$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/FxIG5MBFRWMqXQZx2eYb311_n_I.roa File: FxIG5MBFRWMqXQZx2eYb311_n_I.roa (raw, json) Hash identifier: mMOhJsWgLlV6r9IWbpswNUHEoeSUgXGT/RxZ6Nt1WNg= Subject key identifier: 17:12:06:E4:C0:45:45:63:2A:5D:06:71:D9:E6:1B:DF:5D:7F:9F:F2 Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Certificate serial: 7B Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/FxIG5MBFRWMqXQZx2eYb311_n_I.roa Signing time: Fri 01 Aug 2025 01:28:48 +0000 ROA not before: Fri 01 Aug 2025 01:28:48 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 131934 IP address blocks: 133.226.0.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 18:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318 Validity Not Before: Aug 1 01:28:48 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=171206E4C04545632A5D0671D9E61BDF5D7F9FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:03:01:5c:15:d9:ac:60:fe:7c:4d:64:33: b3:53:88:e6:2e:b3:af:23:b0:06:35:d6:0f:03:90: cf:a4:d5:4a:db:09:2d:a3:d3:9e:ff:50:b2:39:ba: 9f:fb:9d:07:88:14:b0:d3:4a:f0:ca:83:66:54:ca: 36:ac:d4:b7:04:bd:0b:7d:21:f7:99:51:93:cb:b6: a1:5f:6f:6a:e3:4d:f8:d1:2d:76:73:c1:f0:e3:cf: 5a:57:00:35:e8:61:77:39:f3:d7:b7:99:8b:04:0f: 0d:fa:48:60:12:f6:21:9a:23:ff:3d:80:ca:b1:a4: 12:75:58:67:c1:94:8b:68:00:87:61:55:fa:ae:5a: 06:c6:22:8b:e0:50:9f:75:4c:84:34:cb:c5:fb:23: ac:19:16:64:41:4b:4d:57:9d:77:75:c7:92:19:e7: ae:6e:da:c0:0d:fa:65:d1:15:c3:11:05:c9:8a:e5: c5:14:be:f6:c8:9c:ba:cb:7e:c7:bb:91:cd:75:44: 42:ed:8e:9e:b2:d4:f1:35:88:b2:cd:71:7f:0e:1a: 50:ae:b8:66:29:77:16:c8:a6:88:4d:9c:fa:32:8e: ed:bb:ee:5d:dc:68:2e:66:9a:74:c0:c4:3f:e8:0c: c6:0e:17:98:13:81:8a:b3:fa:ff:e2:49:e1:f9:ad: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:06:E4:C0:45:45:63:2A:5D:06:71:D9:E6:1B:DF:5D:7F:9F:F2 X509v3 Authority Key Identifier: keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/FxIG5MBFRWMqXQZx2eYb311_n_I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.226.0.0/20 Signature Algorithm: sha256WithRSAEncryption 47:d4:d9:7f:c4:70:30:c5:bf:c8:43:3d:ad:c8:30:56:0e:19: b0:4c:28:18:89:b8:ef:64:13:7b:3c:08:87:dc:4d:85:a0:b2: fe:09:74:a8:1c:d0:f8:10:6e:85:54:e6:57:ea:08:ac:67:c6: 60:0c:ac:a8:37:cb:d1:23:9f:93:9e:bf:d4:c8:e4:7a:9c:b2: e3:0d:45:21:da:fc:1d:e4:f2:08:4c:f8:6b:d7:63:14:b9:2e: 8f:ac:9f:a3:16:98:e9:9a:bd:b4:1a:d7:c0:65:23:0e:a2:76: a2:35:8d:1e:5a:aa:6e:ea:a8:ef:61:c9:a1:b0:77:0b:b4:11: 93:3e:b5:d5:ab:35:1c:00:29:ed:9a:cc:81:03:82:62:b8:5a: 91:81:4d:f9:f0:27:3f:5b:6d:0a:51:1f:9b:f7:9b:22:3e:58: 72:ab:6e:0f:08:06:fc:f2:6a:6a:69:1c:ce:2d:33:7d:7b:df: 45:ba:d2:bc:a2:da:af:2d:eb:47:1d:8f:4e:25:3e:4b:72:de: 59:22:68:b7:80:df:3e:c8:a7:d8:c3:c1:87:b3:c4:b1:7b:32: 04:e3:2b:be:3f:58:77:52:93:73:ff:5b:c3:3e:2a:ef:86:3e: 49:a0:b3:03:fb:2a:e5:7e:f8:fc:f8:ff:c0:47:73:da:cf:59: 2a:46:ed:39 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTI1MDgwMTAx Mjg0OFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTcxMjA2RTRDMDQ1NDU2 MzJBNUQwNjcxRDlFNjFCREY1RDdGOUZGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ3gAwFcFdmsYP58TWQzs1OI5i6zryOwBjXWDwOQz6TVStsJLaPT nv9Qsjm6n/udB4gUsNNK8MqDZlTKNqzUtwS9C30h95lRk8u2oV9vauNN+NEtdnPB 8OPPWlcANehhdznz17eZiwQPDfpIYBL2IZoj/z2AyrGkEnVYZ8GUi2gAh2FV+q5a BsYii+BQn3VMhDTLxfsjrBkWZEFLTVedd3XHkhnnrm7awA36ZdEVwxEFyYrlxRS+ 9sicust+x7uRzXVEQu2OnrLU8TWIss1xfw4aUK64Zil3FsimiE2c+jKO7bvuXdxo LmaadMDEP+gMxg4XmBOBirP6/+JJ4fmtCasCAwEAAaOCAiQwggIgMB0GA1UdDgQW BBQXEgbkwEVFYypdBnHZ5hvfXX+f8jAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6 SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80NjIvRnhJRzVNQkZSV01xWFFaeDJlWWIzMTFfbl9JLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBIXiADANBgkqhkiG9w0BAQsFAAOCAQEAR9TZf8RwMMW/yEM9rcgwVg4ZsEwo GIm472QTezwIh9xNhaCy/gl0qBzQ+BBuhVTmV+oIrGfGYAysqDfL0SOfk56/1Mjk epyy4w1FIdr8HeTyCEz4a9djFLkuj6yfoxaY6Zq9tBrXwGUjDqJ2ojWNHlqqbuqo 72HJobB3C7QRkz611as1HAAp7ZrMgQOCYrhakYFN+fAnP1ttClEfm/ebIj5Ycqtu DwgG/PJqamkczi0zfXvfRbrSvKLary3rRx2PTiU+S3LeWSJot4DfPsin2MPBh7PE sXsyBOMrvj9Yd1KTc/9bwz4q74Y+SaCzA/sq5X74/Pj/wEdz2s9ZKkbtOQ== -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:18 2025 by rpki-client