$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q3ZXRUixUraMmho8zKjM5d1uDzk.roa File: Q3ZXRUixUraMmho8zKjM5d1uDzk.roa (raw, json) Hash identifier: Yg6upB+xDnWPyWK0WlQ6AjZpkmNbn17zairLUc8+nQQ= Subject key identifier: 43:76:57:45:48:B1:52:B6:8C:9A:1A:3C:CC:A8:CC:E5:DD:6E:0F:39 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01C5 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q3ZXRUixUraMmho8zKjM5d1uDzk.roa Signing time: Tue 01 Jul 2025 01:34:46 +0000 ROA not before: Tue 01 Jul 2025 01:34:46 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 220.100.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 1 01:34:46 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=4376574548B152B68C9A1A3CCCA8CCE5DD6E0F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:c6:32:6f:46:f0:3e:35:a9:94:76:9b:ca: 06:e6:0d:c6:08:56:06:ad:ac:5e:c5:ab:45:6e:78: b5:04:b9:2b:0d:ae:3a:c7:2f:73:43:6a:ec:ba:05: 70:c4:77:38:fe:a4:bb:0e:20:91:7b:3b:b2:8e:84: eb:51:cc:f8:36:64:88:34:bb:13:8f:f9:f3:52:f0: 3e:3f:91:50:88:43:b6:05:05:bc:d2:21:b2:f0:b0: 35:38:7b:18:4b:55:97:b7:8c:7a:c0:df:44:97:b8: 63:c3:49:17:5c:23:dd:1a:f2:75:1c:8e:3d:f5:53: 70:cb:0d:ee:48:1b:8f:5f:7e:ed:77:02:d5:2f:17: 91:b6:74:a0:46:c2:5e:71:dc:b5:0c:69:8f:01:6f: 82:55:4d:5f:d3:d1:b7:19:6d:b5:36:03:84:94:19: 05:34:8a:f4:a7:4b:5c:52:0a:29:1b:e6:c6:57:85: 2f:21:b2:79:0c:58:d1:c1:99:26:80:b8:18:7d:ff: 97:bb:9c:c2:e7:32:43:b9:92:80:5b:b8:c9:91:fe: 07:1b:c0:aa:67:a8:d8:91:ab:57:69:eb:7e:ad:95: 50:4b:be:67:ee:59:7a:9f:a5:37:4d:42:e4:38:d3: 92:a6:1f:ed:d0:f3:dd:b7:42:6d:97:36:0b:41:20: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:57:45:48:B1:52:B6:8C:9A:1A:3C:CC:A8:CC:E5:DD:6E:0F:39 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q3ZXRUixUraMmho8zKjM5d1uDzk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.100.192.0/18 Signature Algorithm: sha256WithRSAEncryption 06:79:59:c1:a4:7a:a9:ea:ea:19:dd:b2:8f:3d:c6:5f:b3:5c: 01:8e:31:73:76:ae:cc:db:c8:ce:24:88:32:db:08:31:b9:64: 6d:81:88:ff:e6:45:f8:d8:ae:80:7a:24:06:32:63:55:78:ca: 89:ff:d7:41:6d:08:54:4b:af:ca:49:ca:dc:20:74:eb:40:ec: 19:1c:fa:46:d4:39:94:84:75:cb:4c:c2:c4:d0:74:9b:4d:ca: b9:61:d0:54:4e:c0:8a:a4:7c:70:a5:ad:25:71:ab:c1:c6:f0: 6b:ec:9b:ff:dd:a3:82:8c:99:16:41:6b:a2:0f:42:db:05:f0: a4:3c:25:55:86:45:7a:e1:2f:a8:61:bb:fd:19:6f:5f:e1:8f: 31:b3:14:61:0b:9c:2b:45:40:24:b2:25:11:12:34:bb:55:c5: 75:61:28:07:e1:ff:33:78:06:02:b5:06:98:d9:4c:d4:1d:61: 47:40:3d:65:3b:c8:86:43:95:21:00:a5:54:79:21:2b:41:65: 69:f2:72:c0:28:be:14:12:29:23:f5:fc:f7:64:46:8f:a1:04: 8c:60:34:ce:fa:d9:91:1b:e6:e6:7e:b7:f6:33:89:5e:78:ea: 7b:54:5a:35:b8:95:aa:9d:1d:35:ec:89:58:8d:c1:ea:03:9a: 28:0a:40:4e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw MTM0NDZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQzNzY1NzQ1NDhCMTUy QjY4QzlBMUEzQ0NDQThDQ0U1REQ2RTBGMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBM8Yyb0bwPjWplHabygbmDcYIVgatrF7Fq0VueLUEuSsNrjrH L3NDauy6BXDEdzj+pLsOIJF7O7KOhOtRzPg2ZIg0uxOP+fNS8D4/kVCIQ7YFBbzS IbLwsDU4exhLVZe3jHrA30SXuGPDSRdcI90a8nUcjj31U3DLDe5IG49ffu13AtUv F5G2dKBGwl5x3LUMaY8Bb4JVTV/T0bcZbbU2A4SUGQU0ivSnS1xSCikb5sZXhS8h snkMWNHBmSaAuBh9/5e7nMLnMkO5koBbuMmR/gcbwKpnqNiRq1dp636tlVBLvmfu WXqfpTdNQuQ405KmH+3Q8923Qm2XNgtBIIdfAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUQ3ZXRUixUraMmho8zKjM5d1uDzkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvUTNaWFJVaXhVcmFNbWhvOHpLak01ZDF1RHprLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BtxkwDANBgkqhkiG9w0BAQsFAAOCAQEABnlZwaR6qerqGd2yjz3GX7NcAY4xc3au zNvIziSIMtsIMblkbYGI/+ZF+NiugHokBjJjVXjKif/XQW0IVEuvyknK3CB060Ds GRz6RtQ5lIR1y0zCxNB0m03KuWHQVE7AiqR8cKWtJXGrwcbwa+yb/92jgoyZFkFr og9C2wXwpDwlVYZFeuEvqGG7/RlvX+GPMbMUYQucK0VAJLIlERI0u1XFdWEoB+H/ M3gGArUGmNlM1B1hR0A9ZTvIhkOVIQClVHkhK0FlafJywCi+FBIpI/X892RGj6EE jGA0zvrZkRvm5n639jOJXnjqe1RaNbiVqp0dNeyJWI3B6gOaKApATg== -----END CERTIFICATE-----Generated at Fri Jul 4 01:37:20 2025 by rpki-client