$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NsHX0V98ylsYsf53PTls4vxxE9Y.roa File: NsHX0V98ylsYsf53PTls4vxxE9Y.roa (raw, json) Hash identifier: NKhfypre3wDUGUdTjToYnW6qb1dCRqRuLmddC7lgx6k= Subject key identifier: 36:C1:D7:D1:5F:7C:CA:5B:18:B1:FE:77:3D:39:6C:E2:FC:71:13:D6 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 025B Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NsHX0V98ylsYsf53PTls4vxxE9Y.roa Signing time: Mon 01 Sep 2025 01:29:09 +0000 ROA not before: Mon 01 Sep 2025 01:29:09 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 9371 IP address blocks: 112.78.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 1 01:29:09 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=36C1D7D15F7CCA5B18B1FE773D396CE2FC7113D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:58:bc:ec:d7:de:7d:af:00:52:ec:8a:f1: ab:64:d5:3f:96:2a:7f:39:ee:8b:68:a0:db:a4:8b: 5f:c3:eb:25:65:85:83:0e:9f:28:26:92:d4:e7:74: 69:d7:3f:01:46:ff:76:7e:88:7b:00:d7:cc:3b:7c: c9:73:f6:9d:c2:57:8b:5c:2f:75:18:4b:ec:4d:bb: 1f:bf:21:87:d7:44:cd:86:86:27:49:7f:f7:18:5d: 9f:9f:e4:a4:2d:3e:df:bc:67:be:e3:15:2a:88:b7: 60:c3:c8:d0:66:92:6e:31:44:c4:0b:a7:8c:6b:d6: 9e:b1:e6:ef:f9:ab:8f:ac:c7:30:c9:69:f3:02:17: 92:19:55:d9:f4:b8:8c:fc:10:d8:65:50:c5:f8:f5: 50:ed:10:ec:a2:e2:a7:8c:54:48:bc:d0:0f:8f:94: 79:1f:3a:3c:55:b5:32:14:af:f6:3d:21:2a:39:da: c9:47:65:e2:0c:46:59:f2:34:57:d4:1b:a2:1c:ed: 87:b5:e7:74:19:fa:2d:04:a5:3d:15:61:11:59:73: f9:5b:b7:cb:01:5a:dc:3e:cd:26:19:91:0e:c9:ac: e3:70:33:2e:1f:61:0d:e8:83:53:11:41:3d:05:4e: 80:1b:aa:c4:0c:e9:09:a7:0e:7c:98:ba:ca:16:9c: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:D7:D1:5F:7C:CA:5B:18:B1:FE:77:3D:39:6C:E2:FC:71:13:D6 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NsHX0V98ylsYsf53PTls4vxxE9Y.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.78.222.0/23 Signature Algorithm: sha256WithRSAEncryption be:c8:59:f1:a2:87:f7:fc:c8:81:9f:38:22:99:6e:a8:6c:4e: 30:66:13:fc:df:c7:39:e4:1b:31:68:c2:fd:76:68:38:8e:3f: 39:29:b9:64:00:58:30:9c:47:8b:2a:f0:73:78:fe:6d:f0:75: 9e:56:ea:ca:22:51:b1:81:8a:8e:28:20:09:85:a0:69:d6:41: 90:d7:5a:2a:bf:01:ea:42:6d:70:34:a3:b6:e1:2a:92:11:7e: e6:62:0e:9e:c6:d6:21:0b:d2:30:7d:f7:3c:c5:49:d5:f0:e6: 84:df:83:23:65:26:c5:cc:1a:ca:ca:cd:bf:f9:6a:00:70:a8: e9:32:20:8c:81:e9:e2:0f:1d:cd:58:8c:46:f5:53:26:1c:a9: 9e:c7:e4:dc:69:41:2b:ac:43:25:9a:66:82:fd:d7:45:2f:75: 69:65:50:be:53:c9:d6:29:cc:82:6f:c5:75:2f:ae:3a:95:71: b2:5e:d3:57:86:80:86:24:c8:4b:a4:7e:46:4a:16:58:b2:bf: 5d:a3:4e:d0:30:9d:a8:d0:33:06:64:72:e8:43:d6:fc:f6:95: 9c:f6:ae:b5:7d:3e:f4:e2:55:22:3a:9a:7c:20:da:9a:48:49: 7f:ef:77:86:d1:10:34:3b:15:df:3f:cb:7f:7f:46:d1:1e:38: fd:50:7e:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw MTI5MDlaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM2QzFEN0QxNUY3Q0NB NUIxOEIxRkU3NzNEMzk2Q0UyRkM3MTEzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcwli87Nfefa8AUuyK8atk1T+WKn857otooNuki1/D6yVlhYMO nygmktTndGnXPwFG/3Z+iHsA18w7fMlz9p3CV4tcL3UYS+xNux+/IYfXRM2GhidJ f/cYXZ+f5KQtPt+8Z77jFSqIt2DDyNBmkm4xRMQLp4xr1p6x5u/5q4+sxzDJafMC F5IZVdn0uIz8ENhlUMX49VDtEOyi4qeMVEi80A+PlHkfOjxVtTIUr/Y9ISo52slH ZeIMRlnyNFfUG6Ic7Ye153QZ+i0EpT0VYRFZc/lbt8sBWtw+zSYZkQ7JrONwMy4f YQ3og1MRQT0FToAbqsQM6QmnDnyYusoWnGYZAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUNsHX0V98ylsYsf53PTls4vxxE9YwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9Oc0hYMFY5OHlsc1lzZjUzUFRsczR2eHhFOVku cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBcE7eMA0GCSqGSIb3DQEBCwUAA4IBAQC+yFnxoof3/MiBnzgimW6o bE4wZhP838c55BsxaML9dmg4jj85KblkAFgwnEeLKvBzeP5t8HWeVurKIlGxgYqO KCAJhaBp1kGQ11oqvwHqQm1wNKO24SqSEX7mYg6extYhC9Iwffc8xUnV8OaE34Mj ZSbFzBrKys2/+WoAcKjpMiCMgeniDx3NWIxG9VMmHKmex+TcaUErrEMlmmaC/ddF L3VpZVC+U8nWKcyCb8V1L646lXGyXtNXhoCGJMhLpH5GShZYsr9do07QMJ2o0DMG ZHLoQ9b89pWc9q61fT704lUiOpp8INqaSEl/73eG0RA0OxXfP8t/f0bRHjj9UH6+ -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:12 2025 by rpki-client