$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/nxFhk4mjpTmV2P7aRYfBZTG2Cw8.roa File: nxFhk4mjpTmV2P7aRYfBZTG2Cw8.roa (raw, json) Hash identifier: nXIt2DRHwOA/ajYBhavbXfSseiIG0xnkR9ZVPQgJiRY= Subject key identifier: 9F:11:61:93:89:A3:A5:39:95:D8:FE:DA:45:87:C1:65:31:B6:0B:0F Certificate issuer: /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692 Certificate serial: 38 Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/nxFhk4mjpTmV2P7aRYfBZTG2Cw8.roa Signing time: Tue 01 Jul 2025 01:33:29 +0000 ROA not before: Tue 01 Jul 2025 01:33:29 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 45677 IP address blocks: 180.148.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692 Validity Not Before: Jul 1 01:33:29 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=9F11619389A3A53995D8FEDA4587C16531B60B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:45:aa:51:6a:7c:f6:ff:b8:da:67:4f:47:20: 03:34:d6:82:d4:5a:e7:da:5f:3a:63:ac:46:b0:fb: a5:2c:13:5d:95:4b:8d:59:b1:7a:2e:ac:9d:67:77: 42:a7:b7:5f:63:8f:85:cf:e1:6b:ef:ea:dd:f6:46: 26:f3:88:e1:cf:57:d2:fd:2e:56:2f:f4:01:ca:cf: 8e:6b:72:55:3a:f5:03:90:20:45:0a:04:33:6e:7a: 1a:65:54:07:74:97:ff:dd:32:5a:67:ed:31:d1:0c: ce:82:83:6b:28:81:f8:c1:6f:e7:3a:ed:f7:d3:88: eb:fd:c6:d1:ec:8d:bd:da:58:cf:03:e9:f1:18:8b: ff:9f:5a:99:96:a8:8b:4f:9a:ea:dc:e2:a4:53:62: 20:cd:30:03:a1:3d:8f:ea:ed:8a:7d:ca:eb:90:10: d5:f4:c9:59:a1:a0:7d:22:22:62:81:ba:77:e8:7d: ff:d6:51:da:20:4a:df:4c:f3:0b:1c:cf:a0:06:8a: a9:35:c5:ff:f0:a7:48:8c:c4:6b:1f:ba:06:0f:4f: b7:44:d6:d8:69:7a:27:a9:5b:ba:6a:98:3c:41:09: cb:bc:b6:1e:44:20:3d:0d:58:74:d0:f4:7e:44:ec: 4a:9a:6b:a8:a2:db:c2:d7:7d:c8:ff:73:be:ed:63: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:61:93:89:A3:A5:39:95:D8:FE:DA:45:87:C1:65:31:B6:0B:0F X509v3 Authority Key Identifier: keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/nxFhk4mjpTmV2P7aRYfBZTG2Cw8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.148.192.0/20 Signature Algorithm: sha256WithRSAEncryption 26:19:13:ac:24:9d:b1:3a:82:cf:72:44:36:c4:5e:5e:c0:36: 0b:b0:de:2f:41:56:8d:92:8b:80:67:11:d5:82:b0:74:1d:79: 82:09:9f:23:98:62:31:2d:40:cd:31:88:12:02:bd:7a:ac:e1: 2b:30:12:16:93:16:3f:a3:49:09:63:17:80:d7:b1:ab:0d:92: dc:2e:7a:93:3a:bb:b3:fd:d0:ab:82:25:02:f6:2c:91:d7:2a: 61:72:fb:14:87:cf:01:0d:5d:6e:64:88:63:fa:0c:78:4a:74: 1e:ce:7d:33:4d:a5:fe:8d:5e:e9:91:bc:1d:2e:c2:c9:3b:49: 60:7c:6f:7e:5f:41:5a:1c:63:6c:2f:44:f2:5d:2d:14:c4:32: d4:68:ef:00:3a:d9:c3:5b:05:13:ff:16:1d:f1:74:cf:26:72: 1e:23:55:03:cc:47:2d:af:08:ee:a6:10:48:3f:e9:48:9b:3d: 6a:48:6f:0a:39:b0:d8:66:a4:fc:47:1c:f5:c6:c3:5c:10:69: 40:4a:e8:72:0a:7f:e3:28:85:39:cd:b3:8b:82:a5:aa:e1:f9: f4:78:5e:63:20:de:0c:e6:06:f5:c6:79:02:51:1c:57:71:67: fb:f9:d5:c3:ae:07:69:ea:60:ef:f6:e1:13:82:1b:62:bc:b6: fd:5b:e5:08 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzN0Q3 NENGNzhCMDAzMUQyQUE1QzlBRUQzODhFN0MwNDM4QzYxNjkyMB4XDTI1MDcwMTAx MzMyOVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOUYxMTYxOTM4OUEzQTUz OTk1RDhGRURBNDU4N0MxNjUzMUI2MEIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMBFqlFqfPb/uNpnT0cgAzTWgtRa59pfOmOsRrD7pSwTXZVLjVmx ei6snWd3Qqe3X2OPhc/ha+/q3fZGJvOI4c9X0v0uVi/0AcrPjmtyVTr1A5AgRQoE M256GmVUB3SX/90yWmftMdEMzoKDayiB+MFv5zrt99OI6/3G0eyNvdpYzwPp8RiL /59amZaoi0+a6tzipFNiIM0wA6E9j+rtin3K65AQ1fTJWaGgfSIiYoG6d+h9/9ZR 2iBK30zzCxzPoAaKqTXF//CnSIzEax+6Bg9Pt0TW2Gl6J6lbumqYPEEJy7y2HkQg PQ1YdND0fkTsSpprqKLbwtd9yP9zvu1jViECAwEAAaOCAiQwggIgMB0GA1UdDgQW BBSfEWGTiaOlOZXY/tpFh8FlMbYLDzAfBgNVHSMEGDAWgBQ310z3iwAx0qpcmu04 jnwEOMYWkjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTg0L045ZE05NHNBTWRLcVhKcnRPSTU4QkRqR0ZwSS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL045ZE05NHNBTWRLcVhKcnRPSTU4QkRq R0ZwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85ODQvbnhGaGs0bWpwVG1WMlA3YVJZZkJaVEcyQ3c4LnJvYTBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBLSUwDANBgkqhkiG9w0BAQsFAAOCAQEAJhkTrCSdsTqCz3JENsReXsA2C7De L0FWjZKLgGcR1YKwdB15ggmfI5hiMS1AzTGIEgK9eqzhKzASFpMWP6NJCWMXgNex qw2S3C56kzq7s/3Qq4IlAvYskdcqYXL7FIfPAQ1dbmSIY/oMeEp0Hs59M02l/o1e 6ZG8HS7CyTtJYHxvfl9BWhxjbC9E8l0tFMQy1GjvADrZw1sFE/8WHfF0zyZyHiNV A8xHLa8I7qYQSD/pSJs9akhvCjmw2Gak/Ecc9cbDXBBpQErocgp/4yiFOc2zi4Kl quH59HheYyDeDOYG9cZ5AlEcV3Fn+/nVw64Haepg7/bhE4IbYry2/VvlCA== -----END CERTIFICATE-----Generated at Sat Jul 5 05:57:37 2025 by rpki-client