$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/msOk2kaA8NXZxE3ig8zkDPprKgo.roa File: msOk2kaA8NXZxE3ig8zkDPprKgo.roa (raw, json) Hash identifier: 1lBP15dnSScZhoja+MBFCIKbXcOABfWmmm6E0NuEv00= Subject key identifier: 9A:C3:A4:DA:46:80:F0:D5:D9:C4:4D:E2:83:CC:E4:0C:FA:6B:2A:0A Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 0315 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/msOk2kaA8NXZxE3ig8zkDPprKgo.roa Signing time: Tue 01 Jul 2025 01:39:55 +0000 ROA not before: Tue 01 Jul 2025 01:39:55 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 18134 IP address blocks: 203.217.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Jul 1 01:39:55 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=9AC3A4DA4680F0D5D9C44DE283CCE40CFA6B2A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:5c:e8:c2:98:ed:e1:64:02:e4:61:eb:b9: 29:90:1c:bb:6f:82:56:ef:54:c4:6f:62:0a:b7:2d: a1:b8:9e:ef:11:fb:e4:fa:ed:9e:08:0a:23:27:43: 7b:29:b6:6d:e3:00:bf:cf:8d:81:2f:12:d8:46:8d: 96:2e:b4:cb:2f:70:93:51:c0:af:05:99:58:f4:b4: 78:55:8b:2c:11:08:c0:88:f4:3f:c3:93:62:4b:c0: 9d:77:7a:35:68:39:1a:84:d2:6d:ea:41:1f:09:61: 01:84:8c:09:ad:54:88:42:d7:c0:6a:2d:e6:2b:43: 70:dd:e5:e7:2c:bb:db:5f:41:a6:7d:19:2a:b4:f7: 78:41:18:e9:78:36:71:4e:d4:84:a7:fa:37:68:17: 3d:c5:c1:44:61:f6:ac:2f:62:c1:cb:74:be:53:39: 38:81:42:ac:64:7c:25:57:4f:3c:40:dc:65:92:41: ee:44:ab:80:e6:b1:9b:5f:6d:c8:2e:94:59:04:e1: 73:2c:95:36:1f:a1:b2:37:78:90:a7:38:04:ae:6d: e6:0d:e5:8b:5e:c0:0b:75:d3:30:7c:df:0a:62:bc: ba:7b:db:09:c3:f4:7e:bf:90:ca:ca:2c:67:48:01: ba:7b:ba:90:6d:c7:f4:20:73:ea:b9:94:7e:c2:e7: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C3:A4:DA:46:80:F0:D5:D9:C4:4D:E2:83:CC:E4:0C:FA:6B:2A:0A X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/msOk2kaA8NXZxE3ig8zkDPprKgo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.217.180.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:5d:9f:43:54:e2:ee:a3:f7:4c:22:c9:6f:8b:2d:7e:d6:08: aa:c9:21:3d:92:d7:0f:cb:ac:61:2c:e9:cd:07:1f:4b:b3:d6: 1b:b5:46:4a:84:f4:68:ce:e4:65:0c:56:bd:ea:81:40:00:0a: 9d:a9:eb:4b:0f:17:20:71:a8:ae:95:07:58:6e:46:c7:dd:8e: f1:80:3e:fb:02:f4:bf:13:74:86:70:1e:8a:c8:91:cf:aa:68: 70:79:ce:d2:99:37:c8:65:90:97:27:b9:ee:4c:33:78:e0:42: a5:2c:f2:95:6f:73:a8:6c:81:a1:74:5b:70:58:e1:92:c3:53: 41:4b:0a:54:4d:4e:f0:82:7a:e1:92:d4:8b:82:14:49:69:82: a0:bf:30:8d:7f:8f:40:12:26:95:49:7e:a5:0b:8e:08:cf:58: e1:41:30:37:7b:44:a7:8a:db:07:03:64:08:f3:2f:b8:53:cf: 9c:40:71:f2:ad:37:e8:5e:cf:90:b0:a4:e3:42:7e:23:15:26: 54:f6:df:44:9b:a2:1d:33:17:ea:68:79:d1:46:d9:70:c7:c7: 46:d5:08:5a:a9:a0:1d:e9:69:62:eb:48:1e:b5:6b:7d:93:b6: 6c:56:f9:c7:f9:1d:ac:da:98:25:69:37:47:41:16:d4:d6:3b: 16:e8:dc:7f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA3MDEw MTM5NTVaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBQzNBNERBNDY4MEYw RDVEOUM0NERFMjgzQ0NFNDBDRkE2QjJBMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAR1zowpjt4WQC5GHruSmQHLtvglbvVMRvYgq3LaG4nu8R++T6 7Z4ICiMnQ3sptm3jAL/PjYEvEthGjZYutMsvcJNRwK8FmVj0tHhViywRCMCI9D/D k2JLwJ13ejVoORqE0m3qQR8JYQGEjAmtVIhC18BqLeYrQ3Dd5ecsu9tfQaZ9GSq0 93hBGOl4NnFO1ISn+jdoFz3FwURh9qwvYsHLdL5TOTiBQqxkfCVXTzxA3GWSQe5E q4DmsZtfbcgulFkE4XMslTYfobI3eJCnOASubeYN5YtewAt10zB83wpivLp72wnD 9H6/kMrKLGdIAbp7upBtx/Qgc+q5lH7C5w4DAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUmsOk2kaA8NXZxE3ig8zkDPprKgowHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL21zT2sya2FBOE5YWnhFM2lnOHprRFBwcktnby5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALL2bQwDQYJKoZIhvcNAQELBQADggEBAHxdn0NU4u6j90wiyW+LLX7WCKrJ IT2S1w/LrGEs6c0HH0uz1hu1RkqE9GjO5GUMVr3qgUAACp2p60sPFyBxqK6VB1hu RsfdjvGAPvsC9L8TdIZwHorIkc+qaHB5ztKZN8hlkJcnue5MM3jgQqUs8pVvc6hs gaF0W3BY4ZLDU0FLClRNTvCCeuGS1IuCFElpgqC/MI1/j0ASJpVJfqULjgjPWOFB MDd7RKeK2wcDZAjzL7hTz5xAcfKtN+hez5CwpONCfiMVJlT230Sboh0zF+poedFG 2XDHx0bVCFqpoB3paWLrSB61a32TtmxW+cf5HazamCVpN0dBFtTWOxbo3H8= -----END CERTIFICATE-----Generated at Fri Jul 4 22:47:09 2025 by rpki-client