$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/iYjg0_cWFuVbA1z-H4YpakhIBnM.roa File: iYjg0_cWFuVbA1z-H4YpakhIBnM.roa (raw, json) Hash identifier: X5JkjiTx1OruriHKAgv4NUC6jX/T5M0/bdbk4Qb1lOc= Subject key identifier: 89:88:E0:D3:F7:16:16:E5:5B:03:5C:FE:1F:86:29:6A:48:48:06:73 Certificate issuer: /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA Certificate serial: 3D Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/iYjg0_cWFuVbA1z-H4YpakhIBnM.roa Signing time: Tue 01 Jul 2025 01:31:30 +0000 ROA not before: Tue 01 Jul 2025 01:31:30 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9997 IP address blocks: 203.171.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA Validity Not Before: Jul 1 01:31:30 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=8988E0D3F71616E55B035CFE1F86296A48480673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:64:81:d8:47:a3:4b:8b:3a:8c:6b:76:7d: 41:38:b7:69:d5:21:5a:f8:a5:fe:db:3e:e0:cb:fb: 9b:f0:3d:03:a0:91:70:fc:39:c7:e5:fc:c4:15:f5: 57:55:81:af:2d:93:b7:78:30:14:a0:53:53:98:92: 5e:0c:1d:5e:93:18:ba:5c:94:0a:8e:41:13:36:8d: c2:f5:89:3d:6b:ab:25:85:8c:d0:4b:8f:ef:74:8e: f1:1b:60:28:39:76:b7:a0:2f:35:62:2f:66:7b:01: c1:7d:51:be:76:2c:6a:41:9e:ea:4d:be:ce:e0:03: 93:4a:da:05:62:41:c3:7e:e2:88:36:fa:2f:bf:46: 40:d4:a9:aa:54:3b:6a:56:54:ba:ac:5f:26:67:8d: 3e:fa:91:50:a5:94:9e:af:0e:00:f9:a4:87:08:b8: 8a:e0:4f:ab:62:69:09:8f:12:8d:ce:58:75:ed:b2: ab:3e:4b:6a:1f:a5:ff:b1:2d:14:f9:35:65:c5:7f: 30:6a:7a:bf:8a:0b:0c:14:c3:57:7f:14:96:3c:86: 9c:da:1c:d3:85:1f:ab:51:3a:bb:ee:4c:0b:6a:a0: 57:ab:f0:d1:e3:7d:65:f2:9b:35:de:b4:a2:a0:4e: f3:bd:ad:03:62:14:d5:8d:63:a9:d0:4b:51:ef:b9: 61:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:88:E0:D3:F7:16:16:E5:5B:03:5C:FE:1F:86:29:6A:48:48:06:73 X509v3 Authority Key Identifier: keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/iYjg0_cWFuVbA1z-H4YpakhIBnM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.171.8.0/21 Signature Algorithm: sha256WithRSAEncryption a2:56:46:ec:a2:a2:77:9b:ec:b7:db:c6:82:71:44:5b:2b:96: 63:4f:47:15:bb:3e:b6:d9:b9:88:da:ea:63:74:b4:d2:eb:2d: ba:a7:f3:ab:0d:f8:09:37:22:7d:c8:c9:da:a6:4a:40:0e:a7: 25:07:30:c2:71:3b:79:43:32:db:af:f2:86:8b:95:86:23:b4: bf:d5:da:4c:7c:6d:a6:bd:74:8e:af:04:82:0e:f4:ce:04:43: 88:f6:78:cc:69:00:8a:71:be:fc:a5:17:6a:df:29:64:8f:63: 95:9c:06:9a:17:ea:90:b0:7f:7a:89:e2:f2:1b:2b:77:1c:1e: e3:12:c9:9c:08:71:b9:14:81:51:6e:01:0c:e1:a1:ba:43:0d: 72:3d:bd:28:2f:3b:79:6d:99:9d:75:ce:37:e6:59:23:2f:bb: e8:31:47:c6:02:15:cd:49:7d:4b:db:ac:7d:d2:bc:20:30:d4: 17:8d:10:1e:a7:b7:93:4d:f0:93:2d:55:48:1d:2d:01:4f:5d: 12:a3:5e:0a:bd:7c:89:34:a4:2e:79:c5:32:a0:1e:36:ca:06: 82:b0:1f:19:74:e1:fc:77:5f:3b:cc:03:7a:cc:cf:43:05:1b: 9d:1c:c9:86:d0:12:d8:95:90:af:61:c3:00:d0:73:fe:b0:c8: 54:fe:0d:02 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI1MDcwMTAx MzEzMFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoODk4OEUwRDNGNzE2MTZF NTVCMDM1Q0ZFMUY4NjI5NkE0ODQ4MDY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMNjZIHYR6NLizqMa3Z9QTi3adUhWvil/ts+4Mv7m/A9A6CRcPw5 x+X8xBX1V1WBry2Tt3gwFKBTU5iSXgwdXpMYulyUCo5BEzaNwvWJPWurJYWM0EuP 73SO8RtgKDl2t6AvNWIvZnsBwX1RvnYsakGe6k2+zuADk0raBWJBw37iiDb6L79G QNSpqlQ7alZUuqxfJmeNPvqRUKWUnq8OAPmkhwi4iuBPq2JpCY8Sjc5Yde2yqz5L ah+l/7EtFPk1ZcV/MGp6v4oLDBTDV38UljyGnNoc04Ufq1E6u+5MC2qgV6vw0eN9 ZfKbNd60oqBO872tA2IU1Y1jqdBLUe+5YW8CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSJiODT9xYW5VsDXP4fhilqSEgGczAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2 OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDYvaVlqZzBfY1dGdVZiQTF6LUg0WXBha2hJQm5NLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8urCDANBgkqhkiG9w0BAQsFAAOCAQEAolZG7KKid5vst9vGgnFEWyuWY09H Fbs+ttm5iNrqY3S00ustuqfzqw34CTcifcjJ2qZKQA6nJQcwwnE7eUMy26/yhouV hiO0v9XaTHxtpr10jq8Egg70zgRDiPZ4zGkAinG+/KUXat8pZI9jlZwGmhfqkLB/ eoni8hsrdxwe4xLJnAhxuRSBUW4BDOGhukMNcj29KC87eW2ZnXXON+ZZIy+76DFH xgIVzUl9S9usfdK8IDDUF40QHqe3k03wky1VSB0tAU9dEqNeCr18iTSkLnnFMqAe NsoGgrAfGXTh/HdfO8wDeszPQwUbnRzJhtAS2JWQr2HDANBz/rDIVP4NAg== -----END CERTIFICATE-----Generated at Fri Jul 4 22:21:09 2025 by rpki-client