$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Xj4w79QYxrIyBpA7UKQDmLVQ1AA.roa File: Xj4w79QYxrIyBpA7UKQDmLVQ1AA.roa (raw, json) Hash identifier: MsLMXKjjN484vfFeSdVDkHEmlDlhxTJFLs9JB2bfZ0U= Subject key identifier: 5E:3E:30:EF:D4:18:C6:B2:32:06:90:3B:50:A4:03:98:B5:50:D4:00 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: DA Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Xj4w79QYxrIyBpA7UKQDmLVQ1AA.roa Signing time: Thu 24 Jul 2025 01:50:58 +0000 ROA not before: Thu 24 Jul 2025 01:50:58 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.189.252.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:50:58 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5E3E30EFD418C6B23206903B50A40398B550D400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:08:c3:0a:3d:70:9c:9d:71:b7:4f:bd:8c:de: ce:2f:98:9b:97:74:f1:b5:72:e1:6b:da:57:cc:0b: 14:3d:d9:56:e5:f3:6b:3d:0e:c0:20:9d:41:44:1f: 43:18:40:6b:67:9d:50:7a:f7:39:6b:0e:c1:11:83: e0:71:99:bc:9d:ed:7b:24:93:c0:a9:1a:a3:38:43: da:8d:72:ee:43:ba:b9:bd:e8:68:9a:63:6f:3e:d4: 03:6d:54:b3:77:88:47:39:16:4d:fe:e7:02:c8:a2: c4:14:8a:d8:83:5f:4d:12:a0:1a:56:92:ca:df:92: 16:9f:02:3b:65:e7:66:0e:d9:6e:0c:49:23:b6:ed: b1:4f:91:de:23:d8:74:19:82:68:66:8c:99:9a:f9: 45:ca:8c:48:44:fe:d6:40:7f:62:4b:28:af:ac:8a: 42:87:07:e0:21:f4:bf:fd:91:3f:26:2f:3e:63:53: b3:15:31:e9:4a:2e:6e:dd:ec:c9:f8:5f:76:1d:d2: 65:ff:4b:e8:bd:c6:f9:86:a6:e4:28:95:eb:af:01: 63:45:54:fa:79:80:db:18:65:1c:23:f6:47:56:cc: 41:8f:41:e9:25:b7:19:ef:48:a0:fc:6a:30:12:76: 20:95:24:03:94:82:57:e3:9c:4e:14:a0:a8:3c:50: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3E:30:EF:D4:18:C6:B2:32:06:90:3B:50:A4:03:98:B5:50:D4:00 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Xj4w79QYxrIyBpA7UKQDmLVQ1AA.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.189.252.0/22 Signature Algorithm: sha256WithRSAEncryption aa:1f:b8:37:12:27:f0:1f:b7:f5:a9:9b:2d:1f:e4:e0:92:54: 29:84:8b:7d:8b:ff:53:35:fc:55:3b:7b:bc:ea:c5:3e:a0:39: 6d:d5:fc:2f:d0:75:13:d3:34:77:75:be:11:99:7b:3a:bb:1f: 4a:67:11:df:60:34:45:e5:0d:75:75:12:ad:aa:8e:c3:3a:8c: d9:56:b8:f4:71:10:01:20:77:e5:42:40:01:97:9f:92:4d:94: d4:ff:b1:f7:47:d8:6e:96:6a:89:20:9c:e2:c8:69:da:a7:be: b9:16:b9:4d:b8:c9:bf:95:9c:67:af:cc:66:75:04:95:1d:b0: 58:5a:a8:4c:ea:f6:00:04:c4:47:44:38:86:85:73:11:45:4c: 79:39:8a:37:39:07:ee:24:2d:c1:a2:a2:14:b0:de:7b:b0:61: 9f:ae:49:24:5b:f6:68:35:fd:a7:90:14:cb:ff:c3:84:30:e5: 5a:61:b9:75:84:32:91:61:55:84:2f:69:b3:b1:cc:13:73:2a: 69:ba:36:e1:43:66:ad:00:92:13:8c:76:ee:44:b9:b8:a2:a3: f3:ca:f1:1e:17:d2:53:a8:54:fa:4e:01:d3:49:74:e9:dc:33: db:e7:12:72:09:82:b5:f5:5d:d8:40:b8:97:69:77:75:31:15: bc:5c:3a:e5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTUwNThaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDVFM0UzMEVGRDQxOEM2 QjIzMjA2OTAzQjUwQTQwMzk4QjU1MEQ0MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1CMMKPXCcnXG3T72M3s4vmJuXdPG1cuFr2lfMCxQ92Vbl82s9 DsAgnUFEH0MYQGtnnVB69zlrDsERg+Bxmbyd7Xskk8CpGqM4Q9qNcu5Durm96Gia Y28+1ANtVLN3iEc5Fk3+5wLIosQUitiDX00SoBpWksrfkhafAjtl52YO2W4MSSO2 7bFPkd4j2HQZgmhmjJma+UXKjEhE/tZAf2JLKK+sikKHB+Ah9L/9kT8mLz5jU7MV MelKLm7d7Mn4X3Yd0mX/S+i9xvmGpuQoleuvAWNFVPp5gNsYZRwj9kdWzEGPQekl txnvSKD8ajASdiCVJAOUglfjnE4UoKg8UN9VAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUXj4w79QYxrIyBpA7UKQDmLVQ1AAwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9YajR3NzlRWXhySXlCcEE3VUtRRG1MVlExQUEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC0r38MA0GCSqGSIb3DQEBCwUAA4IBAQCqH7g3EifwH7f1qZstH+Tg klQphIt9i/9TNfxVO3u86sU+oDlt1fwv0HUT0zR3db4RmXs6ux9KZxHfYDRF5Q11 dRKtqo7DOozZVrj0cRABIHflQkABl5+STZTU/7H3R9hulmqJIJziyGnap765FrlN uMm/lZxnr8xmdQSVHbBYWqhM6vYABMRHRDiGhXMRRUx5OYo3OQfuJC3BoqIUsN57 sGGfrkkkW/ZoNf2nkBTL/8OEMOVaYbl1hDKRYVWEL2mzscwTcyppujbhQ2atAJIT jHbuRLm4oqPzyvEeF9JTqFT6TgHTSXTp3DPb5xJyCYK19V3YQLiXaXd1MRW8XDrl -----END CERTIFICATE-----Generated at Wed Jul 30 03:20:13 2025 by rpki-client