$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/2uf2uTfFHHmt3trSMaG8LIKVbmw.roa File: 2uf2uTfFHHmt3trSMaG8LIKVbmw.roa (raw, json) Hash identifier: rqIKGUcOtx1zpPq0alUNf5qbj7HpgEtKJZk1W+py4J0= Subject key identifier: DA:E7:F6:B9:37:C5:1C:79:AD:DE:DA:D2:31:A1:BC:2C:82:95:6E:6C Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 031C Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2uf2uTfFHHmt3trSMaG8LIKVbmw.roa Signing time: Tue 01 Jul 2025 01:47:16 +0000 ROA not before: Tue 01 Jul 2025 01:47:16 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9824 IP address blocks: 219.100.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 1 01:47:16 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=DAE7F6B937C51C79ADDEDAD231A1BC2C82956E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:43:02:d2:ab:de:b0:e9:bd:79:6a:57:a6: 7a:01:b2:42:36:2f:78:15:ff:f1:6e:2e:e0:24:e6: 72:d1:35:d3:7c:64:67:e5:fa:5a:ab:2d:12:57:66: 0e:94:58:98:f6:7c:64:ea:a0:64:80:18:38:fe:de: a2:96:99:1b:c1:e8:ca:23:da:f9:3f:9d:b0:5e:f6: c2:1a:95:af:87:7f:b3:44:0d:3e:fa:11:86:9a:40: f2:22:a3:2e:5d:63:19:1b:56:ee:98:15:3f:23:e2: 3c:d3:33:53:7a:11:24:f2:e9:6e:27:9d:c7:18:ea: 6c:e0:cd:2d:cd:f6:88:eb:14:d5:78:6e:08:20:81: cf:83:8b:70:d2:c1:80:06:b2:68:c8:95:8f:bc:4c: 24:ec:ae:e1:10:85:32:eb:5d:69:2c:00:bc:29:91: 50:6e:0d:4e:d3:ff:32:84:b3:16:46:13:c9:f9:93: 6d:5b:64:af:ba:fb:a5:3f:63:e7:80:74:71:17:e3: e6:a7:e3:26:e3:77:17:dd:7e:70:03:7d:e3:45:df: 4a:89:f3:90:9f:ae:ee:30:f4:0c:40:f1:01:ea:ce: ec:b1:15:b8:3a:1b:de:2a:d8:ab:c4:9e:c3:ad:43: 00:60:9e:0a:50:8d:63:62:4e:fe:3a:3d:ab:4d:1f: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E7:F6:B9:37:C5:1C:79:AD:DE:DA:D2:31:A1:BC:2C:82:95:6E:6C X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/2uf2uTfFHHmt3trSMaG8LIKVbmw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.100.152.0/22 Signature Algorithm: sha256WithRSAEncryption 32:f6:56:33:f8:64:af:60:62:37:8a:8b:11:1d:28:f3:f4:c1: 21:7c:c5:1c:8d:65:d5:34:e1:3a:c3:02:5f:34:78:bc:a5:a2: 3f:74:96:2a:8a:8d:e1:f1:e3:38:64:c6:b4:88:b0:c0:e5:54: 66:e7:75:fd:a7:61:e2:d8:fa:79:d4:84:1f:b0:13:73:84:6a: ef:51:e0:3d:78:0b:8f:8a:b2:d3:7e:1b:60:9b:17:49:7e:b4: 79:11:0a:66:f0:53:a1:9c:6d:bc:f9:87:2e:9f:d4:48:1b:48: 2f:d1:df:1f:41:df:ec:5a:74:71:83:55:7f:63:94:92:88:cc: 06:93:79:28:eb:35:ca:65:82:e0:a8:2f:af:e6:b3:00:ad:dc: 45:05:62:91:21:48:92:1a:4c:02:af:6a:cb:a4:c7:e0:6b:57: 4b:1c:02:80:32:ee:41:8f:f3:1b:d5:11:bc:60:f0:5a:b4:0c: 78:21:ca:47:22:5c:05:3b:90:00:0f:d4:ba:67:4e:d2:9b:89: df:74:02:e9:28:0c:d4:28:ef:63:20:a4:22:c8:dc:1a:bc:f5: 67:9d:88:22:bb:71:1f:2c:01:e7:37:3f:65:e6:9c:62:92:ea: 7b:75:e8:98:a6:99:15:24:9b:55:10:65:55:85:77:75:49:bf: 79:1a:61:70 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw MTQ3MTZaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBRTdGNkI5MzdDNTFD NzlBRERFREFEMjMxQTFCQzJDODI5NTZFNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhtUMC0qvesOm9eWpXpnoBskI2L3gV//FuLuAk5nLRNdN8ZGfl +lqrLRJXZg6UWJj2fGTqoGSAGDj+3qKWmRvB6Moj2vk/nbBe9sIala+Hf7NEDT76 EYaaQPIioy5dYxkbVu6YFT8j4jzTM1N6ESTy6W4nnccY6mzgzS3N9ojrFNV4bggg gc+Di3DSwYAGsmjIlY+8TCTsruEQhTLrXWksALwpkVBuDU7T/zKEsxZGE8n5k21b ZK+6+6U/Y+eAdHEX4+an4ybjdxfdfnADfeNF30qJ85Cfru4w9AxA8QHqzuyxFbg6 G94q2KvEnsOtQwBgngpQjWNiTv46PatNH6v3AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQU2uf2uTfFHHmt3trSMaG8LIKVbmwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxLzJ1ZjJ1VGZGSEhtdDN0clNNYUc4TElLVmJtdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALbZJgwDQYJKoZIhvcNAQELBQADggEBADL2VjP4ZK9gYjeKixEdKPP0wSF8 xRyNZdU04TrDAl80eLyloj90liqKjeHx4zhkxrSIsMDlVGbndf2nYeLY+nnUhB+w E3OEau9R4D14C4+KstN+G2CbF0l+tHkRCmbwU6Gcbbz5hy6f1EgbSC/R3x9B3+xa dHGDVX9jlJKIzAaTeSjrNcplguCoL6/mswCt3EUFYpEhSJIaTAKvasukx+BrV0sc AoAy7kGP8xvVEbxg8Fq0DHghykciXAU7kAAP1LpnTtKbid90AukoDNQo72MgpCLI 3Bq89WediCK7cR8sAec3P2XmnGKS6nt16JimmRUkm1UQZVWFd3VJv3kaYXA= -----END CERTIFICATE-----Generated at Sat Jul 5 07:12:31 2025 by rpki-client