$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa File: gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa (raw, json) Hash identifier: /zLbULyoQNQxGQsxyJHUeJ/8au6NTELsUQqdqAr2c6U= Subject key identifier: 81:36:04:0B:60:61:D4:B5:41:6D:DC:23:C2:72:47:56:77:59:90:24 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0396 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa Signing time: Fri 01 Aug 2025 01:51:05 +0000 ROA not before: Fri 01 Aug 2025 01:51:05 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 203.89.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:51:05 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=8136040B6061D4B5416DDC23C272475677599024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:36:54:94:f8:1f:28:ce:4a:eb:a7:e9:8f: 1e:8c:98:8d:75:5c:af:0e:99:07:a3:e4:08:fd:65: 3d:5a:f4:23:a7:78:6e:ea:f7:92:14:12:4f:9a:83: 8c:cc:a6:5c:6d:cb:f2:b2:66:aa:50:37:06:4d:fc: ea:12:47:4a:4e:44:2d:c1:7c:ca:8f:69:75:ce:c0: 9d:3e:57:ec:eb:15:81:32:c6:b5:a0:a7:e1:5f:8f: a8:bf:93:69:b9:9f:2c:2e:96:61:c5:9b:db:0e:37: 3c:6f:dc:94:14:f4:7f:8b:7b:37:98:fd:eb:b2:de: b6:df:e8:f8:6a:2e:98:3b:28:66:ac:c1:9f:7e:50: b4:68:75:69:91:2c:c3:c9:c6:2b:e2:ee:4d:7b:77: 04:53:c4:e5:78:fc:3b:2a:66:a8:28:86:af:39:4c: 3e:ac:50:ed:1d:a0:0e:e8:1a:6c:31:e3:cc:ad:30: 51:67:dd:03:bd:c1:47:52:6b:b3:14:aa:d5:f6:11: a1:8a:e1:43:26:69:10:16:3a:d6:45:f1:9c:e0:63: ab:ed:24:70:e3:8a:cb:4a:56:fe:bc:49:c6:49:0d: 13:44:c4:1a:17:c6:1c:5f:eb:f7:f5:1e:48:05:e2: 38:b6:94:42:01:a0:5e:cb:56:98:50:fa:89:76:6b: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:36:04:0B:60:61:D4:B5:41:6D:DC:23:C2:72:47:56:77:59:90:24 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gTYEC2Bh1LVBbdwjwnJHVndZkCQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.89.32.0/19 Signature Algorithm: sha256WithRSAEncryption 11:e7:e5:b3:65:70:4d:10:76:7f:7d:e3:15:4b:97:89:be:a1: 20:c2:34:24:63:4e:e4:85:23:df:53:99:fd:1e:34:4e:fb:35: d7:5a:3f:c4:8d:c2:80:24:ad:0b:eb:3d:c5:13:63:aa:a7:ed: 96:5e:26:12:70:71:c1:d4:c6:b1:ef:bd:f2:c5:b2:ba:03:32: 1c:64:ac:47:75:63:e2:26:ce:a6:2b:2b:75:35:8c:5c:fa:1a: 60:68:c3:6c:27:4a:d3:33:49:77:7f:b7:13:20:0e:ba:95:a6: 35:81:bd:bc:ac:ac:a6:f8:19:f9:22:f9:1f:47:fc:8f:45:dd: 6d:68:4b:7d:d6:a5:ad:94:2a:13:bf:79:2e:61:02:18:99:fc: a5:ca:e9:0c:fd:5b:44:df:26:8b:43:c3:d9:44:84:e9:8d:18: 18:32:21:8c:62:c1:d8:e8:95:3d:f5:9a:97:ef:9c:6a:b0:ff: 19:ee:54:e9:6f:b3:21:b5:da:76:75:23:31:5d:4a:f4:71:93: 45:31:8c:c2:cf:98:9e:d4:92:ce:8b:e3:d8:9b:3d:68:cb:3b: 2f:6b:83:73:91:a6:12:7e:10:29:bd:e7:e8:75:59:b4:85:02: 2b:b7:2d:94:d5:3c:b7:53:5c:2a:12:90:4f:57:d8:95:c1:2f: 43:39:36:33 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTUxMDVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDgxMzYwNDBCNjA2MUQ0 QjU0MTZEREMyM0MyNzI0NzU2Nzc1OTkwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZUzZUlPgfKM5K66fpjx6MmI11XK8OmQej5Aj9ZT1a9COneG7q 95IUEk+ag4zMplxty/KyZqpQNwZN/OoSR0pORC3BfMqPaXXOwJ0+V+zrFYEyxrWg p+Ffj6i/k2m5nywulmHFm9sONzxv3JQU9H+LezeY/euy3rbf6PhqLpg7KGaswZ9+ ULRodWmRLMPJxivi7k17dwRTxOV4/DsqZqgohq85TD6sUO0doA7oGmwx48ytMFFn 3QO9wUdSa7MUqtX2EaGK4UMmaRAWOtZF8ZzgY6vtJHDjistKVv68ScZJDRNExBoX xhxf6/f1HkgF4ji2lEIBoF7LVphQ+ol2aw/HAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUgTYEC2Bh1LVBbdwjwnJHVndZkCQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2dUWUVDMkJoMUxWQmJkd2p3bkpIVm5kWmtDUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXLWSAwDQYJKoZIhvcNAQELBQADggEBABHn5bNlcE0Qdn994xVLl4m+oSDC NCRjTuSFI99Tmf0eNE77NddaP8SNwoAkrQvrPcUTY6qn7ZZeJhJwccHUxrHvvfLF sroDMhxkrEd1Y+ImzqYrK3U1jFz6GmBow2wnStMzSXd/txMgDrqVpjWBvbysrKb4 Gfki+R9H/I9F3W1oS33Wpa2UKhO/eS5hAhiZ/KXK6Qz9W0TfJotDw9lEhOmNGBgy IYxiwdjolT31mpfvnGqw/xnuVOlvsyG12nZ1IzFdSvRxk0UxjMLPmJ7Uks6L49ib PWjLOy9rg3ORphJ+ECm95+h1WbSFAiu3LZTVPLdTXCoSkE9X2JXBL0M5NjM= -----END CERTIFICATE-----Generated at Mon Aug 11 13:23:58 2025 by rpki-client