$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ilx21LnTm7yboiI7bzykT3-RLIc.roa File: ilx21LnTm7yboiI7bzykT3-RLIc.roa (raw, json) Hash identifier: Pv1aKvBGBN11Cwx34f4m8BGSlFnMgOpHaIdRtenWdC4= Subject key identifier: 8A:5C:76:D4:B9:D3:9B:BC:9B:A2:22:3B:6F:3C:A4:4F:7F:91:2C:87 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 038E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ilx21LnTm7yboiI7bzykT3-RLIc.roa Signing time: Fri 01 Aug 2025 01:50:58 +0000 ROA not before: Fri 01 Aug 2025 01:50:58 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 202.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:50:58 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=8A5C76D4B9D39BBC9BA2223B6F3CA44F7F912C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:58:c4:ae:39:03:04:18:9a:9f:df:69:bb: ed:06:fa:d6:77:e3:5d:47:d5:6c:c5:c4:93:48:ec: 2c:e0:9b:d0:6b:4b:6b:b1:e2:98:1c:d9:36:57:a4: 11:5c:22:5c:de:58:10:0d:79:4a:bc:01:a6:72:d1: c1:b3:a2:72:89:48:24:38:10:3a:49:4a:1c:04:89: 55:38:1d:fb:7e:08:66:7a:09:d4:27:51:33:70:8d: 4d:ea:d5:4b:73:e9:46:b5:62:cb:1c:3e:18:97:df: f7:71:e1:52:57:33:b2:bb:f1:80:2d:c4:94:0e:1e: 21:6b:ea:9d:92:bb:7b:68:b3:e3:1d:94:9d:f9:c4: 9f:77:e5:97:02:37:db:04:cf:2f:22:21:67:2f:c8: 36:5e:5b:1a:f2:0f:d7:5c:b8:67:6d:91:25:f2:35: b8:0c:0c:ea:cf:c0:8b:d1:1b:c3:0b:61:dc:3b:b9: c7:3d:23:ab:d2:a5:a1:ec:d5:a6:65:03:23:31:24: b0:88:6d:cf:ba:20:fa:e4:a2:71:e8:cc:b3:62:9a: 4a:e5:ea:98:53:cd:3a:28:28:f6:aa:05:be:ce:68: 27:15:c7:78:0e:11:dc:27:8f:95:ee:39:96:16:e3: 09:10:3c:70:8c:df:b5:b8:fc:59:16:c0:fa:55:23: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:76:D4:B9:D3:9B:BC:9B:A2:22:3B:6F:3C:A4:4F:7F:91:2C:87 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ilx21LnTm7yboiI7bzykT3-RLIc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.16.0/20 Signature Algorithm: sha256WithRSAEncryption 26:f2:ac:41:7e:85:bc:ac:da:39:45:0c:0e:a8:57:9a:f1:95: 35:2d:dc:b0:61:2d:a1:f1:f1:26:24:85:e5:e0:f9:47:74:e4: ac:86:dd:58:c9:fc:ca:86:76:1f:b0:55:58:f4:c3:81:24:21: 39:8c:71:10:84:f0:c3:8f:bb:30:75:99:40:64:22:1f:8a:f4: 9f:da:a4:9a:37:07:7c:62:70:d6:c4:99:7d:84:8c:a8:97:d5: c8:8a:d5:2e:3b:44:94:63:16:b8:57:8a:9c:b6:d0:58:d6:b6: b2:d8:f4:63:9b:0a:f2:d4:66:6f:83:bd:48:e8:95:af:eb:43: 74:a2:e7:5f:0f:c8:5a:51:79:bf:99:ec:78:a0:22:ac:d0:cb: f8:db:e5:8c:4b:d9:a5:f2:ad:8c:21:bc:fe:17:57:f1:c8:7d: e0:56:dd:65:47:de:cf:83:b1:11:02:37:50:88:68:81:d8:7d: f9:ba:a5:03:2a:e7:56:de:33:c4:23:40:7b:9a:cb:f7:f9:f9: 45:c8:ba:97:5a:e5:e2:71:45:2b:f5:c7:ea:dc:7d:5f:8c:58: 89:df:6d:39:5a:26:fa:fd:48:a3:f4:4b:c0:32:fe:e4:09:0f: 95:86:0b:87:08:b9:07:74:4f:63:22:44:ad:f2:dc:cc:94:6d: 32:f5:fc:ec -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTUwNThaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDhBNUM3NkQ0QjlEMzlC QkM5QkEyMjIzQjZGM0NBNDRGN0Y5MTJDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6lljErjkDBBian99pu+0G+tZ3411H1WzFxJNI7Czgm9BrS2ux 4pgc2TZXpBFcIlzeWBANeUq8AaZy0cGzonKJSCQ4EDpJShwEiVU4Hft+CGZ6CdQn UTNwjU3q1Utz6Ua1YsscPhiX3/dx4VJXM7K78YAtxJQOHiFr6p2Su3tos+MdlJ35 xJ935ZcCN9sEzy8iIWcvyDZeWxryD9dcuGdtkSXyNbgMDOrPwIvRG8MLYdw7ucc9 I6vSpaHs1aZlAyMxJLCIbc+6IPrkonHozLNimkrl6phTzTooKPaqBb7OaCcVx3gO Edwnj5XuOZYW4wkQPHCM37W4/FkWwPpVI+05AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUilx21LnTm7yboiI7bzykT3+RLIcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2lseDIxTG5UbTd5Ym9pSTdienlrVDMtUkxJYy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKKxAwDQYJKoZIhvcNAQELBQADggEBACbyrEF+hbys2jlFDA6oV5rxlTUt 3LBhLaHx8SYkheXg+Ud05KyG3VjJ/MqGdh+wVVj0w4EkITmMcRCE8MOPuzB1mUBk Ih+K9J/apJo3B3xicNbEmX2EjKiX1ciK1S47RJRjFrhXipy20FjWtrLY9GObCvLU Zm+DvUjola/rQ3Si518PyFpReb+Z7HigIqzQy/jb5YxL2aXyrYwhvP4XV/HIfeBW 3WVH3s+DsRECN1CIaIHYffm6pQMq51beM8QjQHuay/f5+UXIupda5eJxRSv1x+rc fV+MWInfbTlaJvr9SKP0S8Ay/uQJD5WGC4cIuQd0T2MiRK3y3MyUbTL1/Ow= -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:12 2025 by rpki-client