$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KblXJaVJMTkpdn2Lz9hZmJAkfuY.roa File: KblXJaVJMTkpdn2Lz9hZmJAkfuY.roa (raw, json) Hash identifier: 70Nqr9eFenTSoz2zjngICTUc0bwpGn1E9c4/xPtCrYY= Subject key identifier: 29:B9:57:25:A5:49:31:39:29:76:7D:8B:CF:D8:59:98:90:24:7E:E6 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0127 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KblXJaVJMTkpdn2Lz9hZmJAkfuY.roa Signing time: Thu 24 Jul 2025 02:29:18 +0000 ROA not before: Thu 24 Jul 2025 02:29:18 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.236.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:29:18 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=29B95725A549313929767D8BCFD8599890247EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:44:e3:ca:ac:c1:4a:92:db:d4:06:88:de: 5a:30:e9:2b:9f:05:fd:e5:e3:dd:00:7d:db:0d:c1: 59:07:b9:c0:30:5b:ed:ce:25:c9:fa:97:12:eb:50: 3b:87:2e:1b:d7:b1:92:67:39:20:83:43:07:cd:99: 74:eb:6d:5d:86:07:9f:27:d4:14:89:4b:ed:13:db: c4:4f:55:9e:e5:36:74:dd:0f:24:b5:0c:0b:90:42: 3f:4e:67:15:b8:03:68:0d:38:27:a1:75:89:c1:95: 82:82:a0:b9:52:97:80:cf:fc:65:29:d8:3f:2f:82: 00:d5:e7:8d:23:20:a3:9d:c0:c3:df:3b:76:d0:d2: 6d:f4:ef:69:1e:af:5e:83:1d:1e:e1:05:b1:5f:d2: 37:b0:65:8d:7e:cc:40:54:16:a8:57:11:15:32:c3: 0a:7d:fa:ba:0a:63:bb:24:cf:73:b6:9f:c4:ee:b2: ee:48:a8:72:99:f4:d0:0b:46:f6:5a:d2:76:2a:b3: 99:ee:59:04:47:50:b0:49:15:23:c9:23:a4:03:c2: e0:ae:46:11:2b:6e:79:1d:df:7b:76:c2:ac:31:78: ee:bb:b2:a5:fd:65:09:f1:e4:3e:b0:dd:91:cd:ee: b9:19:1c:3b:c5:c2:ea:4d:fd:24:c3:7b:c2:8c:07: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:57:25:A5:49:31:39:29:76:7D:8B:CF:D8:59:98:90:24:7E:E6 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KblXJaVJMTkpdn2Lz9hZmJAkfuY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.236.240.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:92:d7:04:07:88:21:c5:7f:9a:c7:13:95:ad:38:0a:36:e2: fe:e7:e4:7a:82:21:03:e6:70:5f:5b:eb:4e:4b:57:47:e8:93: 47:f3:fc:08:e6:bd:32:28:7f:7b:a6:ee:6e:2f:0f:a9:84:3e: 6d:b5:7a:55:9c:3c:f6:31:7b:ce:0e:70:52:49:a6:75:5e:27: 3d:b7:ea:d6:0c:0d:cc:3c:db:58:f2:5d:49:38:57:1a:14:ae: a7:54:87:4e:f7:a0:70:4c:01:15:cf:18:8a:07:82:f1:0b:ac: b5:70:ce:15:5b:16:8d:27:e9:d4:88:91:72:6c:23:de:ca:cf: fc:c0:3c:ae:be:38:55:75:44:6b:16:71:4d:ad:b1:09:d3:d4: 13:3c:a2:07:96:44:e6:c4:1e:f1:0e:c9:84:fd:66:31:74:59: 01:10:7c:a0:ce:fb:9b:36:3a:2a:43:9a:c2:a5:df:9c:fe:a6: 22:34:d8:b5:eb:49:46:dc:a1:f3:1a:5a:da:0c:5d:f8:b9:9b: 9f:73:bb:48:8a:84:ba:7c:1e:c4:cd:f9:6b:ce:35:f1:f4:c6: 59:a9:25:5d:fa:34:bf:15:8f:00:2a:d7:60:75:7f:06:bb:42: b5:0e:16:9e:16:90:c7:4e:73:c7:72:5a:86:fa:a5:1c:18:61: e2:b0:39:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjI5MThaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDI5Qjk1NzI1QTU0OTMx MzkyOTc2N0Q4QkNGRDg1OTk4OTAyNDdFRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9W0TjyqzBSpLb1AaI3low6SufBf3l490AfdsNwVkHucAwW+3O Jcn6lxLrUDuHLhvXsZJnOSCDQwfNmXTrbV2GB58n1BSJS+0T28RPVZ7lNnTdDyS1 DAuQQj9OZxW4A2gNOCehdYnBlYKCoLlSl4DP/GUp2D8vggDV540jIKOdwMPfO3bQ 0m3072ker16DHR7hBbFf0jewZY1+zEBUFqhXERUywwp9+roKY7skz3O2n8Tusu5I qHKZ9NALRvZa0nYqs5nuWQRHULBJFSPJI6QDwuCuRhErbnkd33t2wqwxeO67sqX9 ZQnx5D6w3ZHN7rkZHDvFwupN/STDe8KMB2dLAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUKblXJaVJMTkpdn2Lz9hZmJAkfuYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9LYmxYSmFWSk1Ua3BkbjJMejloWm1KQWtmdVku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQE0uzwMA0GCSqGSIb3DQEBCwUAA4IBAQAtktcEB4ghxX+axxOVrTgK NuL+5+R6giED5nBfW+tOS1dH6JNH8/wI5r0yKH97pu5uLw+phD5ttXpVnDz2MXvO DnBSSaZ1Xic9t+rWDA3MPNtY8l1JOFcaFK6nVIdO96BwTAEVzxiKB4LxC6y1cM4V WxaNJ+nUiJFybCPeys/8wDyuvjhVdURrFnFNrbEJ09QTPKIHlkTmxB7xDsmE/WYx dFkBEHygzvubNjoqQ5rCpd+c/qYiNNi160lG3KHzGlraDF34uZufc7tIioS6fB7E zflrzjXx9MZZqSVd+jS/FY8AKtdgdX8Gu0K1DhaeFpDHTnPHclqG+qUcGGHisDkb -----END CERTIFICATE-----Generated at Wed Jul 30 03:21:29 2025 by rpki-client