$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CBmim4z95WSIoVeRW1gld9-VALE.roa File: CBmim4z95WSIoVeRW1gld9-VALE.roa (raw, json) Hash identifier: Z1hn8ImjzMZAYMSZ5ha9n6vv31HxwgHD+A5ZFQydPyw= Subject key identifier: 08:19:A2:9B:8C:FD:E5:64:88:A1:57:91:5B:58:25:77:DF:95:00:B1 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: C7 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CBmim4z95WSIoVeRW1gld9-VALE.roa Signing time: Thu 24 Jul 2025 01:24:11 +0000 ROA not before: Thu 24 Jul 2025 01:24:11 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.158.192.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:24:11 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=0819A29B8CFDE56488A157915B582577DF9500B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:c3:10:2a:63:18:8f:e3:a2:5d:9d:f7:00: e0:4e:11:bf:7c:b2:cf:a3:74:50:09:c1:1d:39:ef: 1e:29:42:00:ab:32:2d:56:93:4e:80:cb:e6:88:28: c4:88:4f:7e:89:35:97:62:92:2d:c0:6d:1c:01:2f: 87:58:b0:d7:ad:34:51:93:2a:6e:2a:2c:ed:62:a4: e6:55:56:ee:03:b9:03:37:82:14:67:fc:c5:23:e7: bc:0e:ce:a5:fd:e1:f3:9a:72:92:a4:c9:b8:73:33: 86:27:8e:84:9e:9b:10:22:59:45:51:1a:cc:8f:09: be:35:72:15:78:93:6a:dc:d5:43:2c:55:5b:75:30: 23:54:47:19:aa:27:c1:3f:97:53:13:b4:37:63:5a: d1:84:10:d1:31:9c:d6:f7:fb:69:06:33:ed:09:50: 10:f6:a5:64:b0:eb:76:33:a1:c4:7a:23:19:c9:d9: f1:f7:b1:55:b3:fb:67:d0:b1:c7:2b:ce:d6:6c:c3: 2e:ec:ed:c1:fc:c6:22:66:8e:b6:ed:7e:1f:36:5b: a9:dd:aa:d8:47:fc:a5:71:b7:2d:85:ad:7a:5e:a2: bf:b2:bb:03:e6:08:19:26:d5:05:05:12:a5:8e:51: 23:ba:d8:db:1a:84:08:c4:35:c5:39:49:06:44:10: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:19:A2:9B:8C:FD:E5:64:88:A1:57:91:5B:58:25:77:DF:95:00:B1 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CBmim4z95WSIoVeRW1gld9-VALE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.158.192.0/21 Signature Algorithm: sha256WithRSAEncryption 11:d3:3c:d2:40:07:69:51:be:43:9a:13:3b:8c:c7:05:e5:c5: 21:ba:fb:09:8d:68:f5:b0:f4:8f:3e:84:d2:c9:6a:f5:16:6d: 33:84:dc:9f:39:94:6c:b0:05:36:d4:7b:4a:14:ed:8e:d0:c0: 95:5e:b9:f4:05:fa:3e:c2:75:a3:cc:65:2c:a4:28:15:4f:ad: 59:db:b8:64:96:12:ba:a2:c1:7c:fb:39:18:d1:90:c3:f9:ae: 94:ef:3c:df:f3:cb:85:37:8d:e0:55:9c:0d:68:5b:05:f3:fd: 57:ef:e6:50:e5:df:4e:82:e2:a6:e8:f8:8a:e7:88:43:b4:94: a2:f2:14:b2:c8:89:aa:fb:dd:12:e8:6a:48:8d:02:d7:ef:89: 97:ce:64:bc:a9:5e:e1:62:91:32:bc:28:1b:92:b4:fd:a3:e1: 8d:37:0f:db:4e:0f:21:45:38:ae:cc:42:25:c3:25:6f:ec:cd: b2:76:48:31:26:54:9a:22:d3:b6:c2:de:ec:1c:87:f7:11:e0: 10:d0:1a:b2:87:84:f3:4a:44:cc:7f:81:2c:d8:07:8a:1f:ca: ca:d9:60:99:67:36:cb:ae:0f:a7:c9:71:03:8f:80:4e:e3:cd: f9:d2:52:9a:11:6b:93:39:51:1a:73:d0:0c:cf:35:dc:e2:28: 25:de:55:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTI0MTFaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDA4MTlBMjlCOENGREU1 NjQ4OEExNTc5MTVCNTgyNTc3REY5NTAwQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh0sMQKmMYj+OiXZ33AOBOEb98ss+jdFAJwR057x4pQgCrMi1W k06Ay+aIKMSIT36JNZdiki3AbRwBL4dYsNetNFGTKm4qLO1ipOZVVu4DuQM3ghRn /MUj57wOzqX94fOacpKkybhzM4YnjoSemxAiWUVRGsyPCb41chV4k2rc1UMsVVt1 MCNURxmqJ8E/l1MTtDdjWtGEENExnNb3+2kGM+0JUBD2pWSw63YzocR6IxnJ2fH3 sVWz+2fQsccrztZswy7s7cH8xiJmjrbtfh82W6ndqthH/KVxty2FrXpeor+yuwPm CBkm1QUFEqWOUSO62NsahAjENcU5SQZEEF7LAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUCBmim4z95WSIoVeRW1gld9+VALEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9DQm1pbTR6OTVXU0lvVmVSVzFnbGQ5LVZBTEUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0p7AMA0GCSqGSIb3DQEBCwUAA4IBAQAR0zzSQAdpUb5DmhM7jMcF 5cUhuvsJjWj1sPSPPoTSyWr1Fm0zhNyfOZRssAU21HtKFO2O0MCVXrn0Bfo+wnWj zGUspCgVT61Z27hklhK6osF8+zkY0ZDD+a6U7zzf88uFN43gVZwNaFsF8/1X7+ZQ 5d9OguKm6PiK54hDtJSi8hSyyImq+90S6GpIjQLX74mXzmS8qV7hYpEyvCgbkrT9 o+GNNw/bTg8hRTiuzEIlwyVv7M2ydkgxJlSaItO2wt7sHIf3EeAQ0Bqyh4TzSkTM f4Es2AeKH8rK2WCZZzbLrg+nyXEDj4BO48350lKaEWuTOVEac9AMzzXc4igl3lUy -----END CERTIFICATE-----Generated at Wed Jul 30 03:08:18 2025 by rpki-client