$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cqwrqCCjtEMKNJVUhepLB24XpU4.roa File: cqwrqCCjtEMKNJVUhepLB24XpU4.roa (raw, json) Hash identifier: DzemWf4NsZRLJEDpBw/nw46JmN60CFHtfvdn44My1go= Subject key identifier: 72:AC:2B:A8:20:A3:B4:43:0A:34:95:54:85:EA:4B:07:6E:17:A5:4E Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0350 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cqwrqCCjtEMKNJVUhepLB24XpU4.roa Signing time: Fri 01 Aug 2025 01:43:40 +0000 ROA not before: Fri 01 Aug 2025 01:43:40 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 110.172.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:43:40 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=72AC2BA820A3B4430A34955485EA4B076E17A54E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f9:b4:b1:06:d4:c5:51:3a:7b:fa:e1:ca:db: a9:6c:e1:48:0b:b7:98:f5:f6:1e:a2:90:f5:10:dd: cf:71:2f:6d:78:3d:61:55:38:fd:49:a9:d9:6f:ea: 8d:77:f3:b2:69:b3:3a:ea:ab:20:c1:52:84:90:18: 4e:45:50:25:82:95:a1:59:cf:1f:c1:fb:80:da:9e: b3:39:5d:c7:de:7d:2a:e6:91:2d:5f:3e:6f:0c:70: f5:87:c1:a5:0b:4d:e0:17:21:be:f9:1a:0e:db:a3: 7f:9f:bb:6b:31:61:fb:9e:22:56:5c:de:13:a0:57: 10:70:24:6c:b3:2f:cf:83:1b:14:f8:38:98:e9:d3: 34:f7:9c:6f:ac:53:e2:50:b1:82:b3:89:71:c5:7f: 47:31:b0:4e:f2:34:4a:b9:14:7f:ab:4a:e1:e5:b9: a5:bf:ce:96:15:02:04:08:3e:25:5f:20:b5:dc:c1: 9a:4c:6c:2b:30:58:03:b1:4f:58:f1:55:f1:d1:35: b9:ae:39:76:0b:b2:bf:e1:bc:b6:f8:15:6d:2a:f0: cb:d8:8f:ee:86:dc:65:1e:e9:3a:5e:88:4f:44:d1: 74:05:6c:13:ee:9d:01:e7:66:22:01:8e:6c:3c:00: 3f:a4:d8:74:d6:b9:ac:5f:b2:ee:eb:f7:9d:1e:31: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:2B:A8:20:A3:B4:43:0A:34:95:54:85:EA:4B:07:6E:17:A5:4E X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cqwrqCCjtEMKNJVUhepLB24XpU4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.172.0.0/20 Signature Algorithm: sha256WithRSAEncryption da:7f:67:c4:43:cc:66:fc:64:ec:49:de:82:4b:df:b9:3a:c3: 2f:08:4e:b7:d1:7e:5d:49:73:d4:0f:c3:cc:dd:55:d4:5e:be: f3:93:5c:77:1e:e4:3b:1b:23:27:f9:a9:62:80:13:d5:5e:84: 58:98:c3:6f:50:a9:7c:fe:4b:dd:a5:68:db:a1:7e:ca:b8:81: ed:33:4e:df:53:07:7d:92:81:35:b8:99:47:5f:2b:b6:f9:82: f5:18:ed:98:94:3c:e5:40:55:5c:ec:7e:22:7b:11:95:87:e3: 60:3c:e8:17:32:d5:c7:39:e9:da:64:33:d8:60:70:21:8e:02: 69:c5:e8:38:26:2d:f6:75:ca:26:2d:32:35:eb:3c:77:e8:b5: fa:2f:97:91:7b:04:fd:da:96:f4:47:ee:81:8e:12:20:08:ef: 94:5c:5c:5f:44:8e:a4:f0:e8:4c:69:cc:d3:cc:c9:e0:a6:3c: 0b:04:59:23:d9:9c:ab:b6:56:d8:e8:2c:b5:a2:69:20:34:e2: 91:54:9c:7f:81:63:bc:f7:82:31:13:5c:c6:11:3e:d5:18:a6: 6a:ad:7a:15:aa:ab:e5:47:da:8c:e9:c7:3a:db:b1:2e:b8:32: 15:c1:f2:c7:8a:b3:19:c4:24:6d:14:f5:94:07:fd:19:d6:4d: 62:42:78:de -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQzNDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDcyQUMyQkE4MjBBM0I0 NDMwQTM0OTU1NDg1RUE0QjA3NkUxN0E1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn+bSxBtTFUTp7+uHK26ls4UgLt5j19h6ikPUQ3c9xL214PWFV OP1Jqdlv6o1387JpszrqqyDBUoSQGE5FUCWClaFZzx/B+4DanrM5XcfefSrmkS1f Pm8McPWHwaULTeAXIb75Gg7bo3+fu2sxYfueIlZc3hOgVxBwJGyzL8+DGxT4OJjp 0zT3nG+sU+JQsYKziXHFf0cxsE7yNEq5FH+rSuHluaW/zpYVAgQIPiVfILXcwZpM bCswWAOxT1jxVfHRNbmuOXYLsr/hvLb4FW0q8MvYj+6G3GUe6TpeiE9E0XQFbBPu nQHnZiIBjmw8AD+k2HTWuaxfsu7r950eMTg7AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUcqwrqCCjtEMKNJVUhepLB24XpU4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2Nxd3JxQ0NqdEVNS05KVlVoZXBMQjI0WHBVNC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARurAAwDQYJKoZIhvcNAQELBQADggEBANp/Z8RDzGb8ZOxJ3oJL37k6wy8I TrfRfl1Jc9QPw8zdVdRevvOTXHce5DsbIyf5qWKAE9VehFiYw29QqXz+S92laNuh fsq4ge0zTt9TB32SgTW4mUdfK7b5gvUY7ZiUPOVAVVzsfiJ7EZWH42A86Bcy1cc5 6dpkM9hgcCGOAmnF6DgmLfZ1yiYtMjXrPHfotfovl5F7BP3alvRH7oGOEiAI75Rc XF9EjqTw6ExpzNPMyeCmPAsEWSPZnKu2VtjoLLWiaSA04pFUnH+BY7z3gjETXMYR PtUYpmqtehWqq+VH2ozpxzrbsS64MhXB8seKsxnEJG0U9ZQH/RnWTWJCeN4= -----END CERTIFICATE-----Generated at Mon Aug 11 13:28:49 2025 by rpki-client