$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WeREc-9dtbLYTZU1jROqdWv_h-I.roa File: WeREc-9dtbLYTZU1jROqdWv_h-I.roa (raw, json) Hash identifier: XhUDUTU+KC/JHhWRaYO/FXysKQVe5rdBNx2oJ0jkbTg= Subject key identifier: 59:E4:44:73:EF:5D:B5:B2:D8:4D:95:35:8D:13:AA:75:6B:FF:87:E2 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: AC Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WeREc-9dtbLYTZU1jROqdWv_h-I.roa Signing time: Thu 24 Jul 2025 01:04:23 +0000 ROA not before: Thu 24 Jul 2025 01:04:23 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.129.0.0/17 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:04:23 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=59E44473EF5DB5B2D84D95358D13AA756BFF87E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:0a:5e:06:19:5e:fd:05:fd:29:30:43:81: 16:f8:c6:f6:88:a5:66:d7:89:c4:b0:65:98:c8:a6: b4:dc:69:ea:bf:af:03:e9:e5:a7:1d:4f:d4:92:66: 86:6d:ff:71:5e:4e:2a:89:8e:61:57:5c:6b:98:c1: 0f:14:6b:e9:35:45:7f:b7:2f:18:87:be:c8:22:61: 0a:d6:7e:d6:c8:33:c7:0c:79:52:2b:6d:96:87:23: 43:4d:c1:9f:58:85:09:18:ce:e5:65:e4:da:48:4e: 01:23:c6:0b:6e:9f:fe:ad:70:5e:37:37:f8:5d:60: e6:73:3a:2e:d0:1d:85:65:93:69:da:89:98:6e:2b: 86:88:ff:57:22:66:a2:93:84:16:aa:81:9d:8d:1c: 45:02:82:24:0c:ce:d4:25:25:7e:eb:90:10:fd:9d: 70:4f:bf:5e:82:48:e3:48:be:f8:51:3d:b2:7f:ef: 1f:18:52:4a:a5:2c:9b:23:85:55:f3:ab:d1:53:b1: 2a:ec:43:32:fb:c0:40:17:bf:8b:40:fd:4e:06:aa: 87:30:77:0c:f3:3b:a7:90:29:68:13:5d:38:51:01: 37:44:3b:c1:ab:8e:f0:68:46:f3:04:13:52:0f:a8: dc:b4:99:ef:9b:54:9d:4f:f7:71:8e:c7:3d:da:c9: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E4:44:73:EF:5D:B5:B2:D8:4D:95:35:8D:13:AA:75:6B:FF:87:E2 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WeREc-9dtbLYTZU1jROqdWv_h-I.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.129.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8c:52:d8:16:55:39:8c:f3:cd:4f:df:be:f7:4e:31:a9:d0:62: 01:df:50:1d:f4:6a:94:a5:9e:43:4b:a6:82:b1:78:e9:40:af: d0:c6:f7:f4:20:98:33:02:f6:8d:2e:03:c8:44:13:dc:57:43: 1e:06:34:8c:87:2c:59:ca:75:59:a4:3f:bf:80:be:c6:cf:2d: 54:21:34:cb:0f:35:e4:e4:6f:d1:b2:1e:44:59:fc:3d:8f:b0: 5b:b4:a8:b7:0b:78:f0:88:23:fa:0b:ab:ef:78:44:05:a4:b5: 15:ea:6f:79:a8:a6:e3:33:aa:6e:bc:3f:e2:55:e1:de:20:67: 0f:c6:9f:1f:75:ba:87:2c:67:99:3b:14:09:79:fe:df:89:b3: ad:cf:7e:e0:a8:b3:4b:ea:8e:ab:87:d0:c7:d1:e2:6f:0f:50: 54:f5:58:0f:42:0e:55:dd:b3:5b:23:59:20:f9:75:20:a1:09: 7e:bd:f1:9b:ff:5b:ae:c2:25:26:bc:f1:d4:27:98:4d:64:ce: f9:22:85:4e:df:7d:ca:d0:9f:0a:82:fb:88:f5:6f:f7:4a:df: 91:6b:bd:3c:c9:2b:8c:2a:c3:9f:04:67:b5:4c:da:c2:1c:7e: 71:eb:b9:03:77:af:a1:18:11:22:76:48:6e:c5:62:57:bb:cc: f7:be:92:6d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTA0MjNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDU5RTQ0NDczRUY1REI1 QjJEODREOTUzNThEMTNBQTc1NkJGRjg3RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHEgpeBhle/QX9KTBDgRb4xvaIpWbXicSwZZjIprTcaeq/rwPp 5acdT9SSZoZt/3FeTiqJjmFXXGuYwQ8Ua+k1RX+3LxiHvsgiYQrWftbIM8cMeVIr bZaHI0NNwZ9YhQkYzuVl5NpITgEjxgtun/6tcF43N/hdYOZzOi7QHYVlk2naiZhu K4aI/1ciZqKThBaqgZ2NHEUCgiQMztQlJX7rkBD9nXBPv16CSONIvvhRPbJ/7x8Y UkqlLJsjhVXzq9FTsSrsQzL7wEAXv4tA/U4GqocwdwzzO6eQKWgTXThRATdEO8Gr jvBoRvMEE1IPqNy0me+bVJ1P93GOxz3ayXb3AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUWeREc+9dtbLYTZU1jROqdWv/h+IwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9XZVJFYy05ZHRiTFlUWlUxalJPcWRXdl9oLUku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQH0oEAMA0GCSqGSIb3DQEBCwUAA4IBAQCMUtgWVTmM881P3773TjGp 0GIB31Ad9GqUpZ5DS6aCsXjpQK/Qxvf0IJgzAvaNLgPIRBPcV0MeBjSMhyxZynVZ pD+/gL7Gzy1UITTLDzXk5G/Rsh5EWfw9j7BbtKi3C3jwiCP6C6vveEQFpLUV6m95 qKbjM6puvD/iVeHeIGcPxp8fdbqHLGeZOxQJef7fibOtz37gqLNL6o6rh9DH0eJv D1BU9VgPQg5V3bNbI1kg+XUgoQl+vfGb/1uuwiUmvPHUJ5hNZM75IoVO333K0J8K gvuI9W/3St+Ra708ySuMKsOfBGe1TNrCHH5x67kDd6+hGBEidkhuxWJXu8z3vpJt -----END CERTIFICATE-----Generated at Wed Jul 30 03:03:08 2025 by rpki-client