$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WgHbhqTbUrXfonvVZ5nerYw72dk.roa File: WgHbhqTbUrXfonvVZ5nerYw72dk.roa (raw, json) Hash identifier: WwLV1ySoaOP7rQbOexOgOqAVK0xX43AT5aFSLxfDtIQ= Subject key identifier: 5A:01:DB:86:A4:DB:52:B5:DF:A2:7B:D5:67:99:DE:AD:8C:3B:D9:D9 Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Certificate serial: 01C6 Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WgHbhqTbUrXfonvVZ5nerYw72dk.roa Signing time: Tue 01 Jul 2025 01:34:46 +0000 ROA not before: Tue 01 Jul 2025 01:34:46 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 2497 IP address blocks: 220.156.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9 Validity Not Before: Jul 1 01:34:46 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=5A01DB86A4DB52B5DFA27BD56799DEAD8C3BD9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:ad:79:f1:58:a4:3d:97:95:e8:08:e2:33: cd:5c:ec:34:9b:57:ef:71:47:8d:4d:d2:e8:d2:d8: da:f4:7a:c6:2c:24:3a:bf:13:f8:f5:c2:7f:26:86: 21:8a:ec:96:90:6f:bd:24:40:00:5a:aa:55:9c:34: e8:d0:56:84:3f:65:93:be:a8:4e:e1:10:0c:74:aa: 89:3a:6c:cd:0b:f4:8e:59:27:03:e9:97:4e:6c:80: 92:40:ff:59:6b:4d:99:02:67:73:4d:d1:67:c7:39: b8:5e:27:fd:31:08:78:5a:a7:49:29:14:b7:d3:4b: 8d:e9:a1:d2:5c:50:66:db:15:4b:5c:0e:b1:06:d9: 99:54:be:9c:69:78:6c:05:cd:86:4d:c0:14:2b:0e: 40:56:f0:69:cd:e6:6f:0b:bf:dd:4a:c8:83:ff:7a: ab:9b:04:08:d9:b8:75:38:bd:b3:0d:71:0b:39:f9: 8a:1b:f3:a5:f3:bf:9f:7f:28:82:cd:bb:28:e8:c9: e3:44:93:8d:92:7d:c3:cb:d2:9f:d6:1f:30:14:e8: 3c:2d:07:00:45:97:74:e0:e2:74:63:4e:1c:a3:8c: a4:33:c5:4a:67:b3:4a:33:c7:31:92:37:53:9a:f1: 1c:a2:e7:2f:f0:ca:2c:45:08:80:10:66:00:8b:2a: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:01:DB:86:A4:DB:52:B5:DF:A2:7B:D5:67:99:DE:AD:8C:3B:D9:D9 X509v3 Authority Key Identifier: keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WgHbhqTbUrXfonvVZ5nerYw72dk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.156.128.0/19 Signature Algorithm: sha256WithRSAEncryption 2b:4c:84:5f:4b:4f:8e:38:01:4a:12:18:65:65:a7:1a:6f:32: de:ca:fb:f3:cb:e9:54:cb:62:7c:00:a7:e1:e7:01:7e:7e:1e: 42:df:5a:87:9f:37:5e:35:b6:ed:89:bc:34:2d:2d:e9:ab:4c: 20:11:fd:0d:2c:48:12:02:a5:60:23:bc:98:bc:86:f4:01:98: 22:26:be:ba:26:25:a2:43:53:f6:0c:33:f7:2a:a6:02:a0:b3: 4d:4d:c0:0b:f7:d3:f6:51:6f:a6:59:95:92:8a:fa:eb:4d:1f: 27:5c:ef:a6:88:ec:f2:9c:20:7d:25:a1:96:2b:8e:82:8d:8d: 29:a5:cf:e6:11:9e:dd:70:4a:f0:67:fe:e1:c8:4c:1b:3b:8a: 45:32:b5:0b:b7:4b:f7:4b:67:e4:38:74:1b:22:15:a9:b3:52: f5:97:2d:69:61:f1:76:d6:b7:43:c3:a4:9a:b0:a1:3d:2b:5e: 6b:3d:99:7d:b7:00:28:8b:8f:d7:e8:b5:fc:1e:49:d8:73:f4: 7d:61:cf:42:17:f9:77:25:38:cb:d0:e5:77:cc:6f:ec:ae:db: 90:32:60:3e:9f:f4:63:af:3b:36:71:48:15:76:c3:e1:22:8c: 3d:a5:82:58:ba:38:0e:bc:6a:7b:80:f6:a0:3d:32:1f:3d:aa: 65:33:e9:cb -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4 M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNTA3MDEw MTM0NDZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVBMDFEQjg2QTREQjUy QjVERkEyN0JENTY3OTlERUFEOEMzQkQ5RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3Hq158VikPZeV6AjiM81c7DSbV+9xR41N0ujS2Nr0esYsJDq/ E/j1wn8mhiGK7JaQb70kQABaqlWcNOjQVoQ/ZZO+qE7hEAx0qok6bM0L9I5ZJwPp l05sgJJA/1lrTZkCZ3NN0WfHObheJ/0xCHhap0kpFLfTS43podJcUGbbFUtcDrEG 2ZlUvpxpeGwFzYZNwBQrDkBW8GnN5m8Lv91KyIP/equbBAjZuHU4vbMNcQs5+Yob 86Xzv59/KILNuyjoyeNEk42SfcPL0p/WHzAU6DwtBwBFl3Tg4nRjThyjjKQzxUpn s0ozxzGSN1Oa8Ryi5y/wyixFCIAQZgCLKmjLAgMBAAGjggIgMIICHDAdBgNVHQ4E FgQUWgHbhqTbUrXfonvVZ5nerYw72dkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvV2dIYmhxVGJVclhmb252Vlo1bmVyWXc3MmRrLnJvYTBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdycgDANBgkqhkiG9w0BAQsFAAOCAQEAK0yEX0tPjjgBShIYZWWnGm8y3sr788vp VMtifACn4ecBfn4eQt9ah583XjW27Ym8NC0t6atMIBH9DSxIEgKlYCO8mLyG9AGY Iia+uiYlokNT9gwz9yqmAqCzTU3AC/fT9lFvplmVkor6600fJ1zvpojs8pwgfSWh liuOgo2NKaXP5hGe3XBK8Gf+4chMGzuKRTK1C7dL90tn5Dh0GyIVqbNS9ZctaWHx dta3Q8OkmrChPSteaz2ZfbcAKIuP1+i1/B5J2HP0fWHPQhf5dyU4y9Dld8xv7K7b kDJgPp/0Y687NnFIFXbD4SKMPaWCWLo4Drxqe4D2oD0yHz2qZTPpyw== -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:52 2025 by rpki-client