$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CpNAcLh8qMbQIDMuQ3me8BK4YEo.roa File: CpNAcLh8qMbQIDMuQ3me8BK4YEo.roa (raw, json) Hash identifier: ObOKZSjRj0G4z8jjVEyDnYTJMr2VfiKJ/BAwii4VeUg= Subject key identifier: 0A:93:40:70:B8:7C:A8:C6:D0:20:33:2E:43:79:9E:F0:12:B8:60:4A Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 9D Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CpNAcLh8qMbQIDMuQ3me8BK4YEo.roa Signing time: Thu 24 Jul 2025 00:46:53 +0000 ROA not before: Thu 24 Jul 2025 00:46:53 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.230.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 00:46:53 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=0A934070B87CA8C6D020332E43799EF012B8604A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:8a:cf:e8:21:9a:f4:c7:55:1f:e7:14:1d: 8d:90:48:0c:b1:4e:0f:5c:04:d9:48:92:96:11:b6: 00:1b:77:a0:fc:9a:09:21:1e:05:88:15:6e:a2:78: 38:9c:3e:87:0d:4e:e9:b4:b7:ee:15:72:4d:fd:14: 0e:e5:24:d6:f7:75:a7:d6:cf:36:33:90:7b:10:73: 5a:1c:79:4a:cc:f0:00:5c:03:e5:28:d8:d7:b3:51: 1d:78:66:b8:43:82:39:71:23:7e:3a:c7:e2:eb:80: 1e:12:ca:21:45:7e:83:b7:99:4f:56:13:f5:fe:0b: 84:6d:f2:8e:89:75:d1:e2:3b:50:74:e1:b3:5d:db: 77:59:c1:d4:3f:40:61:cf:3b:97:29:33:e7:58:aa: e7:5f:5d:06:5b:43:45:6e:1b:03:37:c2:e7:9c:8f: f2:b5:e0:8a:78:2d:59:92:57:1a:54:ff:9a:6d:b4: 4a:06:c9:db:b2:90:03:3f:ec:5a:f6:21:7e:3e:14: db:c6:d7:89:06:f0:6d:fd:d0:da:0e:73:3f:49:b7: 7e:ac:fa:a5:76:ab:1e:c1:33:60:cd:09:9f:ec:05: 44:31:83:88:14:10:2f:e3:29:88:b3:d9:ae:f3:ac: 12:60:ba:cc:0e:11:2a:14:83:e6:ba:69:fc:e3:a6: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:93:40:70:B8:7C:A8:C6:D0:20:33:2E:43:79:9E:F0:12:B8:60:4A X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/CpNAcLh8qMbQIDMuQ3me8BK4YEo.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.230.64.0/18 Signature Algorithm: sha256WithRSAEncryption 5d:eb:73:42:eb:df:d9:89:75:18:a3:be:53:c8:40:72:8e:ca: 20:75:85:db:f1:ad:12:92:ce:0d:a7:7b:6c:14:37:80:eb:71: 1b:49:fe:d0:0b:5b:83:af:05:b3:61:2d:57:07:fd:0e:fc:41: cf:ac:9f:b5:2e:ed:99:90:cf:98:ae:e9:54:cf:7e:bb:87:8d: 65:1c:87:0f:1d:62:bf:e4:2a:ff:98:4b:a8:ca:b1:68:6f:e8: 1a:65:16:3c:a4:cc:12:e1:6d:f7:3b:2e:28:64:f7:48:5d:f2: 09:6e:80:40:83:1e:76:ea:72:9d:f0:6f:30:03:5f:e5:58:e5: f3:bf:00:e8:c1:99:2a:cd:14:51:76:2f:e4:92:a7:0c:66:3e: 9b:fa:d5:e4:0e:0c:94:40:da:cb:71:57:47:03:6e:2e:15:58: 74:50:7f:48:89:28:0d:ca:48:01:47:92:0f:7c:ba:c3:56:0d: 73:d8:48:a4:31:37:7c:78:32:03:fe:0e:45:a2:99:d6:27:e0: 9f:f7:21:e6:64:22:91:74:37:50:af:09:2f:9e:2d:a1:d3:a4: 6e:6e:92:e5:8a:35:11:e7:79:68:ec:3b:28:23:02:1e:87:54: b3:b2:6b:ae:16:a1:77:b1:cf:a1:16:3a:45:31:5b:f8:de:22: 91:9a:2f:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MDQ2NTNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDBBOTM0MDcwQjg3Q0E4 QzZEMDIwMzMyRTQzNzk5RUYwMTJCODYwNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGfYrP6CGa9MdVH+cUHY2QSAyxTg9cBNlIkpYRtgAbd6D8mgkh HgWIFW6ieDicPocNTum0t+4Vck39FA7lJNb3dafWzzYzkHsQc1oceUrM8ABcA+Uo 2NezUR14ZrhDgjlxI346x+LrgB4SyiFFfoO3mU9WE/X+C4Rt8o6JddHiO1B04bNd 23dZwdQ/QGHPO5cpM+dYqudfXQZbQ0VuGwM3wuecj/K14Ip4LVmSVxpU/5pttEoG yduykAM/7Fr2IX4+FNvG14kG8G390NoOcz9Jt36s+qV2qx7BM2DNCZ/sBUQxg4gU EC/jKYiz2a7zrBJguswOESoUg+a6afzjpi/jAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUCpNAcLh8qMbQIDMuQ3me8BK4YEowHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9DcE5BY0xoOHFNYlFJRE11UTNtZThCSzRZRW8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGyuZAMA0GCSqGSIb3DQEBCwUAA4IBAQBd63NC69/ZiXUYo75TyEBy jsogdYXb8a0Sks4Np3tsFDeA63EbSf7QC1uDrwWzYS1XB/0O/EHPrJ+1Lu2ZkM+Y rulUz367h41lHIcPHWK/5Cr/mEuoyrFob+gaZRY8pMwS4W33Oy4oZPdIXfIJboBA gx526nKd8G8wA1/lWOXzvwDowZkqzRRRdi/kkqcMZj6b+tXkDgyUQNrLcVdHA24u FVh0UH9IiSgNykgBR5IPfLrDVg1z2EikMTd8eDID/g5FopnWJ+Cf9yHmZCKRdDdQ rwkvni2h06RubpLlijUR53lo7DsoIwIeh1SzsmuuFqF3sc+hFjpFMVv43iKRmi+u -----END CERTIFICATE-----Generated at Wed Jul 30 03:09:46 2025 by rpki-client