$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/4_aF5M-wBHdarNLxhx9F-F88sw8.roa File: 4_aF5M-wBHdarNLxhx9F-F88sw8.roa (raw, json) Hash identifier: xNxhOSDytZNtvMr8wyOCaO230F+Xa5TeAvFUApNsZ0A= Subject key identifier: E3:F6:85:E4:CF:B0:04:77:5A:AC:D2:F1:87:1F:45:F8:5F:3C:B3:0F Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Certificate serial: 5E Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/4_aF5M-wBHdarNLxhx9F-F88sw8.roa Signing time: Thu 01 May 2025 01:32:34 +0000 ROA not before: Thu 01 May 2025 01:32:34 +0000 ROA not after: Wed 15 Apr 2026 01:30:03 +0000 asID: 24295 IP address blocks: 103.28.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283 Validity Not Before: May 1 01:32:34 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=E3F685E4CFB004775AACD2F1871F45F85F3CB30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:4b:16:2b:e3:81:17:fc:3d:fa:81:f7:8e: f0:47:2f:94:65:12:ed:ee:e8:95:f4:29:8d:a3:f4: cb:a8:82:f4:f5:45:b8:fb:9b:c9:3f:7e:56:f4:e5: af:e4:76:c4:a6:cb:19:5c:be:cc:91:23:e5:3f:0d: da:fe:66:25:75:77:66:e0:72:8d:e4:6b:4e:51:a2: 54:81:2c:13:bd:59:a7:ff:c8:57:38:4b:fa:6b:ea: fc:38:82:fe:8e:a8:6e:fa:db:24:dd:dd:9f:53:59: b6:6e:04:1a:08:a1:69:6c:a1:4a:d4:57:23:6b:50: f2:f7:79:7a:03:c4:a2:07:16:68:eb:92:8a:15:c8: 75:81:61:33:a7:5e:3d:25:86:01:63:60:de:ef:e8: 49:e8:75:02:22:5c:c3:89:de:1c:cb:66:0c:ae:34: 92:03:b9:5c:6a:fb:04:47:f2:c4:47:20:c0:d7:2a: 46:f6:1b:1b:bc:f6:19:f1:bc:85:24:86:21:b3:2e: 2d:b6:c2:83:22:52:0c:74:3d:3a:1d:b7:b1:07:01: 63:72:8b:db:0d:93:ac:a0:2a:61:5a:35:c7:93:84: 12:e3:bc:32:49:34:77:7f:00:2b:f8:04:dd:3d:7b: fc:55:2b:f4:df:cc:07:ba:91:00:53:8c:76:1e:63: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F6:85:E4:CF:B0:04:77:5A:AC:D2:F1:87:1F:45:F8:5F:3C:B3:0F X509v3 Authority Key Identifier: keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/4_aF5M-wBHdarNLxhx9F-F88sw8.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.24.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:ed:15:53:fc:02:20:c7:c1:14:ad:53:49:7f:64:af:8c:0f: 3b:6b:1b:a5:93:58:77:17:62:f0:47:09:e2:f0:d9:93:e4:29: ad:18:78:f6:83:20:5f:a3:fd:f8:a2:9f:f4:85:f8:f0:ee:6d: 8d:9a:b8:04:26:68:a2:c3:de:94:28:91:e6:19:1a:0e:57:bf: f9:53:8b:93:ad:ce:2f:7b:64:95:83:34:88:d9:0b:dc:bf:0c: a4:7e:e0:88:22:9c:68:cf:df:16:9a:64:e7:fc:c4:98:d2:82: 12:81:1b:a7:2e:16:cb:ab:47:45:40:ab:3d:36:bc:9b:d2:fb: 3a:b2:59:64:fe:43:a4:89:54:c8:48:94:a0:23:7b:5b:8b:b5: 47:7a:6d:b9:c6:36:a5:99:de:51:43:78:05:4e:63:4d:aa:15: a5:19:41:43:82:a3:02:3f:b5:ee:86:60:97:03:7f:48:82:4f: e0:fd:aa:aa:dc:14:e6:c5:6a:a6:fb:36:b8:e5:ba:89:df:bf: 17:0e:bf:f0:4a:84:83:98:42:eb:9e:b0:c9:38:5c:53:18:b4: 88:f7:87:d1:b5:a2:bf:3f:c5:06:17:1f:73:2e:00:18:b5:03: 88:52:69:38:fc:d6:60:70:2a:15:76:55:d6:b8:4d:b1:b1:ff: 48:a6:de:d5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODk5 NUQ2QjBEREMyMDVCMzU5NTkzMzJEMUNCMUQ5RDhDRjAyMjgzMB4XDTI1MDUwMTAx MzIzNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRTNGNjg1RTRDRkIwMDQ3 NzVBQUNEMkYxODcxRjQ1Rjg1RjNDQjMwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMYGSxYr44EX/D36gfeO8EcvlGUS7e7olfQpjaP0y6iC9PVFuPub yT9+VvTlr+R2xKbLGVy+zJEj5T8N2v5mJXV3ZuByjeRrTlGiVIEsE71Zp//IVzhL +mvq/DiC/o6obvrbJN3dn1NZtm4EGgihaWyhStRXI2tQ8vd5egPEogcWaOuSihXI dYFhM6dePSWGAWNg3u/oSeh1AiJcw4neHMtmDK40kgO5XGr7BEfyxEcgwNcqRvYb G7z2GfG8hSSGIbMuLbbCgyJSDHQ9Oh23sQcBY3KL2w2TrKAqYVo1x5OEEuO8Mkk0 d38AK/gE3T17/FUr9N/MB7qRAFOMdh5jDCUCAwEAAaOCAigwggIkMB0GA1UdDgQW BBTj9oXkz7AEd1qs0vGHH0X4XzyzDzAfBgNVHSMEGDAWgBQomV1rDdwgWzWVkzLR yx2djPAigzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA2MDIvS0psZGF3M2NJRnMxbFpNeTBjc2RuWXp3SW9NLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0psZGF3M2NJRnMxbFpNeTBjc2Ru WXp3SW9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwNjAyLzRfYUY1TS13QkhkYXJOTHhoeDlGLUY4OHN3OC5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnHBgwDQYJKoZIhvcNAQELBQADggEBAJ/tFVP8AiDHwRStU0l/ZK+M DztrG6WTWHcXYvBHCeLw2ZPkKa0YePaDIF+j/fiin/SF+PDubY2auAQmaKLD3pQo keYZGg5Xv/lTi5Otzi97ZJWDNIjZC9y/DKR+4IginGjP3xaaZOf8xJjSghKBG6cu FsurR0VAqz02vJvS+zqyWWT+Q6SJVMhIlKAje1uLtUd6bbnGNqWZ3lFDeAVOY02q FaUZQUOCowI/te6GYJcDf0iCT+D9qqrcFObFaqb7NrjluonfvxcOv/BKhIOYQuue sMk4XFMYtIj3h9G1or8/xQYXH3MuABi1A4hSaTj81mBwKhV2Vda4TbGx/0im3tU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:32:19 2025 by rpki-client