$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/vLSYGWpGZXhyJ-YT1_UO0LDGPZQ.roa File: vLSYGWpGZXhyJ-YT1_UO0LDGPZQ.roa (raw, json) Hash identifier: 05TFvZOjeQ7BF/RQgD702o5JTOe1xPPk+j3IiswqfZY= Subject key identifier: BC:B4:98:19:6A:46:65:78:72:27:E6:13:D7:F5:0E:D0:B0:C6:3D:94 Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Certificate serial: 16 Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/vLSYGWpGZXhyJ-YT1_UO0LDGPZQ.roa Signing time: Thu 24 Jul 2025 02:35:04 +0000 ROA not before: Thu 24 Jul 2025 02:35:04 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 154.33.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 02:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773 Validity Not Before: Jul 24 02:35:04 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=BCB498196A4665787227E613D7F50ED0B0C63D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:ec:56:ce:60:98:b3:66:ff:f2:d6:16:7b: d9:5f:6c:48:2d:c2:30:4b:fd:a1:cd:e2:c2:d7:20: d2:62:49:06:55:29:08:88:14:58:82:43:63:0d:a0: 1f:5a:19:01:d7:c6:f8:31:02:36:c4:b2:3d:82:1a: 53:cb:9c:d1:8a:f8:c7:49:97:9a:e8:17:9f:63:3e: 3d:64:d4:f8:3a:80:b5:06:49:31:3b:7e:47:48:23: b9:6b:fa:9b:2f:8f:dc:78:4d:dd:24:fe:c7:7c:e1: 47:fc:44:a0:86:2d:1d:a2:82:c6:8a:7b:9b:c7:72: 78:df:53:b9:54:7a:50:c8:7d:c8:6a:f3:53:6f:63: 9c:40:5b:ea:96:ea:21:87:f7:f2:b7:c4:d9:7a:8a: 7f:77:a7:5d:53:d8:cf:45:71:b6:62:ab:7b:88:71: cc:4b:84:f2:47:c2:99:f3:ec:17:55:ac:f3:9e:dd: ef:55:4a:cc:77:b6:8b:3f:e7:58:39:7e:94:ec:70: f2:cf:9b:cb:29:d6:11:bc:2f:50:62:dc:5a:35:e4: 2a:33:0c:a8:6c:66:53:e5:3d:20:bc:4f:bb:7a:0f: c2:1f:a9:2b:fd:46:2d:fb:2c:4f:a1:5d:d3:9b:d6: 94:22:26:e9:bf:1b:f5:94:06:25:e1:bf:fc:66:b9: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:98:19:6A:46:65:78:72:27:E6:13:D7:F5:0E:D0:B0:C6:3D:94 X509v3 Authority Key Identifier: keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/vLSYGWpGZXhyJ-YT1_UO0LDGPZQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:ad:7f:31:ed:fb:12:6f:dc:af:50:20:33:34:a7:45:87:a3: e8:8f:f6:09:75:d7:c3:b2:11:03:28:6e:f8:01:99:41:e6:0f: bc:18:32:7e:44:d5:2e:36:cf:35:ef:c5:3e:e0:c4:8b:99:a4: 0d:c5:5e:0c:3e:2d:1b:0d:ce:f9:b3:c7:cd:b0:f7:c4:f1:64: 3b:cd:ad:47:64:e9:0e:03:90:4b:d4:a6:b2:99:5a:c6:37:17: c4:cd:8a:99:71:37:d3:bf:15:bf:77:ee:fa:b7:f2:7e:22:7f: dd:5c:ab:b1:10:76:3d:05:cd:c7:af:c2:71:0c:8a:57:1e:d5: eb:1c:e5:6d:a9:1d:db:ae:bf:db:2c:b2:c7:45:1d:04:a8:50: 48:82:08:96:fb:40:9b:f9:39:84:c4:ad:35:fb:7f:d8:1b:77: ca:9d:5e:1d:a4:6e:0e:25:cb:44:ea:d3:8c:b2:fb:ee:d6:64: 8f:5b:fb:08:99:8a:b1:20:e9:1e:6e:74:3b:74:c0:1f:e2:67: 87:43:92:dc:5c:e1:0a:2b:6a:46:98:13:56:ce:f7:e1:a6:46: 8c:17:49:60:c0:6a:5d:3f:53:2d:a4:39:cc:e3:6b:38:f5:cf: 25:2d:52:c3:06:53:9d:61:ad:50:47:09:bd:2f:7d:92:17:6a: aa:05:df:bc -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUE2 QzM2OUMxQTlDN0E1MkMzRTM4MDU3MjdBNUZEMzExODVBNzczMB4XDTI1MDcyNDAy MzUwNFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoQkNCNDk4MTk2QTQ2NjU3 ODcyMjdFNjEzRDdGNTBFRDBCMEM2M0Q5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKUY7FbOYJizZv/y1hZ72V9sSC3CMEv9oc3iwtcg0mJJBlUpCIgU WIJDYw2gH1oZAdfG+DECNsSyPYIaU8uc0Yr4x0mXmugXn2M+PWTU+DqAtQZJMTt+ R0gjuWv6my+P3HhN3ST+x3zhR/xEoIYtHaKCxop7m8dyeN9TuVR6UMh9yGrzU29j nEBb6pbqIYf38rfE2XqKf3enXVPYz0VxtmKre4hxzEuE8kfCmfPsF1Ws857d71VK zHe2iz/nWDl+lOxw8s+byynWEbwvUGLcWjXkKjMMqGxmU+U9ILxPu3oPwh+pK/1G LfssT6Fd05vWlCIm6b8b9ZQGJeG//Ga5nKECAwEAAaOCAiUwggIhMB0GA1UdDgQW BBS8tJgZakZleHIn5hPX9Q7QsMY9lDAfBgNVHSMEGDAWgBSFpsNpwanHpSw+OAVy el/TEYWnczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9oYWJEYWNHcHg2VXNQamdGY25wZjB4R0ZwM00uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oYWJEYWNHcHg2VXNQamdGY25wZjB4 R0ZwM00uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy92TFNZR1dwR1pYaHlKLVlUMV9VTzBMREdQWlEucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAmiEwDQYJKoZIhvcNAQELBQADggEBAAKtfzHt+xJv3K9QIDM0p0WHo+iP 9gl118OyEQMobvgBmUHmD7wYMn5E1S42zzXvxT7gxIuZpA3FXgw+LRsNzvmzx82w 98TxZDvNrUdk6Q4DkEvUprKZWsY3F8TNiplxN9O/Fb937vq38n4if91cq7EQdj0F zcevwnEMilce1esc5W2pHduuv9ssssdFHQSoUEiCCJb7QJv5OYTErTX7f9gbd8qd Xh2kbg4ly0Tq04yy++7WZI9b+wiZirEg6R5udDt0wB/iZ4dDktxc4QorakaYE1bO 9+GmRowXSWDAal0/Uy2kOczjazj1zyUtUsMGU51hrVBHCb0vfZIXaqoF37w= -----END CERTIFICATE-----Generated at Tue Jul 29 06:55:13 2025 by rpki-client