$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_hrFHtjIgVlWTipXdjq4LxS9DjQ.roa File: _hrFHtjIgVlWTipXdjq4LxS9DjQ.roa (raw, json) Hash identifier: +pNHQ47SdjmWPzmlG3k500AvJQ2+buWCaR0VM9ZS7iE= Subject key identifier: FE:1A:C5:1E:D8:C8:81:59:56:4E:2A:57:76:3A:B8:2F:14:BD:0E:34 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: C3 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_hrFHtjIgVlWTipXdjq4LxS9DjQ.roa Signing time: Thu 24 Jul 2025 01:16:50 +0000 ROA not before: Thu 24 Jul 2025 01:16:50 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.152.176.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:16:50 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=FE1AC51ED8C88159564E2A57763AB82F14BD0E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:8e:b3:c6:65:0c:96:c1:10:f4:7a:6b:f4: 40:c8:c4:61:1d:55:80:ae:63:93:07:f4:f6:f6:2e: d3:ab:9b:84:02:9b:ea:ae:e5:6a:06:fb:27:de:e0: e1:40:3f:ab:d4:51:64:f8:bd:25:f5:a5:b5:9b:c5: c5:13:ec:3b:30:ff:9e:2a:1a:6e:8b:ac:34:9c:5c: 5e:9d:dc:1e:0c:30:8a:86:14:02:d0:f6:2b:4c:d4: e5:31:ba:04:e3:3d:c6:e0:fc:fd:aa:da:86:0a:0b: 1d:e6:d0:ef:9b:ad:e1:bb:90:e7:1c:40:8e:af:c0: 0b:20:f3:a0:ca:5f:c7:da:07:c4:99:19:6f:7f:f9: 47:3d:20:06:ff:56:d5:e0:3f:0d:53:17:18:7b:99: 78:bc:aa:82:55:84:69:59:8e:ba:5c:12:7e:d5:3a: a8:71:53:2c:73:49:61:57:88:60:d9:8c:a6:37:b1: 9b:fd:29:cc:c7:57:d4:e1:95:c7:23:5c:04:f3:f7: 1b:a5:03:0d:8e:d9:66:8b:87:41:cd:d9:6e:57:53: 29:ee:00:bd:16:8b:a1:80:c0:94:3f:07:6e:73:64: 30:ed:5c:f4:b0:ed:a6:e5:c5:30:f1:e8:c9:d3:69: df:61:40:8e:83:6d:c5:74:b3:62:57:18:9d:4d:7b: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:C5:1E:D8:C8:81:59:56:4E:2A:57:76:3A:B8:2F:14:BD:0E:34 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/_hrFHtjIgVlWTipXdjq4LxS9DjQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.152.176.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:72:56:f0:e7:a5:20:49:b8:ff:cf:e5:71:c9:b2:2f:25:12: ed:21:c2:74:8f:c9:db:96:72:2f:57:23:f6:8c:a5:70:15:3c: b9:ec:38:22:3b:e6:2e:24:9e:e2:a1:e8:0e:bb:52:d9:29:4b: 86:64:13:dc:d9:a5:9a:18:3d:11:4d:9b:db:76:b6:c7:bb:6a: de:8d:d5:d9:b5:5b:eb:32:54:43:18:2b:83:6e:e4:73:a0:7e: e2:c1:05:f4:54:bf:b2:24:82:d3:c8:2b:3e:20:64:59:58:0d: af:35:b5:3a:71:b8:a9:5d:09:34:d0:c8:46:f7:b2:ff:72:22: 13:91:bc:23:5a:25:7c:cc:38:45:c8:e1:f0:7e:51:ea:30:81: 5a:cc:b7:37:e9:2c:cb:25:34:75:5f:a3:cf:ab:c3:4d:36:df: 1c:fe:fe:44:c7:72:7b:10:3d:e9:03:fe:20:ca:6c:c8:87:5d: 43:9a:83:fa:82:1c:c8:9e:20:5f:53:c5:7a:22:40:3e:fd:5b: a5:2c:7c:94:a8:64:17:21:89:25:8b:7f:bc:ae:cc:f3:95:4b: 90:46:29:02:77:59:e4:e2:59:98:d0:54:85:73:37:d4:e1:7b: 28:7f:ce:93:b6:a6:41:9e:b6:75:2c:25:bf:07:98:0e:d7:22: 45:83:5b:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTE2NTBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEZFMUFDNTFFRDhDODgx NTk1NjRFMkE1Nzc2M0FCODJGMTRCRDBFMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKA46zxmUMlsEQ9Hpr9EDIxGEdVYCuY5MH9Pb2LtOrm4QCm+qu 5WoG+yfe4OFAP6vUUWT4vSX1pbWbxcUT7Dsw/54qGm6LrDScXF6d3B4MMIqGFALQ 9itM1OUxugTjPcbg/P2q2oYKCx3m0O+breG7kOccQI6vwAsg86DKX8faB8SZGW9/ +Uc9IAb/VtXgPw1TFxh7mXi8qoJVhGlZjrpcEn7VOqhxUyxzSWFXiGDZjKY3sZv9 KczHV9ThlccjXATz9xulAw2O2WaLh0HN2W5XUynuAL0Wi6GAwJQ/B25zZDDtXPSw 7ablxTDx6MnTad9hQI6DbcV0s2JXGJ1Ne8qJAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQU/hrFHtjIgVlWTipXdjq4LxS9DjQwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9faHJGSHRqSWdWbFdUaXBYZGpxNEx4UzlEalEu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0piwMA0GCSqGSIb3DQEBCwUAA4IBAQB/clbw56UgSbj/z+VxybIv JRLtIcJ0j8nblnIvVyP2jKVwFTy57DgiO+YuJJ7ioegOu1LZKUuGZBPc2aWaGD0R TZvbdrbHu2rejdXZtVvrMlRDGCuDbuRzoH7iwQX0VL+yJILTyCs+IGRZWA2vNbU6 cbipXQk00MhG97L/ciITkbwjWiV8zDhFyOHwflHqMIFazLc36SzLJTR1X6PPq8NN Nt8c/v5Ex3J7ED3pA/4gymzIh11DmoP6ghzIniBfU8V6IkA+/VulLHyUqGQXIYkl i3+8rszzlUuQRikCd1nk4lmY0FSFczfU4Xsof86TtqZBnrZ1LCW/B5gO1yJFg1t2 -----END CERTIFICATE-----Generated at Wed Jul 30 03:19:52 2025 by rpki-client