$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/VkIrB8ezoC6zb0HCoO0-XPT3YBI.roa File: VkIrB8ezoC6zb0HCoO0-XPT3YBI.roa (raw, json) Hash identifier: ZLQZyA4DQtGv+BtG0Mq9mCCz+QJ7Cn22ogR/eKb+7jE= Subject key identifier: 56:42:2B:07:C7:B3:A0:2E:B3:6F:41:C2:A0:ED:3E:5C:F4:F7:60:12 Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0590 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VkIrB8ezoC6zb0HCoO0-XPT3YBI.roa Signing time: Tue 01 Jul 2025 07:21:38 +0000 ROA not before: Tue 01 Jul 2025 07:21:38 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 131933 IP address blocks: 14.14.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Jul 1 07:21:38 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=56422B07C7B3A02EB36F41C2A0ED3E5CF4F76012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4f:c8:2d:84:36:5f:93:63:c3:4a:8f:ae:4f: 37:bf:f3:0b:b8:3c:b4:c7:f6:fb:93:60:91:14:2f: 6a:f2:e4:0c:6c:3a:02:d2:ae:ed:7e:06:78:d6:0e: 49:bf:fe:a9:63:29:77:b0:db:38:9f:9c:c8:d6:ab: eb:5c:5a:47:23:a9:14:1e:f6:13:28:92:3b:9d:bd: 58:26:cc:9a:ab:8c:3f:fe:71:1e:e6:5d:c6:a8:04: ef:7d:19:bb:80:f1:dc:e3:e0:69:87:41:62:01:a3: 88:26:fe:c2:91:6b:38:a4:90:db:d9:85:3f:82:66: 15:16:b6:43:d5:0e:58:50:ac:c0:74:ad:94:ed:8d: 86:59:8d:8e:72:18:b8:60:2e:75:39:48:92:be:4b: 64:f7:6d:7e:95:a5:26:1b:07:7a:ce:69:2f:e2:e7: 84:19:9e:19:c7:b7:64:3d:2f:50:4f:4f:dc:f5:59: d8:ad:b3:a0:75:d6:e6:7d:3d:b2:ba:c7:4a:6d:43: 56:dd:3b:aa:49:28:86:29:83:fa:46:57:e1:6f:38: da:a4:39:26:8a:7d:7c:6f:3e:db:7a:0c:17:67:1e: f1:62:7b:3f:58:cf:34:ad:a0:37:91:03:5a:8d:97: 68:be:2c:c6:5b:d3:d1:fc:21:8c:b4:1d:cd:a1:20: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:42:2B:07:C7:B3:A0:2E:B3:6F:41:C2:A0:ED:3E:5C:F4:F7:60:12 X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VkIrB8ezoC6zb0HCoO0-XPT3YBI.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.14.152.0/21 Signature Algorithm: sha256WithRSAEncryption 6a:9e:b0:12:2d:8b:7b:1a:c2:92:5f:6d:ad:8a:88:9f:33:f0: 12:88:0d:49:4d:a0:5b:ba:b6:3f:67:50:75:de:2b:73:bc:c2: 0d:60:73:5b:bc:5a:75:dc:4a:95:40:fa:fb:4f:a0:45:c3:5a: 20:cb:02:08:99:26:e7:27:ea:39:92:68:03:86:d8:19:ce:9f: 45:ce:b1:12:a5:3e:da:97:3e:3a:9d:99:51:9f:b6:a0:2e:13: ae:1a:d2:e4:87:4b:21:7a:ee:7a:9b:d3:c9:99:ea:39:61:a7: 93:fd:19:0e:fe:60:ba:e6:a7:9b:d2:7c:90:a0:53:52:16:74: e5:df:19:c3:a6:10:01:2e:c9:0b:8f:9b:6b:0f:fa:61:74:c3: f2:7f:b0:d9:97:97:e0:a5:78:08:83:6e:d5:93:45:7d:d4:6b: 2d:a4:99:ea:56:52:fd:8a:52:46:4c:05:49:f4:7d:47:8f:47: 3e:25:25:40:a6:d6:44:8a:7f:34:ce:51:f0:38:4f:f7:d1:e3: ca:3e:21:57:ae:ba:79:3b:de:49:9b:89:c9:eb:78:02:08:4f: 4c:2a:8c:ea:97:f8:08:0e:ff:c3:27:f8:6b:d1:a9:d3:6d:28: 58:74:ea:89:4e:4c:3b:6a:8b:7c:95:d2:4b:5d:57:80:7e:93: 20:8a:f5:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTA3MDEw NzIxMzhaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2NDIyQjA3QzdCM0Ew MkVCMzZGNDFDMkEwRUQzRTVDRjRGNzYwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjT8gthDZfk2PDSo+uTze/8wu4PLTH9vuTYJEUL2ry5AxsOgLS ru1+BnjWDkm//qljKXew2zifnMjWq+tcWkcjqRQe9hMokjudvVgmzJqrjD/+cR7m XcaoBO99GbuA8dzj4GmHQWIBo4gm/sKRazikkNvZhT+CZhUWtkPVDlhQrMB0rZTt jYZZjY5yGLhgLnU5SJK+S2T3bX6VpSYbB3rOaS/i54QZnhnHt2Q9L1BPT9z1Wdit s6B11uZ9PbK6x0ptQ1bdO6pJKIYpg/pGV+FvONqkOSaKfXxvPtt6DBdnHvFiez9Y zzStoDeRA1qNl2i+LMZb09H8IYy0Hc2hIF1LAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUVkIrB8ezoC6zb0HCoO0+XPT3YBIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1ZrSXJCOGV6b0M2emIwSENvTzAtWFBUM1lCSS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMODpgwDQYJKoZIhvcNAQELBQADggEBAGqesBIti3sawpJfba2KiJ8z8BKI DUlNoFu6tj9nUHXeK3O8wg1gc1u8WnXcSpVA+vtPoEXDWiDLAgiZJucn6jmSaAOG 2BnOn0XOsRKlPtqXPjqdmVGftqAuE64a0uSHSyF67nqb08mZ6jlhp5P9GQ7+YLrm p5vSfJCgU1IWdOXfGcOmEAEuyQuPm2sP+mF0w/J/sNmXl+CleAiDbtWTRX3Uay2k mepWUv2KUkZMBUn0fUePRz4lJUCm1kSKfzTOUfA4T/fR48o+IVeuunk73kmbicnr eAIIT0wqjOqX+AgO/8Mn+GvRqdNtKFh06olOTDtqi3yV0ktdV4B+kyCK9bI= -----END CERTIFICATE-----Generated at Fri Jul 4 23:36:33 2025 by rpki-client