$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/O2F2Ecb2zJxYO3QCgVZHZpzMBc4.roa File: O2F2Ecb2zJxYO3QCgVZHZpzMBc4.roa (raw, json) Hash identifier: a2g5rPF/e8IVFOG9/TAsk6pzivMgyGGpRxF33PvN/2c= Subject key identifier: 3B:61:76:11:C6:F6:CC:9C:58:3B:74:02:81:56:47:66:9C:CC:05:CE Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0284 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/O2F2Ecb2zJxYO3QCgVZHZpzMBc4.roa Signing time: Mon 01 Sep 2025 01:39:55 +0000 ROA not before: Mon 01 Sep 2025 01:39:55 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 1 01:39:55 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=3B617611C6F6CC9C583B7402815647669CCC05CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:76:c3:d2:0e:d1:42:a5:50:9f:39:b5:4c: b8:42:d8:22:30:43:fb:b2:3f:56:39:44:24:f7:98: e0:0e:9a:92:fe:cf:93:47:32:0e:7f:79:65:f5:fe: 28:d2:f7:64:eb:d3:f6:8e:d1:1f:1a:32:34:ea:b1: 06:84:6a:21:88:6d:c0:51:e1:3e:fc:b1:30:8e:71: 34:d8:1b:49:c1:84:24:84:3a:1a:4e:14:26:ff:c6: 93:ce:95:3d:00:b3:ad:b5:b8:8a:c1:38:a4:71:ac: d9:a9:8b:b2:fe:19:fc:6e:8a:d3:9b:51:b4:9a:de: e8:0c:a5:53:d1:b2:f7:28:7f:df:40:05:aa:a9:0c: ea:2b:2b:48:b9:91:38:e4:fc:35:d4:37:3b:fe:bd: 1e:fc:e6:f4:88:5a:88:ab:5c:2f:c2:35:60:29:e4: de:a2:9e:42:8b:9e:5a:ee:3d:5e:1f:74:37:9c:6e: e0:1e:70:8b:c2:f4:df:80:53:e9:25:65:e2:cc:de: d3:64:af:f1:cb:e4:87:46:55:a5:2d:b3:d9:74:48: 07:e7:90:77:fe:f9:65:cd:e5:40:e3:12:5e:1d:69: c2:fd:37:d9:0e:36:57:94:14:78:57:65:55:a1:9d: 8a:49:f7:de:ae:31:77:af:68:25:d2:27:92:03:d3: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:61:76:11:C6:F6:CC:9C:58:3B:74:02:81:56:47:66:9C:CC:05:CE X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/O2F2Ecb2zJxYO3QCgVZHZpzMBc4.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.246.0/24 Signature Algorithm: sha256WithRSAEncryption 83:24:b5:3b:03:14:6d:1b:26:05:3e:c2:0c:ab:88:0b:f6:a3: a7:a1:92:a6:09:4e:79:6f:4f:78:ee:f5:4b:58:c1:47:a6:da: b3:f8:49:24:4a:cd:f8:0e:5e:cd:25:14:89:97:70:8e:74:e4: 93:d0:fb:5d:4b:69:f4:84:34:0b:b5:58:5a:ec:7d:60:f6:cb: ca:bb:b5:6b:a5:e5:20:6d:a7:3b:c5:b8:f2:f1:d7:92:59:4e: 19:eb:03:13:e5:6c:2d:d1:b1:ab:42:4e:1c:4b:66:5e:67:c7: 06:e4:54:f5:49:fc:ec:d9:b0:fa:1b:76:ef:1c:a0:53:d4:a8: 87:f4:07:81:98:ec:f8:31:a3:2c:4f:95:c8:17:24:05:5b:02: 96:e0:2f:80:3e:7f:d5:5b:63:96:0e:23:b1:d6:88:ea:b4:79: df:2c:c3:c6:e7:9c:c0:af:3a:91:44:b1:eb:3e:29:36:54:c6: ec:d7:51:ae:c8:ce:63:af:6c:74:25:6e:7b:68:38:d0:7d:5d: 65:dc:f6:46:53:42:e4:19:3b:41:6c:fa:8c:ba:cf:35:71:39: 4d:46:55:48:9c:61:39:55:02:c2:11:89:ae:36:28:52:f2:8c: f8:41:0e:3d:67:7c:ee:60:a3:89:2f:00:71:df:0d:ec:b4:80: 2c:e5:7c:cd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw MTM5NTVaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCNjE3NjExQzZGNkND OUM1ODNCNzQwMjgxNTY0NzY2OUNDQzA1Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqVHbD0g7RQqVQnzm1TLhC2CIwQ/uyP1Y5RCT3mOAOmpL+z5NH Mg5/eWX1/ijS92Tr0/aO0R8aMjTqsQaEaiGIbcBR4T78sTCOcTTYG0nBhCSEOhpO FCb/xpPOlT0As621uIrBOKRxrNmpi7L+GfxuitObUbSa3ugMpVPRsvcof99ABaqp DOorK0i5kTjk/DXUNzv+vR785vSIWoirXC/CNWAp5N6inkKLnlruPV4fdDecbuAe cIvC9N+AU+klZeLM3tNkr/HL5IdGVaUts9l0SAfnkHf++WXN5UDjEl4dacL9N9kO NleUFHhXZVWhnYpJ996uMXevaCXSJ5ID04zdAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUO2F2Ecb2zJxYO3QCgVZHZpzMBc4wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9PMkYyRWNiMnpKeFlPM1FDZ1ZaSFpwek1CYzQu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdT2MA0GCSqGSIb3DQEBCwUAA4IBAQCDJLU7AxRtGyYFPsIMq4gL 9qOnoZKmCU55b0947vVLWMFHptqz+EkkSs34Dl7NJRSJl3COdOST0PtdS2n0hDQL tVha7H1g9svKu7VrpeUgbac7xbjy8deSWU4Z6wMT5Wwt0bGrQk4cS2ZeZ8cG5FT1 Sfzs2bD6G3bvHKBT1KiH9AeBmOz4MaMsT5XIFyQFWwKW4C+APn/VW2OWDiOx1ojq tHnfLMPG55zArzqRRLHrPik2VMbs11GuyM5jr2x0JW57aDjQfV1l3PZGU0LkGTtB bPqMus81cTlNRlVInGE5VQLCEYmuNihS8oz4QQ49Z3zuYKOJLwBx3w3stIAs5XzN -----END CERTIFICATE-----Generated at Wed Nov 5 19:40:36 2025 by rpki-client