$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/z7Nd4g5BeioQ0-m8S8dlpQeJ0zU.roa File: z7Nd4g5BeioQ0-m8S8dlpQeJ0zU.roa (raw, json) Hash identifier: 81q2WF09S0PNfNJVWIMDQO++BQ5xkGcsBt0vgtR+Iv4= Subject key identifier: CF:B3:5D:E2:0E:41:7A:2A:10:D3:E9:BC:4B:C7:65:A5:07:89:D3:35 Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0382 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z7Nd4g5BeioQ0-m8S8dlpQeJ0zU.roa Signing time: Fri 01 Aug 2025 01:50:51 +0000 ROA not before: Fri 01 Aug 2025 01:50:51 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9824 IP address blocks: 123.98.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 01:50:51 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=CFB35DE20E417A2A10D3E9BC4BC765A50789D335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:a5:81:94:0e:41:00:2b:3d:3f:c7:9d:c9: 0d:5b:5b:01:10:18:34:e8:3b:8f:3c:69:72:08:da: 52:e9:66:84:ea:98:cf:50:6a:38:33:a0:92:8a:f2: fc:f8:45:66:a8:0d:6b:56:4c:1f:53:ae:60:65:59: 6e:62:3c:25:ab:02:d3:57:6c:1d:26:a1:81:0f:ce: e7:af:64:70:9c:e6:a6:be:07:a2:7c:48:b4:fc:11: 08:89:fd:eb:ea:f6:98:62:56:67:ac:12:c4:fb:17: 97:be:15:63:ac:b5:28:5f:1d:d1:79:13:1c:88:e1: 33:15:31:2f:67:89:2c:be:55:fa:27:cc:48:3b:dd: ae:dd:87:af:cd:19:5f:51:8c:48:35:2a:8e:59:4d: 7b:3c:cc:90:d2:f3:7c:d5:ac:d0:aa:cf:e3:34:a6: ca:20:a0:6a:3f:8c:68:f2:ba:87:f4:b3:8a:02:17: 41:32:3b:c1:42:03:13:bf:60:3c:f7:f5:8d:6e:3d: 37:d9:f5:a2:aa:c1:6d:f2:97:63:91:9d:fd:f0:da: 2f:e6:b3:bc:4b:57:5e:dd:65:2a:a1:6a:d1:4d:3a: 4b:ae:72:df:5b:c0:33:c5:c0:e9:0e:c6:a9:70:0d: 68:fe:eb:d1:f9:a7:49:80:4b:8a:18:0b:70:fc:c5: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B3:5D:E2:0E:41:7A:2A:10:D3:E9:BC:4B:C7:65:A5:07:89:D3:35 X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/z7Nd4g5BeioQ0-m8S8dlpQeJ0zU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.98.224.0/19 Signature Algorithm: sha256WithRSAEncryption de:eb:3c:2d:95:60:7c:7c:15:3c:40:8e:12:2c:5f:bf:cf:5e: 25:e2:ec:ca:91:cf:03:bf:89:8e:64:6d:7a:aa:24:1c:ea:ee: 9f:a9:8a:c9:94:ea:47:cc:c2:bc:5e:b4:d0:ef:97:4b:1d:92: be:20:c8:df:68:86:ba:c2:da:07:4c:68:44:03:1a:8e:f9:48: bc:fb:15:eb:83:e3:56:d2:25:9d:b6:4f:4f:e1:47:1c:5d:fb: 37:fd:23:83:b0:77:cc:2b:6e:d9:e6:8f:e3:e5:d5:74:95:a8: ff:32:9e:4f:39:90:3c:df:b9:12:89:26:70:ed:ec:42:2c:63: 72:72:05:02:e7:35:02:5c:dd:57:5e:bb:ac:0c:f2:67:35:a9: 50:a7:c9:a1:a8:5d:94:fa:33:18:f0:fa:46:27:85:d9:4b:24: 02:6b:a8:bf:c9:cb:fe:89:a9:52:34:22:63:71:57:88:01:8c: 24:9a:70:15:bc:ec:35:fc:c3:29:6d:0e:27:64:e3:47:61:74: 51:5e:9d:b2:2a:7c:e6:76:2c:43:55:d0:cb:d7:a0:3f:f8:18: a7:63:65:9b:0b:44:38:9e:35:88:1c:9d:3a:c8:ad:fc:df:84: 11:71:c2:99:0e:fa:0b:5b:d7:1e:de:c5:eb:2d:87:c6:80:0f: fd:11:66:2e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MTUwNTFaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKENGQjM1REUyMEU0MTdB MkExMEQzRTlCQzRCQzc2NUE1MDc4OUQzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCudaWBlA5BACs9P8edyQ1bWwEQGDToO488aXII2lLpZoTqmM9Q ajgzoJKK8vz4RWaoDWtWTB9TrmBlWW5iPCWrAtNXbB0moYEPzuevZHCc5qa+B6J8 SLT8EQiJ/evq9phiVmesEsT7F5e+FWOstShfHdF5ExyI4TMVMS9niSy+VfonzEg7 3a7dh6/NGV9RjEg1Ko5ZTXs8zJDS83zVrNCqz+M0psogoGo/jGjyuof0s4oCF0Ey O8FCAxO/YDz39Y1uPTfZ9aKqwW3yl2ORnf3w2i/ms7xLV17dZSqhatFNOkuuct9b wDPFwOkOxqlwDWj+69H5p0mAS4oYC3D8xaSBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUz7Nd4g5BeioQ0+m8S8dlpQeJ0zUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3o3TmQ0ZzVCZWlvUTAtbThTOGRscFFlSjB6VS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAV7YuAwDQYJKoZIhvcNAQELBQADggEBAN7rPC2VYHx8FTxAjhIsX7/PXiXi 7MqRzwO/iY5kbXqqJBzq7p+pismU6kfMwrxetNDvl0sdkr4gyN9ohrrC2gdMaEQD Go75SLz7FeuD41bSJZ22T0/hRxxd+zf9I4Owd8wrbtnmj+Pl1XSVqP8ynk85kDzf uRKJJnDt7EIsY3JyBQLnNQJc3Vdeu6wM8mc1qVCnyaGoXZT6Mxjw+kYnhdlLJAJr qL/Jy/6JqVI0ImNxV4gBjCSacBW87DX8wyltDidk40dhdFFenbIqfOZ2LENV0MvX oD/4GKdjZZsLRDieNYgcnTrIrfzfhBFxwpkO+gtb1x7exesth8aAD/0RZi4= -----END CERTIFICATE-----Generated at Mon Aug 11 13:30:20 2025 by rpki-client