$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/qFoIeIMO2M3KuT6GqHoeMJugV1o.roa File: qFoIeIMO2M3KuT6GqHoeMJugV1o.roa (raw, json) Hash identifier: 1hc4DJuncS1V9gKuN31LUn202vFgw+nBoaEMcwJI1Os= Subject key identifier: A8:5A:08:78:83:0E:D8:CD:CA:B9:3E:86:A8:7A:1E:30:9B:A0:57:5A Certificate issuer: /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76 Certificate serial: 25 Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/qFoIeIMO2M3KuT6GqHoeMJugV1o.roa Signing time: Mon 01 Sep 2025 01:34:30 +0000 ROA not before: Mon 01 Sep 2025 01:34:30 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 63772 IP address blocks: 170.199.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 18:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76 Validity Not Before: Sep 1 01:34:30 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=A85A0878830ED8CDCAB93E86A87A1E309BA0575A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:72:80:06:65:27:2f:53:3a:76:bb:7c:3f: 8d:96:4c:32:c2:3d:00:8a:16:66:44:aa:b5:5e:b6: 92:06:8e:6e:f8:03:d9:a6:bd:b0:58:f8:e5:84:95: ec:62:69:d3:fa:d8:c2:f6:b4:3d:3d:3e:96:c7:c7: c5:fd:7e:7a:fe:92:77:1a:9c:7f:b1:8a:73:f7:e5: 64:1e:2f:54:48:e9:37:23:10:48:0a:fa:28:d1:7a: 2d:96:82:7e:d1:85:20:20:de:ff:ac:22:d7:c1:02: a1:49:06:77:0b:90:de:3b:73:28:be:60:85:be:9b: 31:9c:3a:96:d5:8f:96:bc:86:79:84:56:87:cd:d0: 1e:46:30:56:75:ab:ce:68:d1:cd:f7:e0:40:b3:fe: 4f:73:36:be:97:1d:46:cd:4e:9a:97:64:29:b4:d1: 65:90:c9:6a:91:1e:b7:c2:b2:55:29:a6:cb:a5:c6: ce:4e:a5:6c:58:cf:74:54:47:dc:15:bf:a5:6f:6f: 11:53:d2:09:ea:2a:1a:3b:ff:13:d9:19:2e:aa:72: a3:7f:9a:06:cd:6b:fb:09:cc:60:95:f6:d4:3a:5b: b3:5f:ee:63:35:86:84:e0:b5:ea:af:93:e0:56:88: 31:f3:f8:09:7f:69:d3:c0:54:80:00:9c:f7:ec:e7: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5A:08:78:83:0E:D8:CD:CA:B9:3E:86:A8:7A:1E:30:9B:A0:57:5A X509v3 Authority Key Identifier: keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/qFoIeIMO2M3KuT6GqHoeMJugV1o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 170.199.246.0/24 Signature Algorithm: sha256WithRSAEncryption 01:2f:4a:0d:63:85:9b:54:f6:d0:21:f4:a9:e6:fa:31:bb:0d: 04:39:d2:54:b0:97:c5:4e:94:0e:4a:0e:57:92:14:ef:d7:e8: b0:7f:dc:e3:f2:81:5c:45:fe:22:a8:9d:56:a3:f3:9c:59:8f: a1:5e:9e:e5:fb:a8:dc:c2:fa:36:cc:fb:1d:a6:e0:59:d7:04: 5d:c7:e5:a2:63:87:1f:9f:85:27:ad:f3:40:39:bd:24:d1:92: 2e:9f:c7:cc:88:27:e3:ff:37:8d:de:79:8e:15:41:bc:1a:31: d9:5b:03:36:53:cb:e8:21:da:20:ae:04:9e:93:42:b0:dd:6d: f3:75:eb:b6:b4:c1:c9:6a:60:4f:71:e2:ae:24:79:1d:82:77: d4:38:43:09:60:12:7d:61:35:71:62:2c:c1:23:3c:cc:43:70: 1b:83:4f:7b:77:3b:e5:69:8a:91:ac:c5:d2:f9:b5:bb:34:08: 82:f1:af:78:81:5c:df:22:de:aa:91:f4:97:e3:21:1b:ec:19: 09:e9:47:66:c2:9f:3f:9f:c4:90:ca:2b:7b:40:b4:e9:5a:de: 1f:d2:1f:df:3e:4f:19:d2:f6:2a:2b:e8:e5:ff:75:ac:f2:df: 7f:4d:e3:e1:7a:ba:dc:35:e6:ca:1b:d1:ca:94:57:79:75:5c: 5f:2e:f5:6b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTc0 OUFFREIyNzQ1MzgyN0RCQTgzMjVGNDI5ODRGQTc5QzNDRjc2MB4XDTI1MDkwMTAx MzQzMFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQTg1QTA4Nzg4MzBFRDhD RENBQjkzRTg2QTg3QTFFMzA5QkEwNTc1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANAFcoAGZScvUzp2u3w/jZZMMsI9AIoWZkSqtV62kgaObvgD2aa9 sFj45YSV7GJp0/rYwva0PT0+lsfHxf1+ev6Sdxqcf7GKc/flZB4vVEjpNyMQSAr6 KNF6LZaCftGFICDe/6wi18ECoUkGdwuQ3jtzKL5ghb6bMZw6ltWPlryGeYRWh83Q HkYwVnWrzmjRzffgQLP+T3M2vpcdRs1OmpdkKbTRZZDJapEet8KyVSmmy6XGzk6l bFjPdFRH3BW/pW9vEVPSCeoqGjv/E9kZLqpyo3+aBs1r+wnMYJX21Dpbs1/uYzWG hOC16q+T4FaIMfP4CX9p08BUgACc9+znlPsCAwEAAaOCAigwggIkMB0GA1UdDgQW BBSoWgh4gw7Yzcq5Poaoeh4wm6BXWjAfBgNVHSMEGDAWgBTudJrtsnRTgn26gyX0 KYT6ecPPdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNDQvN25TYTdiSjBVNEo5dW9NbDlDbUUtbm5EejNZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN25TYTdiSjBVNEo5dW9NbDlDbUUt bm5EejNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDQ0L3FGb0llSU1PMk0zS3VUNkdxSG9lTUp1Z1Yxby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACqx/YwDQYJKoZIhvcNAQELBQADggEBAAEvSg1jhZtU9tAh9Knm+jG7 DQQ50lSwl8VOlA5KDleSFO/X6LB/3OPygVxF/iKonVaj85xZj6FenuX7qNzC+jbM +x2m4FnXBF3H5aJjhx+fhSet80A5vSTRki6fx8yIJ+P/N43eeY4VQbwaMdlbAzZT y+gh2iCuBJ6TQrDdbfN167a0wclqYE9x4q4keR2Cd9Q4QwlgEn1hNXFiLMEjPMxD cBuDT3t3O+VpipGsxdL5tbs0CILxr3iBXN8i3qqR9JfjIRvsGQnpR2bCnz+fxJDK K3tAtOla3h/SH98+TxnS9ior6OX/dazy339N4+F6utw15sob0cqUV3l1XF8u9Ws= -----END CERTIFICATE-----Generated at Sun Sep 7 20:47:54 2025 by rpki-client