$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EFs1GOQ-s23M2ac-tVAU5IRd5Vc.roa File: EFs1GOQ-s23M2ac-tVAU5IRd5Vc.roa (raw, json) Hash identifier: 8D8UhwtNpXfJjVDuTtRee2VbHi7mTgFn4S+SNHnX2Zw= Subject key identifier: 10:5B:35:18:E4:3E:B3:6D:CC:D9:A7:3E:B5:50:14:E4:84:5D:E5:57 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0123 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EFs1GOQ-s23M2ac-tVAU5IRd5Vc.roa Signing time: Thu 24 Jul 2025 02:22:09 +0000 ROA not before: Thu 24 Jul 2025 02:22:09 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.33.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:22:09 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=105B3518E43EB36DCCD9A73EB55014E4845DE557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:88:5f:73:21:fd:c9:43:f8:4f:e4:6f:3e: ec:8e:54:cd:d9:68:df:0b:22:85:4b:ec:ff:51:75: 0c:67:5b:4e:9d:04:e0:5f:c1:b3:5a:54:52:b7:f4: 08:7c:02:88:83:a4:88:8b:39:58:14:60:7e:63:84: 31:c2:a1:d9:cb:87:80:7e:bf:5e:ce:95:24:40:9f: c5:4a:31:09:dc:d1:b8:e0:01:cd:04:a5:57:93:1c: d0:33:d5:05:5f:02:1e:7e:96:f3:00:be:92:18:8c: b1:61:af:d2:1a:07:ed:84:0c:0d:b2:82:7a:6f:ca: 4c:f9:a2:b3:a6:09:e2:5e:95:a1:6f:50:11:27:cd: 37:dd:4d:b2:f6:1a:13:f3:91:2f:5e:7a:4d:25:e7: c2:98:85:c6:56:34:c6:85:b2:a5:6a:19:d9:18:c0: d7:43:da:3a:21:10:2b:94:6e:48:d9:2c:49:58:e3: 6f:2b:5c:64:d4:45:17:0a:e9:a5:de:4b:35:a7:0d: 65:b8:f0:94:af:90:8d:3f:aa:a2:39:b7:73:48:18: 7b:9a:59:df:05:43:d6:0c:dd:8a:a8:c5:59:36:3e: 13:fc:12:a8:11:0c:61:59:65:31:0d:2a:b0:3b:7c: f0:45:16:bf:bb:42:5c:03:b8:f7:c4:6f:c9:58:2f: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:35:18:E4:3E:B3:6D:CC:D9:A7:3E:B5:50:14:E4:84:5D:E5:57 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EFs1GOQ-s23M2ac-tVAU5IRd5Vc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.33.104.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:0d:41:25:c3:64:83:32:0f:a0:50:cf:ec:bf:94:7d:36:d0: 98:c8:9d:62:a1:a3:fe:a1:1e:f6:6c:15:06:88:29:e9:24:4b: a8:20:b4:66:3a:4c:54:aa:51:1a:b9:5e:a0:12:5b:16:df:08: 0e:0c:d1:75:49:90:a9:2c:93:71:fa:c7:fc:06:32:ff:cd:ec: 65:99:1a:5d:bf:fd:1f:a8:c5:98:c5:43:1a:d2:cb:62:19:9a: e2:8a:9b:44:e3:58:fe:7d:d9:4d:68:27:5f:03:2a:74:b3:0d: dc:b4:d0:aa:6c:4f:e0:a1:89:c7:18:c3:be:88:1d:5e:14:d3: 3c:57:2c:02:87:2e:7a:50:0d:2f:08:58:74:2c:7e:4a:1f:b8: 7c:71:5d:fd:e9:9b:61:ef:65:8c:12:7e:1a:1d:11:5e:4a:c2: 07:99:0a:bf:76:b7:35:22:98:cd:ef:56:48:fd:62:cb:82:b9: 3a:18:cd:0a:ba:48:3b:11:1d:ff:80:bc:ba:04:ba:e2:7b:63: 72:fe:06:0c:7b:7c:ca:e2:fe:d4:b8:3f:41:54:4d:49:96:44: 0e:74:ad:78:26:87:33:ce:8e:64:1f:d7:80:9d:8c:92:60:17: e7:09:f4:b1:c2:81:02:13:aa:df:fe:32:11:7d:b6:a3:ca:b5: 5f:8c:09:8a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICASMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjIyMDlaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDEwNUIzNTE4RTQzRUIz NkRDQ0Q5QTczRUI1NTAxNEU0ODQ1REU1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0HohfcyH9yUP4T+RvPuyOVM3ZaN8LIoVL7P9RdQxnW06dBOBf wbNaVFK39Ah8AoiDpIiLOVgUYH5jhDHCodnLh4B+v17OlSRAn8VKMQnc0bjgAc0E pVeTHNAz1QVfAh5+lvMAvpIYjLFhr9IaB+2EDA2ygnpvykz5orOmCeJelaFvUBEn zTfdTbL2GhPzkS9eek0l58KYhcZWNMaFsqVqGdkYwNdD2johECuUbkjZLElY428r XGTURRcK6aXeSzWnDWW48JSvkI0/qqI5t3NIGHuaWd8FQ9YM3YqoxVk2PhP8EqgR DGFZZTENKrA7fPBFFr+7QlwDuPfEb8lYL16ZAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUEFs1GOQ+s23M2ac+tVAU5IRd5VcwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9FRnMxR09RLXMyM00yYWMtdFZBVTVJUmQ1VmMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDyiFoMA0GCSqGSIb3DQEBCwUAA4IBAQB+DUElw2SDMg+gUM/sv5R9 NtCYyJ1ioaP+oR72bBUGiCnpJEuoILRmOkxUqlEauV6gElsW3wgODNF1SZCpLJNx +sf8BjL/zexlmRpdv/0fqMWYxUMa0stiGZriiptE41j+fdlNaCdfAyp0sw3ctNCq bE/goYnHGMO+iB1eFNM8VywChy56UA0vCFh0LH5KH7h8cV396Zth72WMEn4aHRFe SsIHmQq/drc1IpjN71ZI/WLLgrk6GM0Kukg7ER3/gLy6BLrie2Ny/gYMe3zK4v7U uD9BVE1JlkQOdK14Joczzo5kH9eAnYySYBfnCfSxwoECE6rf/jIRfbajyrVfjAmK -----END CERTIFICATE-----Generated at Wed Jul 30 03:02:02 2025 by rpki-client