$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/utpM0p8akeE1Mc0z4ZgERQwhcbo.roa File: utpM0p8akeE1Mc0z4ZgERQwhcbo.roa (raw, json) Hash identifier: 2wat+Sxu74xdw/H2095Mr5Wr2PerBXYXsj4C+cYhovQ= Subject key identifier: BA:DA:4C:D2:9F:1A:91:E1:35:31:CD:33:E1:98:04:45:0C:21:71:BA Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0351 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/utpM0p8akeE1Mc0z4ZgERQwhcbo.roa Signing time: Fri 01 Aug 2025 01:43:40 +0000 ROA not before: Fri 01 Aug 2025 01:43:40 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 23788 IP address blocks: 119.82.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:43:40 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=BADA4CD29F1A91E13531CD33E19804450C2171BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:e5:a4:ad:81:83:a4:29:66:fe:a8:c8:df: 49:cc:56:32:62:7c:7e:ed:38:9f:b5:31:2e:fb:c2: 38:9d:de:64:c0:15:f5:6d:7c:63:e4:a1:2f:58:e3: 41:b1:9e:fb:94:06:ed:2d:16:83:f1:ef:52:2a:d6: 49:ca:d3:3f:59:4b:f3:ed:88:5a:02:c2:3a:5b:61: d8:18:d9:2f:9f:e4:8e:54:f5:40:41:91:f7:ea:4d: c8:22:e7:13:78:d3:9e:64:56:8a:f9:69:71:19:a3: 84:00:1d:1e:b4:44:26:33:f4:ba:5e:1a:13:19:e5: 42:db:f6:d0:69:f4:e6:0a:d9:d6:2a:7f:09:74:4d: db:55:34:d5:63:f5:a5:b6:8c:51:87:19:2e:60:ff: 1e:7f:3a:a9:e0:3a:5e:59:02:ad:27:dc:91:2e:b6: 6d:40:31:f1:8e:bf:80:01:e5:74:03:e6:71:d7:57: 07:65:a2:d6:72:fa:bf:56:63:42:e8:77:99:7e:a4: a1:ae:cb:12:cc:65:02:23:66:2c:a7:3d:f2:9d:ed: b5:6f:b2:e1:1c:9d:bc:f2:3b:81:a0:e5:e7:cf:a3: 63:a6:fc:ae:a4:dd:9f:2b:a1:83:b5:c3:46:fa:94: 9c:ee:e3:81:1b:f3:06:34:57:a3:1d:0c:ff:17:4c: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:4C:D2:9F:1A:91:E1:35:31:CD:33:E1:98:04:45:0C:21:71:BA X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/utpM0p8akeE1Mc0z4ZgERQwhcbo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.82.192.0/20 Signature Algorithm: sha256WithRSAEncryption ee:7a:0b:53:c5:51:b0:85:8b:53:e5:3d:02:6f:bf:a9:19:f0: c6:27:b2:0f:1a:49:c0:9c:39:b6:3b:d8:c8:34:a0:e0:6d:c4: da:a4:38:96:50:03:6a:22:55:84:44:64:11:ee:17:96:c5:41: 72:74:e3:62:6d:35:0e:bf:8d:77:2e:32:6f:05:78:ea:c5:b9: 0b:d5:31:08:bc:2c:b0:8f:19:d3:b5:c9:38:7c:c0:78:7a:37: 18:66:ea:2d:4c:b0:a2:b6:a6:05:10:c4:46:12:fc:a2:ce:72: 35:1d:ba:d4:b3:9e:c0:fd:8a:5c:60:42:c1:7f:73:0c:c2:19: 94:a5:b2:9a:82:af:39:b2:2c:6f:81:d1:ae:33:cf:57:03:c8: 74:c2:5e:8c:52:8f:2d:42:d3:71:4c:27:69:38:7e:df:4f:82: 5a:0f:9e:81:fc:11:db:62:21:cf:bc:cd:32:23:57:ca:9c:3e: bd:9d:fa:44:14:8c:e2:75:c9:0c:a7:2d:61:68:25:d3:88:c1: f7:87:8c:ac:00:13:00:cf:d9:6e:a3:fd:5a:6f:03:b4:46:de: bb:97:0a:f4:00:28:a3:43:e9:59:ff:20:7f:bb:88:be:58:04: 02:29:ba:dd:de:9c:a7:96:21:e6:74:93:b3:f4:64:44:17:0d: b9:ab:06:02 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTQzNDBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEJBREE0Q0QyOUYxQTkx RTEzNTMxQ0QzM0UxOTgwNDQ1MEMyMTcxQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTIuWkrYGDpClm/qjI30nMVjJifH7tOJ+1MS77wjid3mTAFfVt fGPkoS9Y40GxnvuUBu0tFoPx71Iq1knK0z9ZS/PtiFoCwjpbYdgY2S+f5I5U9UBB kffqTcgi5xN4055kVor5aXEZo4QAHR60RCYz9LpeGhMZ5ULb9tBp9OYK2dYqfwl0 TdtVNNVj9aW2jFGHGS5g/x5/OqngOl5ZAq0n3JEutm1AMfGOv4AB5XQD5nHXVwdl otZy+r9WY0Lod5l+pKGuyxLMZQIjZiynPfKd7bVvsuEcnbzyO4Gg5efPo2Om/K6k 3Z8roYO1w0b6lJzu44Eb8wY0V6MdDP8XTIFtAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUutpM0p8akeE1Mc0z4ZgERQwhcbowHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3V0cE0wcDhha2VFMU1jMHo0WmdFUlF3aGNiby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAR3UsAwDQYJKoZIhvcNAQELBQADggEBAO56C1PFUbCFi1PlPQJvv6kZ8MYn sg8aScCcObY72Mg0oOBtxNqkOJZQA2oiVYREZBHuF5bFQXJ042JtNQ6/jXcuMm8F eOrFuQvVMQi8LLCPGdO1yTh8wHh6Nxhm6i1MsKK2pgUQxEYS/KLOcjUdutSznsD9 ilxgQsF/cwzCGZSlspqCrzmyLG+B0a4zz1cDyHTCXoxSjy1C03FMJ2k4ft9PgloP noH8EdtiIc+8zTIjV8qcPr2d+kQUjOJ1yQynLWFoJdOIwfeHjKwAEwDP2W6j/Vpv A7RG3ruXCvQAKKND6Vn/IH+7iL5YBAIput3enKeWIeZ0k7P0ZEQXDbmrBgI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:23:57 2025 by rpki-client