$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Wkk0Q4PuKV4X_D47bkabI_3E10E.roa File: Wkk0Q4PuKV4X_D47bkabI_3E10E.roa (raw, json) Hash identifier: GJYWBpOqYnX2t0alFwZIY6quvKvdaLCJOOb2AXPSArE= Subject key identifier: 5A:49:34:43:83:EE:29:5E:17:FC:3E:3B:6E:46:9B:23:FD:C4:D7:41 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: FF Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Wkk0Q4PuKV4X_D47bkabI_3E10E.roa Signing time: Thu 24 Jul 2025 02:05:30 +0000 ROA not before: Thu 24 Jul 2025 02:05:30 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 211.120.37.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:05:30 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5A49344383EE295E17FC3E3B6E469B23FDC4D741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:8d:9b:73:e5:75:e7:fd:cd:16:6a:bf:64: 0a:19:83:46:21:c7:71:e3:4f:a2:4b:33:ea:44:14: 77:9d:06:f6:3b:c6:fa:c6:15:33:3d:4d:42:2d:1e: aa:52:f3:1f:ad:72:57:7f:ce:e8:49:34:41:18:8b: 6c:65:6f:a5:fc:55:64:fc:76:4a:92:96:42:1f:3e: 33:e7:a7:27:e6:6d:d3:2c:a8:d6:80:9c:9b:db:26: 6d:62:0f:1d:60:90:2a:e5:9d:55:6c:30:a4:04:cb: dc:28:f7:30:aa:2d:f7:c8:16:8c:74:12:db:cb:b2: 03:d3:44:be:f3:de:ee:47:3d:50:21:38:a6:ea:32: fd:bd:be:82:01:46:ce:72:52:bc:3c:96:c5:ae:51: 70:27:1a:39:77:25:25:8e:29:df:3a:b6:21:8d:82: 0a:c1:01:c9:06:cd:c6:61:be:20:2c:c9:b4:c3:ea: 10:e3:31:65:8e:2f:39:6a:84:d5:90:cc:88:c1:79: ca:c5:50:39:95:1d:a9:13:e1:59:27:55:44:2e:3c: 72:6c:80:1b:47:9d:02:c1:de:6a:e9:87:84:f6:b1: 1d:fb:3f:9e:19:91:81:11:07:2b:ee:e6:42:ea:2b: e4:55:d1:80:4a:ca:aa:26:27:53:dd:e5:f4:d1:de: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:49:34:43:83:EE:29:5E:17:FC:3E:3B:6E:46:9B:23:FD:C4:D7:41 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Wkk0Q4PuKV4X_D47bkabI_3E10E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.120.37.0/24 Signature Algorithm: sha256WithRSAEncryption 15:f5:2a:4c:e9:4f:c0:78:a2:ac:22:00:c1:17:fe:9f:16:ad: fb:7a:56:c8:b1:a5:fd:90:49:f7:dd:c1:6e:4b:70:75:6a:cf: fe:3f:85:3c:4c:53:50:36:7f:ae:cb:25:cf:25:b3:73:2b:5c: 25:0f:e7:b7:ec:e3:d4:9f:ff:f3:6d:a4:9f:a1:43:f3:0b:b9: 85:28:4b:43:bf:de:d9:5c:18:38:88:ec:b5:bd:e5:27:c0:21: 2c:f7:1c:6a:04:e3:58:12:00:a6:bf:a1:82:c0:95:cd:86:3b: d3:a2:a6:02:01:09:24:26:a8:af:ee:4e:65:7b:08:4c:10:f5: b7:9a:2e:9c:fa:01:b6:72:77:f9:3d:54:71:bb:e2:a2:68:28: 6a:80:05:5e:c2:f4:f3:f2:95:5c:77:4d:b5:72:61:81:d2:2d: 01:f8:88:63:fd:62:27:1c:ac:c0:a3:f8:19:19:25:db:4b:ae: 94:ed:46:05:ae:c2:ac:a6:24:e6:ec:35:87:99:65:5f:da:8d: 49:ff:94:a8:06:9f:b1:7c:dc:41:74:51:a7:11:93:e5:00:df: 21:8e:21:69:43:b9:48:d0:9a:67:92:20:cf:60:c3:f6:bc:b6: 44:bf:4d:74:83:4d:58:3c:9e:72:88:55:01:1b:79:2d:ce:1a: 84:cb:8d:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjA1MzBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDVBNDkzNDQzODNFRTI5 NUUxN0ZDM0UzQjZFNDY5QjIzRkRDNEQ3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHdY2bc+V15/3NFmq/ZAoZg0Yhx3HjT6JLM+pEFHedBvY7xvrG FTM9TUItHqpS8x+tcld/zuhJNEEYi2xlb6X8VWT8dkqSlkIfPjPnpyfmbdMsqNaA nJvbJm1iDx1gkCrlnVVsMKQEy9wo9zCqLffIFox0EtvLsgPTRL7z3u5HPVAhOKbq Mv29voIBRs5yUrw8lsWuUXAnGjl3JSWOKd86tiGNggrBAckGzcZhviAsybTD6hDj MWWOLzlqhNWQzIjBecrFUDmVHakT4VknVUQuPHJsgBtHnQLB3mrph4T2sR37P54Z kYERByvu5kLqK+RV0YBKyqomJ1Pd5fTR3rMPAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUWkk0Q4PuKV4X/D47bkabI/3E10EwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9Xa2swUTRQdUtWNFhfRDQ3YmthYklfM0UxMEUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA03glMA0GCSqGSIb3DQEBCwUAA4IBAQAV9SpM6U/AeKKsIgDBF/6f Fq37elbIsaX9kEn33cFuS3B1as/+P4U8TFNQNn+uyyXPJbNzK1wlD+e37OPUn//z baSfoUPzC7mFKEtDv97ZXBg4iOy1veUnwCEs9xxqBONYEgCmv6GCwJXNhjvToqYC AQkkJqiv7k5lewhMEPW3mi6c+gG2cnf5PVRxu+KiaChqgAVewvTz8pVcd021cmGB 0i0B+Ihj/WInHKzAo/gZGSXbS66U7UYFrsKspiTm7DWHmWVf2o1J/5SoBp+xfNxB dFGnEZPlAN8hjiFpQ7lI0JpnkiDPYMP2vLZEv010g01YPJ5yiFUBG3ktzhqEy40+ -----END CERTIFICATE-----Generated at Wed Jul 30 03:11:07 2025 by rpki-client