$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30319/mA_b1YXwW4ovK9QDTr0919Kv4bY.roa File: mA_b1YXwW4ovK9QDTr0919Kv4bY.roa (raw, json) Hash identifier: 2LWgAVPbLiOHiMI311HGqm+3E/Kq/w6TtumXwyQPMww= Subject key identifier: 98:0F:DB:D5:85:F0:5B:8A:2F:2B:D4:03:4E:BD:3D:D7:D2:AF:E1:B6 Certificate issuer: /CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C Certificate serial: 2F Authority key identifier: AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/mA_b1YXwW4ovK9QDTr0919Kv4bY.roa Signing time: Fri 01 Aug 2025 01:30:32 +0000 ROA not before: Fri 01 Aug 2025 01:30:32 +0000 ROA not after: Thu 30 Jul 2026 06:29:08 +0000 asID: 131161 IP address blocks: 2400:53e0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C Validity Not Before: Aug 1 01:30:32 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=980FDBD585F05B8A2F2BD4034EBD3DD7D2AFE1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:95:48:2a:1e:86:8d:7b:9a:2d:24:aa:df: 27:87:1f:62:30:48:ed:07:69:e9:a7:58:dc:00:5f: c7:06:5b:d0:7a:3e:83:95:da:4e:07:40:8c:cb:20: a0:79:e8:be:2d:4c:9e:4a:0c:1c:2b:c1:25:26:cd: 68:ff:be:02:86:fa:37:3b:f8:90:12:c6:d1:14:21: 12:b6:b1:d1:a3:ff:32:02:ee:42:5e:9c:79:bc:5b: 72:99:30:5a:15:7d:6f:ed:3f:f1:41:bc:dc:f5:01: 3f:59:3c:59:06:f6:57:ba:53:5d:a4:a4:9f:73:dd: 43:1b:ff:dc:62:96:54:25:d6:df:78:5f:0c:ab:36: 5c:66:6e:f7:71:f7:a2:93:3a:d6:4e:c6:36:ff:c7: 3d:0b:3f:66:e9:cc:71:cb:fa:1c:4a:f1:23:9e:e7: 51:15:11:70:49:e7:2a:41:b8:9a:1f:be:da:a8:3a: f8:c6:c0:58:ce:b4:af:2b:ea:0b:66:84:4d:87:7b: 29:0e:13:3d:31:22:5a:5d:31:a6:f4:9d:37:2e:83: 92:de:8c:8c:a3:15:2a:6f:e4:54:2f:80:6d:e1:2f: d7:bf:83:0f:30:47:24:d3:97:0f:83:eb:a8:9d:b1: a3:bb:4d:fa:3a:e5:0b:c8:13:cf:77:cb:a6:09:3b: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0F:DB:D5:85:F0:5B:8A:2F:2B:D4:03:4E:BD:3D:D7:D2:AF:E1:B6 X509v3 Authority Key Identifier: keyid:AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/mA_b1YXwW4ovK9QDTr0919Kv4bY.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:53e0::/32 Signature Algorithm: sha256WithRSAEncryption 27:f7:de:11:7c:b1:89:34:49:a1:40:a6:af:88:50:ee:44:e8: c3:a5:d8:20:46:48:b2:8b:50:e4:48:99:b5:4a:78:b7:80:f2: 67:22:3b:a3:39:53:be:6e:e9:6d:b8:52:02:46:70:bf:b7:6b: 59:0e:03:b1:17:ba:f6:8b:c9:e1:72:6a:50:ab:bf:a8:63:e9: f3:d8:6d:2a:1d:9e:0c:16:36:a6:5d:74:78:9f:a3:6e:f7:57: 6a:ee:c3:a6:a2:66:46:f5:fd:f2:bb:51:fb:4d:4c:49:07:df: 3c:b9:21:25:6b:c3:7c:e6:9d:e4:fa:88:29:b3:c1:87:8a:b1: 27:72:ae:0d:05:f3:14:87:92:f5:5e:15:7b:2f:4d:29:f2:96: 60:b7:60:00:b8:68:cb:b2:2a:5d:4f:eb:1f:ae:d1:8b:17:ba: f6:82:c0:96:d1:87:e7:ee:35:0b:64:48:e2:59:2c:3b:df:fc: a8:39:b7:1b:9c:8a:5c:1d:98:fb:30:9f:e2:10:60:37:cf:0b: 61:63:cb:f7:54:0a:45:ad:64:c0:94:13:a3:d6:12:3a:b5:f5: 7f:a0:09:85:ed:c5:72:4c:cb:03:b0:13:87:8c:55:ad:fb:b1: 41:33:4f:5c:c0:e6:85:35:ae:47:1b:2e:88:b8:11:c2:c9:fd: 51:7f:b9:58 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkY2 MUY0NDVCNkY4RTkyMUM3RDc2N0IzQjY3NkJGNjY5ODE2RjZDMB4XDTI1MDgwMTAx MzAzMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoOTgwRkRCRDU4NUYwNUI4 QTJGMkJENDAzNEVCRDNERDdEMkFGRTFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALNUlUgqHoaNe5otJKrfJ4cfYjBI7Qdp6adY3ABfxwZb0Ho+g5Xa TgdAjMsgoHnovi1MnkoMHCvBJSbNaP++Aob6Nzv4kBLG0RQhErax0aP/MgLuQl6c ebxbcpkwWhV9b+0/8UG83PUBP1k8WQb2V7pTXaSkn3PdQxv/3GKWVCXW33hfDKs2 XGZu93H3opM61k7GNv/HPQs/ZunMccv6HErxI57nURURcEnnKkG4mh++2qg6+MbA WM60ryvqC2aETYd7KQ4TPTEiWl0xpvSdNy6Dkt6MjKMVKm/kVC+AbeEv17+DDzBH JNOXD4PrqJ2xo7tN+jrlC8gTz3fLpgk760UCAwEAAaOCAikwggIlMB0GA1UdDgQW BBSYD9vVhfBbii8r1ANOvT3X0q/htjAfBgNVHSMEGDAWgBSv9h9EW2+Okhx9dns7 Z2v2aYFvbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMTkvcl9ZZlJGdHZqcEljZlhaN08yZHI5bW1CYjJ3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcl9ZZlJGdHZqcEljZlhaN08yZHI5 bW1CYjJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzE5L21BX2IxWVh3VzRvdks5UURUcjA5MTlLdjRiWS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAFPgMA0GCSqGSIb3DQEBCwUAA4IBAQAn994RfLGJNEmhQKaviFDu ROjDpdggRkiyi1DkSJm1Sni3gPJnIjujOVO+bultuFICRnC/t2tZDgOxF7r2i8nh cmpQq7+oY+nz2G0qHZ4MFjamXXR4n6Nu91dq7sOmomZG9f3yu1H7TUxJB988uSEl a8N85p3k+ogps8GHirEncq4NBfMUh5L1XhV7L00p8pZgt2AAuGjLsipdT+sfrtGL F7r2gsCW0Yfn7jULZEjiWSw73/yoObcbnIpcHZj7MJ/iEGA3zwthY8v3VApFrWTA lBOj1hI6tfV/oAmF7cVyTMsDsBOHjFWt+7FBM09cwOaFNa5HGy6IuBHCyf1Rf7lY -----END CERTIFICATE-----Generated at Thu Aug 21 08:37:11 2025 by rpki-client