$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ctJFzguAqbxw_UPvb5kiyRKQUjw.roa File: ctJFzguAqbxw_UPvb5kiyRKQUjw.roa (raw, json) Hash identifier: UwY27GNNuL+UMcaFj+SU8xZqoEvUizJQlVV+8Q4npJk= Subject key identifier: 72:D2:45:CE:0B:80:A9:BC:70:FD:43:EF:6F:99:22:C9:12:90:52:3C Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 9B Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ctJFzguAqbxw_UPvb5kiyRKQUjw.roa Signing time: Thu 24 Jul 2025 00:46:53 +0000 ROA not before: Thu 24 Jul 2025 00:46:53 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 202.230.58.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 00:46:53 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=72D245CE0B80A9BC70FD43EF6F9922C91290523C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:8f:5b:8d:37:7c:1b:26:cd:c1:59:ea:b9: 58:89:2a:e7:c7:69:30:64:86:00:60:e2:16:cb:20: 28:ff:d2:20:a0:aa:e3:a7:67:fc:ab:7c:49:40:55: af:01:53:e9:b6:e8:18:7f:34:0e:8f:1a:61:bf:41: f1:af:63:6b:46:78:a3:52:0e:02:f5:10:fd:0e:7a: f6:4d:fe:4d:40:93:32:44:e0:e7:0e:db:ab:de:62: 09:4e:57:49:a9:51:be:53:d8:b1:23:c8:2c:cd:f5: a9:5f:eb:4d:e5:a8:c4:91:ab:08:4e:fd:ae:79:b1: 9e:78:ee:0e:27:48:26:f6:59:81:56:88:0d:26:bf: fd:55:e2:fb:4b:22:4a:8b:4d:93:32:b3:31:22:65: 11:b0:67:f5:61:a0:65:d2:99:a6:2b:f0:ca:a0:ec: 01:5a:1b:15:ab:24:31:ed:0c:30:fb:7d:44:25:62: 78:a1:52:16:c6:9f:2b:74:c5:ce:f6:d6:6a:21:42: 85:4d:1b:a4:93:ad:5a:aa:d3:5a:59:8b:b6:77:7c: 60:aa:53:9e:31:b5:5f:ea:73:57:b8:ec:f4:f6:c9: 87:2f:4d:5b:57:a0:8e:d1:d0:0a:ce:2c:41:cd:cc: 0b:a7:58:fb:12:3b:24:a6:67:e8:e4:e7:31:f9:67: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:45:CE:0B:80:A9:BC:70:FD:43:EF:6F:99:22:C9:12:90:52:3C X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ctJFzguAqbxw_UPvb5kiyRKQUjw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.230.58.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:1b:7c:07:c2:22:b3:33:67:82:54:0c:61:75:04:15:9d:af: 7d:83:87:68:92:88:7a:c4:d0:a8:f7:30:03:5d:67:1c:59:8a: ec:c8:b7:58:42:f3:de:91:6d:82:91:ff:cf:d3:5f:76:2a:f5: 02:65:a4:f8:08:e4:6a:d4:04:71:0b:08:8f:1e:f5:92:26:b8: d5:2c:2d:6a:e5:55:36:40:06:de:7d:21:44:6a:28:99:bb:04: 8f:f5:56:5a:ab:d3:eb:fb:30:df:da:e0:ff:77:03:6b:31:0e: d7:85:8c:13:16:c1:65:bc:37:53:c1:56:fc:dd:37:d7:d4:b3: 75:ba:b9:b4:03:ad:78:a5:f4:fb:a7:04:95:b4:83:9b:30:da: 01:cc:52:95:db:93:34:3e:01:ed:7b:2f:43:25:43:03:38:c6: bd:7f:85:f8:3e:ee:06:bf:e9:f6:39:06:ef:b7:4f:46:18:5c: 6e:a0:1e:15:7e:22:e9:b8:93:a4:f1:b5:f3:9d:83:cd:cd:d4: ef:bd:fa:59:bc:72:97:b3:25:c5:d9:a0:e8:a3:7f:a1:ee:11: c1:f6:ea:ec:77:98:16:06:db:90:09:f3:a5:37:01:5f:e1:b2: 88:48:f0:6f:4c:bd:c2:b1:53:37:2d:5f:40:de:ce:75:36:9f: 08:1f:91:8d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MDQ2NTNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDcyRDI0NUNFMEI4MEE5 QkM3MEZENDNFRjZGOTkyMkM5MTI5MDUyM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWvI9bjTd8GybNwVnquViJKufHaTBkhgBg4hbLICj/0iCgquOn Z/yrfElAVa8BU+m26Bh/NA6PGmG/QfGvY2tGeKNSDgL1EP0OevZN/k1AkzJE4OcO 26veYglOV0mpUb5T2LEjyCzN9alf603lqMSRqwhO/a55sZ547g4nSCb2WYFWiA0m v/1V4vtLIkqLTZMyszEiZRGwZ/VhoGXSmaYr8Mqg7AFaGxWrJDHtDDD7fUQlYnih UhbGnyt0xc721mohQoVNG6STrVqq01pZi7Z3fGCqU54xtV/qc1e47PT2yYcvTVtX oI7R0ArOLEHNzAunWPsSOySmZ+jk5zH5Z4HNAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUctJFzguAqbxw/UPvb5kiyRKQUjwwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9jdEpGemd1QXFieHdfVVB2YjVraXlSS1FVancu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyuY6MA0GCSqGSIb3DQEBCwUAA4IBAQA/G3wHwiKzM2eCVAxhdQQV na99g4dokoh6xNCo9zADXWccWYrsyLdYQvPekW2Ckf/P0192KvUCZaT4CORq1ARx CwiPHvWSJrjVLC1q5VU2QAbefSFEaiiZuwSP9VZaq9Pr+zDf2uD/dwNrMQ7XhYwT FsFlvDdTwVb83TfX1LN1urm0A614pfT7pwSVtIObMNoBzFKV25M0PgHtey9DJUMD OMa9f4X4Pu4Gv+n2OQbvt09GGFxuoB4VfiLpuJOk8bXznYPNzdTvvfpZvHKXsyXF 2aDoo3+h7hHB9ursd5gWBtuQCfOlNwFf4bKISPBvTL3CsVM3LV9A3s51Np8IH5GN -----END CERTIFICATE-----Generated at Wed Jul 30 03:09:47 2025 by rpki-client