$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/-WiIDUooj0SAP5Oz-sIPCqSy7rc.roa File: -WiIDUooj0SAP5Oz-sIPCqSy7rc.roa (raw, json) Hash identifier: exNfWt0z0ReAWbn8Fj4HXeEC8QI06FTKt1V+ODV5oAk= Subject key identifier: F9:68:88:0D:4A:28:8F:44:80:3F:93:B3:FA:C2:0F:0A:A4:B2:EE:B7 Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Certificate serial: 57 Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/-WiIDUooj0SAP5Oz-sIPCqSy7rc.roa Signing time: Fri 01 Aug 2025 01:29:04 +0000 ROA not before: Fri 01 Aug 2025 01:29:04 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 7670 IP address blocks: 61.125.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 17:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Validity Not Before: Aug 1 01:29:04 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=F968880D4A288F44803F93B3FAC20F0AA4B2EEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:35:10:a9:b0:9e:4e:7f:83:09:d7:16:00: 24:9e:d8:9e:e4:ae:b0:8b:66:54:a8:c0:fa:69:50: b2:7f:a1:ec:0a:f3:13:39:77:57:ff:df:12:ef:7d: c1:16:33:a6:90:57:94:6b:26:bf:be:2b:e6:f5:e9: ec:88:e8:20:1f:99:8b:c9:c5:26:7c:67:fc:da:72: 90:28:cd:e0:42:cb:f4:f2:2e:6f:41:ec:96:5b:e9: 88:b7:4c:05:9a:8a:47:ad:a4:1c:48:56:07:90:58: 79:87:09:40:cb:ab:e0:71:ff:60:6e:c4:b4:4b:c7: 79:71:66:1c:39:19:8b:ec:f9:6b:5f:2f:20:25:7a: 4d:1f:0a:d1:34:21:51:2a:21:c8:ba:9f:04:da:f3: b9:59:b6:11:6e:a2:65:b0:71:8e:21:53:06:ef:b4: 15:85:b2:d9:09:2a:8a:15:f2:1e:59:7a:5c:91:31: 01:c3:de:e0:3e:5e:ea:81:52:d2:a7:53:c9:01:72: c0:17:e9:e8:39:e3:30:4e:f3:e2:1b:7d:82:c2:c6: 6d:e2:b7:d1:38:d0:8f:cf:8c:b9:37:84:ce:0c:d1: 57:7c:95:5d:2e:89:7e:b1:84:20:85:94:39:45:dc: 73:6b:3d:f9:c8:9f:5f:8d:16:8e:79:d5:aa:f7:d6: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:68:88:0D:4A:28:8F:44:80:3F:93:B3:FA:C2:0F:0A:A4:B2:EE:B7 X509v3 Authority Key Identifier: keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/-WiIDUooj0SAP5Oz-sIPCqSy7rc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.125.160.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:e3:7c:30:f1:6c:78:65:a8:b6:f8:f8:10:71:99:21:bb:c4: 73:f0:f0:15:4c:83:9f:e0:16:66:34:25:63:22:e4:8c:58:51: 74:2f:3e:b8:53:64:c9:4d:9c:94:6a:aa:33:74:72:9c:a3:6f: 9b:d5:79:e0:8f:ff:e0:78:08:d6:cf:1b:dc:ac:8e:35:d8:27: 76:cb:30:dc:d1:5a:b5:44:a6:c9:7a:4a:cd:59:e5:ba:63:91: d1:fd:0d:01:d6:7d:79:b9:02:07:8a:81:ca:e3:d8:0e:60:a8: 00:f4:a1:20:a4:69:81:75:99:52:3b:be:be:ef:0a:45:d2:c0: 34:c9:ca:41:6e:91:47:7d:b9:94:bb:0d:cc:08:44:71:a3:c9: aa:96:1d:f0:b6:66:6d:ab:8f:8e:bc:7f:7b:91:6b:b7:a6:0f: 02:1d:a7:5d:9a:8d:f4:4e:92:76:fe:ff:93:b0:3f:40:f1:38: a7:19:1c:8c:6c:44:5b:a9:37:2d:bc:6d:da:52:ab:e2:65:d2: 85:f5:c5:7b:e5:8e:a1:c6:7d:83:43:81:67:80:1f:7e:3e:63: c0:fc:38:e5:76:12:97:c4:ed:46:59:ef:c6:10:6f:1e:b1:b3: 2d:d0:d4:99:f1:2a:df:6d:dd:bc:18:26:6c:2b:fc:4c:f5:1d: 00:c3:81:94 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4 Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI1MDgwMTAx MjkwNFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRjk2ODg4MEQ0QTI4OEY0 NDgwM0Y5M0IzRkFDMjBGMEFBNEIyRUVCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL06NRCpsJ5Of4MJ1xYAJJ7YnuSusItmVKjA+mlQsn+h7ArzEzl3 V//fEu99wRYzppBXlGsmv74r5vXp7IjoIB+Zi8nFJnxn/NpykCjN4ELL9PIub0Hs llvpiLdMBZqKR62kHEhWB5BYeYcJQMur4HH/YG7EtEvHeXFmHDkZi+z5a18vICV6 TR8K0TQhUSohyLqfBNrzuVm2EW6iZbBxjiFTBu+0FYWy2QkqihXyHll6XJExAcPe 4D5e6oFS0qdTyQFywBfp6DnjME7z4ht9gsLGbeK30TjQj8+MuTeEzgzRV3yVXS6J frGEIIWUOUXcc2s9+cifX40WjnnVqvfWO8ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBT5aIgNSiiPRIA/k7P6wg8KpLLutzAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21 lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzMvLVdpSURVb29qMFNBUDVPei1zSVBDcVN5N3JjLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBD19oDANBgkqhkiG9w0BAQsFAAOCAQEAG+N8MPFseGWotvj4EHGZIbvEc/Dw FUyDn+AWZjQlYyLkjFhRdC8+uFNkyU2clGqqM3RynKNvm9V54I//4HgI1s8b3KyO Ndgndssw3NFatUSmyXpKzVnlumOR0f0NAdZ9ebkCB4qByuPYDmCoAPShIKRpgXWZ Uju+vu8KRdLANMnKQW6RR325lLsNzAhEcaPJqpYd8LZmbauPjrx/e5Frt6YPAh2n XZqN9E6Sdv7/k7A/QPE4pxkcjGxEW6k3Lbxt2lKr4mXShfXFe+WOocZ9g0OBZ4Af fj5jwPw45XYSl8TtRlnvxhBvHrGzLdDUmfEq323dvBgmbCv8TPUdAMOBlA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:47 2025 by rpki-client