$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/TYlEkGq0LY2kodHeG10cOzJ_QRE.roa File: TYlEkGq0LY2kodHeG10cOzJ_QRE.roa (raw, json) Hash identifier: aI0RUfT5hXL3IR9I7a+n4QYtBWy0pgUtbVH1S3IkcOo= Subject key identifier: 4D:89:44:90:6A:B4:2D:8D:A4:A1:D1:DE:1B:5D:1C:3B:32:7F:41:11 Certificate issuer: /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC Certificate serial: 83 Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/TYlEkGq0LY2kodHeG10cOzJ_QRE.roa Signing time: Tue 01 Jul 2025 01:34:17 +0000 ROA not before: Tue 01 Jul 2025 01:34:17 +0000 ROA not after: Mon 15 Jun 2026 01:30:02 +0000 asID: 38644 IP address blocks: 115.69.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC Validity Not Before: Jul 1 01:34:17 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=4D8944906AB42D8DA4A1D1DE1B5D1C3B327F4111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d6:2e:16:e2:6d:28:42:4e:84:bb:d7:b9:39: 2b:9a:49:8d:e1:f6:2f:1d:11:34:ac:af:82:46:1f: 0f:92:7e:d6:fb:18:6f:2d:08:45:6c:55:3d:9f:22: 1f:e9:16:71:f2:a5:92:44:ba:f2:35:f4:41:2f:92: 63:c2:e9:15:57:81:48:b4:38:f0:42:dd:7a:58:68: c8:49:2d:64:d0:65:4d:cb:c7:7b:c7:77:8d:81:6e: 79:ab:04:93:35:75:3b:23:46:14:22:61:b1:14:93: 83:fc:79:ef:9c:f3:45:2f:42:ca:9b:b9:c2:7b:8b: d5:ae:17:62:d3:7b:fc:93:47:18:8e:10:99:6d:51: 7d:02:aa:00:a5:db:de:b9:2d:52:fe:be:b3:7a:c9: 9b:ef:d1:d2:57:b3:53:3a:e8:7b:87:cf:7f:02:a6: 06:6b:f1:59:99:2c:3d:d2:ed:b6:0c:bd:75:ae:5c: fd:ab:ba:76:cb:57:71:45:68:74:2b:dd:77:8a:a1: 87:b2:43:a4:27:8b:85:57:fc:d5:a4:1a:c9:e1:fa: 87:e7:db:14:e6:de:ef:2f:57:df:98:f0:c1:b1:73: a5:ea:61:d8:c8:a7:da:2c:91:13:ef:80:8b:3a:32: 42:b0:2d:7e:08:d5:95:77:79:68:46:51:1a:a9:2a: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:89:44:90:6A:B4:2D:8D:A4:A1:D1:DE:1B:5D:1C:3B:32:7F:41:11 X509v3 Authority Key Identifier: keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/TYlEkGq0LY2kodHeG10cOzJ_QRE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.69.238.0/24 Signature Algorithm: sha256WithRSAEncryption 53:88:4f:be:58:00:68:a4:bf:61:b4:52:86:1a:38:79:4d:a1: fd:7d:ea:67:7d:09:09:c2:90:fc:80:be:d1:79:69:45:09:8b: a3:27:4a:e6:b8:b8:7e:9c:b5:38:96:45:84:01:b7:0f:98:2a: 95:66:50:bc:f8:a4:52:db:54:4f:c3:63:c9:08:79:b7:53:1b: 2e:d4:25:c6:13:ec:b7:47:de:23:92:63:00:63:50:7a:f0:36: 8d:3f:4c:23:03:de:5f:a3:94:22:6c:2c:b4:5a:4d:6e:d5:a6: 61:e8:13:3d:dc:bc:dc:c9:9f:74:eb:37:9d:8d:91:76:37:7f: ce:6d:03:75:65:8d:3e:d2:a6:94:e1:c7:f2:40:9d:3c:af:75: d6:fd:4e:3e:b9:44:03:e0:5f:ae:9a:d2:c2:ae:1d:c4:ff:65: e8:68:f7:a8:76:8d:05:f3:ce:48:8b:50:ca:89:b7:66:b0:81: 89:45:fb:5c:af:ec:1b:de:f4:b5:65:d0:7c:bf:62:18:14:85: 7f:ff:ff:fd:2c:e2:e5:12:40:6f:17:66:2f:88:90:4f:ee:85: 90:21:d3:11:4b:9e:b4:b0:b0:cd:ab:e9:8e:8a:6b:e8:80:8f: cc:80:15:7b:53:e7:0c:ec:73:c3:69:8f:2b:3b:29:fe:02:8d: 5b:09:8c:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNB MDNEMjg2MTk2Q0IzMzg4MDI4QjQwNDdCRTRGMUY5QjBGRUJBQzAeFw0yNTA3MDEw MTM0MTdaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREODk0NDkwNkFCNDJE OERBNEExRDFERTFCNUQxQzNCMzI3RjQxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp1i4W4m0oQk6Eu9e5OSuaSY3h9i8dETSsr4JGHw+Sftb7GG8t CEVsVT2fIh/pFnHypZJEuvI19EEvkmPC6RVXgUi0OPBC3XpYaMhJLWTQZU3Lx3vH d42BbnmrBJM1dTsjRhQiYbEUk4P8ee+c80UvQsqbucJ7i9WuF2LTe/yTRxiOEJlt UX0CqgCl2965LVL+vrN6yZvv0dJXs1M66HuHz38CpgZr8VmZLD3S7bYMvXWuXP2r unbLV3FFaHQr3XeKoYeyQ6Qni4VX/NWkGsnh+ofn2xTm3u8vV9+Y8MGxc6XqYdjI p9oskRPvgIs6MkKwLX4I1ZV3eWhGURqpKkQxAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUTYlEkGq0LY2kodHeG10cOzJ/QREwHwYDVR0jBBgwFoAUw6A9KGGWyzOIAotA R75PH5sP66wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjA3L3c2QTlLR0dXeXpPSUFvdEFSNzVQSDVzUDY2dy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3c2QTlLR0dXeXpPSUFvdEFSNzVQ SDVzUDY2dy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDIwNy9UWWxFa0dxMExZMmtvZEhlRzEwY096Sl9RUkUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAc0XuMA0GCSqGSIb3DQEBCwUAA4IBAQBTiE++WABopL9htFKGGjh5 TaH9fepnfQkJwpD8gL7ReWlFCYujJ0rmuLh+nLU4lkWEAbcPmCqVZlC8+KRS21RP w2PJCHm3Uxsu1CXGE+y3R94jkmMAY1B68DaNP0wjA95fo5QibCy0Wk1u1aZh6BM9 3LzcyZ906zedjZF2N3/ObQN1ZY0+0qaU4cfyQJ08r3XW/U4+uUQD4F+umtLCrh3E /2XoaPeodo0F885Ii1DKibdmsIGJRftcr+wb3vS1ZdB8v2IYFIV////9LOLlEkBv F2YviJBP7oWQIdMRS560sLDNq+mOimvogI/MgBV7U+cM7HPDaY8rOyn+Ao1bCYyu -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:19 2025 by rpki-client