$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/s1COke5wZ2chL3tnDpctuilKBwA.roa File: s1COke5wZ2chL3tnDpctuilKBwA.roa (raw, json) Hash identifier: x9GfY6sUKiYAFXIR/H3sN6G+t38gde+8H8UZz0r62VM= Subject key identifier: B3:50:8E:91:EE:70:67:67:21:2F:7B:67:0E:97:2D:BA:29:4A:07:00 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 033E Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s1COke5wZ2chL3tnDpctuilKBwA.roa Signing time: Fri 01 Aug 2025 01:39:59 +0000 ROA not before: Fri 01 Aug 2025 01:39:59 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 122.50.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:39:59 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=B3508E91EE706767212F7B670E972DBA294A0700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:46:a4:d9:f6:69:79:4a:2e:6b:6c:80:2d: 43:50:29:9c:58:b8:6d:de:e3:21:86:b2:f5:03:5f: 6b:c2:73:7b:e1:e7:1b:e3:06:c9:42:e9:4d:5f:53: 14:45:d8:bb:7c:32:32:e0:ca:e6:49:10:d6:ed:f8: 50:1e:df:ab:89:71:37:20:99:bf:8b:4f:b7:9b:53: 4f:21:98:47:52:d6:b0:67:b0:21:60:76:6e:88:5a: 76:41:1e:24:8d:d3:db:3a:0b:5a:3f:1c:c1:00:2a: e2:47:f9:f1:92:97:b2:e6:18:5a:3f:58:73:6a:ae: 49:32:10:35:3c:57:d3:15:e5:6f:9b:ac:2c:aa:bf: e3:6f:32:4c:cf:cf:ea:cf:63:2c:a3:a4:fe:f0:4b: 96:c3:44:9e:3d:38:ca:8f:10:95:61:06:b9:c5:88: b2:48:93:74:4b:06:f9:26:be:77:84:aa:a2:83:81: 77:eb:e9:f2:a3:71:b3:60:16:31:8a:ee:de:03:a0: cc:77:20:97:22:3b:a1:d3:80:fc:13:8d:3d:67:6e: 51:36:51:2b:4f:82:3e:cc:9f:a4:ff:de:a4:6e:23: 76:91:f8:9b:c7:18:86:b9:66:ff:ce:72:57:d1:66: d1:66:6e:b5:95:fc:90:e5:23:8d:d9:07:3b:fb:e1: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:50:8E:91:EE:70:67:67:21:2F:7B:67:0E:97:2D:BA:29:4A:07:00 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/s1COke5wZ2chL3tnDpctuilKBwA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.50.32.0/19 Signature Algorithm: sha256WithRSAEncryption 74:7c:30:9d:5a:c0:ce:9d:8d:64:10:a1:ee:8d:67:7c:90:fe: e7:9f:f6:77:9f:e1:53:1d:ea:21:61:08:05:86:7c:c9:b0:ad: f1:4e:58:a5:6c:92:b2:ea:6c:31:c2:64:14:b3:fd:65:52:ba: c6:71:ce:b8:aa:ce:da:52:4c:7e:a9:2f:05:15:ae:c9:64:c1: cc:19:ac:ce:4d:25:a1:ca:96:6a:62:0d:23:75:b7:95:61:17: 50:d3:f8:b1:b5:2e:0b:a7:3e:5b:ee:ab:c4:de:38:44:9b:ed: 46:67:19:97:0d:52:a8:01:a5:34:e0:f6:ca:1c:37:cf:e4:9a: 50:25:99:95:72:5c:26:92:23:f0:7f:bb:04:dc:ae:a7:77:22: 93:29:20:61:6e:f2:fc:0b:d4:18:4b:db:e0:d2:71:c7:fb:31: e8:ec:30:17:c2:79:88:07:5e:86:b5:95:97:ca:f0:b6:36:6b: a8:96:68:ed:4b:fa:b7:af:77:0c:ca:1a:b5:6b:64:22:ec:16: 8e:28:85:18:39:97:5e:aa:e3:2a:63:21:78:6c:98:39:e7:d1: 9c:82:da:0e:82:2b:71:13:46:27:bc:48:b7:70:1a:7f:db:46: b7:af:9f:9f:2b:a2:c1:2f:07:9e:a1:0a:0e:4c:73:2f:02:6b: 33:27:46:c6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM5NTlaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEIzNTA4RTkxRUU3MDY3 NjcyMTJGN0I2NzBFOTcyREJBMjk0QTA3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBpkak2fZpeUoua2yALUNQKZxYuG3e4yGGsvUDX2vCc3vh5xvj BslC6U1fUxRF2Lt8MjLgyuZJENbt+FAe36uJcTcgmb+LT7ebU08hmEdS1rBnsCFg dm6IWnZBHiSN09s6C1o/HMEAKuJH+fGSl7LmGFo/WHNqrkkyEDU8V9MV5W+brCyq v+NvMkzPz+rPYyyjpP7wS5bDRJ49OMqPEJVhBrnFiLJIk3RLBvkmvneEqqKDgXfr 6fKjcbNgFjGK7t4DoMx3IJciO6HTgPwTjT1nblE2UStPgj7Mn6T/3qRuI3aR+JvH GIa5Zv/OclfRZtFmbrWV/JDlI43ZBzv74UztAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUs1COke5wZ2chL3tnDpctuilKBwAwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3MxQ09rZTV3WjJjaEwzdG5EcGN0dWlsS0J3QS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV6MiAwDQYJKoZIhvcNAQELBQADggEBAHR8MJ1awM6djWQQoe6NZ3yQ/uef 9nef4VMd6iFhCAWGfMmwrfFOWKVskrLqbDHCZBSz/WVSusZxzriqztpSTH6pLwUV rslkwcwZrM5NJaHKlmpiDSN1t5VhF1DT+LG1LgunPlvuq8TeOESb7UZnGZcNUqgB pTTg9socN8/kmlAlmZVyXCaSI/B/uwTcrqd3IpMpIGFu8vwL1BhL2+DSccf7Mejs MBfCeYgHXoa1lZfK8LY2a6iWaO1L+revdwzKGrVrZCLsFo4ohRg5l16q4ypjIXhs mDnn0ZyC2g6CK3ETRie8SLdwGn/bRrevn58rosEvB56hCg5Mcy8CazMnRsY= -----END CERTIFICATE-----Generated at Mon Aug 11 13:28:29 2025 by rpki-client