$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/8dx9-Ly9LsXXht39WurlsMEeqWM.roa File: 8dx9-Ly9LsXXht39WurlsMEeqWM.roa (raw, json) Hash identifier: ujfkSay4POoBPO4un1UUbutNPteELAEEGtUU0VZOm40= Subject key identifier: F1:DC:7D:F8:BC:BD:2E:C5:D7:86:DD:FD:5A:EA:E5:B0:C1:1E:A9:63 Certificate issuer: /CN=7EECCB87C1EAB7372BC31505E682DC581055A52F Certificate serial: 22 Authority key identifier: 7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/8dx9-Ly9LsXXht39WurlsMEeqWM.roa Signing time: Tue 01 Jul 2025 01:31:49 +0000 ROA not before: Tue 01 Jul 2025 01:31:49 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 24259 IP address blocks: 157.120.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EECCB87C1EAB7372BC31505E682DC581055A52F Validity Not Before: Jul 1 01:31:49 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=F1DC7DF8BCBD2EC5D786DDFD5AEAE5B0C11EA963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:62:cb:42:37:25:84:5c:46:3c:d5:91:fb: 9b:f7:69:2f:83:50:50:29:67:a7:74:b8:d5:3e:b3: c4:9d:fb:64:71:13:a3:3b:08:84:43:71:f6:65:3b: 12:65:b3:2f:fc:e7:3e:b0:07:05:7b:30:1b:b3:92: 51:ec:9d:20:66:f7:73:2d:ef:1c:c6:b0:b0:b7:c2: e3:7b:4a:2b:0e:e1:f2:55:33:b4:a0:1f:80:09:cc: 79:a2:54:75:c5:3c:a1:50:56:9c:95:f2:b9:01:1d: f0:1d:83:3e:68:10:b2:0d:35:b6:d9:92:b5:66:73: 27:f1:01:08:50:f9:3f:34:3a:eb:69:b4:ff:db:09: b7:6b:e8:a2:ac:0f:07:31:a8:03:d0:58:0b:ad:17: 37:86:b6:7e:0a:e4:3d:95:d8:58:ca:d7:07:6e:bb: a1:32:3a:50:b3:34:7e:33:47:bd:c0:62:47:30:f5: 64:42:7f:f2:53:9a:1d:66:1f:a2:f6:25:fe:62:87: 97:2c:fc:62:41:11:e0:69:4e:83:1e:84:23:54:4b: 5b:9f:05:60:86:1e:9d:43:1f:3b:24:e5:a8:74:48: 91:8d:21:96:e1:7a:3b:d6:d3:45:18:04:3a:34:6e: d5:1c:9f:e8:a5:2b:0b:98:69:67:38:4a:fe:9f:57: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:7D:F8:BC:BD:2E:C5:D7:86:DD:FD:5A:EA:E5:B0:C1:1E:A9:63 X509v3 Authority Key Identifier: keyid:7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/8dx9-Ly9LsXXht39WurlsMEeqWM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.120.120.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:dd:f2:f6:5a:08:9b:6e:60:09:43:54:81:d6:d2:40:39:65: f0:8c:2b:e6:30:7b:fc:6d:bc:75:81:ab:e6:93:b6:e7:10:a4: 52:c2:37:d0:82:eb:a7:89:e2:d1:80:23:7e:4b:e7:aa:c2:2f: 1d:f1:0f:9e:de:c0:9c:0c:ce:f9:98:c4:13:8f:03:6b:bd:a3: 7d:a5:5a:9f:40:b1:cb:ce:d9:31:70:97:3c:6f:cd:54:fe:35: 41:18:10:12:60:3d:d7:ac:70:ab:33:b9:ad:e2:16:23:78:18: 4f:62:5a:a0:14:06:d6:72:ae:ea:50:54:2f:2a:24:ec:71:a5: be:51:e0:f2:35:68:59:fd:f4:cd:b8:a5:e2:2d:ef:37:ee:e7: 5b:27:e6:0f:34:6d:36:9c:df:47:c3:0c:64:41:01:61:aa:75: 87:ee:64:8f:4c:cb:85:e3:54:93:f3:ea:aa:11:11:87:97:bc: 9e:48:ce:85:6b:32:26:d7:94:df:6d:8e:4c:d9:83:c1:40:8a: 06:a6:09:e4:5c:ec:53:bf:63:e0:1a:1d:6e:78:44:3e:00:54: 67:ee:88:58:20:6e:67:8f:4e:5b:fb:e8:b6:68:cc:d8:b3:a2: 19:a1:66:b1:a7:75:41:fd:a8:7d:55:62:d2:c7:25:91:28:09: 8e:4d:f9:8e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3RUVD Q0I4N0MxRUFCNzM3MkJDMzE1MDVFNjgyREM1ODEwNTVBNTJGMB4XDTI1MDcwMTAx MzE0OVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRjFEQzdERjhCQ0JEMkVD NUQ3ODZEREZENUFFQUU1QjBDMTFFQTk2MzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMp5YstCNyWEXEY81ZH7m/dpL4NQUClnp3S41T6zxJ37ZHETozsI hENx9mU7EmWzL/znPrAHBXswG7OSUeydIGb3cy3vHMawsLfC43tKKw7h8lUztKAf gAnMeaJUdcU8oVBWnJXyuQEd8B2DPmgQsg01ttmStWZzJ/EBCFD5PzQ662m0/9sJ t2vooqwPBzGoA9BYC60XN4a2fgrkPZXYWMrXB267oTI6ULM0fjNHvcBiRzD1ZEJ/ 8lOaHWYfovYl/mKHlyz8YkER4GlOgx6EI1RLW58FYIYenUMfOyTlqHRIkY0hluF6 O9bTRRgEOjRu1Ryf6KUrC5hpZzhK/p9Xd58CAwEAAaOCAiQwggIgMB0GA1UdDgQW BBTx3H34vL0uxdeG3f1a6uWwwR6pYzAfBgNVHSMEGDAWgBR+7MuHweq3NyvDFQXm gtxYEFWlLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L2Z1ekxoOEhxdHpjcnd4VUY1b0xjV0JCVnBTOC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2Z1ekxoOEhxdHpjcnd4VUY1b0xjV0JC VnBTOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvOGR4OS1MeTlMc1hYaHQzOVd1cmxzTUVlcVdNLnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAp14eDANBgkqhkiG9w0BAQsFAAOCAQEAbt3y9loIm25gCUNUgdbSQDll8Iwr 5jB7/G28dYGr5pO25xCkUsI30ILrp4ni0YAjfkvnqsIvHfEPnt7AnAzO+ZjEE48D a72jfaVan0Cxy87ZMXCXPG/NVP41QRgQEmA916xwqzO5reIWI3gYT2JaoBQG1nKu 6lBULyok7HGlvlHg8jVoWf30zbil4i3vN+7nWyfmDzRtNpzfR8MMZEEBYap1h+5k j0zLheNUk/PqqhERh5e8nkjOhWsyJteU322OTNmDwUCKBqYJ5FzsU79j4BodbnhE PgBUZ+6IWCBuZ49OW/votmjM2LOiGaFmsad1Qf2ofVVi0sclkSgJjk35jg== -----END CERTIFICATE-----Generated at Sat Jul 5 11:40:18 2025 by rpki-client