$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/obLMBJxerZ2bf_kO8U7i8ylMFD0.roa File: obLMBJxerZ2bf_kO8U7i8ylMFD0.roa (raw, json) Hash identifier: Xml5ZQcbcbA2vHks7yN43MAEX4EAIBXhH4HODFegdFw= Subject key identifier: A1:B2:CC:04:9C:5E:AD:9D:9B:7F:F9:0E:F1:4E:E2:F3:29:4C:14:3D Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 030A Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/obLMBJxerZ2bf_kO8U7i8ylMFD0.roa Signing time: Tue 01 Jul 2025 01:39:49 +0000 ROA not before: Tue 01 Jul 2025 01:39:49 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9824 IP address blocks: 203.114.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 1 01:39:49 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A1B2CC049C5EAD9D9B7FF90EF14EE2F3294C143D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:da:b4:07:92:dd:2a:a8:6e:8b:a5:26:5a: dc:fe:a3:08:6f:05:de:c6:7f:50:66:b6:5c:5f:df: ef:30:e9:74:65:d1:83:e3:78:ec:8d:4f:71:35:36: b2:37:7e:5f:2e:9f:7c:89:aa:bf:15:4a:3c:d4:33: e2:5e:ef:7d:0b:67:19:ae:1f:11:70:84:01:3f:e6: 0e:ba:ce:69:87:ce:da:77:06:40:89:01:cf:05:60: e2:f1:d0:82:8e:b7:e1:96:17:79:c5:85:f2:52:4e: 90:a3:87:4e:cf:98:5c:8c:bb:26:42:d8:e4:2d:d9: aa:e4:02:b4:f5:b0:49:5e:b5:05:f6:82:b8:7d:a0: bb:0a:7e:a4:f3:36:65:4a:8e:c6:47:a1:d2:13:82: fb:f3:d2:db:a5:9c:1c:25:af:06:e2:91:1b:e9:90: c1:11:9b:cb:27:b5:7a:16:de:50:52:31:30:8c:87: 0d:61:e4:3f:e8:65:d8:a6:4c:b8:27:83:5b:d0:2b: 0e:dc:ef:83:e9:92:31:b2:59:12:7e:a1:44:e2:9e: b7:05:bd:06:0a:3d:f3:5f:99:16:f8:c3:bf:8e:92: cc:19:b7:c3:38:26:96:2b:f8:a4:ad:d7:4d:0f:71: b8:8e:a1:c5:97:6a:79:37:14:60:55:6b:5a:21:b8: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:CC:04:9C:5E:AD:9D:9B:7F:F9:0E:F1:4E:E2:F3:29:4C:14:3D X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/obLMBJxerZ2bf_kO8U7i8ylMFD0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.114.248.0/22 Signature Algorithm: sha256WithRSAEncryption 01:3a:e4:9c:2c:c7:e3:02:f9:b0:81:7a:16:cc:28:c7:81:61: 72:68:1e:c4:1d:7c:29:21:2d:e8:b1:ce:de:fc:47:29:fc:26: b5:bf:6e:3d:46:2b:2c:2a:4b:bc:e4:37:29:4e:aa:0f:4d:f8: 51:9f:78:88:4d:b0:97:0a:32:4a:c6:3f:34:a5:80:03:f8:c8: d1:f2:be:a4:98:ed:05:b3:c3:bb:c3:36:fc:fa:62:d3:59:8b: 36:ec:6d:a7:29:8f:cf:99:36:0c:77:40:db:83:fc:06:cb:fd: b9:ca:68:ed:06:c6:43:99:d2:5b:8d:0a:27:66:d5:74:64:b4: 74:fb:2a:98:7a:67:ec:21:c8:1a:b9:e0:89:eb:12:f7:48:d8: 66:5d:d0:08:48:35:fe:37:de:de:17:6f:95:a6:f1:9f:6a:15: 3d:4b:19:ac:c4:ab:b3:3c:14:0c:5a:39:77:9c:c6:d9:c2:13: de:2f:10:86:36:97:01:9e:42:74:50:3e:38:e4:21:02:db:d5: ce:ab:bc:6d:e7:85:3f:31:52:89:b2:b9:21:19:94:b3:80:db: 8c:b9:2e:a1:a4:f9:8e:b5:65:24:f6:61:a6:9a:50:ef:d7:12: 8d:4a:c3:94:98:54:78:b7:46:22:33:a5:66:7b:e7:f1:d7:ea: 4a:e1:a0:cf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAwowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw MTM5NDlaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEExQjJDQzA0OUM1RUFE OUQ5QjdGRjkwRUYxNEVFMkYzMjk0QzE0M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUY9q0B5LdKqhui6UmWtz+owhvBd7Gf1Bmtlxf3+8w6XRl0YPj eOyNT3E1NrI3fl8un3yJqr8VSjzUM+Je730LZxmuHxFwhAE/5g66zmmHztp3BkCJ Ac8FYOLx0IKOt+GWF3nFhfJSTpCjh07PmFyMuyZC2OQt2arkArT1sEletQX2grh9 oLsKfqTzNmVKjsZHodITgvvz0tulnBwlrwbikRvpkMERm8sntXoW3lBSMTCMhw1h 5D/oZdimTLgng1vQKw7c74PpkjGyWRJ+oUTinrcFvQYKPfNfmRb4w7+OkswZt8M4 JpYr+KSt100PcbiOocWXank3FGBVa1ohuN7LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUobLMBJxerZ2bf/kO8U7i8ylMFD0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL29iTE1CSnhlcloyYmZfa084VTdpOHlsTUZEMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALLcvgwDQYJKoZIhvcNAQELBQADggEBAAE65Jwsx+MC+bCBehbMKMeBYXJo HsQdfCkhLeixzt78Ryn8JrW/bj1GKywqS7zkNylOqg9N+FGfeIhNsJcKMkrGPzSl gAP4yNHyvqSY7QWzw7vDNvz6YtNZizbsbacpj8+ZNgx3QNuD/AbL/bnKaO0GxkOZ 0luNCidm1XRktHT7Kph6Z+whyBq54InrEvdI2GZd0AhINf433t4Xb5Wm8Z9qFT1L GazEq7M8FAxaOXecxtnCE94vEIY2lwGeQnRQPjjkIQLb1c6rvG3nhT8xUomyuSEZ lLOA24y5LqGk+Y61ZST2YaaaUO/XEo1Kw5SYVHi3RiIzpWZ75/HX6krhoM8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:08:10 2025 by rpki-client