$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ryi8NehR_MPJKeMRfWIdkAR7Px0.roa File: ryi8NehR_MPJKeMRfWIdkAR7Px0.roa (raw, json) Hash identifier: s3lU3BHOZSuZnfEWLBC8QkXvYiOKpujju52r8Z9DKi8= Subject key identifier: AF:28:BC:35:E8:51:FC:C3:C9:29:E3:11:7D:62:1D:90:04:7B:3F:1D Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Certificate serial: 0244 Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ryi8NehR_MPJKeMRfWIdkAR7Px0.roa Signing time: Tue 10 Jun 2025 10:46:55 +0000 ROA not before: Tue 10 Jun 2025 10:46:55 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 7684 IP address blocks: 182.48.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A Validity Not Before: Jun 10 10:46:55 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=AF28BC35E851FCC3C929E3117D621D90047B3F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:31:be:d3:1e:b5:38:34:ca:14:2c:a0:18: cb:9a:7d:8c:a6:a6:68:73:63:0c:d7:d6:c8:23:68: b7:15:84:71:6d:26:92:0e:55:bc:60:7a:e2:f4:bf: 48:7c:42:99:28:bd:b4:71:b2:47:9b:f7:e2:29:fc: dd:93:d5:14:a5:3a:48:af:ea:f3:ee:82:9b:98:83: 27:6a:9f:47:1b:e9:96:3c:4e:b2:2e:8d:aa:f5:62: a7:9e:e2:e3:10:de:16:30:45:77:98:98:1d:e3:bd: 78:c9:4d:03:ff:d4:62:5d:53:96:56:df:df:0a:2d: 7d:24:12:75:70:79:20:2c:8e:f3:a9:d8:99:9a:ab: ab:71:6c:01:f5:c6:80:79:42:fd:40:a6:90:2f:2e: f4:5a:e1:d6:ba:a9:fb:5d:52:06:a4:1c:ad:16:a2: 8c:75:22:f9:db:e5:2c:7b:65:cd:6f:e9:95:36:f9: a7:5c:18:3a:18:5b:ed:11:9d:e2:b3:d7:61:af:d1: 0d:55:e8:24:4d:9d:c8:31:b9:fc:a8:e8:0a:24:da: 52:8f:b1:8a:fa:65:53:33:b3:eb:fe:83:a1:7b:6b: 68:f2:0d:39:4c:01:3a:73:94:87:fc:5c:d0:c9:f1: cb:63:4f:33:22:34:2a:82:26:0d:02:54:36:62:3e: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:28:BC:35:E8:51:FC:C3:C9:29:E3:11:7D:62:1D:90:04:7B:3F:1D X509v3 Authority Key Identifier: keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ryi8NehR_MPJKeMRfWIdkAR7Px0.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.48.12.0/24 Signature Algorithm: sha256WithRSAEncryption 14:52:6f:5d:d7:eb:a1:61:8b:ef:88:b3:44:73:7a:6c:a5:59: 52:a5:c2:83:f0:c6:48:6d:72:bb:03:41:dc:40:03:b6:56:ce: 1f:b1:8d:a7:ae:ec:de:7a:48:54:46:2b:8f:c2:ac:e4:c7:fe: 7c:48:ae:8b:c2:26:5d:8b:e5:4b:85:9c:ad:7d:19:0d:4c:19: ac:98:1c:e9:fd:3b:14:27:c9:24:80:a8:fa:33:35:79:e0:30: 5b:c1:6f:a6:4c:08:9c:a6:c7:bd:0f:a5:78:03:a5:56:5d:08: 79:76:fe:48:7d:58:d3:3a:e5:5c:4b:b2:e9:7a:cf:2b:32:d6: 6f:3c:b0:4d:f7:c0:f4:50:15:8d:42:91:85:24:0f:3f:b5:db: 7d:af:7d:ba:8a:57:42:da:4d:5c:aa:4e:07:66:0f:f4:75:df: 47:12:16:fc:dd:1d:ff:bd:de:ff:67:c2:b7:52:4f:b7:ad:b7: 89:37:41:ce:f2:06:02:34:4c:fb:94:41:43:d4:fb:9b:28:62: bd:84:c2:60:d7:ed:ed:8d:5f:9b:77:d8:6e:59:a5:56:5c:80: e1:da:38:d7:bb:7a:63:e3:80:e5:f1:35:de:a5:dd:76:b8:e5: e3:5f:96:aa:db:ba:01:e7:34:b3:88:4b:2b:25:b3:28:08:3d: 2c:85:58:04 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNTA2MTAx MDQ2NTVaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEFGMjhCQzM1RTg1MUZD QzNDOTI5RTMxMTdENjIxRDkwMDQ3QjNGMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcfTG+0x61ODTKFCygGMuafYympmhzYwzX1sgjaLcVhHFtJpIO VbxgeuL0v0h8QpkovbRxskeb9+Ip/N2T1RSlOkiv6vPugpuYgydqn0cb6ZY8TrIu jar1Yqee4uMQ3hYwRXeYmB3jvXjJTQP/1GJdU5ZW398KLX0kEnVweSAsjvOp2Jma q6txbAH1xoB5Qv1AppAvLvRa4da6qftdUgakHK0Woox1Ivnb5Sx7Zc1v6ZU2+adc GDoYW+0RneKz12Gv0Q1V6CRNncgxufyo6Aok2lKPsYr6ZVMzs+v+g6F7a2jyDTlM ATpzlIf8XNDJ8ctjTzMiNCqCJg0CVDZiPhH1AgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUryi8NehR/MPJKeMRfWIdkAR7Px0wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDI0Ny9yeWk4TmVoUl9NUEpLZU1SZldJZGtBUjdQeDAu cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAtjAMMA0GCSqGSIb3DQEBCwUAA4IBAQAUUm9d1+uhYYvviLNEc3ps pVlSpcKD8MZIbXK7A0HcQAO2Vs4fsY2nruzeekhURiuPwqzkx/58SK6LwiZdi+VL hZytfRkNTBmsmBzp/TsUJ8kkgKj6MzV54DBbwW+mTAicpse9D6V4A6VWXQh5dv5I fVjTOuVcS7Lpes8rMtZvPLBN98D0UBWNQpGFJA8/tdt9r326ildC2k1cqk4HZg/0 dd9HEhb83R3/vd7/Z8K3Uk+3rbeJN0HO8gYCNEz7lEFD1PubKGK9hMJg1+3tjV+b d9huWaVWXIDh2jjXu3pj44Dl8TXepd12uOXjX5aq27oB5zSziEsrJbMoCD0shVgE -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:46 2025 by rpki-client