$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VCV0jSL-CSJhcKdzmxAD1pG8MDE.roa File: VCV0jSL-CSJhcKdzmxAD1pG8MDE.roa (raw, json) Hash identifier: Kyx/YQA8YpqYfzipFCUTxXahHTwOpW7vT15unXIZkjk= Subject key identifier: 54:25:74:8D:22:FE:09:22:61:70:A7:73:9B:10:03:D6:91:BC:30:31 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: A8 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VCV0jSL-CSJhcKdzmxAD1pG8MDE.roa Signing time: Thu 24 Jul 2025 00:54:34 +0000 ROA not before: Thu 24 Jul 2025 00:54:34 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 203.183.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 00:54:34 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5425748D22FE09226170A7739B1003D691BC3031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a7:78:5d:5c:8d:ef:13:b8:57:dd:28:ca:58: 78:b1:82:1c:e7:0e:bc:e2:1e:1e:2f:b0:25:eb:db: 2a:76:97:59:83:98:31:d5:64:6f:d7:e9:90:6b:27: 64:d5:24:83:1c:ed:8a:83:c9:55:88:45:8a:e6:ba: 61:f9:aa:1e:ed:dd:36:85:aa:47:86:63:ab:6e:3d: 68:1e:0a:00:1a:b7:6a:ee:75:2f:26:14:be:40:1d: 95:28:92:e2:49:98:bd:96:cd:dc:51:aa:76:a9:17: 5a:79:4b:61:be:63:78:92:8b:f2:b0:38:3a:24:2a: 7f:0d:9c:4e:d3:33:7c:ca:b1:32:01:f9:f8:9f:7f: 5e:ba:55:48:38:61:be:56:79:79:91:e9:7e:4b:21: bc:4c:76:f4:7c:01:e6:2f:1d:7e:38:99:a0:e1:26: 81:d3:7b:ed:50:06:98:38:40:07:19:4b:3a:4b:2e: f8:88:1a:43:79:fb:8c:ea:ce:09:a2:1f:06:48:49: 2a:06:6e:3c:78:61:e2:4d:3d:44:75:a1:39:30:7d: 4f:b5:b0:ed:a7:5d:28:aa:68:13:11:5a:ed:3e:7c: 47:d4:1d:33:d9:1c:d6:d3:ef:88:4b:98:2c:86:d1: 2d:56:cb:84:c0:e8:9d:10:14:0f:d1:7c:2e:32:a1: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:25:74:8D:22:FE:09:22:61:70:A7:73:9B:10:03:D6:91:BC:30:31 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/VCV0jSL-CSJhcKdzmxAD1pG8MDE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.183.152.0/24 Signature Algorithm: sha256WithRSAEncryption cf:33:ff:ea:3d:1a:12:9c:12:eb:9b:70:81:a4:59:46:49:6c: d0:35:a9:6a:ce:e0:a8:bb:98:5b:e8:5c:16:ec:59:d0:91:37: 7f:d3:67:ac:d8:6e:97:1a:9b:a9:45:f3:2d:88:e9:5d:6a:da: c8:97:1a:79:ba:2f:f8:29:dd:f5:d9:db:74:8e:77:46:d2:31: 13:3d:b8:cd:9d:bf:68:c7:fd:7a:ca:05:c4:d4:75:68:e0:47: af:7a:08:a6:54:bf:f2:fc:ed:ca:b7:7a:5d:d8:0b:32:4c:41: be:e9:c3:82:59:1c:0f:49:41:6e:7f:b5:6d:62:24:eb:84:0f: 1d:b5:cb:7c:2a:66:fa:82:0b:16:f9:4c:1c:27:ed:76:50:d2: 61:35:98:80:e6:1c:ce:f3:77:db:41:b7:49:51:59:45:64:6a: 05:5a:cc:5d:e5:df:fc:d4:86:ca:22:ef:9d:dc:d3:4e:d5:7b: a4:a6:2f:78:fd:9d:49:d8:15:04:2c:38:53:be:b8:f6:1d:b7: 3d:cd:cb:24:45:46:08:bf:c1:79:b6:a0:b7:89:a3:12:3e:cb: a5:b4:ac:16:89:46:02:89:42:a7:e1:6e:be:3d:36:39:c7:83: 26:cb:89:f0:d6:85:32:3b:ab:8c:e3:4c:72:03:3b:42:c9:5d: f8:49:cf:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MDU0MzRaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDU0MjU3NDhEMjJGRTA5 MjI2MTcwQTc3MzlCMTAwM0Q2OTFCQzMwMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVp3hdXI3vE7hX3SjKWHixghznDrziHh4vsCXr2yp2l1mDmDHV ZG/X6ZBrJ2TVJIMc7YqDyVWIRYrmumH5qh7t3TaFqkeGY6tuPWgeCgAat2rudS8m FL5AHZUokuJJmL2WzdxRqnapF1p5S2G+Y3iSi/KwODokKn8NnE7TM3zKsTIB+fif f166VUg4Yb5WeXmR6X5LIbxMdvR8AeYvHX44maDhJoHTe+1QBpg4QAcZSzpLLviI GkN5+4zqzgmiHwZISSoGbjx4YeJNPUR1oTkwfU+1sO2nXSiqaBMRWu0+fEfUHTPZ HNbT74hLmCyG0S1Wy4TA6J0QFA/RfC4yodqrAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUVCV0jSL+CSJhcKdzmxAD1pG8MDEwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9WQ1YwalNMLUNTSmhjS2R6bXhBRDFwRzhNREUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy7eYMA0GCSqGSIb3DQEBCwUAA4IBAQDPM//qPRoSnBLrm3CBpFlG SWzQNalqzuCou5hb6FwW7FnQkTd/02es2G6XGpupRfMtiOldatrIlxp5ui/4Kd31 2dt0jndG0jETPbjNnb9ox/16ygXE1HVo4EevegimVL/y/O3Kt3pd2AsyTEG+6cOC WRwPSUFuf7VtYiTrhA8dtct8Kmb6ggsW+UwcJ+12UNJhNZiA5hzO83fbQbdJUVlF ZGoFWsxd5d/81IbKIu+d3NNO1Xukpi94/Z1J2BUELDhTvrj2Hbc9zcskRUYIv8F5 tqC3iaMSPsultKwWiUYCiUKn4W6+PTY5x4Mmy4nw1oUyO6uM40xyAztCyV34Sc+S -----END CERTIFICATE-----Generated at Wed Jul 30 03:06:02 2025 by rpki-client