$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zEt2bAz2OEfOP2VOxaaYuAL3EFc.roa File: zEt2bAz2OEfOP2VOxaaYuAL3EFc.roa (raw, json) Hash identifier: +GfsOIIRcg/nE1x+ekLt0Rfuzm8/RtZERp2tdwAakVs= Subject key identifier: CC:4B:76:6C:0C:F6:38:47:CE:3F:65:4E:C5:A6:98:B8:02:F7:10:57 Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Certificate serial: 0117 Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zEt2bAz2OEfOP2VOxaaYuAL3EFc.roa Signing time: Thu 24 Jul 2025 02:22:03 +0000 ROA not before: Thu 24 Jul 2025 02:22:03 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 4694 IP address blocks: 210.140.64.0/18 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 00:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95 Validity Not Before: Jul 24 02:22:03 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=CC4B766C0CF63847CE3F654EC5A698B802F71057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:55:44:96:f7:5e:4d:a3:27:73:a7:8e:50: 01:f6:2a:a7:ef:4f:c7:fa:9c:15:eb:1c:70:f5:94: e6:de:ff:c3:80:32:bf:6f:99:fc:0c:42:de:c4:7a: f4:5d:3b:16:d8:d6:4c:65:da:96:b5:d2:01:7b:e0: 52:5b:d7:3c:19:0a:5f:46:6a:3c:b8:d0:e8:1e:32: 4c:63:ce:d3:e2:b9:82:d1:56:c5:2d:d9:c7:ec:4d: 3c:2a:86:72:48:31:e0:88:0a:f8:27:54:09:37:3a: 03:07:da:2e:2e:a3:4a:97:44:87:7d:32:d6:86:85: 52:d2:d1:d6:35:96:b4:76:07:f8:25:cb:c4:0f:96: 77:ee:ce:0b:9f:fa:92:ee:43:8e:5c:c1:56:ee:13: a3:66:0a:0e:0a:7e:43:2d:08:70:65:a6:34:2e:97: 3c:d7:50:7e:11:8c:07:49:e9:58:c5:12:b5:1d:59: fb:f4:9e:08:e8:b2:6b:5e:96:ed:c7:72:73:23:d1: f6:be:b0:40:fc:38:09:a6:e5:c8:41:9a:c3:f2:4b: 81:2a:20:5c:5c:70:89:86:42:77:8f:8a:ec:da:94: c4:62:9b:bb:ab:b6:cf:da:b1:32:aa:17:5e:f7:37: 35:28:e0:c4:08:39:31:82:b5:e9:9b:1c:1e:70:87: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:76:6C:0C:F6:38:47:CE:3F:65:4E:C5:A6:98:B8:02:F7:10:57 X509v3 Authority Key Identifier: keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zEt2bAz2OEfOP2VOxaaYuAL3EFc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.140.64.0/18 Signature Algorithm: sha256WithRSAEncryption 25:24:01:f6:fc:c4:a3:ba:12:75:86:7b:7a:ae:d4:69:bb:f3: 3e:9a:8b:71:e1:97:0f:37:d6:ad:5f:83:96:09:3e:ed:4c:ea: 1c:09:86:b5:23:ae:31:f4:a8:92:c7:5e:b7:1e:51:80:c2:59: d8:2e:22:06:97:cc:ed:5e:74:b5:b4:64:5a:cd:bb:8f:92:f9: 73:eb:6b:e5:54:80:f6:41:2f:33:1c:cf:d0:a2:bc:ba:65:72: 44:18:35:5f:96:20:ed:ca:59:c7:31:36:f4:00:96:20:16:20: 48:91:54:d0:d7:ee:15:da:5e:3f:a0:f7:e2:e8:f3:dc:3e:eb: e1:72:c8:45:31:c9:23:b6:3a:ff:f6:29:61:e3:bc:7a:8e:85: 37:dc:2c:f1:e9:d9:0a:9c:8d:a6:47:ef:29:88:c4:af:06:5e: 9e:93:94:e4:c1:35:28:a0:6a:81:6c:1c:9a:5b:70:fa:2e:f9: 16:3f:b1:65:5c:14:55:56:78:6c:50:43:e1:0c:e6:90:16:3d: 63:db:b1:8e:df:ea:b5:4a:1e:9b:3b:6d:2d:e8:51:09:de:42: 71:0b:3b:1b:ec:e4:ec:8c:4f:16:11:5c:2b:f1:30:75:65:dc: 58:56:42:b4:58:6d:58:11:3a:cb:46:2c:c4:63:67:47:aa:98: 26:37:81:90 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNTA3MjQw MjIyMDNaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKENDNEI3NjZDMENGNjM4 NDdDRTNGNjU0RUM1QTY5OEI4MDJGNzEwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEClVElvdeTaMnc6eOUAH2KqfvT8f6nBXrHHD1lObe/8OAMr9v mfwMQt7EevRdOxbY1kxl2pa10gF74FJb1zwZCl9Gajy40OgeMkxjztPiuYLRVsUt 2cfsTTwqhnJIMeCICvgnVAk3OgMH2i4uo0qXRId9MtaGhVLS0dY1lrR2B/gly8QP lnfuzguf+pLuQ45cwVbuE6NmCg4KfkMtCHBlpjQulzzXUH4RjAdJ6VjFErUdWfv0 ngjosmtelu3HcnMj0fa+sED8OAmm5chBmsPyS4EqIFxccImGQnePiuzalMRim7ur ts/asTKqF173NzUo4MQIOTGCtembHB5wh3mRAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUzEt2bAz2OEfOP2VOxaaYuAL3EFcwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1 bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDA4My96RXQyYkF6Mk9FZk9QMlZPeGFhWXVBTDNFRmMu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQG0oxAMA0GCSqGSIb3DQEBCwUAA4IBAQAlJAH2/MSjuhJ1hnt6rtRp u/M+motx4ZcPN9atX4OWCT7tTOocCYa1I64x9KiSx163HlGAwlnYLiIGl8ztXnS1 tGRazbuPkvlz62vlVID2QS8zHM/Qory6ZXJEGDVfliDtylnHMTb0AJYgFiBIkVTQ 1+4V2l4/oPfi6PPcPuvhcshFMckjtjr/9ilh47x6joU33Czx6dkKnI2mR+8piMSv Bl6ek5TkwTUooGqBbByaW3D6LvkWP7FlXBRVVnhsUEPhDOaQFj1j27GO3+q1Sh6b O20t6FEJ3kJxCzsb7OTsjE8WEVwr8TB1ZdxYVkK0WG1YETrLRizEY2dHqpgmN4GQ -----END CERTIFICATE-----Generated at Wed Jul 30 03:01:19 2025 by rpki-client