWJo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.32.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:9a:ad:06:4d:27:52:d6:96:bf:82:4a:4e:45:e5:20:e8:12: f5:9c:36:79:ce:a7:c5:da:67:7d:41:89:2f:a8:2d:0b:8d:5f: 30:a2:7e:c8:2f:47:28:3f:1a:f4:d9:b5:dc:6f:cc:a2:91:e2: 03:01:af:da:61:b8:51:63:40:87:57:52:b8:c0:c5:70:fd:cb: 94:1a:f1:a3:64:24:24:4d:dd:6a:90:3c:d2:17:72:c9:f5:47: 42:fc:f1:b7:7c:95:91:55:ec:40:ab:30:f0:03:af:96:c7:49: df:87:ea:88:eb:f1:fe:dd:52:ae:3a:61:29:39:5e:1e:17:81: 54:7a:1e:b7:4b:24:17:fc:62:1a:29:82:f2:c0:93:eb:c2:4a: 5d:28:41:55:2a:14:f2:68:25:99:1b:1c:da:d2:c7:24:c6:5c: 54:b0:ef:1c:e7:4a:d5:da:4e:4c:ca:6b:e3:ec:09:54:bd:4f: 7c:20:5f:12:a2:f4:2f:04:c6:82:4e:7d:b3:a4:40:2f:5a:bf: 03:d6:65:d4:a3:09:a7:0b:49:c4:6b:02:24:c3:0e:d6:79:a7: 7d:83:27:d5:34:71:44:58:0a:13:1f:4e:ea:6f:f0:f6:a9:c1: f0:d9:31:ae:90:7a:71:de:de:a4:1f:01:7a:b8:22:0d:05:0d: da:43:35:f1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQ3MTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDcxQTFBNDU5MjRGODlC RkNBRkVBNDhCNjY2MUI1NURBOEFCMDU4OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt9q902hZ4i97vVIJJpx/XkhbLIb7EjEo1cEdtRjnh8kgjbh0f tyMbdpaJvCH/jkgnYYzf/kjeSm48K8QRv3j4gPPYiC6NRgqOwiCKzkzWvF18z0e3 QTEpn8RLWhM+/P+2lsnn777yRut6LEhp9lVtm2cnSoqC01nEO7/mLqT/Tdzl2ch5 jORbiTaQppX8QzZisLFGsXH//L9CpikhhSL2ENeEA+NT3P0b5I0SpCULcCtoZhpQ UvgjbrukxYQILALxqhoC/5EF19uB5viEG5TYRT0ohoK98ySp6LJd6ykUYtz+AjQc Xp0Dgi3N+XjQL6MGj5VKD/ciVXVRMQPG4lcLAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcaGkWST4m/yv6ki2ZhtV2oqwWJowHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2NhR2tXU1Q0bV95djZraTJaaHRWMm9xd1dKby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARwiSAwDQYJKoZIhvcNAQELBQADggEBADyarQZNJ1LWlr+CSk5F5SDoEvWc NnnOp8XaZ31BiS+oLQuNXzCifsgvRyg/GvTZtdxvzKKR4gMBr9phuFFjQIdXUrjA xXD9y5Qa8aNkJCRN3WqQPNIXcsn1R0L88bd8lZFV7ECrMPADr5bHSd+H6ojr8f7d Uq46YSk5Xh4XgVR6HrdLJBf8YhopgvLAk+vCSl0oQVUqFPJoJZkbHNrSxyTGXFSw 7xznStXaTkzKa+PsCVS9T3wgXxKi9C8ExoJOfbOkQC9avwPWZdSjCacLScRrAiTD DtZ5p32DJ9U0cURYChMfTupv8PapwfDZMa6QenHe3qQfAXq4Ig0FDdpDNfE= -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:12 2025 by rpki-client