$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/rvPcSmt7ytbwrHQ9yrQaxaJSUdY.roa File: rvPcSmt7ytbwrHQ9yrQaxaJSUdY.roa (raw, json) Hash identifier: b8Zscem5g9ol0zJluabMbNY5NZz8WoI0V7djygqBZIE= Subject key identifier: AE:F3:DC:4A:6B:7B:CA:D6:F0:AC:74:3D:CA:B4:1A:C5:A2:52:51:D6 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0391 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rvPcSmt7ytbwrHQ9yrQaxaJSUdY.roa Signing time: Fri 01 Aug 2025 01:51:00 +0000 ROA not before: Fri 01 Aug 2025 01:51:00 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 4721 IP address blocks: 202.78.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:51:00 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=AEF3DC4A6B7BCAD6F0AC743DCAB41AC5A25251D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:fc:41:d4:cb:f1:84:60:05:c0:97:ff:4f: 36:8d:97:4a:ed:33:56:7b:e7:ad:07:78:4c:d5:b0: 23:b7:b5:f4:81:28:a9:52:09:d7:15:fb:f6:fe:5f: e8:50:60:5d:f2:74:c6:e9:ee:7b:2a:df:7f:79:8f: 75:02:07:3b:9c:cd:f1:03:fa:4b:cc:10:63:9a:1e: d3:f9:5d:a8:ca:51:f9:54:e6:f3:71:b2:64:ba:2f: d8:6b:01:2f:de:65:e2:5f:1c:45:9e:d9:15:63:24: 70:5d:ff:e6:eb:a0:d9:0e:6a:90:0f:d8:38:0a:e4: bc:0b:60:69:90:2d:f6:b3:59:a2:46:5c:6f:3d:d1: 03:fa:43:1d:05:de:84:36:ee:90:68:ec:b5:b5:39: 76:3f:7d:60:fb:bc:b6:18:a0:c6:d7:18:d4:f2:0b: 34:80:e0:fa:51:9b:03:2b:55:37:e4:bf:83:33:9c: 8b:ab:17:ce:1e:61:08:2c:a7:a8:c6:7b:ee:43:38: 4b:4e:f7:06:93:fa:d3:06:f2:cd:9c:b8:42:1b:4e: a8:9c:20:d2:22:c2:7f:75:ba:47:8d:7d:59:28:92: b2:52:4e:c1:1f:cd:bf:30:59:4d:4f:96:3d:df:32: 09:27:29:9c:bf:8e:6d:5f:80:85:84:11:35:e2:30: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:DC:4A:6B:7B:CA:D6:F0:AC:74:3D:CA:B4:1A:C5:A2:52:51:D6 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/rvPcSmt7ytbwrHQ9yrQaxaJSUdY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.78.176.0/20 Signature Algorithm: sha256WithRSAEncryption 4f:66:01:53:49:24:00:4c:80:fc:24:55:11:19:7f:df:f8:c8: a1:44:05:33:db:ac:c6:04:c6:e9:b6:c1:fd:1a:f4:b7:48:14: 89:99:4d:71:a8:b3:c5:73:d5:66:89:91:1e:bd:4e:42:d4:6d: 76:79:f5:56:14:c2:0b:55:10:97:66:f1:8c:20:68:47:62:f5: 07:74:21:25:46:80:01:22:cc:ae:b2:60:c4:d4:6b:f5:60:08: c6:17:b8:86:35:10:db:34:15:4c:38:a3:44:25:bd:54:1b:3b: b4:a7:10:4d:60:28:87:b0:c6:54:1d:59:1a:a3:41:29:fd:1b: 2c:a1:96:12:e2:09:c7:4a:5f:f4:0c:5d:b0:a8:d9:13:7d:02: df:d6:f9:d8:72:34:bc:c9:85:3a:0b:fd:9c:87:9f:5e:19:49: 81:3b:4a:24:e6:9c:13:64:ea:80:2b:78:ea:a0:30:da:d1:eb: 71:55:9f:11:8a:cd:66:74:1d:b5:8b:33:a3:db:13:e3:e8:05: 60:bf:a9:35:5f:be:6a:5b:87:3d:8e:6f:58:df:ca:92:e7:b9: 64:b9:5d:10:d1:7c:00:24:80:04:e3:3d:b4:0d:0f:cf:90:44: 64:4e:12:9f:eb:d6:2d:e0:1f:ea:51:d8:b6:b6:77:7d:ff:33: 93:88:83:ce -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTUxMDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEFFRjNEQzRBNkI3QkNB RDZGMEFDNzQzRENBQjQxQUM1QTI1MjUxRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChBfxB1MvxhGAFwJf/TzaNl0rtM1Z7560HeEzVsCO3tfSBKKlS CdcV+/b+X+hQYF3ydMbp7nsq3395j3UCBzuczfED+kvMEGOaHtP5XajKUflU5vNx smS6L9hrAS/eZeJfHEWe2RVjJHBd/+broNkOapAP2DgK5LwLYGmQLfazWaJGXG89 0QP6Qx0F3oQ27pBo7LW1OXY/fWD7vLYYoMbXGNTyCzSA4PpRmwMrVTfkv4MznIur F84eYQgsp6jGe+5DOEtO9waT+tMG8s2cuEIbTqicINIiwn91ukeNfVkokrJSTsEf zb8wWU1Plj3fMgknKZy/jm1fgIWEETXiMFT/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUrvPcSmt7ytbwrHQ9yrQaxaJSUdYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3J2UGNTbXQ3eXRid3JIUTl5clFheGFKU1VkWS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATKTrAwDQYJKoZIhvcNAQELBQADggEBAE9mAVNJJABMgPwkVREZf9/4yKFE BTPbrMYExum2wf0a9LdIFImZTXGos8Vz1WaJkR69TkLUbXZ59VYUwgtVEJdm8Ywg aEdi9Qd0ISVGgAEizK6yYMTUa/VgCMYXuIY1ENs0FUw4o0QlvVQbO7SnEE1gKIew xlQdWRqjQSn9GyyhlhLiCcdKX/QMXbCo2RN9At/W+dhyNLzJhToL/ZyHn14ZSYE7 SiTmnBNk6oAreOqgMNrR63FVnxGKzWZ0HbWLM6PbE+PoBWC/qTVfvmpbhz2Ob1jf ypLnuWS5XRDRfAAkgATjPbQND8+QRGROEp/r1i3gH+pR2La2d33/M5OIg84= -----END CERTIFICATE-----Generated at Mon Aug 11 13:30:15 2025 by rpki-client