$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/0qbhTrTjhY3huzk5wmqmS67CZxE.roa File: 0qbhTrTjhY3huzk5wmqmS67CZxE.roa (raw, json) Hash identifier: Umkljr5Un/JfDGcBvhG3M+BKcW5h4hu4Xz6gdFrLpK8= Subject key identifier: D2:A6:E1:4E:B4:E3:85:8D:E1:BB:39:39:C2:6A:A6:4B:AE:C2:67:11 Certificate issuer: /CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417 Certificate serial: 17 Authority key identifier: B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/0qbhTrTjhY3huzk5wmqmS67CZxE.roa Signing time: Tue 15 Jul 2025 05:37:27 +0000 ROA not before: Tue 15 Jul 2025 05:37:27 +0000 ROA not after: Wed 15 Jul 2026 01:30:01 +0000 asID: 152858 IP address blocks: 209.107.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417 Validity Not Before: Jul 15 05:37:27 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=D2A6E14EB4E3858DE1BB3939C26AA64BAEC26711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:46:74:f9:13:9d:fd:8c:ee:40:c9:c8:ef: a7:41:27:50:ec:5a:52:16:a4:e7:2b:5d:91:8d:a2: 05:62:b5:bf:9a:a2:cb:f6:b1:eb:be:7c:c2:d0:dd: c0:cf:75:a4:b2:fc:f5:74:b7:b2:de:54:c0:4c:b3: 78:dc:98:86:86:65:2c:14:78:f6:9a:4f:d8:27:db: 56:b5:8b:9a:99:1b:b2:8a:dd:68:a2:b3:9d:e0:64: 6b:65:a3:c1:dd:34:70:16:6e:dc:ac:63:42:91:58: 9e:92:80:c1:d9:c6:09:45:41:64:52:70:ea:5b:fa: 8c:8e:40:cf:f5:19:79:8b:8a:cd:cc:ae:06:56:15: 51:c8:c2:39:bf:d8:a2:c1:e3:5a:1c:52:aa:4d:44: ae:46:96:c0:45:5f:95:95:a1:11:28:93:c8:20:a7: 1b:6f:2c:9c:7f:6a:97:5c:c1:8a:86:5f:eb:c7:44: 15:87:0c:3d:c2:e0:5a:8a:71:41:8a:f2:70:c3:41: 84:1c:b1:76:27:d8:e0:35:d4:60:fe:7c:74:bd:4c: c0:88:aa:a8:75:46:f9:3c:87:f2:cc:a5:88:04:e6: 62:9d:c8:a8:ed:95:45:9a:96:06:d2:16:4e:40:ae: 26:56:56:29:f8:28:2e:ce:4e:bc:b2:51:e3:da:bf: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A6:E1:4E:B4:E3:85:8D:E1:BB:39:39:C2:6A:A6:4B:AE:C2:67:11 X509v3 Authority Key Identifier: keyid:B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/0qbhTrTjhY3huzk5wmqmS67CZxE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.107.140.0/23 Signature Algorithm: sha256WithRSAEncryption 62:44:bc:07:97:d1:c9:02:90:2e:04:12:d2:16:04:73:a8:c2: c7:ea:ae:9e:d8:bd:2a:d6:e6:3f:51:2d:42:61:6a:b0:11:7b: d1:cb:66:97:7b:75:cd:2d:e6:f1:d6:70:4d:82:84:00:38:08: 79:2c:c9:c5:4f:8c:3e:ba:70:bd:fc:e6:aa:75:68:14:d8:5a: d9:2b:e2:1d:50:da:da:68:32:dd:de:1a:a6:28:d4:be:ee:71: 89:87:d8:2f:91:22:1b:83:a4:bc:03:60:30:65:9c:9c:f5:f4: a1:d9:18:93:f7:d0:cc:9d:ae:a4:f7:e1:f3:2c:c6:6d:8d:72: f8:f7:5c:8f:f3:82:15:b5:23:3a:a6:ab:25:d7:2a:11:67:3f: b0:1e:f6:05:cf:da:c8:51:ad:c2:7a:72:87:53:24:3d:5d:ee: 74:3e:f4:1b:80:df:2f:65:84:c1:fc:19:34:47:9d:7c:30:bd: 12:c7:84:79:26:e6:82:da:5b:ce:be:00:11:99:9b:37:45:16: 10:70:af:7e:c6:1a:cf:76:27:c8:35:d3:ca:b0:66:44:5c:a1: ce:b2:20:5c:13:05:98:11:02:93:38:8b:dc:8b:c4:53:a6:87: 41:b0:82:ac:76:ab:9d:13:ec:e1:bc:05:f4:f9:08:45:5d:f6: a1:69:fb:17 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzcz QUUyQjk3NUFCMkU0RUVGRjlCMTc5RDVBMjU5QTBDQTQ5NDE3MB4XDTI1MDcxNTA1 MzcyN1oXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRDJBNkUxNEVCNEUzODU4 REUxQkIzOTM5QzI2QUE2NEJBRUMyNjcxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKUMRnT5E539jO5Aycjvp0EnUOxaUhak5ytdkY2iBWK1v5qiy/ax 6758wtDdwM91pLL89XS3st5UwEyzeNyYhoZlLBR49ppP2CfbVrWLmpkbsordaKKz neBka2Wjwd00cBZu3KxjQpFYnpKAwdnGCUVBZFJw6lv6jI5Az/UZeYuKzcyuBlYV UcjCOb/YosHjWhxSqk1ErkaWwEVflZWhESiTyCCnG28snH9ql1zBioZf68dEFYcM PcLgWopxQYrycMNBhByxdifY4DXUYP58dL1MwIiqqHVG+TyH8syliATmYp3IqO2V RZqWBtIWTkCuJlZWKfgoLs5OvLJR49q/i5ECAwEAAaOCAigwggIkMB0GA1UdDgQW BBTSpuFOtOOFjeG7OTnCaqZLrsJnETAfBgNVHSMEGDAWgBS3c64rl1qy5O7/mxed WiWaDKSUFzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNzQvdDNPdUs1ZGFzdVR1XzVzWG5Wb2xtZ3lrbEJjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdDNPdUs1ZGFzdVR1XzVzWG5Wb2xt Z3lrbEJjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTc0LzBxYmhUclRqaFkzaHV6azV3bXFtUzY3Q1p4RS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAHRa4wwDQYJKoZIhvcNAQELBQADggEBAGJEvAeX0ckCkC4EEtIWBHOo wsfqrp7YvSrW5j9RLUJharARe9HLZpd7dc0t5vHWcE2ChAA4CHksycVPjD66cL38 5qp1aBTYWtkr4h1Q2tpoMt3eGqYo1L7ucYmH2C+RIhuDpLwDYDBlnJz19KHZGJP3 0MydrqT34fMsxm2Ncvj3XI/zghW1IzqmqyXXKhFnP7Ae9gXP2shRrcJ6codTJD1d 7nQ+9BuA3y9lhMH8GTRHnXwwvRLHhHkm5oLaW86+ABGZmzdFFhBwr37GGs92J8g1 08qwZkRcoc6yIFwTBZgRApM4i9yLxFOmh0Gwgqx2q50T7OG8BfT5CEVd9qFp+xc= -----END CERTIFICATE-----Generated at Fri Jul 25 18:29:40 2025 by rpki-client