$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30119/xQaXhmrdN5A1M8m5cD1nHctr13o.roa File: xQaXhmrdN5A1M8m5cD1nHctr13o.roa (raw, json) Hash identifier: A85sBH+Fx8NqV2I7wcuuS0vGy1H7XzTiJzgHOukdmkk= Subject key identifier: C5:06:97:86:6A:DD:37:90:35:33:C9:B9:70:3D:67:1D:CB:6B:D7:7A Certificate issuer: /CN=67FCDC2F3DE5E8B7B15F814D33D824F4099B2855 Certificate serial: 23 Authority key identifier: 67:FC:DC:2F:3D:E5:E8:B7:B1:5F:81:4D:33:D8:24:F4:09:9B:28:55 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z_zcLz3l6LexX4FNM9gk9AmbKFU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30119/xQaXhmrdN5A1M8m5cD1nHctr13o.roa Signing time: Fri 01 Aug 2025 01:35:53 +0000 ROA not before: Fri 01 Aug 2025 01:35:53 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 18144 IP address blocks: 2402:bc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30119/Z_zcLz3l6LexX4FNM9gk9AmbKFU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30119/Z_zcLz3l6LexX4FNM9gk9AmbKFU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z_zcLz3l6LexX4FNM9gk9AmbKFU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67FCDC2F3DE5E8B7B15F814D33D824F4099B2855 Validity Not Before: Aug 1 01:35:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=C50697866ADD37903533C9B9703D671DCB6BD77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:77:ce:53:2c:f9:12:d7:14:2c:b7:eb:ae: 09:e1:7f:92:bd:fc:a0:be:32:cd:15:26:2b:20:52: 06:0f:9e:e0:1d:4c:fb:1f:f1:7d:13:08:67:8c:7b: f0:89:d7:02:c3:3d:e2:d4:80:94:7c:ac:f2:0b:68: 11:ae:23:fc:42:5d:13:1b:2b:85:8b:ce:65:f7:9d: c4:94:cd:13:d0:13:12:68:ae:62:f8:a4:ab:45:87: 31:43:fa:64:e4:ff:05:fe:e2:48:c2:48:56:8a:75: 0a:4b:4e:44:29:4b:9d:5f:9e:5f:8f:f2:cd:3e:2f: 4e:b7:ec:a3:db:e4:35:bb:ee:06:44:57:ac:70:d5: f4:8b:39:3d:6c:f1:78:a7:03:5a:b3:c2:8e:55:5c: ff:b7:23:5c:19:d5:16:dc:96:1e:c9:42:50:41:09: 56:43:73:b8:89:0e:f1:84:a3:5e:d1:ef:46:fb:62: 81:26:bb:06:6e:7f:1e:a2:cf:c2:be:4b:87:5d:68: f0:b1:43:2f:90:80:21:51:ae:22:dc:78:39:f3:00: 4d:38:07:21:19:6a:8a:be:b6:27:76:c8:e2:33:cd: 4e:01:5f:7d:72:35:b1:ec:b0:e5:1c:8e:53:64:d8: 14:69:d9:eb:5f:d5:bc:f2:58:4b:74:56:57:dd:02: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:97:86:6A:DD:37:90:35:33:C9:B9:70:3D:67:1D:CB:6B:D7:7A X509v3 Authority Key Identifier: keyid:67:FC:DC:2F:3D:E5:E8:B7:B1:5F:81:4D:33:D8:24:F4:09:9B:28:55 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30119/Z_zcLz3l6LexX4FNM9gk9AmbKFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z_zcLz3l6LexX4FNM9gk9AmbKFU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30119/xQaXhmrdN5A1M8m5cD1nHctr13o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:bc00::/29 Signature Algorithm: sha256WithRSAEncryption b2:e7:ce:62:11:8e:0b:21:95:8b:5f:97:31:18:49:d1:a2:af: 8b:88:f7:e2:47:07:af:60:f6:91:69:3b:c9:26:ee:a8:30:d9: 18:9b:98:d2:a5:95:59:8f:48:37:5a:77:99:24:05:2e:dc:da: 3f:15:3e:5a:c7:33:55:de:68:37:f1:eb:dc:b3:45:40:51:eb: a4:54:c5:b2:c2:cc:03:cd:78:e5:06:ad:e8:a0:87:d3:e5:16: 67:22:ab:86:62:31:b6:48:6c:34:40:b2:a2:3f:fb:2b:1e:59: 99:75:c3:10:87:fb:98:53:81:3b:a9:a4:db:10:71:04:7e:bc: e7:0d:d4:08:ed:9c:18:34:0e:69:6b:e8:00:11:99:91:74:44: 68:c8:22:c5:26:8a:73:55:25:a5:56:a4:0d:62:a6:de:b6:f7: 58:2b:20:98:a7:db:de:0b:a7:e9:18:9c:81:ad:57:6e:ee:01: 2f:23:db:7b:36:39:57:3b:cc:85:8b:08:9f:2e:19:60:86:4d: ab:a4:bb:94:37:b3:17:3f:ba:43:c9:bd:c3:06:45:ce:95:df: 8a:1c:c9:9c:08:da:60:9b:5c:91:9f:2c:9c:e1:e6:8e:60:61: e2:9d:19:c5:8e:14:50:b2:29:6f:61:76:7d:e2:51:bf:64:d4: 6d:cc:31:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2N0ZD REMyRjNERTVFOEI3QjE1RjgxNEQzM0Q4MjRGNDA5OUIyODU1MB4XDTI1MDgwMTAx MzU1M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQzUwNjk3ODY2QUREMzc5 MDM1MzNDOUI5NzAzRDY3MURDQjZCRDc3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMyid85TLPkS1xQst+uuCeF/kr38oL4yzRUmKyBSBg+e4B1M+x/x fRMIZ4x78InXAsM94tSAlHys8gtoEa4j/EJdExsrhYvOZfedxJTNE9ATEmiuYvik q0WHMUP6ZOT/Bf7iSMJIVop1CktORClLnV+eX4/yzT4vTrfso9vkNbvuBkRXrHDV 9Is5PWzxeKcDWrPCjlVc/7cjXBnVFtyWHslCUEEJVkNzuIkO8YSjXtHvRvtigSa7 Bm5/HqLPwr5Lh11o8LFDL5CAIVGuItx4OfMATTgHIRlqir62J3bI4jPNTgFffXI1 seyw5RyOU2TYFGnZ61/VvPJYS3RWV90CExMCAwEAAaOCAikwggIlMB0GA1UdDgQW BBTFBpeGat03kDUzyblwPWcdy2vXejAfBgNVHSMEGDAWgBRn/NwvPeXot7FfgU0z 2CT0CZsoVTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTkvWl96Y0x6M2w2TGV4WDRGTk05Z2s5QW1iS0ZVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWl96Y0x6M2w2TGV4WDRGTk05Z2s5 QW1iS0ZVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTE5L3hRYVhobXJkTjVBMU04bTVjRDFuSGN0cjEzby5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQMkArwAMA0GCSqGSIb3DQEBCwUAA4IBAQCy585iEY4LIZWLX5cxGEnR oq+LiPfiRwevYPaRaTvJJu6oMNkYm5jSpZVZj0g3WneZJAUu3No/FT5axzNV3mg3 8evcs0VAUeukVMWywswDzXjlBq3ooIfT5RZnIquGYjG2SGw0QLKiP/srHlmZdcMQ h/uYU4E7qaTbEHEEfrznDdQI7ZwYNA5pa+gAEZmRdERoyCLFJopzVSWlVqQNYqbe tvdYKyCYp9veC6fpGJyBrVdu7gEvI9t7NjlXO8yFiwifLhlghk2rpLuUN7MXP7pD yb3DBkXOld+KHMmcCNpgm1yRnyyc4eaOYGHinRnFjhRQsilvYXZ94lG/ZNRtzDEB -----END CERTIFICATE-----Generated at Thu Aug 21 06:04:48 2025 by rpki-client