$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IW3xr1f3cZs83NlahNkyCQy8YUU.roa File: IW3xr1f3cZs83NlahNkyCQy8YUU.roa (raw, json) Hash identifier: RwIcDNgc99t/OParnKf6NaL3wh8lmXsqThfUrsc6Zss= Subject key identifier: 21:6D:F1:AF:57:F7:71:9B:3C:DC:D9:5A:84:D9:32:09:0C:BC:61:45 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0271 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IW3xr1f3cZs83NlahNkyCQy8YUU.roa Signing time: Mon 01 Sep 2025 01:35:21 +0000 ROA not before: Mon 01 Sep 2025 01:35:21 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 1 01:35:21 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=216DF1AF57F7719B3CDCD95A84D932090CBC6145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:aa:6f:7b:ab:59:cf:a1:ea:04:2d:18:cb: 1a:7d:23:ec:cf:24:4c:cc:a3:fe:b8:04:f4:16:b9: 80:86:d2:77:d0:f5:4e:c5:04:3d:37:13:7c:3e:16: a5:c0:52:9f:d6:0c:d2:23:33:6c:36:da:61:ea:36: 3a:53:48:54:1c:3c:68:69:17:9e:81:6f:74:a7:d0: de:85:3f:d4:65:d2:1b:66:93:3b:a8:ad:8d:ce:84: 35:65:06:03:b2:90:26:b9:16:56:d4:0c:d4:89:b4: 20:64:82:b7:46:13:66:83:82:9e:37:d6:0e:84:e8: 3c:a2:a4:b8:2e:52:4d:9f:da:6c:89:64:4a:2d:ec: 5c:c3:56:af:36:ed:83:c2:92:ba:c1:1f:6c:c8:a1: a0:ec:38:d4:38:00:25:05:b5:27:ac:4e:31:c5:4d: fd:1b:42:2e:4b:93:8d:9d:b6:a0:b4:38:1c:b8:92: f1:92:86:a4:06:93:04:5d:96:57:f1:1d:f1:28:a7: b0:bf:77:31:cb:6e:c5:86:ff:6f:46:34:84:6c:93: d4:c0:89:1a:11:60:04:b9:4d:64:21:85:c0:cc:11: 5c:e9:5c:88:c8:66:2b:c5:74:c9:86:a8:bd:3e:62: ed:2a:fa:76:f6:a0:be:73:11:9f:fc:43:a0:2d:0c: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6D:F1:AF:57:F7:71:9B:3C:DC:D9:5A:84:D9:32:09:0C:BC:61:45 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IW3xr1f3cZs83NlahNkyCQy8YUU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.229.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a6:60:f2:91:39:c0:f9:d2:f8:75:9c:e2:6a:17:0e:8e:d0: f3:4c:4b:af:51:bf:2a:ba:50:39:ee:4f:14:75:a2:7b:eb:93: ed:90:0a:1e:00:0d:65:17:06:79:e8:9e:f6:72:95:d9:89:2b: 82:00:37:fd:dd:d7:61:60:e0:08:1b:8d:d8:9d:a7:de:d0:f1: f4:88:78:e8:eb:55:f3:72:06:32:5f:dc:4b:98:1f:b6:0a:73: ba:69:90:be:20:8e:b5:89:4d:e3:24:07:eb:6d:22:7d:ea:85: 53:1c:28:24:84:6e:0e:3a:0a:ec:d6:65:14:14:6c:eb:6a:50: f2:b0:79:b1:53:fb:4e:18:6a:29:a5:28:bf:82:87:d7:78:40: 80:32:ba:5e:06:43:1d:e5:50:d1:ec:0d:81:9b:62:25:1e:37: fe:c1:95:fc:3e:fd:d5:35:4a:d4:1b:0e:a0:c0:24:67:46:0a: f2:67:d9:08:14:7e:46:8a:d5:fc:dd:87:85:a6:7b:7a:ff:f1: 4d:89:3d:22:03:9f:df:82:20:f1:ea:c4:dc:41:af:fb:d8:91: 71:76:a5:03:24:53:cd:b8:ce:71:c6:1a:78:32:d0:d9:31:8d: c8:c0:d0:d3:31:1b:71:ec:33:5b:48:f2:86:d2:51:38:8b:3f: fb:8e:cf:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw MTM1MjFaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIxNkRGMUFGNTdGNzcx OUIzQ0RDRDk1QTg0RDkzMjA5MENCQzYxNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5R6pve6tZz6HqBC0Yyxp9I+zPJEzMo/64BPQWuYCG0nfQ9U7F BD03E3w+FqXAUp/WDNIjM2w22mHqNjpTSFQcPGhpF56Bb3Sn0N6FP9Rl0htmkzuo rY3OhDVlBgOykCa5FlbUDNSJtCBkgrdGE2aDgp431g6E6DyipLguUk2f2myJZEot 7FzDVq827YPCkrrBH2zIoaDsONQ4ACUFtSesTjHFTf0bQi5Lk42dtqC0OBy4kvGS hqQGkwRdllfxHfEop7C/dzHLbsWG/29GNIRsk9TAiRoRYAS5TWQhhcDMEVzpXIjI ZivFdMmGqL0+Yu0q+nb2oL5zEZ/8Q6AtDLZzAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUIW3xr1f3cZs83NlahNkyCQy8YUUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9JVzN4cjFmM2NaczgzTmxhaE5reUNReThZVVUu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdTlMA0GCSqGSIb3DQEBCwUAA4IBAQAjpmDykTnA+dL4dZziahcO jtDzTEuvUb8qulA57k8UdaJ765PtkAoeAA1lFwZ56J72cpXZiSuCADf93ddhYOAI G43Ynafe0PH0iHjo61XzcgYyX9xLmB+2CnO6aZC+II61iU3jJAfrbSJ96oVTHCgk hG4OOgrs1mUUFGzralDysHmxU/tOGGoppSi/gofXeECAMrpeBkMd5VDR7A2Bm2Il Hjf+wZX8Pv3VNUrUGw6gwCRnRgryZ9kIFH5GitX83YeFpnt6//FNiT0iA5/fgiDx 6sTcQa/72JFxdqUDJFPNuM5xxhp4MtDZMY3IwNDTMRtx7DNbSPKG0lE4iz/7js/t -----END CERTIFICATE-----Generated at Thu Nov 6 00:02:48 2025 by rpki-client