$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zVcR2idCujLpOAPjJy7x4vxtMj0.roa File: zVcR2idCujLpOAPjJy7x4vxtMj0.roa (raw, json) Hash identifier: /2BnwCEe0MF/jPRflGQB1RAmBXt2WtkoE6+MqsKlVMM= Subject key identifier: CD:57:11:DA:27:42:BA:32:E9:38:03:E3:27:2E:F1:E2:FC:6D:32:3D Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03CE Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zVcR2idCujLpOAPjJy7x4vxtMj0.roa Signing time: Fri 01 Aug 2025 02:03:05 +0000 ROA not before: Fri 01 Aug 2025 02:03:05 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9617 IP address blocks: 219.115.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Aug 1 02:03:05 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=CD5711DA2742BA32E93803E3272EF1E2FC6D323D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:b2:f3:8a:f2:3f:49:9b:69:1e:50:32:7b: fa:70:88:09:16:2b:cf:a1:83:10:08:98:53:c9:32: 2d:c9:f0:04:88:fe:37:9c:1f:c4:a6:74:a6:09:44: c8:d1:5a:c2:81:ee:27:c2:82:25:1b:de:f3:eb:d9: e1:6c:46:b2:08:01:96:36:e6:4b:b7:47:62:33:a9: 97:dd:5b:02:b3:44:da:ec:1f:13:8f:b3:6b:3e:26: 45:31:ba:4f:fa:57:86:6f:92:46:d0:e1:b4:36:9b: e3:ce:29:a9:63:21:82:ca:ed:8b:55:13:02:a5:d0: 56:07:70:ed:98:9d:40:b2:38:6d:98:47:83:7a:4b: 85:78:dc:ad:4c:21:cc:eb:30:36:11:be:64:9e:5d: 98:9a:ea:d2:1a:fd:91:78:fc:40:25:7a:b4:29:9d: 7b:dc:24:5c:7c:9d:9b:5c:05:59:65:be:e8:b2:47: c0:6e:3a:a4:75:7e:d0:05:e6:bf:e4:a2:b8:79:4e: 84:3a:e4:66:74:9a:7b:34:91:76:d4:81:d3:ed:0c: 3f:c4:b8:d5:e4:b4:b4:35:fe:de:ed:cd:39:20:ef: 9d:14:71:d4:93:ea:46:a8:7b:37:63:87:ec:69:a8: 03:07:df:ff:6e:d7:9d:94:ae:e5:fe:ad:a5:78:3f: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:11:DA:27:42:BA:32:E9:38:03:E3:27:2E:F1:E2:FC:6D:32:3D X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zVcR2idCujLpOAPjJy7x4vxtMj0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.115.0.0/16 Signature Algorithm: sha256WithRSAEncryption a9:24:0f:f5:e1:7a:4f:68:da:d4:4e:2d:e0:6b:37:e0:28:29: 66:93:bf:ed:15:c7:47:22:b2:0a:3b:2d:2b:de:12:c9:4e:b9: 8f:d3:d4:a6:58:7d:86:d5:7c:bb:65:85:84:30:0c:73:18:2b: 35:94:0a:e7:33:16:f3:96:43:30:fe:a6:9d:9f:8d:a0:f8:8d: bf:e5:6b:d4:b8:bf:66:20:fa:b2:ac:9f:e7:30:a5:b4:99:14: fc:f7:1a:3e:bc:c8:2a:bc:3e:30:34:a1:68:31:b5:d5:18:6b: 57:7c:0f:83:0f:10:cd:17:2a:23:1a:03:f6:93:dd:c1:b4:b4: 6e:87:fb:99:07:bb:12:ee:27:6a:56:91:93:3b:e7:fe:80:42: 1c:6a:24:a1:17:da:e0:79:15:41:4f:cd:5c:87:0e:b5:69:93: f9:83:ca:06:82:0d:9b:7f:d7:87:ce:e9:b5:d9:4f:a4:9e:a3: 66:b6:00:9e:97:56:05:ad:4f:75:d4:d1:da:03:20:a3:2f:4f: f7:32:7c:fb:d5:8e:05:cc:3f:9b:3e:e6:d4:6f:3e:0f:f5:ee: 71:3b:5f:8a:75:2e:f9:d3:3a:87:5d:6c:c2:ad:67:72:17:b9: a0:b4:96:75:2b:a0:a4:66:bd:81:06:9f:9f:ea:eb:a8:95:90: b4:e5:fb:5b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgICA84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA4MDEw MjAzMDVaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKENENTcxMURBMjc0MkJB MzJFOTM4MDNFMzI3MkVGMUUyRkM2RDMyM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7HrLzivI/SZtpHlAye/pwiAkWK8+hgxAImFPJMi3J8ASI/jec H8SmdKYJRMjRWsKB7ifCgiUb3vPr2eFsRrIIAZY25ku3R2IzqZfdWwKzRNrsHxOP s2s+JkUxuk/6V4ZvkkbQ4bQ2m+POKaljIYLK7YtVEwKl0FYHcO2YnUCyOG2YR4N6 S4V43K1MIczrMDYRvmSeXZia6tIa/ZF4/EAlerQpnXvcJFx8nZtcBVllvuiyR8Bu OqR1ftAF5r/korh5ToQ65GZ0mns0kXbUgdPtDD/EuNXktLQ1/t7tzTkg750UcdST 6kaoezdjh+xpqAMH3/9u152UruX+raV4PwJhAgMBAAGjggIjMIICHzAdBgNVHQ4E FgQUzVcR2idCujLpOAPjJy7x4vxtMj0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL3pWY1IyaWRDdWpMcE9BUGpKeTd4NHZ4dE1qMC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwDbczANBgkqhkiG9w0BAQsFAAOCAQEAqSQP9eF6T2ja1E4t4Gs34CgpZpO/ 7RXHRyKyCjstK94SyU65j9PUplh9htV8u2WFhDAMcxgrNZQK5zMW85ZDMP6mnZ+N oPiNv+Vr1Li/ZiD6sqyf5zCltJkU/PcaPrzIKrw+MDShaDG11RhrV3wPgw8QzRcq IxoD9pPdwbS0bof7mQe7Eu4nalaRkzvn/oBCHGokoRfa4HkVQU/NXIcOtWmT+YPK BoINm3/Xh87ptdlPpJ6jZrYAnpdWBa1PddTR2gMgoy9P9zJ8+9WOBcw/mz7m1G8+ D/XucTtfinUu+dM6h11swq1nche5oLSWdSugpGa9gQafn+rrqJWQtOX7Ww== -----END CERTIFICATE-----Generated at Mon Aug 11 13:32:20 2025 by rpki-client