$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/h4KcxIki4gQY9Hlzx6mzoC9yZKw.roa File: h4KcxIki4gQY9Hlzx6mzoC9yZKw.roa (raw, json) Hash identifier: 7rBc54CpesSuW2VW1i/xFlLfYk0FbaoOFqDr0OC3CaI= Subject key identifier: 87:82:9C:C4:89:22:E2:04:18:F4:79:73:C7:A9:B3:A0:2F:72:64:AC Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0314 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/h4KcxIki4gQY9Hlzx6mzoC9yZKw.roa Signing time: Tue 01 Jul 2025 01:39:55 +0000 ROA not before: Tue 01 Jul 2025 01:39:55 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 9824 IP address blocks: 111.125.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 788 (0x314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 1 01:39:55 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=87829CC48922E20418F47973C7A9B3A02F7264AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:3e:d4:c3:e4:d4:7e:00:cd:2d:a5:5d:3a: c7:d4:d5:49:d1:be:c0:49:09:a7:82:e6:54:ca:86: d7:e8:24:97:2f:68:9a:70:bc:91:1f:91:77:b1:1c: 2d:04:68:27:80:30:8c:e2:c5:7b:e8:77:9f:79:84: 02:85:38:59:e4:68:d9:e7:ad:69:19:f8:23:c3:0c: d0:cd:4c:55:9f:0d:f5:1a:4b:68:24:41:84:c5:5a: e9:2e:8d:c7:f8:fa:5d:ff:0f:cc:f4:61:9e:2b:0b: 5b:23:bf:fe:b5:e8:a8:59:8b:9b:e1:13:28:d2:aa: d7:be:f6:2c:31:f2:68:77:1a:19:28:1c:38:85:94: ed:a0:a3:32:af:13:45:8d:a5:5d:89:cd:20:3a:db: 24:61:43:ad:37:f6:0f:bc:c8:5f:0b:2a:e8:68:bc: 45:ba:4d:6e:de:ce:5c:8b:0e:26:27:e0:30:3f:e9: c4:82:31:b1:e6:28:6b:35:42:6c:56:91:a9:1f:34: b5:f2:0f:78:c3:8d:bb:7b:78:fc:da:92:3a:39:f2: 01:1e:db:52:7a:5b:c7:f0:96:30:84:07:a1:7a:b8: bd:f7:b1:ba:27:a8:61:45:20:31:1f:9f:66:8c:03: bb:4f:fe:c5:85:c4:86:99:36:e4:c7:68:92:07:b4: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:82:9C:C4:89:22:E2:04:18:F4:79:73:C7:A9:B3:A0:2F:72:64:AC X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/h4KcxIki4gQY9Hlzx6mzoC9yZKw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.144.0/21 Signature Algorithm: sha256WithRSAEncryption c3:fd:eb:33:b7:a0:ad:ab:b0:bd:80:10:38:fc:3f:05:bc:65: 2d:24:e0:94:1a:1c:22:51:c2:56:1d:94:81:da:0e:86:3d:bb: 63:08:f4:ef:4c:48:d0:a8:79:31:2d:69:69:5f:13:60:aa:fe: 4d:89:a2:dd:f2:f6:64:1c:0a:49:11:2c:1d:12:69:9a:8a:9c: 1e:2d:b2:3c:8a:95:c3:9c:20:1b:f4:a7:b4:3e:44:35:56:a7: e1:57:39:da:32:da:22:49:51:52:23:40:05:5d:d4:ef:e5:d3: 40:2c:45:85:39:03:f5:9f:ea:20:f8:c6:ae:6d:df:23:c6:85: a8:3d:46:e4:3f:9e:c7:3c:e8:b9:f1:cf:40:2e:4c:d1:2c:0e: e0:07:16:47:bf:d7:0c:ff:b6:52:55:75:26:10:93:45:13:bc: b7:c5:3b:02:fc:d9:1a:9f:a8:be:1d:3b:87:50:04:5f:3a:3c: ea:2b:12:29:14:49:e0:81:7b:e6:a2:bf:7a:f1:fb:1a:05:57: 7c:7e:2a:30:06:b8:66:c7:de:66:85:58:02:71:f3:ed:22:e8: ea:1e:df:a8:14:d4:0c:04:59:8a:dd:c0:09:7e:ab:0f:3d:53: fa:6d:56:c6:a1:7c:24:05:1d:3a:cb:60:52:c9:ef:aa:b0:ca: 68:e0:d3:82 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw MTM5NTVaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3ODI5Q0M0ODkyMkUy MDQxOEY0Nzk3M0M3QTlCM0EwMkY3MjY0QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfuz7Uw+TUfgDNLaVdOsfU1UnRvsBJCaeC5lTKhtfoJJcvaJpw vJEfkXexHC0EaCeAMIzixXvod595hAKFOFnkaNnnrWkZ+CPDDNDNTFWfDfUaS2gk QYTFWukujcf4+l3/D8z0YZ4rC1sjv/616KhZi5vhEyjSqte+9iwx8mh3GhkoHDiF lO2gozKvE0WNpV2JzSA62yRhQ6039g+8yF8LKuhovEW6TW7ezlyLDiYn4DA/6cSC MbHmKGs1QmxWkakfNLXyD3jDjbt7ePzakjo58gEe21J6W8fwljCEB6F6uL33sbon qGFFIDEfn2aMA7tP/sWFxIaZNuTHaJIHtOWTAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUh4KcxIki4gQY9Hlzx6mzoC9yZKwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL2g0S2N4SWtpNGdRWTlIbHp4Nm16b0M5eVpLdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANvfZAwDQYJKoZIhvcNAQELBQADggEBAMP96zO3oK2rsL2AEDj8PwW8ZS0k 4JQaHCJRwlYdlIHaDoY9u2MI9O9MSNCoeTEtaWlfE2Cq/k2Jot3y9mQcCkkRLB0S aZqKnB4tsjyKlcOcIBv0p7Q+RDVWp+FXOdoy2iJJUVIjQAVd1O/l00AsRYU5A/Wf 6iD4xq5t3yPGhag9RuQ/nsc86Lnxz0AuTNEsDuAHFke/1wz/tlJVdSYQk0UTvLfF OwL82RqfqL4dO4dQBF86POorEikUSeCBe+aiv3rx+xoFV3x+KjAGuGbH3maFWAJx 8+0i6Ooe36gU1AwEWYrdwAl+qw89U/ptVsahfCQFHTrLYFLJ76qwymjg04I= -----END CERTIFICATE-----Generated at Fri Jul 4 23:36:27 2025 by rpki-client