$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/RxupgEAuvUPBA_M0n2fiaDvLsXc.roa File: RxupgEAuvUPBA_M0n2fiaDvLsXc.roa (raw, json) Hash identifier: nUDbJknWzKbEMXA3h3gdjESVCwALEMMUGW1ESS5iMpc= Subject key identifier: 47:1B:A9:80:40:2E:BD:43:C1:03:F3:34:9F:67:E2:68:3B:CB:B1:77 Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Certificate serial: 78 Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/RxupgEAuvUPBA_M0n2fiaDvLsXc.roa Signing time: Tue 02 Sep 2025 02:32:39 +0000 ROA not before: Tue 02 Sep 2025 02:32:39 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 7684 IP address blocks: 157.17.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 09:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E Validity Not Before: Sep 2 02:32:39 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=471BA980402EBD43C103F3349F67E2683BCBB177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:ac:52:eb:1a:ae:3e:6f:4f:63:50:0f:a0: 69:45:8c:0d:61:ed:89:21:d0:30:dc:db:9f:e5:0c: 38:16:5a:98:ac:68:c4:3c:d4:0b:1a:1c:8d:25:da: ae:1e:35:66:3e:f9:87:33:fc:b3:77:46:2b:54:26: 09:66:82:c5:8b:f7:6c:3e:7b:a5:2b:8f:2d:9e:3a: 06:a4:25:c0:4c:fc:ae:41:14:2d:85:57:a1:23:13: d1:6f:0d:e5:cf:8a:f5:f3:ae:4e:44:b9:e7:db:64: 9c:17:9b:0a:c0:9d:df:f2:9a:80:02:90:1c:27:48: a0:2c:4d:a6:5b:65:08:c1:a6:40:69:c7:19:7e:67: 09:3c:df:3c:29:0a:ae:0a:ce:33:b2:8d:76:9e:f6: d2:a6:05:48:33:26:23:44:85:3e:5f:f4:6e:61:aa: 79:d9:ce:36:99:3a:af:ad:3f:c2:2d:61:10:15:c8: 9c:f4:5f:37:1a:86:0a:cc:5e:e9:c3:be:af:1f:3d: d8:83:da:07:36:8b:6e:39:08:48:9e:ff:fa:a8:83: 54:e6:84:da:c2:15:06:1b:a2:91:9b:5c:26:d1:0f: d1:a8:7c:68:24:22:85:72:ba:71:8f:20:87:a8:8c: e7:c9:03:f2:c6:77:d2:5d:4e:b3:c9:a4:17:42:6b: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:A9:80:40:2E:BD:43:C1:03:F3:34:9F:67:E2:68:3B:CB:B1:77 X509v3 Authority Key Identifier: keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/RxupgEAuvUPBA_M0n2fiaDvLsXc.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.17.96.0/20 Signature Algorithm: sha256WithRSAEncryption b9:80:b4:22:bd:9b:76:87:a9:02:a4:36:e7:48:19:fa:31:c8: f6:ae:e9:80:a3:28:91:c9:b9:5d:07:fe:05:cb:13:eb:28:ff: e0:95:97:ea:4d:02:56:8a:5e:94:c8:14:04:58:85:0a:aa:3d: 8c:6b:0f:e6:9a:59:da:c9:50:5d:51:15:2a:35:13:3b:fd:39: fe:12:a3:8f:0e:dd:1d:1a:c8:de:7a:a4:51:7d:09:ab:c1:c8: b0:a4:eb:9a:51:a4:bb:a2:a8:78:4c:87:80:3b:e4:47:5c:a7: f1:cc:ee:b6:6f:3c:6b:c4:54:dd:4d:4c:e0:dc:f2:4f:07:f8: 31:38:a2:25:25:bc:70:a3:37:21:04:5b:54:2d:e9:99:9c:3f: aa:46:29:9b:09:38:99:73:2d:90:c4:93:0b:d3:ae:b2:ea:58: 19:bb:d2:0f:3b:24:8c:7b:0f:96:fe:de:50:0e:86:2b:d7:2c: 03:2c:a8:e9:35:aa:bb:aa:75:cd:f5:9e:cf:3d:b5:35:05:27: 63:a9:bf:da:45:21:6d:bc:7b:5b:51:a8:e1:ec:32:a5:b2:3d: ae:42:a1:f4:58:d7:d2:95:f1:ae:06:39:d3:26:76:b2:50:33: 74:3d:60:2c:31:67:ca:02:50:e6:96:10:e9:d9:c1:d5:08:4f: bd:f7:b1:91 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0 NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTI1MDkwMjAy MzIzOVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDcxQkE5ODA0MDJFQkQ0 M0MxMDNGMzM0OUY2N0UyNjgzQkNCQjE3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK39rFLrGq4+b09jUA+gaUWMDWHtiSHQMNzbn+UMOBZamKxoxDzU CxocjSXarh41Zj75hzP8s3dGK1QmCWaCxYv3bD57pSuPLZ46BqQlwEz8rkEULYVX oSMT0W8N5c+K9fOuTkS559tknBebCsCd3/KagAKQHCdIoCxNpltlCMGmQGnHGX5n CTzfPCkKrgrOM7KNdp720qYFSDMmI0SFPl/0bmGqednONpk6r60/wi1hEBXInPRf NxqGCsxe6cO+rx892IPaBzaLbjkISJ7/+qiDVOaE2sIVBhuikZtcJtEP0ah8aCQi hXK6cY8gh6iM58kD8sZ30l1Os8mkF0JrOCECAwEAAaOCAigwggIkMB0GA1UdDgQW BBRHG6mAQC69Q8ED8zSfZ+JoO8uxdzAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75 +5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjQ3L1J4dXBnRUF1dlVQQkFfTTBuMmZpYUR2THNYYy5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASdEWAwDQYJKoZIhvcNAQELBQADggEBALmAtCK9m3aHqQKkNudIGfox yPau6YCjKJHJuV0H/gXLE+so/+CVl+pNAlaKXpTIFARYhQqqPYxrD+aaWdrJUF1R FSo1Ezv9Of4So48O3R0ayN56pFF9CavByLCk65pRpLuiqHhMh4A75Edcp/HM7rZv PGvEVN1NTODc8k8H+DE4oiUlvHCjNyEEW1Qt6ZmcP6pGKZsJOJlzLZDEkwvTrrLq WBm70g87JIx7D5b+3lAOhivXLAMsqOk1qruqdc31ns89tTUFJ2Opv9pFIW28e1tR qOHsMqWyPa5CofRY19KV8a4GOdMmdrJQM3Q9YCwxZ8oCUOaWEOnZwdUIT733sZE= -----END CERTIFICATE-----Generated at Mon Sep 8 13:22:28 2025 by rpki-client