$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/h4ZevX6BUOXUdJPbzbhCDP2j9lw.roa File: h4ZevX6BUOXUdJPbzbhCDP2j9lw.roa (raw, json) Hash identifier: ANaLvxYPrlEpMOON8+TVQbVP5GJGOQHYioUnKvrKf8Q= Subject key identifier: 87:86:5E:BD:7E:81:50:E5:D4:74:93:DB:CD:B8:42:0C:FD:A3:F6:5C Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 78 Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/h4ZevX6BUOXUdJPbzbhCDP2j9lw.roa Signing time: Fri 01 Aug 2025 01:29:21 +0000 ROA not before: Fri 01 Aug 2025 01:29:21 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18144 IP address blocks: 61.195.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 1 01:29:21 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=87865EBD7E8150E5D47493DBCDB8420CFDA3F65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:20:d8:cd:71:9c:22:0a:9b:5d:9c:bb:5b: 71:7f:55:7d:21:bb:e5:ba:07:a0:20:e9:fd:c6:d5: bd:d5:99:dd:fe:58:49:79:97:83:0f:c4:e3:a6:9c: 26:83:b4:0f:c3:3c:e5:60:42:5f:5e:16:b8:21:0a: cc:99:cc:8e:3e:b9:6b:b2:9a:94:6b:4b:aa:fb:05: 54:4e:14:3f:b1:0f:35:a9:44:49:92:de:e7:59:a8: d4:f5:f1:1d:37:85:6d:c4:01:43:0a:a5:23:45:a8: c9:92:77:ea:c7:87:2b:51:d5:13:be:d8:f3:52:26: 64:3c:df:9d:dd:e9:31:63:4f:52:3d:86:fd:f1:46: d7:50:0a:7e:60:76:6b:ef:23:78:f5:46:32:bd:ae: a5:e6:14:4b:f1:30:1b:2e:81:e1:c4:fe:a5:16:83: 91:03:2f:4a:d6:d2:81:91:ed:09:37:f8:11:83:2d: 29:35:29:2b:22:2a:b1:32:95:7d:9b:d4:02:43:cc: a1:68:73:71:49:e5:5a:88:f7:77:ac:a8:88:d6:9c: 1f:d4:ff:0f:89:b3:07:22:f2:9e:cc:f1:c8:ac:00: 7d:e7:0e:ee:d7:f9:8d:4f:9c:c0:00:ae:3f:e3:ab: cf:25:51:55:ed:29:97:af:45:d8:1a:b0:35:dc:86: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:5E:BD:7E:81:50:E5:D4:74:93:DB:CD:B8:42:0C:FD:A3:F6:5C X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/h4ZevX6BUOXUdJPbzbhCDP2j9lw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.195.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:27:07:28:79:73:fd:11:43:28:78:12:2e:b4:0a:29:45:1b: 39:9d:39:ec:5d:7a:77:12:0b:68:ee:cf:36:5d:0c:d8:83:f0: 82:77:cc:ba:b2:f7:29:f2:76:b8:fb:f4:d1:bb:e6:8c:d6:27: cd:28:9d:ff:c9:d2:e6:82:b1:2d:7b:df:f5:e2:01:84:ec:03: 52:bc:71:1c:58:f1:c5:8b:4d:76:48:30:cb:5c:ef:9e:7c:56: 66:ae:53:f1:16:f1:1e:c7:26:97:1a:6d:60:83:17:3c:dc:b4: d0:93:47:80:06:8f:86:d5:92:41:7d:7a:ee:c7:16:c1:73:bb: 4f:21:64:2b:74:95:2b:dd:d9:f8:3c:5a:46:ec:02:66:53:e2: bb:e3:4a:80:8a:c8:14:dc:d3:36:20:40:83:4d:f1:c0:34:3b: 2b:44:a9:76:e0:63:c3:f6:f4:c7:06:d1:ef:c3:b3:01:2e:84: df:f3:10:ee:c4:be:69:99:3c:dd:af:b5:9b:5f:be:56:ab:b8: a4:53:d5:ba:56:3b:2a:1b:32:0b:9f:e8:56:e2:8d:57:e5:a3: b4:fe:19:b3:ba:00:dd:13:c9:97:99:81:bd:8e:7f:35:82:df: e6:c3:76:fd:6e:88:54:98:10:a0:22:49:f2:f3:e8:d4:ee:1e: 87:dd:60:99 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI1MDgwMTAx MjkyMVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoODc4NjVFQkQ3RTgxNTBF NUQ0NzQ5M0RCQ0RCODQyMENGREEzRjY1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJYlINjNcZwiCptdnLtbcX9VfSG75boHoCDp/cbVvdWZ3f5YSXmX gw/E46acJoO0D8M85WBCX14WuCEKzJnMjj65a7KalGtLqvsFVE4UP7EPNalESZLe 51mo1PXxHTeFbcQBQwqlI0WoyZJ36seHK1HVE77Y81ImZDzfnd3pMWNPUj2G/fFG 11AKfmB2a+8jePVGMr2upeYUS/EwGy6B4cT+pRaDkQMvStbSgZHtCTf4EYMtKTUp KyIqsTKVfZvUAkPMoWhzcUnlWoj3d6yoiNacH9T/D4mzByLynszxyKwAfecO7tf5 jU+cwACuP+OrzyVRVe0pl69F2BqwNdyG7LsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSHhl69foFQ5dR0k9vNuEIM/aP2XDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvaDRaZXZYNkJVT1hVZEpQYnpiaENEUDJqOWx3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAz3DCDANBgkqhkiG9w0BAQsFAAOCAQEAHicHKHlz/RFDKHgSLrQKKUUbOZ05 7F16dxILaO7PNl0M2IPwgnfMurL3KfJ2uPv00bvmjNYnzSid/8nS5oKxLXvf9eIB hOwDUrxxHFjxxYtNdkgwy1zvnnxWZq5T8RbxHscmlxptYIMXPNy00JNHgAaPhtWS QX167scWwXO7TyFkK3SVK93Z+DxaRuwCZlPiu+NKgIrIFNzTNiBAg03xwDQ7K0Sp duBjw/b0xwbR78OzAS6E3/MQ7sS+aZk83a+1m1++Vqu4pFPVulY7KhsyC5/oVuKN V+WjtP4Zs7oA3RPJl5mBvY5/NYLf5sN2/W6IVJgQoCJJ8vPo1O4eh91gmQ== -----END CERTIFICATE-----Generated at Mon Aug 11 13:09:13 2025 by rpki-client