$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1188/3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa File: 3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa (raw, json) Hash identifier: RNlxfb4hmFT3oo21/dX+bnRktQur0TzdNTfX0JTP4Tk= Subject key identifier: DE:8E:49:EA:97:3C:12:D2:DD:3D:68:17:65:9F:D7:97:2A:1A:0B:61 Certificate issuer: /CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4 Certificate serial: 2F Authority key identifier: 81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa Signing time: Mon 01 Sep 2025 01:31:16 +0000 ROA not before: Mon 01 Sep 2025 01:31:16 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 0 IP address blocks: 133.252.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4 Validity Not Before: Sep 1 01:31:16 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=DE8E49EA973C12D2DD3D6817659FD7972A1A0B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:2d:2a:cc:07:a5:32:66:55:e5:11:0e:44: 2f:c9:82:ec:76:48:37:f5:e8:0a:a7:17:68:18:df: de:c0:36:a3:58:24:45:81:65:14:b2:00:cd:ac:7a: ad:2b:cb:df:ec:e6:f2:a3:2c:9b:e7:77:87:e9:d8: ac:f8:20:77:dc:e4:f1:c8:ca:a9:3c:59:8b:32:56: 22:fd:6d:85:fd:25:ec:6a:03:9b:52:1a:14:cf:ac: 11:8a:71:b5:04:75:b9:3d:d6:43:16:df:ff:68:35: e9:5b:43:ca:0b:3d:76:04:3e:2a:a1:d3:ec:05:f9: fb:23:9e:db:85:6f:40:4b:bf:46:ce:69:09:15:04: 50:33:05:40:06:97:fb:b1:54:c5:c2:da:5e:da:1c: 23:3b:80:4f:f4:dc:a8:cb:05:71:17:c9:ab:ac:53: 62:ab:8c:92:82:4a:39:5b:2b:38:e5:d2:e9:71:30: e4:07:98:f6:c4:d0:56:d1:f2:e7:c2:02:ee:2c:21: 0b:a4:02:53:80:cc:84:bc:8c:6a:f2:32:d5:0f:28: d7:c3:6f:6f:86:1e:0e:79:8b:ec:6a:b7:1b:02:d8: e6:13:e2:e7:64:ef:f4:cd:6b:ad:7e:f4:77:60:16: da:a9:70:47:cd:68:e7:04:a9:51:ea:d2:94:db:0d: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:49:EA:97:3C:12:D2:DD:3D:68:17:65:9F:D7:97:2A:1A:0B:61 X509v3 Authority Key Identifier: keyid:81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/3o5J6pc8EtLdPWgXZZ_XlyoaC2E.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 133.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:c2:35:84:f2:52:6c:16:d1:24:6b:d3:0f:bb:39:2f:c3:d5: e1:32:15:f9:90:0c:b1:2e:66:65:62:2f:1a:7c:97:37:23:76: 2e:75:d6:85:f1:1d:0f:76:33:5d:aa:c7:7c:05:42:c9:86:0f: 30:9b:3c:b2:6a:89:af:e7:4b:5d:56:81:90:3a:21:b0:44:f8: 45:16:4a:06:e1:23:00:6b:07:83:fb:4d:c0:e0:18:54:72:64: 9b:35:ba:2d:81:15:8d:0a:c0:20:bb:0b:88:6a:f4:3d:26:c0: c3:7d:8d:65:da:fa:14:99:5d:d4:ca:7f:37:39:a8:5b:05:86: 4d:d1:7c:3a:2a:dc:a2:d5:0a:58:ba:3b:26:2e:84:56:2a:41: 7b:a1:22:08:11:3d:2e:85:0b:3f:43:b9:ec:0f:b9:e5:4a:ef: 48:f8:38:61:68:60:d8:b9:e6:fc:e2:8c:2e:df:01:fe:1d:f1: 62:57:92:58:ce:c3:e2:37:c5:bf:f2:2a:a1:03:6d:1b:63:f5: 93:b2:0e:8b:5b:9f:04:b1:9d:6d:51:18:b1:f6:c7:db:7a:ee: 29:65:c3:18:b7:a8:60:13:a1:9c:6a:66:10:ec:87:08:33:e7: 7b:80:fd:c8:e0:9c:cc:7f:da:61:37:c2:5d:4c:80:ad:b1:36: b7:ee:4b:5f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MTg4 QzAxQzhBRjRDNzg4NkZDMTk3NTA3NzlBRjU4RTVFMTMzM0U0MB4XDTI1MDkwMTAx MzExNloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoREU4RTQ5RUE5NzNDMTJE MkREM0Q2ODE3NjU5RkQ3OTcyQTFBMEI2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMcgLSrMB6UyZlXlEQ5EL8mC7HZIN/XoCqcXaBjf3sA2o1gkRYFl FLIAzax6rSvL3+zm8qMsm+d3h+nYrPggd9zk8cjKqTxZizJWIv1thf0l7GoDm1Ia FM+sEYpxtQR1uT3WQxbf/2g16VtDygs9dgQ+KqHT7AX5+yOe24VvQEu/Rs5pCRUE UDMFQAaX+7FUxcLaXtocIzuAT/TcqMsFcRfJq6xTYquMkoJKOVsrOOXS6XEw5AeY 9sTQVtHy58IC7iwhC6QCU4DMhLyMavIy1Q8o18Nvb4YeDnmL7Gq3GwLY5hPi52Tv 9M1rrX70d2AW2qlwR81o5wSpUerSlNsNtlkCAwEAAaOCAiUwggIhMB0GA1UdDgQW BBTejknqlzwS0t09aBdln9eXKhoLYTAfBgNVHSMEGDAWgBSBiMAcivTHiG/Bl1B3 mvWOXhMz5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTE4OC9nWWpBSElyMHg0aHZ3WmRRZDVyMWpsNFRNLVEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9nWWpBSElyMHg0aHZ3WmRRZDVyMWps NFRNLVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTE4OC8zbzVKNnBjOEV0TGRQV2dYWlpfWGx5b2FDMkUucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAhfwwDQYJKoZIhvcNAQELBQADggEBACDCNYTyUmwW0SRr0w+7OS/D1eEy FfmQDLEuZmViLxp8lzcjdi511oXxHQ92M12qx3wFQsmGDzCbPLJqia/nS11WgZA6 IbBE+EUWSgbhIwBrB4P7TcDgGFRyZJs1ui2BFY0KwCC7C4hq9D0mwMN9jWXa+hSZ XdTKfzc5qFsFhk3RfDoq3KLVCli6OyYuhFYqQXuhIggRPS6FCz9DuewPueVK70j4 OGFoYNi55vzijC7fAf4d8WJXkljOw+I3xb/yKqEDbRtj9ZOyDotbnwSxnW1RGLH2 x9t67illwxi3qGAToZxqZhDshwgz53uA/cjgnMx/2mE3wl1MgK2xNrfuS18= -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:22 2025 by rpki-client