$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/vZQFyZsAPkiK-NTT11OeHrAgXvw.roa File: vZQFyZsAPkiK-NTT11OeHrAgXvw.roa (raw, json) Hash identifier: 2298EkWXKQNTC5QNvFDIIqc98WN9ZWDTa3+t6c5aN68= Subject key identifier: BD:94:05:C9:9B:00:3E:48:8A:F8:D4:D3:D7:53:9E:1E:B0:20:5E:FC Certificate issuer: /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA Certificate serial: 3A Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/vZQFyZsAPkiK-NTT11OeHrAgXvw.roa Signing time: Tue 01 Jul 2025 01:31:28 +0000 ROA not before: Tue 01 Jul 2025 01:31:28 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9997 IP address blocks: 103.2.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA Validity Not Before: Jul 1 01:31:28 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=BD9405C99B003E488AF8D4D3D7539E1EB0205EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:ae:0e:8d:41:d9:e4:82:76:90:95:2e:23: e3:2c:1d:f2:3a:ae:4b:24:b1:90:64:22:47:b9:2f: 24:ba:cd:33:e1:e9:75:bd:7b:c7:85:e0:95:4b:43: 7a:59:fb:c4:56:ad:30:08:2c:78:06:99:2e:ec:13: 77:aa:e7:f4:98:0a:bf:03:37:6d:85:e6:0f:b0:f3: ab:33:c3:f4:b5:cf:dd:73:e7:56:a3:09:ff:cb:a0: cb:70:21:36:63:a0:ff:5c:fc:52:34:97:10:b7:7b: ad:28:57:95:70:2d:eb:82:34:90:90:91:66:ad:fd: 8a:b5:17:bb:8c:48:fe:35:b9:4d:63:19:b9:da:8b: 26:b8:ca:b4:23:02:83:71:74:7b:98:51:cc:1a:e0: f6:b1:af:9e:de:22:b0:a0:7e:e0:9f:57:cb:4a:d7: 6a:78:92:83:e5:58:68:ed:61:95:f5:31:7c:ee:ae: 17:b5:97:b2:76:30:69:0a:73:dd:1a:11:15:87:d3: 3e:0a:26:9a:53:2a:21:15:28:80:86:4d:3c:2e:61: e2:f2:6e:ff:c8:41:f7:7d:ed:1e:95:ca:6e:0b:03: bc:e4:e9:7f:9c:f8:e6:e3:d7:58:b0:d4:2c:a3:62: c2:b3:69:0c:66:5e:09:3c:6c:4b:ee:05:80:75:a1: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:94:05:C9:9B:00:3E:48:8A:F8:D4:D3:D7:53:9E:1E:B0:20:5E:FC X509v3 Authority Key Identifier: keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/vZQFyZsAPkiK-NTT11OeHrAgXvw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.36.0/22 Signature Algorithm: sha256WithRSAEncryption 02:20:6e:88:d1:12:32:e2:15:98:02:7f:7e:0c:8c:f7:f6:22: 21:49:e9:1f:24:21:c9:59:d0:80:da:9f:f9:21:89:d4:8f:08: d5:f6:ab:39:b2:b8:19:1a:e6:8d:4d:61:6e:57:ab:7a:fa:8b: 04:de:9f:d7:9e:d0:74:8a:70:32:58:de:24:cb:ed:2b:ae:bc: 30:b2:0a:b6:e4:17:f3:3d:1e:15:2e:77:18:79:5a:3d:74:a9: 00:73:18:a2:03:b6:ff:19:df:15:76:a7:d3:1e:58:15:a0:15: 7c:09:91:64:a3:21:0a:bd:2b:9f:0c:69:74:0a:68:2c:f9:37: 74:85:96:3e:d1:37:e8:b5:05:ee:55:65:50:96:16:8c:7d:0f: 15:ab:79:54:20:02:24:43:53:2e:4e:3b:d1:08:89:68:76:2b: 98:aa:e9:0e:14:26:15:5f:1c:c2:af:65:8a:d0:d2:85:d6:04: 28:71:33:c2:9a:22:29:7e:d8:fe:6f:b8:67:80:4f:a7:fd:0d: c0:a9:24:7d:12:3f:a2:48:09:00:18:5e:17:bf:00:54:88:3a: f7:9e:a4:27:63:41:1d:96:85:d7:05:ef:49:a9:fd:64:21:ff: ef:ab:ad:9d:2f:06:f1:0b:14:36:e5:97:5e:64:22:b5:33:f3: 77:13:1d:d3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI1MDcwMTAx MzEyOFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQkQ5NDA1Qzk5QjAwM0U0 ODhBRjhENEQzRDc1MzlFMUVCMDIwNUVGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALkxrg6NQdnkgnaQlS4j4ywd8jquSySxkGQiR7kvJLrNM+Hpdb17 x4XglUtDeln7xFatMAgseAaZLuwTd6rn9JgKvwM3bYXmD7DzqzPD9LXP3XPnVqMJ /8ugy3AhNmOg/1z8UjSXELd7rShXlXAt64I0kJCRZq39irUXu4xI/jW5TWMZudqL JrjKtCMCg3F0e5hRzBrg9rGvnt4isKB+4J9Xy0rXaniSg+VYaO1hlfUxfO6uF7WX snYwaQpz3RoRFYfTPgommlMqIRUogIZNPC5h4vJu/8hB933tHpXKbgsDvOTpf5z4 5uPXWLDULKNiwrNpDGZeCTxsS+4FgHWhdJsCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBS9lAXJmwA+SIr41NPXU54esCBe/DAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2 OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NDYvdlpRRnlac0FQa2lLLU5UVDExT2VIckFnWHZ3LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcCJDANBgkqhkiG9w0BAQsFAAOCAQEAAiBuiNESMuIVmAJ/fgyM9/YiIUnp HyQhyVnQgNqf+SGJ1I8I1farObK4GRrmjU1hblerevqLBN6f157QdIpwMljeJMvt K668MLIKtuQX8z0eFS53GHlaPXSpAHMYogO2/xnfFXan0x5YFaAVfAmRZKMhCr0r nwxpdApoLPk3dIWWPtE36LUF7lVlUJYWjH0PFat5VCACJENTLk470QiJaHYrmKrp DhQmFV8cwq9litDShdYEKHEzwpoiKX7Y/m+4Z4BPp/0NwKkkfRI/okgJABheF78A VIg6956kJ2NBHZaF1wXvSan9ZCH/76utnS8G8QsUNuWXXmQitTPzdxMd0w== -----END CERTIFICATE-----Generated at Fri Jul 4 23:33:17 2025 by rpki-client