$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lFrqUBu8d_WSCfGtOhy9I8kONLY.roa File: lFrqUBu8d_WSCfGtOhy9I8kONLY.roa (raw, json) Hash identifier: 8mLzSkoc9AoqYy9pzaViiQvCDH9DYgLYjskYLCueuno= Subject key identifier: 94:5A:EA:50:1B:BC:77:F5:92:09:F1:AD:3A:1C:BD:23:C9:0E:34:B6 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: E9 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lFrqUBu8d_WSCfGtOhy9I8kONLY.roa Signing time: Thu 24 Jul 2025 01:58:20 +0000 ROA not before: Thu 24 Jul 2025 01:58:20 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.239.92.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 01:58:20 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=945AEA501BBC77F59209F1AD3A1CBD23C90E34B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:a3:51:38:14:a4:15:a6:09:e7:04:db:c1: bb:c2:db:6a:23:cc:b3:90:a7:ad:4c:cd:c7:e7:5c: aa:bd:e9:e8:c6:52:76:85:71:43:1b:50:92:8a:68: 3e:0a:06:b5:0a:28:33:28:fb:dd:8c:e3:53:5e:d9: 4b:e5:c9:03:e0:b1:19:3b:47:49:2a:10:d4:1a:be: 65:1d:ae:9b:eb:da:6f:b5:73:26:42:67:d7:25:56: c9:93:60:4f:9c:e4:0d:84:54:64:7a:9a:5b:3a:8e: 0b:6e:46:1b:d7:46:44:93:d5:13:64:f3:c5:5d:38: 89:bf:4a:1f:7a:94:18:b8:2d:b6:1f:13:8c:bb:63: 45:bc:84:c7:53:ad:e2:9a:c2:55:10:61:37:63:5a: c9:8a:aa:0d:38:f8:5d:56:38:87:68:cc:c7:43:54: 76:4c:b8:92:31:f6:ff:16:11:9e:0f:e3:b0:ad:55: c6:f3:cb:b0:90:f8:2f:51:0e:77:c2:52:ec:d2:45: bf:ec:a3:43:68:07:33:9d:4a:af:ca:5f:9f:82:68: 32:77:60:5a:ec:4b:89:fd:00:89:06:83:23:92:66: e4:02:0e:6e:fa:5f:68:90:d5:6e:24:f2:99:d0:65: da:54:bb:b0:43:b7:5f:b7:ff:d4:6c:41:61:aa:89: 9c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:EA:50:1B:BC:77:F5:92:09:F1:AD:3A:1C:BD:23:C9:0E:34:B6 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lFrqUBu8d_WSCfGtOhy9I8kONLY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.239.92.0/24 Signature Algorithm: sha256WithRSAEncryption 63:92:0a:1b:3d:66:f1:81:39:90:39:15:c1:47:32:09:33:fe: 12:2b:06:25:3e:71:d1:5d:22:13:73:76:40:96:58:e6:9f:3e: 7f:21:76:cb:31:6a:f2:f1:03:81:27:13:22:11:fb:9c:5a:9c: dd:cd:63:b7:db:ec:42:2f:d9:86:b5:cb:c1:d3:6d:cc:b6:58: cf:6a:14:ad:66:2e:fc:c5:cf:e7:9c:74:84:38:2e:fc:e7:ec: 4b:71:01:30:a9:57:25:35:f9:d4:a4:14:39:d6:34:de:e7:37: 27:95:03:17:b7:73:a8:d9:69:34:e2:1b:57:8a:66:45:39:5b: 9e:3d:f6:f1:51:26:16:05:7d:0d:7b:7d:6a:5d:f9:2e:5d:7a: 6c:98:5a:82:3c:2c:10:ea:e4:85:b4:04:07:7d:a1:54:dc:73: 3f:78:db:ee:b5:4f:9b:69:cc:a1:f1:25:96:dd:e0:aa:fc:da: 89:df:27:ac:cf:b7:8c:57:bd:c0:b2:a7:b6:b3:c6:2c:99:f2: 50:f2:30:25:e5:cd:8a:56:2d:1f:28:6d:32:91:7c:06:e4:65: a4:6c:16:3c:de:46:1b:1b:9d:13:1a:a9:50:37:b8:7b:1e:ee: e0:e5:5f:de:96:d3:72:97:4f:e5:ee:82:8c:8e:73:a1:c0:95: ec:96:82:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MTU4MjBaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKDk0NUFFQTUwMUJCQzc3 RjU5MjA5RjFBRDNBMUNCRDIzQzkwRTM0QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfC6NROBSkFaYJ5wTbwbvC22ojzLOQp61MzcfnXKq96ejGUnaF cUMbUJKKaD4KBrUKKDMo+92M41Ne2UvlyQPgsRk7R0kqENQavmUdrpvr2m+1cyZC Z9clVsmTYE+c5A2EVGR6mls6jgtuRhvXRkST1RNk88VdOIm/Sh96lBi4LbYfE4y7 Y0W8hMdTreKawlUQYTdjWsmKqg04+F1WOIdozMdDVHZMuJIx9v8WEZ4P47CtVcbz y7CQ+C9RDnfCUuzSRb/so0NoBzOdSq/KX5+CaDJ3YFrsS4n9AIkGgyOSZuQCDm76 X2iQ1W4k8pnQZdpUu7BDt1+3/9RsQWGqiZxzAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUlFrqUBu8d/WSCfGtOhy9I8kONLYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My9sRnJxVUJ1OGRfV1NDZkd0T2h5OUk4a09OTFku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0u9cMA0GCSqGSIb3DQEBCwUAA4IBAQBjkgobPWbxgTmQORXBRzIJ M/4SKwYlPnHRXSITc3ZAlljmnz5/IXbLMWry8QOBJxMiEfucWpzdzWO32+xCL9mG tcvB023MtljPahStZi78xc/nnHSEOC785+xLcQEwqVclNfnUpBQ51jTe5zcnlQMX t3Oo2Wk04htXimZFOVuePfbxUSYWBX0Ne31qXfkuXXpsmFqCPCwQ6uSFtAQHfaFU 3HM/eNvutU+bacyh8SWW3eCq/NqJ3yesz7eMV73Asqe2s8YsmfJQ8jAl5c2KVi0f KG0ykXwG5GWkbBY83kYbG50TGqlQN7h7Hu7g5V/eltNyl0/l7oKMjnOhwJXsloIb -----END CERTIFICATE-----Generated at Wed Jul 30 03:21:28 2025 by rpki-client