$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/C3DvnLBgTo8D1v6qDlZHJ_tmJtA.roa File: C3DvnLBgTo8D1v6qDlZHJ_tmJtA.roa (raw, json) Hash identifier: Pwk8U4lx66bD78yXfN9zimuSBoaAvFA2vACM8dUvaEg= Subject key identifier: 0B:70:EF:9C:B0:60:4E:8F:03:D6:FE:AA:0E:56:47:27:FB:66:26:D0 Certificate issuer: /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Certificate serial: 5F Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/C3DvnLBgTo8D1v6qDlZHJ_tmJtA.roa Signing time: Fri 01 Aug 2025 01:29:10 +0000 ROA not before: Fri 01 Aug 2025 01:29:10 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 7670 IP address blocks: 219.118.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 18:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C Validity Not Before: Aug 1 01:29:10 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=0B70EF9CB0604E8F03D6FEAA0E564727FB6626D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:13:64:ac:f8:61:96:68:12:d0:cf:13:36: a6:0a:3b:87:cf:3f:01:91:34:c2:4e:a6:02:83:9c: 7b:76:51:6f:b0:6c:d6:8f:b8:66:3d:09:1d:9c:2b: fa:e5:af:5f:d0:ed:95:dd:61:2f:ff:ed:46:de:05: 71:92:96:dd:40:82:4f:00:90:9b:02:87:a8:39:5d: b0:b5:d3:09:17:3c:b6:62:f1:f6:74:6f:41:d8:81: 87:db:fd:f7:57:6f:7b:c5:ef:fd:90:12:33:cb:6c: 52:16:d1:93:0d:34:2b:be:1f:c5:1e:d7:7e:2c:84: 5b:e8:73:d8:8d:17:10:57:4a:f1:60:77:65:4b:51: e6:77:30:a9:0e:b6:c0:cd:d8:f7:c6:c1:a5:f5:77: 36:0b:06:aa:c6:06:49:6c:7c:89:43:97:fa:fd:30: dc:10:d1:fb:22:b2:a7:6a:61:7d:70:18:01:e5:f9: 32:21:58:27:55:38:b1:21:e2:52:2e:0d:f9:1d:34: de:0c:d5:20:79:12:28:d5:95:91:0e:2d:87:52:b6: 35:68:c1:a9:7d:f4:33:75:5b:6d:0b:68:5d:81:92: df:00:7b:88:fa:a4:df:cf:3f:98:a1:77:3d:a1:b0: da:1e:9e:ee:e2:a6:23:95:3f:cb:97:5c:5c:bb:98: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:70:EF:9C:B0:60:4E:8F:03:D6:FE:AA:0E:56:47:27:FB:66:26:D0 X509v3 Authority Key Identifier: keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/C3DvnLBgTo8D1v6qDlZHJ_tmJtA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.118.32.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:b5:24:2d:be:cf:a7:8e:41:24:45:55:7e:05:98:cc:1f:ba: 4f:a5:79:9b:d0:cd:8d:99:e2:5c:52:38:fe:7d:f9:dc:22:59: df:45:8c:c3:f5:f0:85:cd:f6:fc:9b:bc:66:a8:3f:ac:04:06: 27:ce:ec:f2:c1:95:8b:75:50:01:4f:dc:94:5a:49:ba:da:1d: 8a:42:86:5c:42:47:82:1b:d6:59:d4:05:cd:7a:b3:91:41:0d: ac:43:5d:84:16:7a:1d:56:13:9f:21:17:a6:c4:9e:ed:20:be: 67:b2:3f:67:be:5c:6c:62:4c:2f:ea:60:29:c1:86:67:e3:20: 52:61:d7:f6:67:21:0e:0f:91:43:40:0b:6d:1b:8f:67:45:55: eb:9c:15:7a:9a:9d:81:9f:4a:41:23:e3:11:1d:4c:c8:39:e1: 65:71:cb:93:ae:d9:7e:50:6c:c9:f6:95:b1:16:05:90:17:43: 9c:10:bd:21:75:43:aa:db:40:2b:23:4c:d1:84:5d:aa:ea:53: 3a:e7:3d:99:38:f3:7d:93:98:24:ad:7e:c7:3f:08:4c:73:b6: dd:9e:85:87:34:c2:00:13:ab:da:28:2a:96:2f:59:bb:be:25: da:75:03:a4:8c:69:9f:7f:46:c7:21:b2:c7:81:9c:a4:a0:4a: 4a:df:7f:ab -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4 Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI1MDgwMTAx MjkxMFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMEI3MEVGOUNCMDYwNEU4 RjAzRDZGRUFBMEU1NjQ3MjdGQjY2MjZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMEdE2Ss+GGWaBLQzxM2pgo7h88/AZE0wk6mAoOce3ZRb7Bs1o+4 Zj0JHZwr+uWvX9Dtld1hL//tRt4FcZKW3UCCTwCQmwKHqDldsLXTCRc8tmLx9nRv QdiBh9v991dve8Xv/ZASM8tsUhbRkw00K74fxR7XfiyEW+hz2I0XEFdK8WB3ZUtR 5ncwqQ62wM3Y98bBpfV3NgsGqsYGSWx8iUOX+v0w3BDR+yKyp2phfXAYAeX5MiFY J1U4sSHiUi4N+R003gzVIHkSKNWVkQ4th1K2NWjBqX30M3VbbQtoXYGS3wB7iPqk 388/mKF3PaGw2h6e7uKmI5U/y5dcXLuYc9ECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQLcO+csGBOjwPW/qoOVkcn+2Ym0DAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21 lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzMvQzNEdm5MQmdUbzhEMXY2cURsWkhKX3RtSnRBLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBNt2IDANBgkqhkiG9w0BAQsFAAOCAQEAG7UkLb7Pp45BJEVVfgWYzB+6T6V5 m9DNjZniXFI4/n353CJZ30WMw/Xwhc32/Ju8Zqg/rAQGJ87s8sGVi3VQAU/clFpJ utodikKGXEJHghvWWdQFzXqzkUENrENdhBZ6HVYTnyEXpsSe7SC+Z7I/Z75cbGJM L+pgKcGGZ+MgUmHX9mchDg+RQ0ALbRuPZ0VV65wVepqdgZ9KQSPjER1MyDnhZXHL k67ZflBsyfaVsRYFkBdDnBC9IXVDqttAKyNM0YRdqupTOuc9mTjzfZOYJK1+xz8I THO23Z6FhzTCABOr2igqli9Zu74l2nUDpIxpn39GxyGyx4GcpKBKSt9/qw== -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:08 2025 by rpki-client