$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/X7iAG4RXgU1reBxrXmxQne3Bweo.roa File: X7iAG4RXgU1reBxrXmxQne3Bweo.roa (raw, json) Hash identifier: hbkPLwz7Ydy6NEdbCsrMsp1GBWQiIFaTPG1fKSp0ZOM= Subject key identifier: 5F:B8:80:1B:84:57:81:4D:6B:78:1C:6B:5E:6C:50:9D:ED:C1:C1:EA Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Certificate serial: 0589 Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/X7iAG4RXgU1reBxrXmxQne3Bweo.roa Signing time: Tue 01 Jul 2025 06:22:23 +0000 ROA not before: Tue 01 Jul 2025 06:22:23 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 131927 IP address blocks: 14.14.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6 Validity Not Before: Jul 1 06:22:23 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=5FB8801B8457814D6B781C6B5E6C509DEDC1C1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:42:7e:04:36:e7:df:e6:0a:72:7f:ac:2e: d7:aa:f1:88:b6:d6:77:db:d3:20:50:03:dc:35:23: 03:10:df:11:af:a5:13:4e:0d:2a:4a:52:ca:15:98: 15:66:2f:e0:91:4b:28:82:60:7e:12:fe:7f:35:23: 7f:ba:a6:d9:63:e4:4a:7d:5d:c7:ae:79:6a:76:4d: 0c:ea:78:f5:ee:ee:b7:d9:67:5f:4b:9b:3c:44:79: ce:ef:94:8c:4e:b3:0a:c8:45:a2:da:b2:2d:5c:2d: e9:b0:2f:98:7f:3c:b2:47:6d:78:db:c5:0a:a5:0e: f6:f2:05:4b:62:fa:71:38:46:42:8c:0b:87:73:ca: da:39:d3:47:6b:97:53:e0:af:be:e0:0c:19:ad:7f: a4:70:b7:dd:d4:ac:e2:f4:e9:0b:da:da:15:7b:fe: a7:07:c0:e3:9d:ad:1a:2a:95:8c:ba:11:43:00:85: 5c:20:6d:10:60:62:cf:42:16:3b:b3:ea:38:c2:59: 42:81:06:43:e5:ab:e7:0f:c0:72:0b:e3:53:ec:39: c6:c5:e9:5a:fb:f3:de:a2:82:d0:60:5e:13:12:18: 53:8b:c9:25:05:00:d3:da:4c:40:f8:5b:ea:08:f4: 49:52:a8:d2:c7:51:14:fc:f1:f5:9a:fa:a3:05:f1: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B8:80:1B:84:57:81:4D:6B:78:1C:6B:5E:6C:50:9D:ED:C1:C1:EA X509v3 Authority Key Identifier: keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/X7iAG4RXgU1reBxrXmxQne3Bweo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.14.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3e:b6:e9:2e:1b:92:89:a5:fd:6a:2f:82:6d:80:70:6b:83:bb: 78:12:37:c4:9f:99:08:02:60:ea:12:5e:0a:bd:1a:5c:fe:4d: 74:d0:05:3b:cb:77:33:32:7b:ba:aa:67:c5:cc:4f:e4:b4:60: f6:b2:bc:ea:c4:53:cb:d4:4a:ee:04:be:65:9f:e6:4a:e4:10: 04:7c:0a:0b:3a:72:70:6a:b8:c6:97:57:f3:9b:4b:d1:41:0f: cb:2b:25:81:cd:19:6d:a7:89:e2:7a:6e:49:8a:3a:42:25:df: 32:e7:8c:e2:fa:5e:ad:a5:b7:df:8c:0a:f6:d2:e8:b0:6c:52: 2f:3c:c7:63:57:09:4b:27:e6:4c:31:14:5b:a2:57:9c:dd:9e: 09:e4:99:a0:da:c9:b1:b4:3e:1b:d5:cf:b7:e3:6f:4e:0a:38: 7e:b2:24:bb:84:93:9a:6e:38:d5:3d:98:0d:3c:a7:02:9e:61: 55:69:e1:a8:43:7a:40:68:50:13:e2:bc:7a:73:38:ef:d1:b9: 86:ee:23:29:13:6f:2c:40:14:69:92:b8:5f:0c:ca:0e:61:6c: 7a:97:5f:e4:79:9e:32:2e:43:d7:2a:1d:8c:ad:aa:43:9e:dc: 5f:4e:6c:ed:57:96:29:c8:23:c5:41:54:9d:42:b2:67:6b:48: cc:4a:05:6d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNTA3MDEw NjIyMjNaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVGQjg4MDFCODQ1Nzgx NEQ2Qjc4MUM2QjVFNkM1MDlERURDMUMxRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3RUJ+BDbn3+YKcn+sLteq8Yi21nfb0yBQA9w1IwMQ3xGvpRNO DSpKUsoVmBVmL+CRSyiCYH4S/n81I3+6ptlj5Ep9XceueWp2TQzqePXu7rfZZ19L mzxEec7vlIxOswrIRaLasi1cLemwL5h/PLJHbXjbxQqlDvbyBUti+nE4RkKMC4dz yto500drl1Pgr77gDBmtf6Rwt93UrOL06Qva2hV7/qcHwOOdrRoqlYy6EUMAhVwg bRBgYs9CFjuz6jjCWUKBBkPlq+cPwHIL41PsOcbF6Vr7896igtBgXhMSGFOLySUF ANPaTED4W+oI9ElSqNLHURT88fWa+qMF8YG/AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUX7iAG4RXgU1reBxrXmxQne3BweowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf 2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYxL1g3aUFHNFJYZ1UxcmVCeHJYbXhRbmUzQndlby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYODgAwDQYJKoZIhvcNAQELBQADggEBAD626S4bkoml/Wovgm2AcGuDu3gS N8SfmQgCYOoSXgq9Glz+TXTQBTvLdzMye7qqZ8XMT+S0YPayvOrEU8vUSu4EvmWf 5krkEAR8Cgs6cnBquMaXV/ObS9FBD8srJYHNGW2nieJ6bkmKOkIl3zLnjOL6Xq2l t9+MCvbS6LBsUi88x2NXCUsn5kwxFFuiV5zdngnkmaDaybG0PhvVz7fjb04KOH6y JLuEk5puONU9mA08pwKeYVVp4ahDekBoUBPivHpzOO/RuYbuIykTbyxAFGmSuF8M yg5hbHqXX+R5njIuQ9cqHYytqkOe3F9ObO1XlinII8VBVJ1CsmdrSMxKBW0= -----END CERTIFICATE-----Generated at Fri Jul 4 23:44:13 2025 by rpki-client