$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Kl-5XfTYwC06Q93GYZoTdT01Ob8.roa File: Kl-5XfTYwC06Q93GYZoTdT01Ob8.roa (raw, json) Hash identifier: 2R1++wBwz6x9PRi/wODHk4NCqOjkq8y9tJ604jdUDqo= Subject key identifier: 2A:5F:B9:5D:F4:D8:C0:2D:3A:43:DD:C6:61:9A:13:75:3D:35:39:BF Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Certificate serial: 03E8 Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Kl-5XfTYwC06Q93GYZoTdT01Ob8.roa Signing time: Mon 01 Sep 2025 01:30:57 +0000 ROA not before: Mon 01 Sep 2025 01:30:57 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 211.1.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 12:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB Validity Not Before: Sep 1 01:30:57 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=2A5FB95DF4D8C02D3A43DDC6619A13753D3539BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:6b:e6:a5:ad:30:cc:f0:3a:85:16:3c:d9: 11:22:66:78:b6:55:11:98:b9:05:f3:a7:e0:96:69: b6:58:0a:d7:98:07:d9:54:28:8f:b6:22:37:c1:62: 33:12:f4:18:9a:1c:3f:f9:53:db:69:97:87:df:d1: 79:90:8e:38:af:9d:49:3d:76:47:a2:86:88:b7:b3: 1c:0d:b9:d0:43:3d:02:2b:8b:32:7a:53:79:1e:7b: a8:a7:b2:10:9e:b9:f0:89:64:e5:8c:1e:1f:03:93: 13:c0:2e:62:5b:f8:f9:b6:9d:13:d2:2f:38:02:39: 91:11:27:09:56:55:97:74:b1:a8:4d:31:54:68:fa: d9:98:a3:16:24:34:43:b7:e4:29:9f:19:7a:0d:63: a3:06:3b:bc:d3:55:e8:a7:36:19:5c:68:f3:45:2d: ee:ca:5a:e8:4d:74:b3:ee:55:93:ec:e5:fc:ab:51: 62:55:72:c7:cf:cf:c2:80:70:93:52:68:92:c5:3e: 4a:ee:ff:f9:fc:b2:0d:d5:9a:4a:d3:a7:bc:1d:06: 98:3b:ea:9d:e6:f3:c2:0f:f8:21:f8:b8:ab:eb:89: 78:08:1b:6c:1f:00:3a:9d:9a:ba:4f:a3:2d:2a:f0: c6:de:1f:11:f5:b3:1d:21:5c:fb:39:94:75:d8:d9: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5F:B9:5D:F4:D8:C0:2D:3A:43:DD:C6:61:9A:13:75:3D:35:39:BF X509v3 Authority Key Identifier: keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Kl-5XfTYwC06Q93GYZoTdT01Ob8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 211.1.176.0/20 Signature Algorithm: sha256WithRSAEncryption a5:bb:88:e3:f6:be:d8:e2:ae:f5:0e:cf:4a:9f:65:9a:84:1f: e5:31:47:0f:b4:4a:d1:58:40:e4:14:97:4f:5d:c3:f1:71:7f: e0:2f:ae:43:c7:61:a4:3c:00:13:6a:4a:25:b9:ae:9a:7d:6f: 3f:1f:a2:06:32:56:da:1b:a5:c6:77:b8:e3:d3:8e:57:e5:0a: b9:6c:97:9f:67:18:07:31:c5:86:92:be:f4:22:55:f1:41:ab: cd:9b:c6:62:b9:0d:b0:0a:88:2a:6a:22:62:c2:20:4c:fb:9c: 00:0c:11:45:58:74:70:4d:08:e3:17:35:91:7b:3d:78:77:44: a4:ac:e0:21:aa:40:01:73:d8:4c:eb:0d:5c:8a:c0:22:7a:93: 17:6a:95:19:79:33:71:9b:31:c2:e9:db:a3:a2:df:92:de:bf: 65:f1:24:d6:e9:55:37:29:b6:23:d5:e7:e2:68:5e:11:39:f1: 75:05:a0:c6:20:47:27:0f:0e:3b:4e:72:62:23:d5:80:9a:53: bb:ff:da:82:0e:4c:a4:0a:bb:d2:58:58:d3:09:80:e3:ba:62: f6:9b:d6:09:fe:ec:5e:c3:5b:78:df:f8:b4:5a:82:4f:6a:bc: d9:51:97:7f:a8:04:c9:56:04:f6:f5:69:72:0a:81:d3:6f:aa: 2f:85:30:36 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNTA5MDEw MTMwNTdaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJBNUZCOTVERjREOEMw MkQzQTQzRERDNjYxOUExMzc1M0QzNTM5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdy2vmpa0wzPA6hRY82REiZni2VRGYuQXzp+CWabZYCteYB9lU KI+2IjfBYjMS9BiaHD/5U9tpl4ff0XmQjjivnUk9dkeihoi3sxwNudBDPQIrizJ6 U3kee6inshCeufCJZOWMHh8DkxPALmJb+Pm2nRPSLzgCOZERJwlWVZd0sahNMVRo +tmYoxYkNEO35CmfGXoNY6MGO7zTVeinNhlcaPNFLe7KWuhNdLPuVZPs5fyrUWJV csfPz8KAcJNSaJLFPkru//n8sg3VmkrTp7wdBpg76p3m88IP+CH4uKvriXgIG2wf ADqdmrpPoy0q8MbeHxH1sx0hXPs5lHXY2VYBAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUKl+5XfTYwC06Q93GYZoTdT01Ob8wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjcxL0tsLTVYZlRZd0MwNlE5M0dZWm9UZFQwMU9iOC5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBATTAbAwDQYJKoZIhvcNAQELBQADggEBAKW7iOP2vtjirvUOz0qfZZqEH+Ux Rw+0StFYQOQUl09dw/Fxf+AvrkPHYaQ8ABNqSiW5rpp9bz8fogYyVtobpcZ3uOPT jlflCrlsl59nGAcxxYaSvvQiVfFBq82bxmK5DbAKiCpqImLCIEz7nAAMEUVYdHBN COMXNZF7PXh3RKSs4CGqQAFz2EzrDVyKwCJ6kxdqlRl5M3GbMcLp26Oi35Lev2Xx JNbpVTcptiPV5+JoXhE58XUFoMYgRycPDjtOcmIj1YCaU7v/2oIOTKQKu9JYWNMJ gOO6Yvab1gn+7F7DW3jf+LRagk9qvNlRl3+oBMlWBPb1aXIKgdNvqi+FMDY= -----END CERTIFICATE-----Generated at Wed Oct 8 14:01:44 2025 by rpki-client