$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/hnNdUpdo2CNuV2o4YIPKeoCuYUM.roa File: hnNdUpdo2CNuV2o4YIPKeoCuYUM.roa (raw, json) Hash identifier: j3ZRg9VxxhXHq8Us1eQVZVjQ9sw9cfMBmyHeKeTfk2I= Subject key identifier: 86:73:5D:52:97:68:D8:23:6E:57:6A:38:60:83:CA:7A:80:AE:61:43 Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 7C Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/hnNdUpdo2CNuV2o4YIPKeoCuYUM.roa Signing time: Fri 01 Aug 2025 01:31:16 +0000 ROA not before: Fri 01 Aug 2025 01:31:16 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9374 IP address blocks: 202.224.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Aug 1 01:31:16 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=86735D529768D8236E576A386083CA7A80AE6143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:3a:8d:fb:5b:27:ff:8a:6b:ba:1c:44:86: fa:c8:59:52:36:4f:1a:b4:2f:47:2e:9e:2a:14:e0: a1:b8:7c:9a:14:8a:22:4f:7c:19:ba:46:48:60:77: 36:c5:10:4e:7d:93:43:e5:31:b4:b5:a0:8a:19:9d: b1:89:5b:ab:3b:de:23:33:18:4f:44:9a:7b:f3:69: 62:b6:54:41:80:0e:e6:1f:b2:7a:5d:27:95:ec:9e: 58:cb:a4:e3:96:6e:ee:bc:31:36:b9:d1:f7:a6:34: 28:7f:ed:50:c3:72:5c:29:dd:6c:57:79:f9:13:c8: a7:f2:51:f0:42:b9:76:9d:d7:b1:c8:2a:43:12:60: 50:86:36:ee:1e:f9:16:eb:89:59:c8:c5:19:16:96: a2:25:e8:84:3d:af:40:68:e3:f8:67:89:a1:90:99: 3e:1e:ab:3f:5b:d2:79:a3:66:5a:a5:9d:bd:8d:0b: b7:2c:15:f9:29:1c:cb:cb:ef:d3:fc:f1:25:9d:4e: 34:c0:fb:d2:26:20:e5:32:e3:fe:c2:a0:a4:31:d2: 9d:2b:60:65:33:32:f5:33:aa:3c:65:ff:07:e7:b0: 89:9e:1b:b6:8f:ff:ca:c2:23:96:18:c5:ee:2a:76: 93:7a:cb:e4:51:15:dd:55:cb:0d:38:3e:c5:62:d3: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:5D:52:97:68:D8:23:6E:57:6A:38:60:83:CA:7A:80:AE:61:43 X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/hnNdUpdo2CNuV2o4YIPKeoCuYUM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.224.64.0/19 Signature Algorithm: sha256WithRSAEncryption 6c:21:fc:11:4b:87:44:09:88:25:ad:f0:2a:9b:30:82:54:c3: e0:9b:24:9d:7c:fc:00:b1:57:8d:d9:b6:27:16:38:16:f3:41: 98:91:42:54:67:22:b3:0f:b0:f1:9e:26:4d:a8:f4:05:18:35: 6a:23:78:60:60:85:7c:48:b1:3f:ab:f4:2c:de:b2:01:55:c5: 61:39:d3:0d:45:cd:ef:4c:d0:87:53:1a:e8:6b:ad:9a:a9:17: 57:39:1f:5b:26:20:a3:81:42:a8:e5:bc:21:82:c3:42:05:b4: 3d:68:c6:00:d3:e6:74:1d:3c:63:46:4b:35:f1:88:30:13:b1: 0e:d7:78:03:1b:77:49:04:26:f2:b2:b3:6c:23:85:8d:34:8e: 09:04:c7:23:6c:41:80:3e:18:b0:bb:2a:bd:78:b4:de:2d:52: dd:0f:7e:b1:37:b6:28:86:4f:a9:69:5c:43:1e:6c:a3:39:0a: f6:93:07:28:f7:04:13:96:6e:2e:32:cb:bc:e7:da:44:78:13: e9:4e:7f:8d:23:a5:ac:62:84:57:68:55:6d:e6:4e:a6:de:82: 8e:5c:f4:42:16:31:95:b6:2e:d9:bf:85:97:f0:37:43:a5:44: 01:32:7f:cf:dd:fd:8e:fb:b0:03:78:3a:cc:2c:2d:5f:90:ec: 6e:6f:d2:a6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI1MDgwMTAx MzExNloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoODY3MzVENTI5NzY4RDgy MzZFNTc2QTM4NjA4M0NBN0E4MEFFNjE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALd9Oo37Wyf/imu6HESG+shZUjZPGrQvRy6eKhTgobh8mhSKIk98 GbpGSGB3NsUQTn2TQ+UxtLWgihmdsYlbqzveIzMYT0Sae/NpYrZUQYAO5h+yel0n leyeWMuk45Zu7rwxNrnR96Y0KH/tUMNyXCndbFd5+RPIp/JR8EK5dp3XscgqQxJg UIY27h75FuuJWcjFGRaWoiXohD2vQGjj+GeJoZCZPh6rP1vSeaNmWqWdvY0LtywV +Skcy8vv0/zxJZ1ONMD70iYg5TLj/sKgpDHSnStgZTMy9TOqPGX/B+ewiZ4bto// ysIjlhjF7ip2k3rL5FEV3VXLDTg+xWLTOmcCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSGc11Sl2jYI25Xajhgg8p6gK5hQzAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy 00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzY4L2huTmRVcGRvMkNOdVYybzRZSVBLZW9DdVlVTS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAXK4EAwDQYJKoZIhvcNAQELBQADggEBAGwh/BFLh0QJiCWt8CqbMIJUw+CbJJ18 /ACxV43ZticWOBbzQZiRQlRnIrMPsPGeJk2o9AUYNWojeGBghXxIsT+r9CzesgFV xWE50w1Fze9M0IdTGuhrrZqpF1c5H1smIKOBQqjlvCGCw0IFtD1oxgDT5nQdPGNG SzXxiDATsQ7XeAMbd0kEJvKys2wjhY00jgkExyNsQYA+GLC7Kr14tN4tUt0PfrE3 tiiGT6lpXEMebKM5CvaTByj3BBOWbi4yy7zn2kR4E+lOf40jpaxihFdoVW3mTqbe go5c9EIWMZW2Ltm/hZfwN0OlRAEyf8/d/Y77sAN4OswsLV+Q7G5v0qY= -----END CERTIFICATE-----Generated at Mon Aug 11 15:26:31 2025 by rpki-client