$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/oEMSMmBc1e73gJTyiB3AgEKNVAE.roa File: oEMSMmBc1e73gJTyiB3AgEKNVAE.roa (raw, json) Hash identifier: jnkY0iZM9FN/59QQxWJk3ozv3HE0YVNLQ1uVIzNgEQs= Subject key identifier: A0:43:12:32:60:5C:D5:EE:F7:80:94:F2:88:1D:C0:80:42:8D:54:01 Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Certificate serial: 7E Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/oEMSMmBc1e73gJTyiB3AgEKNVAE.roa Signing time: Fri 01 Aug 2025 01:31:17 +0000 ROA not before: Fri 01 Aug 2025 01:31:17 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 9374 IP address blocks: 210.141.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637 Validity Not Before: Aug 1 01:31:17 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=A0431232605CD5EEF78094F2881DC080428D5401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:46:2a:ed:ef:65:d7:21:39:e1:c3:d6:7f:04: c8:d9:9b:04:d5:8b:77:75:f1:99:fe:bc:77:60:88: a1:2a:c9:f7:b1:ad:36:59:2d:1c:f5:3a:af:c7:49: f5:f3:f8:15:13:97:65:79:8f:00:d7:d3:06:4f:da: 3c:59:40:bc:16:23:eb:e5:a7:65:c1:6d:18:97:a4: a3:b9:c4:d8:c9:a9:40:d5:8a:e9:d0:ee:d4:3e:b9: 4d:ab:4e:7b:5d:4f:cc:aa:32:5d:e0:69:5b:cd:b0: 16:76:08:5f:e2:5e:7f:7b:e4:86:a6:2b:1e:bf:a5: cb:82:4b:61:da:85:c8:f5:62:5d:4a:13:db:11:58: 1d:14:ab:34:30:53:f7:01:c5:64:0d:3e:da:a8:cb: 71:be:e5:56:d7:5c:62:91:a7:45:84:0e:36:30:b8: ee:41:ff:7b:76:e8:80:53:74:fa:16:cf:6b:6a:20: 81:25:30:3a:99:ac:2a:d0:6c:76:9d:ca:2f:fe:24: 22:e6:2e:4a:6d:19:ed:db:18:d3:5c:50:95:b2:29: 8b:f0:e5:e3:08:62:6b:56:9a:82:dc:c4:93:c5:4a: d6:be:1b:c7:b5:1c:9c:8b:91:3a:01:4a:b5:44:54: f5:3a:e0:5b:57:02:8c:fb:fb:f2:ca:2b:f1:f8:c5: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:43:12:32:60:5C:D5:EE:F7:80:94:F2:88:1D:C0:80:42:8D:54:01 X509v3 Authority Key Identifier: keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/oEMSMmBc1e73gJTyiB3AgEKNVAE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.141.32.0/19 Signature Algorithm: sha256WithRSAEncryption a4:f7:f4:ab:2d:76:e5:af:d0:b8:65:c6:80:e4:8e:ea:21:fd: bc:dc:d9:5d:f0:03:d2:56:f2:23:74:ab:88:87:4e:86:d5:19: d5:a6:d1:a5:3c:31:28:87:3a:78:a7:b0:41:a9:8b:59:ea:ad: d0:e4:da:aa:68:8a:c5:28:2e:37:62:5f:70:2d:d4:78:4b:37: 86:ac:67:56:1c:d9:95:2d:c9:67:a1:a2:b6:47:72:09:a5:22: a2:07:af:42:5d:66:ed:bf:28:40:7b:a3:36:b0:3f:43:af:10: fe:36:38:fb:c8:73:e9:9c:76:fe:d3:fe:03:3f:dd:cb:75:d6: 4c:20:dc:c3:72:db:b0:50:30:78:9f:7a:53:32:3d:22:34:f4: f6:97:29:25:d4:40:62:86:67:18:43:20:39:c3:08:d1:af:ca: 42:92:fa:25:9e:a1:0e:13:27:66:d1:bc:6b:a6:1c:88:bd:d3: 8d:12:54:02:47:be:42:a4:f8:c0:b1:26:72:ab:d0:12:73:d3: 42:23:39:e8:21:cc:67:6b:e4:2f:5d:0c:8a:5c:fe:ed:b7:fb: ae:12:e6:e6:4c:84:be:5e:87:d4:69:ca:90:6d:48:35:3f:89: 9c:bd:03:ad:f0:6e:3e:f7:ca:e3:d6:e4:59:5c:c9:27:07:18: 0f:f0:a9:2d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI1MDgwMTAx MzExN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQTA0MzEyMzI2MDVDRDVF RUY3ODA5NEYyODgxREMwODA0MjhENTQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANFGKu3vZdchOeHD1n8EyNmbBNWLd3Xxmf68d2CIoSrJ97GtNlkt HPU6r8dJ9fP4FROXZXmPANfTBk/aPFlAvBYj6+WnZcFtGJeko7nE2MmpQNWK6dDu 1D65TatOe11PzKoyXeBpW82wFnYIX+Jef3vkhqYrHr+ly4JLYdqFyPViXUoT2xFY HRSrNDBT9wHFZA0+2qjLcb7lVtdcYpGnRYQONjC47kH/e3bogFN0+hbPa2oggSUw OpmsKtBsdp3KL/4kIuYuSm0Z7dsY01xQlbIpi/Dl4whia1aagtzEk8VK1r4bx7Uc nIuROgFKtURU9TrgW1cCjPv78sor8fjFpKkCAwEAAaOCAiIwggIeMB0GA1UdDgQW BBSgQxIyYFzV7veAlPKIHcCAQo1UATAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy 00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzY4L29FTVNNbUJjMWU3M2dKVHlpQjNBZ0VLTlZBRS5yb2EwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAXSjSAwDQYJKoZIhvcNAQELBQADggEBAKT39KstduWv0LhlxoDkjuoh/bzc2V3w A9JW8iN0q4iHTobVGdWm0aU8MSiHOninsEGpi1nqrdDk2qpoisUoLjdiX3At1HhL N4asZ1Yc2ZUtyWehorZHcgmlIqIHr0JdZu2/KEB7ozawP0OvEP42OPvIc+mcdv7T /gM/3ct11kwg3MNy27BQMHifelMyPSI09PaXKSXUQGKGZxhDIDnDCNGvykKS+iWe oQ4TJ2bRvGumHIi9040SVAJHvkKk+MCxJnKr0BJz00IjOeghzGdr5C9dDIpc/u23 +64S5uZMhL5eh9RpypBtSDU/iZy9A63wbj73yuPW5FlcyScHGA/wqS0= -----END CERTIFICATE-----Generated at Mon Aug 11 15:18:35 2025 by rpki-client