$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/Loi9zdlP6NC_U7A6x7dB3UnsMOM.roa File: Loi9zdlP6NC_U7A6x7dB3UnsMOM.roa (raw, json) Hash identifier: ontqAeLvDG1sK1t2MoesGs5BKpvVz1vg6SIi9tO6NxU= Subject key identifier: 2E:88:BD:CD:D9:4F:E8:D0:BF:53:B0:3A:C7:B7:41:DD:49:EC:30:E3 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 73 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Loi9zdlP6NC_U7A6x7dB3UnsMOM.roa Signing time: Fri 01 Aug 2025 01:29:17 +0000 ROA not before: Fri 01 Aug 2025 01:29:17 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18144 IP address blocks: 36.52.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 1 01:29:17 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=2E88BDCDD94FE8D0BF53B03AC7B741DD49EC30E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:ba:a3:ff:0f:bb:72:c0:93:bc:b3:51:39: c1:11:48:94:b4:a7:6a:1e:30:57:ba:9e:16:85:77: 40:fd:c9:2d:d2:0a:50:07:16:3d:35:66:c7:95:dc: 48:78:9b:44:49:09:2c:72:ac:95:d1:29:2c:5c:70: 7f:0d:dc:c8:3b:0f:c7:11:b6:74:0f:c5:d6:42:58: 82:05:fa:7b:f3:50:8a:11:cc:f0:89:3c:cd:7f:c9: ca:9b:a2:45:dd:36:eb:0d:dc:b9:1e:e0:96:66:44: 35:17:98:6d:b4:fc:23:8f:49:7a:31:ca:28:50:b7: f2:a8:8b:6c:00:7f:07:97:a8:e3:b3:42:b4:dc:38: d6:61:c7:e5:9a:3d:69:77:c1:ac:a6:70:ab:a7:c5: f5:af:7e:8a:c2:2a:58:fa:ee:98:dd:0e:99:0f:e4: 4c:59:23:6e:c7:6f:72:30:f5:fb:cf:cc:30:24:90: 72:e9:25:16:16:80:50:3f:16:70:ed:14:e6:c2:f0: 5a:20:d7:82:03:d2:5a:8e:61:1b:3d:04:79:13:06: 70:01:2b:8d:63:08:e9:c4:85:50:91:fc:25:41:64: d0:40:28:e7:e3:07:22:c5:b8:55:1a:8d:71:90:eb: 0f:be:22:22:ec:02:c0:ec:61:64:5c:fe:08:0b:19: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:88:BD:CD:D9:4F:E8:D0:BF:53:B0:3A:C7:B7:41:DD:49:EC:30:E3 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Loi9zdlP6NC_U7A6x7dB3UnsMOM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.52.136.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:8e:dd:c1:8c:52:67:d7:69:75:56:b7:74:89:2c:08:18:89: 9d:2e:56:d2:4a:15:cf:b7:cf:50:83:cf:9e:09:34:50:a8:b8: 98:47:65:93:86:51:65:c2:e5:b9:ff:fa:e5:26:2a:01:4f:bf: 89:69:a1:6a:9c:27:d9:84:fd:1a:07:c3:7e:98:2c:b3:d5:b1: 6f:21:35:49:f5:25:a2:2d:80:6c:bb:6a:85:15:7e:b2:27:50: fb:4a:3a:e2:d1:14:4c:39:8f:c3:cf:54:48:63:f0:3c:e4:87: df:80:01:fd:32:7a:61:e6:80:05:3e:8d:7d:04:a5:82:f4:c7: 09:9b:40:76:6e:a3:2e:2d:3b:64:5c:14:aa:2a:f8:fa:88:55: 31:f0:82:cb:d6:de:a8:b6:f5:fe:61:12:74:46:ba:b4:d5:8e: b8:bb:c5:2f:ab:12:b7:d6:57:bf:42:15:a8:35:42:63:d3:4a: 94:e8:a2:b7:29:a2:7e:15:1d:b9:d4:e3:14:f3:59:68:3c:b6: ee:a8:f3:1b:fe:25:e8:0f:b6:8d:37:fb:f6:db:c3:a2:f8:7b: d5:08:2e:f8:91:ed:08:35:84:d1:cf:8a:9b:b2:0d:bb:4f:11: 82:14:57:23:1c:08:16:7f:98:27:77:96:af:9d:9a:93:cf:60: fd:a7:b4:1c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI1MDgwMTAx MjkxN1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMkU4OEJEQ0REOTRGRThE MEJGNTNCMDNBQzdCNzQxREQ0OUVDMzBFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJZvuqP/D7tywJO8s1E5wRFIlLSnah4wV7qeFoV3QP3JLdIKUAcW PTVmx5XcSHibREkJLHKsldEpLFxwfw3cyDsPxxG2dA/F1kJYggX6e/NQihHM8Ik8 zX/JypuiRd026w3cuR7glmZENReYbbT8I49JejHKKFC38qiLbAB/B5eo47NCtNw4 1mHH5Zo9aXfBrKZwq6fF9a9+isIqWPrumN0OmQ/kTFkjbsdvcjD1+8/MMCSQcukl FhaAUD8WcO0U5sLwWiDXggPSWo5hGz0EeRMGcAErjWMI6cSFUJH8JUFk0EAo5+MH IsW4VRqNcZDrD74iIuwCwOxhZFz+CAsZTX8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQuiL3N2U/o0L9TsDrHt0HdSeww4zAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvTG9pOXpkbFA2TkNfVTdBNng3ZEIzVW5zTU9NLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyQ0iDANBgkqhkiG9w0BAQsFAAOCAQEAnI7dwYxSZ9dpdVa3dIksCBiJnS5W 0koVz7fPUIPPngk0UKi4mEdlk4ZRZcLluf/65SYqAU+/iWmhapwn2YT9GgfDfpgs s9WxbyE1SfUloi2AbLtqhRV+sidQ+0o64tEUTDmPw89USGPwPOSH34AB/TJ6YeaA BT6NfQSlgvTHCZtAdm6jLi07ZFwUqir4+ohVMfCCy9beqLb1/mESdEa6tNWOuLvF L6sSt9ZXv0IVqDVCY9NKlOiitymifhUdudTjFPNZaDy27qjzG/4l6A+2jTf79tvD ovh71Qgu+JHtCDWE0c+Km7INu08RghRXIxwIFn+YJ3eWr52ak89g/ae0HA== -----END CERTIFICATE-----Generated at Mon Aug 11 13:02:59 2025 by rpki-client