$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/mhU2DO_e-NnyO_yTDafOw2_HxEU.roa File: mhU2DO_e-NnyO_yTDafOw2_HxEU.roa (raw, json) Hash identifier: Vl9WTsK1EfY0LE0EnkVY3GhMfrmFvIn5nrIhwMW0Lpc= Subject key identifier: 9A:15:36:0C:EF:DE:F8:D9:F2:3B:FC:93:0D:A7:CE:C3:6F:C7:C4:45 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0318 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mhU2DO_e-NnyO_yTDafOw2_HxEU.roa Signing time: Tue 01 Jul 2025 01:39:57 +0000 ROA not before: Tue 01 Jul 2025 01:39:57 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9824 IP address blocks: 219.100.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 1 01:39:57 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=9A15360CEFDEF8D9F23BFC930DA7CEC36FC7C445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:32:2c:9c:f0:6a:aa:2f:55:87:1d:f2:3b: 9b:1c:1f:92:ec:e3:64:30:f5:1f:8f:d7:48:a3:1a: 06:e2:a5:10:7f:e6:45:5e:27:b4:79:a1:3a:c1:28: 66:e2:bd:68:cf:c1:5c:9e:a6:e3:6e:15:9c:43:68: 3b:9e:7d:82:f6:b8:71:c7:13:87:6c:71:1c:30:e5: 83:39:d8:7b:46:83:0c:c9:65:a8:cc:fa:a1:a7:0e: 95:42:2a:58:0b:89:ad:d4:28:4e:f3:19:55:48:3d: 2d:a7:75:b7:74:3e:c1:12:ef:97:ff:43:40:fa:1c: 38:47:ed:2f:c1:a7:8c:d8:7e:cd:e3:ea:3e:d5:bc: e2:15:7a:ca:81:22:a7:7c:e9:2c:d7:bb:46:dd:4b: 1e:53:fe:ac:00:e7:90:c9:ec:94:5b:53:47:03:4d: 7a:33:ee:24:5c:48:65:6b:24:5d:eb:84:82:dd:60: 25:cf:a2:4e:b8:e9:09:3c:28:29:4a:68:cd:b5:1e: 2e:e8:31:03:4b:15:31:0e:25:c3:4e:b0:13:2b:f9: ae:a8:44:32:0d:78:f6:ea:e9:b9:1e:be:d7:c8:21: 8c:82:50:1f:74:40:e1:fb:7b:39:26:3c:2f:2a:86: 0f:fd:3b:53:16:7b:0d:39:6a:05:0c:a9:86:87:61: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:36:0C:EF:DE:F8:D9:F2:3B:FC:93:0D:A7:CE:C3:6F:C7:C4:45 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/mhU2DO_e-NnyO_yTDafOw2_HxEU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.24.0/22 Signature Algorithm: sha256WithRSAEncryption 59:68:6f:33:0d:a4:ea:53:86:34:87:d8:5c:30:30:5a:aa:9c: e0:05:9f:99:b3:04:3c:b6:82:5a:c8:97:d6:56:82:4a:02:9c: 44:fd:cf:21:1a:ea:d5:86:a0:6f:61:24:36:1c:cf:93:04:04: 34:7f:5c:0e:90:b4:22:f7:72:04:d7:b1:6e:43:7b:66:4a:00: 20:6c:e6:8c:00:23:b2:30:82:ea:aa:9f:30:a8:61:d0:72:ff: 48:45:90:07:45:fe:13:46:41:6b:8a:8b:6f:8f:79:29:e9:b1: 91:3b:72:0a:ba:ac:c5:e5:62:08:e2:f1:ba:76:41:5d:42:f7: 82:bf:0f:b7:f1:92:ef:10:e7:7b:cd:0d:df:79:68:07:9b:f3: 10:b6:db:c7:76:76:88:eb:6f:e9:c4:9c:c0:ae:a6:b7:f1:b6: 8c:e7:0d:0b:d6:1b:16:f5:00:df:45:04:7f:4a:5a:1e:5f:0d: 94:43:9d:c9:f9:ea:d5:1f:83:af:1c:a2:51:67:cf:e4:fd:4a: a8:53:bd:ac:7b:c9:d5:4b:b8:01:43:73:c5:4c:35:61:0e:a4: ab:47:75:c6:5e:40:f8:52:8c:ea:1b:b4:75:80:41:0a:a7:48: e6:71:e5:6b:10:87:2d:1d:51:56:5e:08:2b:45:d6:a5:76:20: 7d:b6:bb:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw MTM5NTdaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBMTUzNjBDRUZERUY4 RDlGMjNCRkM5MzBEQTdDRUMzNkZDN0M0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHujIsnPBqqi9Vhx3yO5scH5Ls42Qw9R+P10ijGgbipRB/5kVe J7R5oTrBKGbivWjPwVyepuNuFZxDaDuefYL2uHHHE4dscRww5YM52HtGgwzJZajM +qGnDpVCKlgLia3UKE7zGVVIPS2ndbd0PsES75f/Q0D6HDhH7S/Bp4zYfs3j6j7V vOIVesqBIqd86SzXu0bdSx5T/qwA55DJ7JRbU0cDTXoz7iRcSGVrJF3rhILdYCXP ok646Qk8KClKaM21Hi7oMQNLFTEOJcNOsBMr+a6oRDINePbq6bkevtfIIYyCUB90 QOH7ezkmPC8qhg/9O1MWew05agUMqYaHYRetAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmhU2DO/e+NnyO/yTDafOw2/HxEUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL21oVTJET19lLU5ueU9feVREYWZPdzJfSHhFVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbZBgwDQYJKoZIhvcNAQELBQADggEBAFlobzMNpOpThjSH2FwwMFqqnOAF n5mzBDy2glrIl9ZWgkoCnET9zyEa6tWGoG9hJDYcz5MEBDR/XA6QtCL3cgTXsW5D e2ZKACBs5owAI7IwguqqnzCoYdBy/0hFkAdF/hNGQWuKi2+PeSnpsZE7cgq6rMXl Ygji8bp2QV1C94K/D7fxku8Q53vNDd95aAeb8xC228d2dojrb+nEnMCuprfxtozn DQvWGxb1AN9FBH9KWh5fDZRDncn56tUfg68colFnz+T9SqhTvax7ydVLuAFDc8VM NWEOpKtHdcZeQPhSjOobtHWAQQqnSOZx5WsQhy0dUVZeCCtF1qV2IH22ux4= -----END CERTIFICATE-----Generated at Wed Nov 5 23:07:59 2025 by rpki-client