$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa File: mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa (raw, json) Hash identifier: 84Y5yVKDpBo0UXjagxi/YMbjjiJtCs93jbkhz1cFqfM= Subject key identifier: 99:4E:AB:EE:0E:9F:4A:F7:42:67:6C:6E:2E:CC:D8:B6:E5:A5:C2:0D Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Certificate serial: 7D Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa Signing time: Fri 01 Aug 2025 01:29:23 +0000 ROA not before: Fri 01 Aug 2025 01:29:23 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18144 IP address blocks: 121.200.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639 Validity Not Before: Aug 1 01:29:23 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=994EABEE0E9F4AF742676C6E2ECCD8B6E5A5C20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:4e:cd:1d:9b:cd:02:15:e8:db:41:ed:37: 6c:a5:2f:ab:5f:56:74:ec:63:86:18:eb:07:bf:51: 9d:b2:19:df:bf:66:33:5f:c5:f4:a7:c8:ab:50:d1: fe:b6:f6:18:6d:aa:67:3b:a0:8e:be:a1:f9:59:95: 01:7d:e1:82:31:5d:25:9f:c9:04:70:fc:6a:34:aa: 7b:3f:8d:6f:96:ff:fa:61:f6:f4:2a:d9:cb:05:d1: 45:6b:b6:ba:33:29:0e:76:06:a8:37:ba:b9:a8:74: fc:b1:32:8e:93:19:52:37:81:9a:98:2f:c2:7d:ae: 97:55:27:57:e8:2a:27:a0:27:63:48:ed:ac:4a:2d: a1:b5:66:be:24:a8:01:59:ed:59:69:e9:1b:2e:50: fd:0c:12:21:a4:fd:27:da:d0:18:e8:82:bf:af:af: f2:26:20:82:43:b9:06:b9:38:0f:0f:2d:e4:8f:67: f9:4e:66:a9:a7:53:7e:59:7d:59:01:0f:a0:e7:cd: d0:e1:5e:13:2d:79:06:a1:77:ba:e8:6c:37:83:97: d5:49:87:d8:a5:81:94:22:ab:1e:c8:5e:74:b6:c9: 70:99:aa:32:36:5b:cb:c0:53:71:56:b3:91:3a:07: e9:25:5e:71:3d:c0:cb:99:78:36:01:da:c3:f9:e7: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:AB:EE:0E:9F:4A:F7:42:67:6C:6E:2E:CC:D8:B6:E5:A5:C2:0D X509v3 Authority Key Identifier: keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/mU6r7g6fSvdCZ2xuLszYtuWlwg0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 63:b7:a4:93:5d:65:32:8a:ff:be:dc:eb:95:7b:53:9c:cb:cf: f4:08:a9:f4:04:1c:d9:41:13:56:fd:6f:c5:85:1f:c4:f4:b5: 27:e9:0c:c6:48:86:3e:8e:10:cc:34:6a:0b:f2:7f:2c:05:f1: 9b:df:10:fc:e4:07:fe:aa:d1:d1:a7:f6:ed:1a:0e:23:80:50: ad:ff:7c:0e:fe:aa:e6:e7:2c:4b:6f:33:c6:00:fa:82:45:dd: dc:dc:fc:7d:76:60:74:91:64:72:77:96:3e:91:a0:07:a7:6a: 3a:16:c2:b8:e5:8e:88:86:67:17:d2:e4:35:53:ef:a6:89:a3: 7c:08:a2:ca:31:b7:bb:4b:83:ce:d0:c1:8d:ec:a6:87:c8:0e: f9:22:31:c7:97:51:c3:06:db:95:6b:3c:76:0b:9c:0a:35:d8: 4e:57:00:ff:02:61:5f:ea:78:5d:24:c4:9c:b6:5b:c5:43:fc: e3:39:34:e1:10:0c:78:db:93:17:07:8e:74:5b:05:a3:1d:64: f1:53:f9:74:0e:1b:c3:13:08:a6:bb:7f:94:a4:19:f7:51:0e: 84:73:93:e6:be:ff:2c:1a:33:72:a7:fa:56:59:71:9b:8c:9f: 55:ed:1c:26:7e:9c:31:96:be:45:18:73:90:39:31:b5:ad:26: 52:87:70:89 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI1MDgwMTAx MjkyM1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOTk0RUFCRUUwRTlGNEFG NzQyNjc2QzZFMkVDQ0Q4QjZFNUE1QzIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANSfTs0dm80CFejbQe03bKUvq19WdOxjhhjrB79RnbIZ379mM1/F 9KfIq1DR/rb2GG2qZzugjr6h+VmVAX3hgjFdJZ/JBHD8ajSqez+Nb5b/+mH29CrZ ywXRRWu2ujMpDnYGqDe6uah0/LEyjpMZUjeBmpgvwn2ul1UnV+gqJ6AnY0jtrEot obVmviSoAVntWWnpGy5Q/QwSIaT9J9rQGOiCv6+v8iYggkO5Brk4Dw8t5I9n+U5m qadTfll9WQEPoOfN0OFeEy15BqF3uuhsN4OX1UmH2KWBlCKrHshedLbJcJmqMjZb y8BTcVazkToH6SVecT3Ay5l4NgHaw/nnvUUCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSZTqvuDp9K90JnbG4uzNi25aXCDTAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83ODMvbVU2cjdnNmZTdmRDWjJ4dUxzell0dVdsd2cwLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBnnIgDANBgkqhkiG9w0BAQsFAAOCAQEAY7ekk11lMor/vtzrlXtTnMvP9Aip 9AQc2UETVv1vxYUfxPS1J+kMxkiGPo4QzDRqC/J/LAXxm98Q/OQH/qrR0af27RoO I4BQrf98Dv6q5ucsS28zxgD6gkXd3Nz8fXZgdJFkcneWPpGgB6dqOhbCuOWOiIZn F9LkNVPvpomjfAiiyjG3u0uDztDBjeymh8gO+SIxx5dRwwbblWs8dgucCjXYTlcA /wJhX+p4XSTEnLZbxUP84zk04RAMeNuTFweOdFsFox1k8VP5dA4bwxMIprt/lKQZ 91EOhHOT5r7/LBozcqf6Vllxm4yfVe0cJn6cMZa+RRhzkDkxta0mUodwiQ== -----END CERTIFICATE-----Generated at Mon Aug 11 13:00:28 2025 by rpki-client