$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/k3WZJ8_KPQmGFRCH2rylCkERa2c.roa File: k3WZJ8_KPQmGFRCH2rylCkERa2c.roa (raw, json) Hash identifier: Gn2N1xU2RxcuRwgeb9p5v1KlBRaQVrkqySAr9U9bZN8= Subject key identifier: 93:75:99:27:CF:CA:3D:09:86:15:10:87:DA:BC:A5:0A:41:11:6B:67 Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 7A Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/k3WZJ8_KPQmGFRCH2rylCkERa2c.roa Signing time: Fri 01 Aug 2025 01:29:22 +0000 ROA not before: Fri 01 Aug 2025 01:29:22 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18144 IP address blocks: 103.205.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 1 01:29:22 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=93759927CFCA3D0986151087DABCA50A41116B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:96:ff:0a:e6:c2:be:d3:6f:e6:be:a6:33: 72:ea:39:65:c3:da:a0:ec:ff:17:f9:51:80:02:bb: 93:68:1f:9b:8e:a2:f1:c0:df:4c:2c:f2:f0:22:8c: fb:1d:96:34:f7:ac:d4:54:e7:02:53:5b:26:f9:1c: a3:c6:77:d0:98:e3:5d:8d:63:bc:e0:74:4c:9c:95: 72:6f:c3:5d:dc:3e:c4:75:45:7a:c2:d5:f9:92:b4: 88:f0:5d:4a:6f:08:c3:73:68:09:4e:fa:1f:6a:4f: 96:64:b3:e4:15:bf:08:1a:bb:70:72:13:e3:a6:22: 82:ce:cf:fd:c2:9a:f7:04:a4:24:e0:ff:d0:e6:51: 4c:87:e1:32:8f:1a:74:a8:81:f7:68:15:7d:d4:54: 8f:10:6e:1b:af:60:8f:84:d6:f7:99:30:f1:1e:8a: 8d:29:69:38:75:90:2e:ef:f4:2e:fc:8c:e1:b5:3d: 7c:4f:a2:2a:6b:de:89:c6:aa:13:46:fc:59:f2:6c: 0e:7e:fe:1c:97:20:bd:34:02:82:f3:be:ca:90:9b: 6f:84:aa:a6:58:7b:54:8e:8a:d2:73:db:56:76:1b: 1b:46:77:db:bf:c9:9a:42:80:0b:c5:a8:b0:08:42: 9b:c3:c5:d9:85:8b:d3:2e:56:d4:19:df:db:64:ed: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:75:99:27:CF:CA:3D:09:86:15:10:87:DA:BC:A5:0A:41:11:6B:67 X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/k3WZJ8_KPQmGFRCH2rylCkERa2c.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.205.168.0/22 Signature Algorithm: sha256WithRSAEncryption 35:69:74:c5:8b:14:9f:b7:3d:89:fc:b2:e8:61:c7:37:cc:89: 71:7a:d5:81:7f:a7:1f:99:df:05:3f:eb:82:98:b4:3d:c7:92: ff:ea:d0:67:c6:2e:db:a6:3c:76:f1:48:cd:d6:9d:b8:7d:c4: 44:73:7e:a7:32:62:66:15:bf:f1:ce:65:fa:de:d6:3d:df:19: 7e:15:58:fe:c9:f9:79:46:bb:84:28:32:27:88:50:6b:a0:00: db:b9:08:52:6d:e2:e5:d3:b2:2a:cc:6f:77:2a:98:ba:9c:3e: 28:cf:97:85:6c:33:03:73:e7:90:53:d5:a0:a0:b8:eb:c9:8d: 9c:2c:9f:57:71:f6:95:de:b7:91:55:ea:27:73:df:7f:14:68: e2:67:aa:4d:b8:23:d8:c5:30:87:69:8d:f2:b3:b3:f5:7c:ae: b6:4f:07:d5:24:ff:bd:e7:c8:19:9a:fd:87:12:1a:57:61:8b: 25:44:21:37:ea:f0:71:ac:3a:b1:9a:77:72:11:31:21:1d:a9: 70:dd:58:14:29:bc:27:d4:5d:ec:33:59:de:93:a5:42:75:8d: 9a:26:82:66:0b:a9:f4:b1:14:2f:ef:58:e9:b6:6d:b6:70:d0: 35:e4:08:02:9a:dc:ed:12:9d:39:17:64:cd:a0:22:47:7e:0e: bd:42:d1:93 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI1MDgwMTAx MjkyMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOTM3NTk5MjdDRkNBM0Qw OTg2MTUxMDg3REFCQ0E1MEE0MTExNkI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM0Rlv8K5sK+02/mvqYzcuo5ZcPaoOz/F/lRgAK7k2gfm46i8cDf TCzy8CKM+x2WNPes1FTnAlNbJvkco8Z30JjjXY1jvOB0TJyVcm/DXdw+xHVFesLV +ZK0iPBdSm8Iw3NoCU76H2pPlmSz5BW/CBq7cHIT46Yigs7P/cKa9wSkJOD/0OZR TIfhMo8adKiB92gVfdRUjxBuG69gj4TW95kw8R6KjSlpOHWQLu/0LvyM4bU9fE+i KmveicaqE0b8WfJsDn7+HJcgvTQCgvO+ypCbb4Sqplh7VI6K0nPbVnYbG0Z327/J mkKAC8WosAhCm8PF2YWL0y5W1Bnf22TtYl8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSTdZknz8o9CYYVEIfavKUKQRFrZzAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvazNXWko4X0tQUW1HRlJDSDJyeWxDa0VSYTJjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfNqDANBgkqhkiG9w0BAQsFAAOCAQEANWl0xYsUn7c9ifyy6GHHN8yJcXrV gX+nH5nfBT/rgpi0PceS/+rQZ8Yu26Y8dvFIzdaduH3ERHN+pzJiZhW/8c5l+t7W Pd8ZfhVY/sn5eUa7hCgyJ4hQa6AA27kIUm3i5dOyKsxvdyqYupw+KM+XhWwzA3Pn kFPVoKC468mNnCyfV3H2ld63kVXqJ3PffxRo4meqTbgj2MUwh2mN8rOz9Xyutk8H 1ST/vefIGZr9hxIaV2GLJUQhN+rwcaw6sZp3chExIR2pcN1YFCm8J9Rd7DNZ3pOl QnWNmiaCZgup9LEUL+9Y6bZttnDQNeQIAprc7RKdORdkzaAiR34OvULRkw== -----END CERTIFICATE-----Generated at Mon Aug 11 13:03:42 2025 by rpki-client