$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vUaak38LgLea7NrZnSrNy0G-DOw.roa File: vUaak38LgLea7NrZnSrNy0G-DOw.roa (raw, json) Hash identifier: 2pafnePv8NVDi0GaKz9UDfa0RZR+6zdmdNwQkLayF/c= Subject key identifier: BD:46:9A:93:7F:0B:80:B7:9A:EC:DA:D9:9D:2A:CD:CB:41:BE:0C:EC Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 032B Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vUaak38LgLea7NrZnSrNy0G-DOw.roa Signing time: Fri 01 Aug 2025 01:34:53 +0000 ROA not before: Fri 01 Aug 2025 01:34:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 61.215.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:34:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=BD469A937F0B80B79AECDAD99D2ACDCB41BE0CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:03:97:7d:57:f3:85:c0:85:91:2e:5d:61: 88:2f:51:06:13:3d:17:c5:53:df:49:1b:9e:1a:36: e0:80:e9:60:e8:55:5a:f9:ea:2e:6e:1c:73:14:12: 01:20:c1:79:e9:5f:bd:7f:1a:fc:2f:21:02:70:cf: e7:51:94:22:96:5e:be:0b:63:9f:72:58:cb:4a:9a: f0:fb:7a:3f:8b:75:28:9d:2a:41:5a:01:32:39:6d: 8b:41:56:69:ef:48:9f:10:82:39:32:db:0c:ed:6c: 7c:eb:aa:f4:35:3e:9f:5a:9b:8c:33:22:38:45:0b: c0:9b:e4:2b:71:8a:bb:04:e3:ff:76:b1:f8:fd:8d: 30:38:2b:e5:64:12:08:78:74:06:e4:2f:88:bf:82: 9a:cf:e9:7f:ee:a3:84:50:6f:e5:ab:57:a0:24:ed: cd:5c:66:ad:a3:e4:3f:5e:a3:b1:40:1f:b5:f8:86: 8c:8c:12:e8:3a:a2:28:62:d0:4e:3d:b0:7e:00:e4: 3f:53:b9:3f:2d:8b:34:86:9e:12:01:27:c1:b7:46: 58:4c:41:11:7b:cf:a5:57:b1:f1:aa:44:69:09:e1: e2:81:23:32:06:dc:e8:26:e3:4a:b4:fa:bc:69:0e: ab:28:2d:db:5a:a7:76:21:dc:be:4c:a2:2d:28:9b: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:46:9A:93:7F:0B:80:B7:9A:EC:DA:D9:9D:2A:CD:CB:41:BE:0C:EC X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vUaak38LgLea7NrZnSrNy0G-DOw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.215.128.0/19 Signature Algorithm: sha256WithRSAEncryption b2:41:84:60:30:f6:86:d7:62:86:8c:79:f4:23:0c:08:32:8e: 42:52:53:a7:93:5f:05:ed:32:8c:be:bb:30:48:d3:8d:77:7e: 18:66:20:07:6a:c0:5f:0e:36:e1:68:a2:35:36:3f:b8:5e:5e: 52:c6:b8:9b:72:0c:7a:f8:56:38:79:7d:6c:71:38:c6:da:4d: 88:47:0d:95:85:e6:59:b5:db:11:cb:ef:7b:70:44:c6:ec:84: a6:2b:e6:8f:1d:13:54:da:6c:3b:57:eb:38:70:ed:f5:0b:6a: 85:6f:bc:b7:e1:2f:78:1d:a5:ad:42:9e:19:d9:de:f9:39:0f: 2f:4f:ce:1c:a5:b3:b8:3f:3e:ac:b8:5f:d1:87:5e:12:ed:1a: 9c:26:b0:05:6e:5b:2b:70:12:db:01:5c:c4:2f:f8:41:f1:73: 5c:26:74:bc:c8:5d:bc:f0:69:a1:1d:87:5e:d7:30:af:92:c8: 64:23:cc:10:11:f9:e3:87:2c:cb:1a:0b:df:88:ab:94:5e:92: cd:b2:24:b2:41:39:91:34:4a:ae:16:0b:a8:62:74:0b:23:46: 47:68:9a:c8:93:b1:22:4b:e7:43:c9:81:54:7f:76:9b:9b:b0: b0:04:86:3a:1a:d0:8f:32:6c:90:4e:bd:d1:7a:9e:de:5d:1c: 3b:07:46:d9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTM0NTNaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKEJENDY5QTkzN0YwQjgw Qjc5QUVDREFEOTlEMkFDRENCNDFCRTBDRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjRgOXfVfzhcCFkS5dYYgvUQYTPRfFU99JG54aNuCA6WDoVVr5 6i5uHHMUEgEgwXnpX71/GvwvIQJwz+dRlCKWXr4LY59yWMtKmvD7ej+LdSidKkFa ATI5bYtBVmnvSJ8Qgjky2wztbHzrqvQ1Pp9am4wzIjhFC8Cb5CtxirsE4/92sfj9 jTA4K+VkEgh4dAbkL4i/gprP6X/uo4RQb+WrV6Ak7c1cZq2j5D9eo7FAH7X4hoyM Eug6oihi0E49sH4A5D9TuT8tizSGnhIBJ8G3RlhMQRF7z6VXsfGqRGkJ4eKBIzIG 3Ogm40q0+rxpDqsoLdtap3Yh3L5Moi0om6bvAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUvUaak38LgLea7NrZnSrNy0G+DOwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3ZVYWFrMzhMZ0xlYTdOclpuU3JOeTBHLURPdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU914AwDQYJKoZIhvcNAQELBQADggEBALJBhGAw9obXYoaMefQjDAgyjkJS U6eTXwXtMoy+uzBI0413fhhmIAdqwF8ONuFoojU2P7heXlLGuJtyDHr4Vjh5fWxx OMbaTYhHDZWF5lm12xHL73twRMbshKYr5o8dE1TabDtX6zhw7fULaoVvvLfhL3gd pa1CnhnZ3vk5Dy9Pzhyls7g/Pqy4X9GHXhLtGpwmsAVuWytwEtsBXMQv+EHxc1wm dLzIXbzwaaEdh17XMK+SyGQjzBAR+eOHLMsaC9+Iq5Reks2yJLJBOZE0Sq4WC6hi dAsjRkdomsiTsSJL50PJgVR/dpubsLAEhjoa0I8ybJBOvdF6nt5dHDsHRtk= -----END CERTIFICATE-----Generated at Mon Aug 11 13:30:33 2025 by rpki-client