$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YB5nEf-0IGV7GYvnueUUH5SzlEM.roa File: YB5nEf-0IGV7GYvnueUUH5SzlEM.roa (raw, json) Hash identifier: q4B2M1rQ7H5U8IpHB6DAYnIBH4ulFYuCg861/KLyg4E= Subject key identifier: 60:1E:67:11:FF:B4:20:65:7B:19:8B:E7:B9:E5:14:1F:94:B3:94:43 Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 026C Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YB5nEf-0IGV7GYvnueUUH5SzlEM.roa Signing time: Mon 01 Sep 2025 01:35:18 +0000 ROA not before: Mon 01 Sep 2025 01:35:18 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 7684 IP address blocks: 49.212.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 20:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Sep 1 01:35:18 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=601E6711FFB420657B198BE7B9E5141F94B39443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:6a:48:3c:4c:fc:75:cf:28:38:06:8a:f8: 72:6a:64:7f:95:56:57:90:cb:33:87:04:a8:d9:71: 57:8a:95:91:7a:9c:3c:12:b2:90:ff:73:37:0f:01: 30:11:5e:b0:24:8d:7f:54:f5:45:f3:3d:dd:52:54: 33:24:46:91:59:a9:00:9b:ba:40:40:3b:b4:90:c1: f8:80:87:6f:ec:86:84:ad:b0:91:54:8e:12:6a:ef: 03:e6:e5:51:35:b8:01:66:e8:ec:7a:38:24:92:be: ef:8e:91:91:32:ae:2e:be:61:59:b6:78:a2:2e:29: 41:b0:91:08:65:05:bc:74:21:9a:20:6b:14:f1:d9: f1:2f:e0:e0:c4:c4:12:42:af:60:dc:20:1c:35:bf: 22:f6:60:36:ae:5d:83:28:ed:35:34:74:65:8d:51: ba:ed:79:91:ab:82:ab:f9:42:12:d8:86:8e:1f:47: 2a:e7:b3:5c:7a:89:eb:75:31:10:eb:1f:e7:25:c0: ea:f2:6a:76:38:5a:f7:2f:76:48:d6:06:c3:98:46: 02:7e:b5:2d:12:37:bb:94:83:b5:c7:e3:4a:91:e7: 87:f4:a2:3f:38:1c:3f:e4:27:64:c3:af:6a:70:27: d0:35:f1:04:06:c7:fe:b9:09:de:54:8e:30:d9:b6: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1E:67:11:FF:B4:20:65:7B:19:8B:E7:B9:E5:14:1F:94:B3:94:43 X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YB5nEf-0IGV7GYvnueUUH5SzlEM.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.212.121.0/24 Signature Algorithm: sha256WithRSAEncryption 31:c0:2c:f6:89:a4:89:ce:b2:f6:92:6c:63:11:48:27:34:a8: cb:3c:b2:48:41:71:94:35:33:a6:47:f9:49:8a:92:b4:20:08: ee:c2:26:d1:70:2a:da:94:fa:1c:45:6e:1d:88:1d:4c:71:f0: cd:e2:48:1e:af:ae:48:f6:ca:ad:e5:9a:9a:6b:f7:44:b5:3a: 4b:54:43:c3:d0:7c:46:aa:33:7c:27:ad:88:b2:44:7c:3f:de: 56:41:6c:13:d6:9e:96:0b:48:b7:97:f7:0b:be:e1:c4:12:86: ab:30:e2:8d:1c:f7:f3:53:b0:fc:88:ed:1a:ee:a2:d7:da:d0: 9a:72:de:aa:fd:a5:89:93:82:16:60:82:16:f2:64:7e:73:7e: 4c:24:0d:2c:2e:f3:73:1c:f4:3b:f6:8a:bd:6c:dd:6e:60:f1: 21:ff:d4:a6:a0:9a:8a:b7:74:27:d3:9c:86:b3:b7:58:f2:db: 7b:6c:a3:87:37:ef:58:e1:f8:f9:8b:28:de:5e:11:7d:90:e4: 61:5a:7d:8b:58:4f:d5:dd:c6:5a:07:67:b7:cb:ca:ae:44:e1: 5a:c0:30:92:13:b9:79:1e:3f:5c:d8:fc:83:4c:b8:ac:60:1e: e6:3d:bf:9f:10:0f:aa:46:ed:82:48:76:1e:61:76:40:f3:11: cb:91:b4:4a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA5MDEw MTM1MThaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwMUU2NzExRkZCNDIw NjU3QjE5OEJFN0I5RTUxNDFGOTRCMzk0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrVmpIPEz8dc8oOAaK+HJqZH+VVleQyzOHBKjZcVeKlZF6nDwS spD/czcPATARXrAkjX9U9UXzPd1SVDMkRpFZqQCbukBAO7SQwfiAh2/shoStsJFU jhJq7wPm5VE1uAFm6Ox6OCSSvu+OkZEyri6+YVm2eKIuKUGwkQhlBbx0IZogaxTx 2fEv4ODExBJCr2DcIBw1vyL2YDauXYMo7TU0dGWNUbrteZGrgqv5QhLYho4fRyrn s1x6iet1MRDrH+clwOryanY4WvcvdkjWBsOYRgJ+tS0SN7uUg7XH40qR54f0oj84 HD/kJ2TDr2pwJ9A18QQGx/65Cd5UjjDZtkhZAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUYB5nEf+0IGV7GYvnueUUH5SzlEMwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9ZQjVuRWYtMElHVjdHWXZudWVVVUg1U3psRU0u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdR5MA0GCSqGSIb3DQEBCwUAA4IBAQAxwCz2iaSJzrL2kmxjEUgn NKjLPLJIQXGUNTOmR/lJipK0IAjuwibRcCralPocRW4diB1McfDN4kger65I9sqt 5Zqaa/dEtTpLVEPD0HxGqjN8J62IskR8P95WQWwT1p6WC0i3l/cLvuHEEoarMOKN HPfzU7D8iO0a7qLX2tCact6q/aWJk4IWYIIW8mR+c35MJA0sLvNzHPQ79oq9bN1u YPEh/9SmoJqKt3Qn05yGs7dY8tt7bKOHN+9Y4fj5iyjeXhF9kORhWn2LWE/V3cZa B2e3y8quROFawDCSE7l5Hj9c2PyDTLisYB7mPb+fEA+qRu2CSHYeYXZA8xHLkbRK -----END CERTIFICATE-----Generated at Thu Nov 6 01:31:41 2025 by rpki-client